Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.mft
File:                     0E89BA0F1B8976E93E5667B6247B76FED8354084.mft (raw, json)
Hash identifier:          YYI9lLuhc+YvxaImICzg08xy30AHfKjTgULbeLGbrqc=
Subject key identifier:   CC:F3:AD:AA:F7:9B:68:84:1D:F4:0F:10:90:53:33:44:A4:94:13:1F
Authority key identifier: 0E:89:BA:0F:1B:89:76:E9:3E:56:67:B6:24:7B:76:FE:D8:35:40:84
Certificate issuer:       /CN=0E89BA0F1B8976E93E5667B6247B76FED8354084
Certificate serial:       5819FB5FB8EE303AB246C2FF3E3C2D5936FFB7B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E89BA0F1B8976E93E5667B6247B76FED8354084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.mft
Manifest number:          1C
Signing time:             Tue 25 Mar 2025 13:14:58 +0000
Manifest this update:     Tue 25 Mar 2025 13:09:58 +0000
Manifest next update:     Wed 26 Mar 2025 15:18:58 +0000
Files and hashes:         1: 323830343a346462633a3a2f33322d313238203d3e20323638323136.roa (hash: bZq8n/9lm0bx8MQFkboGGDKtueTQT1WxapXCCQnk1jw=)
                          2: 34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa (hash: kDjxK1HFVci49JjezuUeIeg2CGI+pZ7fxkHjXfF050E=)
                          3: 0E89BA0F1B8976E93E5667B6247B76FED8354084.crl (hash: KCYzrmHi2ecWGrzbHukyjOxJq4GJBh/6NA8A2l/5avs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:19:fb:5f:b8:ee:30:3a:b2:46:c2:ff:3e:3c:2d:59:36:ff:b7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E89BA0F1B8976E93E5667B6247B76FED8354084
        Validity
            Not Before: Mar 25 13:09:58 2025 GMT
            Not After : Mar 26 15:18:58 2025 GMT
        Subject: CN=CCF3ADAAF79B68841DF40F1090533344A494131F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:13:36:88:c3:5e:c7:5a:9d:db:4a:10:bc:
                    ff:b9:c3:a2:cc:48:36:3b:b1:79:81:09:69:25:f0:
                    fa:23:62:91:aa:de:1a:af:90:72:e7:f2:ed:78:cb:
                    20:b9:01:15:22:87:26:7c:6e:9d:75:22:3d:c5:95:
                    06:8e:a2:3a:e5:01:12:72:91:af:39:1b:a6:2c:51:
                    4d:bb:ee:e0:b3:d6:54:68:bd:b2:f5:d2:64:7c:c6:
                    c9:b8:a3:05:a5:17:59:53:db:e2:e5:8d:46:bb:a4:
                    73:c9:ed:57:9d:42:bc:2c:e3:85:05:86:ab:3c:a2:
                    c1:ab:65:61:7a:5a:c0:86:46:34:79:6d:ea:4c:23:
                    e8:1d:dd:8d:91:e2:85:55:a0:55:9d:b0:47:4e:37:
                    03:e8:d4:08:d1:3e:d9:35:e1:a5:42:83:68:cc:41:
                    32:7a:d9:98:07:34:9a:6c:31:5b:0c:2e:9a:61:b8:
                    d8:4c:8c:09:9d:91:89:35:75:b4:4e:ae:de:55:93:
                    95:1e:a2:fd:4a:ac:84:b1:97:b9:9d:97:33:c5:68:
                    f1:b2:5a:7b:36:42:82:49:8e:4c:ca:4d:2e:40:6f:
                    59:ed:4b:77:f2:1b:37:dc:22:f2:3a:fe:c4:2f:44:
                    d4:5a:fc:b7:df:03:ec:21:c3:fa:7b:bd:50:a6:94:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F3:AD:AA:F7:9B:68:84:1D:F4:0F:10:90:53:33:44:A4:94:13:1F
            X509v3 Authority Key Identifier:
                keyid:0E:89:BA:0F:1B:89:76:E9:3E:56:67:B6:24:7B:76:FE:D8:35:40:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E89BA0F1B8976E93E5667B6247B76FED8354084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:77:0c:1d:b5:9b:45:79:40:54:6d:b7:64:97:ab:18:67:4c:
         5c:01:03:cc:95:f8:a4:0a:fc:56:a1:db:d3:e8:9b:39:29:04:
         15:c7:3f:99:c8:4c:21:95:d0:2f:eb:59:a9:79:53:94:88:50:
         5e:65:df:2e:59:70:a0:f6:78:e2:14:40:a9:89:02:6a:9f:a2:
         5c:7b:c0:67:a5:b1:7a:f9:53:b4:32:15:b6:ab:c9:f8:52:dc:
         14:7c:f0:e6:f9:46:fc:cb:69:09:73:43:33:a0:02:58:a9:fd:
         f0:b6:5d:39:15:3e:3c:72:1a:49:4c:d2:11:e6:32:2d:03:f0:
         78:0c:a8:69:63:0c:28:82:56:b9:cb:5a:23:56:c0:15:31:86:
         e2:87:fb:00:43:b0:8d:a0:39:a0:54:9e:15:29:67:ce:fb:cd:
         3c:6c:f3:91:8f:28:3a:54:47:19:97:f1:73:e9:c1:3f:be:57:
         8c:f2:5a:29:58:7b:b5:fb:07:7a:ac:e2:d7:8c:cf:35:ee:33:
         32:70:c0:17:bf:95:c1:a0:26:0f:f8:36:64:14:1c:8d:b9:48:
         d8:a4:89:8e:28:39:ce:fe:3a:2e:0c:a6:ec:2e:a1:b0:66:a8:
         1f:34:d1:c6:b3:40:bd:b5:1a:9b:bc:4d:e7:59:7f:9f:93:b4:
         18:0d:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----