Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft
File:                     871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft (raw, json)
Hash identifier:          WeQBSjSh0oHx4JReuCqTlqOmvPwVRktm9PJ3VCi4EdY=
Subject key identifier:   86:DF:98:AC:A0:21:2C:8D:B3:2D:3D:59:4E:BD:C4:64:54:BD:57:C7
Authority key identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51
Certificate issuer:       /CN=871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51
Certificate serial:       5A9B6CB2C456C62DCE6B823E574EBD4D82E0AF52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft
Manifest number:          0A
Signing time:             Fri 28 Mar 2025 19:08:13 +0000
Manifest this update:     Fri 28 Mar 2025 19:03:13 +0000
Manifest next update:     Sun 30 Mar 2025 11:07:13 +0000
Files and hashes:         1: 871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.crl (hash: tE2vmPKELkT2EOKnno0keWnYJDuEtQsJ5viivYvNuXc=)
                          2: 34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa (hash: RUNfef7pNMJvSbbXBPUHsZVefD0KS6SyZ/Wkh9AxDCE=)
                          3: 323830343a363034303a3a2f33322d3438203d3e20323639313535.roa (hash: dYzOQSx3XmplHKcf8SbodgA9xP59Ge6xT4GkekVQLYY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9b:6c:b2:c4:56:c6:2d:ce:6b:82:3e:57:4e:bd:4d:82:e0:af:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51
        Validity
            Not Before: Mar 28 19:03:13 2025 GMT
            Not After : Mar 30 11:07:13 2025 GMT
        Subject: CN=86DF98ACA0212C8DB32D3D594EBDC46454BD57C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:aa:bc:92:21:fa:d8:ee:5f:54:8d:ed:8e:
                    f4:22:fc:65:ca:e7:24:ed:47:52:71:d3:39:74:c0:
                    b8:47:a4:be:45:8c:e2:bc:9c:8a:7e:f6:b2:e5:4c:
                    cc:b6:47:1f:09:eb:8b:0a:38:19:5f:ed:27:2a:ca:
                    e2:5b:14:da:58:cb:da:83:98:c0:91:a3:28:b6:e3:
                    1a:85:69:86:80:cd:ac:94:7c:85:91:27:e0:d6:b1:
                    56:40:fd:9c:b5:cc:f7:e5:b7:8b:af:bb:e8:80:9a:
                    41:ba:58:95:83:0b:c1:f6:82:e5:80:a8:0d:e4:dd:
                    a0:5f:ca:44:62:73:98:11:c2:1a:4f:9d:11:87:8c:
                    45:2a:16:4b:59:d9:7e:03:27:0d:fa:0f:45:01:c3:
                    e0:02:a2:c0:21:ef:9e:f1:22:a8:6d:37:1c:f6:eb:
                    d3:b5:96:51:ad:d6:65:49:fc:03:da:a4:6b:d3:3c:
                    f2:1f:25:a0:e7:c2:11:db:50:27:46:bd:79:d9:11:
                    6c:92:97:17:9d:f6:0e:cb:fe:d2:7c:e8:f3:02:2c:
                    e4:7b:5c:d1:cd:65:0e:46:71:11:e4:d5:a8:a0:69:
                    21:24:4e:16:48:b8:88:91:70:9a:6d:b4:1e:a9:da:
                    65:c9:07:b7:03:54:fc:53:0b:d0:c4:7f:dd:b5:de:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DF:98:AC:A0:21:2C:8D:B3:2D:3D:59:4E:BD:C4:64:54:BD:57:C7
            X509v3 Authority Key Identifier:
                keyid:87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:b5:94:e6:23:1d:e9:4c:92:58:0f:d1:81:af:55:a0:ab:
         bb:d2:85:b3:be:a0:c2:86:98:eb:35:86:4f:3d:2b:74:67:b0:
         37:9a:16:d3:61:68:ae:92:44:ea:f5:6b:0e:8b:5e:dd:55:0c:
         23:e5:0a:22:9a:bd:b5:b6:66:6c:e8:13:c6:ea:29:56:28:8d:
         29:b8:61:b0:a2:c1:a1:a1:46:8b:27:34:03:65:9c:f9:8f:78:
         08:c7:80:5f:c8:16:36:4b:db:20:e0:a1:85:21:ab:3c:f6:cb:
         87:e1:71:af:c9:e3:a1:12:04:4e:a8:15:7d:3e:de:07:4f:e9:
         56:55:65:01:60:cf:8c:0f:2c:8e:2f:97:06:49:15:f1:0e:f0:
         7e:f5:42:7e:bf:06:40:21:86:73:c2:d8:88:a8:3a:be:41:3c:
         64:a8:51:1c:2c:d8:43:4b:1b:dd:bc:ff:58:f4:cb:0f:d0:5b:
         8b:d0:7d:69:75:7d:60:43:47:0c:29:0e:ee:93:26:21:83:bc:
         0b:23:54:c5:44:7c:8a:f1:09:8c:04:67:98:18:94:b6:32:81:
         be:0d:9a:1c:13:c8:d5:97:47:43:42:33:99:4f:fb:f1:45:14:
         87:d6:66:9f:a3:34:8b:b9:e3:b5:6a:bc:d9:41:8b:e1:25:b6:
         88:0f:f0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----