Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
File:                     FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft (raw, json)
Hash identifier:          0WeYIXEvFisXwxlftWDCsQ5/ogEnL3+hvfr/B5AxWXY=
Subject key identifier:   17:56:7C:23:A4:97:84:D5:5E:3D:9D:4D:B1:43:1B:61:67:53:95:88
Authority key identifier: FF:2A:F2:0B:38:CD:DA:CB:AD:D0:3E:10:C2:96:F3:13:39:47:8D:E7
Certificate issuer:       /CN=FF2AF20B38CDDACBADD03E10C296F31339478DE7
Certificate serial:       7CED3D6242A5CE39D273487DB30F489295E72F28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
Manifest number:          0265
Signing time:             Sat 17 May 2025 10:20:02 +0000
Manifest this update:     Sat 17 May 2025 10:15:02 +0000
Manifest next update:     Sun 18 May 2025 10:20:02 +0000
Files and hashes:         1: FF2AF20B38CDDACBADD03E10C296F31339478DE7.crl (hash: TUI1pJyr/6Jqb54nZlIJ/oFLVxgb6ITljcPAXd00Vnk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ed:3d:62:42:a5:ce:39:d2:73:48:7d:b3:0f:48:92:95:e7:2f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF2AF20B38CDDACBADD03E10C296F31339478DE7
        Validity
            Not Before: May 17 10:15:02 2025 GMT
            Not After : May 24 10:20:02 2025 GMT
        Subject: CN=3082010A0282010100A989F38297A7C26C67217E37257C3D669DA07BB1B9BDF4848FA057E0E354B4DDE887D4BE0875A2047D6FC512F1C61241807764C830D825EA9B9EB4D2402BE46F2DFFE1D4522E31A2BEACA110237D8419CDE19F7097342702F141893219EF2A7BE7041EABB21162C2F549E23E9E9559C6CDA2D8685D4415F5EA168AB84E0EA844DE83F024D5C1DF8D66100E3AE4768180B1D2D3B5897ABEB04E33B34F643C98AAEEDF8850D5A7BEAD45B081A4F084E01571464FE92A6A9198FC97421392DEE735DFD37FC0F0A9AAB28A1CB47F73B6FF828BC78DD927DE4DFD97A13BCF782BABAAE5B36E4F4DEA9504DCF1F5C7681D4481F437B0DF15B33C9E01C7ED5A382022E30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:f3:82:97:a7:c2:6c:67:21:7e:37:25:7c:
                    3d:66:9d:a0:7b:b1:b9:bd:f4:84:8f:a0:57:e0:e3:
                    54:b4:dd:e8:87:d4:be:08:75:a2:04:7d:6f:c5:12:
                    f1:c6:12:41:80:77:64:c8:30:d8:25:ea:9b:9e:b4:
                    d2:40:2b:e4:6f:2d:ff:e1:d4:52:2e:31:a2:be:ac:
                    a1:10:23:7d:84:19:cd:e1:9f:70:97:34:27:02:f1:
                    41:89:32:19:ef:2a:7b:e7:04:1e:ab:b2:11:62:c2:
                    f5:49:e2:3e:9e:95:59:c6:cd:a2:d8:68:5d:44:15:
                    f5:ea:16:8a:b8:4e:0e:a8:44:de:83:f0:24:d5:c1:
                    df:8d:66:10:0e:3a:e4:76:81:80:b1:d2:d3:b5:89:
                    7a:be:b0:4e:33:b3:4f:64:3c:98:aa:ee:df:88:50:
                    d5:a7:be:ad:45:b0:81:a4:f0:84:e0:15:71:46:4f:
                    e9:2a:6a:91:98:fc:97:42:13:92:de:e7:35:df:d3:
                    7f:c0:f0:a9:aa:b2:8a:1c:b4:7f:73:b6:ff:82:8b:
                    c7:8d:d9:27:de:4d:fd:97:a1:3b:cf:78:2b:ab:aa:
                    e5:b3:6e:4f:4d:ea:95:04:dc:f1:f5:c7:68:1d:44:
                    81:f4:37:b0:df:15:b3:3c:9e:01:c7:ed:5a:38:20:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:56:7C:23:A4:97:84:D5:5E:3D:9D:4D:B1:43:1B:61:67:53:95:88
            X509v3 Authority Key Identifier:
                keyid:FF:2A:F2:0B:38:CD:DA:CB:AD:D0:3E:10:C2:96:F3:13:39:47:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:90:b2:83:c9:66:f1:b4:c7:fb:6b:38:d8:78:ac:85:2d:06:
         e7:a8:e8:9c:a6:db:2d:52:e6:e5:39:5e:b2:5b:fc:a0:cc:ff:
         eb:29:a4:60:76:4c:1e:ce:26:85:d9:c0:fc:08:4d:6b:4b:8c:
         40:a3:3d:3b:86:5a:59:26:55:11:a2:aa:37:cf:db:8d:57:7b:
         6a:48:fb:27:82:4e:64:4c:a6:4f:94:46:64:37:67:14:c4:c4:
         1f:60:b1:52:be:78:8f:cd:91:38:8d:f7:42:3b:f4:a8:d4:5c:
         30:d1:a0:23:64:6c:0b:5b:54:06:c0:18:d9:d2:dd:64:60:a5:
         8d:0e:16:c2:6c:d8:25:2a:14:c9:ad:4a:fd:a4:f8:1c:4e:bd:
         61:d2:5e:be:a3:56:7e:f2:60:c0:aa:cb:70:d0:fb:cd:45:ff:
         8f:22:23:e5:3b:5f:d6:26:ed:9a:13:2e:fb:a8:10:2f:9b:0c:
         0c:73:fa:08:26:81:2d:00:38:a2:e2:74:3c:7b:c6:28:81:e4:
         e4:24:bb:fc:04:b3:1e:c6:44:5e:e1:08:8a:4a:85:59:84:b7:
         08:b5:3c:0d:b9:a2:47:7f:94:b0:fa:54:7f:4f:d4:d2:cf:d9:
         09:23:5a:c5:15:ef:ef:68:1b:f9:e7:eb:2f:03:19:b1:59:f6:
         dc:92:5a:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:28:03 2025 by rpki-client