Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/BA027AB7F3CF1ACF583420261DE8A117CC215B71.mft
File:                     BA027AB7F3CF1ACF583420261DE8A117CC215B71.mft (raw, json)
Hash identifier:          TMwj++4EiIlDJfRnaobCULW8AFm05n3A+5i6asGTznc=
Subject key identifier:   48:47:2D:B1:4F:5E:E1:B4:02:45:FF:A5:1B:67:A2:84:BA:86:62:9F
Authority key identifier: BA:02:7A:B7:F3:CF:1A:CF:58:34:20:26:1D:E8:A1:17:CC:21:5B:71
Certificate issuer:       /CN=BA027AB7F3CF1ACF583420261DE8A117CC215B71
Certificate serial:       11D0C06E81434CF22BCBE2B378E54E85313716BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA027AB7F3CF1ACF583420261DE8A117CC215B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/BA027AB7F3CF1ACF583420261DE8A117CC215B71.mft
Manifest number:          DD
Signing time:             Fri 14 Mar 2025 11:27:00 +0000
Manifest this update:     Fri 14 Mar 2025 11:22:00 +0000
Manifest next update:     Sat 15 Mar 2025 13:45:00 +0000
Files and hashes:         1: 3133382e3132322e3134382e302f32322d3234203d3e20323634333337.roa (hash: bvn4oSLggyHCi0swiW6dIri8xyVfOXvR0nWPqr6O9Ko=)
                          2: 323830343a323634383a3a2f33322d3438203d3e20323634333337.roa (hash: sMCM0tpVpcJcPsevyeN+if46+zhJ5OnPCQfUkIrIs1E=)
                          3: BA027AB7F3CF1ACF583420261DE8A117CC215B71.crl (hash: 7pvJAu81IHT/L3mh3/wuiuwJqOkvktQD35rxXL1iFNc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d0:c0:6e:81:43:4c:f2:2b:cb:e2:b3:78:e5:4e:85:31:37:16:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA027AB7F3CF1ACF583420261DE8A117CC215B71
        Validity
            Not Before: Mar 14 11:22:00 2025 GMT
            Not After : Mar 15 13:45:00 2025 GMT
        Subject: CN=48472DB14F5EE1B40245FFA51B67A284BA86629F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:45:3e:51:c2:7a:ca:ed:5a:7e:a6:55:16:
                    13:81:9e:c7:8b:10:77:4b:1e:f5:15:9b:cd:50:ec:
                    72:4a:8f:fc:7b:be:a6:53:8b:cd:0f:93:cc:7e:62:
                    f0:37:a8:6d:66:a4:e1:21:3f:e6:b8:4a:9b:3c:62:
                    95:b4:e3:9e:6c:7a:4d:65:3a:4b:0b:64:79:b9:7b:
                    24:db:b2:59:e6:4b:24:89:16:31:5f:ed:90:ed:27:
                    83:f7:27:4d:38:6d:2d:af:04:f8:75:d6:7f:4f:5c:
                    f2:f8:58:bc:c2:d5:38:2b:6a:4d:9f:ba:63:39:77:
                    f1:89:0b:af:51:6a:2d:38:69:ee:e5:6a:06:e3:7d:
                    7c:c7:e1:93:07:cc:27:ed:53:f4:38:fa:88:ce:7e:
                    16:24:43:17:c5:89:0d:8b:8b:e3:e1:e1:8d:7e:dc:
                    1c:a5:96:f0:44:76:1f:47:3a:55:66:cf:5c:ea:b7:
                    20:1f:e3:ec:05:25:c0:2b:b5:87:e8:ec:d4:83:12:
                    e6:55:e0:4e:55:ae:e8:ac:92:08:3e:ca:4a:9b:33:
                    e2:bf:26:8b:c4:4b:e7:3f:d1:d7:d8:5b:53:ba:dc:
                    76:89:80:20:54:d8:c2:85:82:fc:26:35:7f:90:ab:
                    4d:de:3b:88:3f:d5:7d:78:ae:31:d7:bc:9e:41:fd:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:2D:B1:4F:5E:E1:B4:02:45:FF:A5:1B:67:A2:84:BA:86:62:9F
            X509v3 Authority Key Identifier:
                keyid:BA:02:7A:B7:F3:CF:1A:CF:58:34:20:26:1D:E8:A1:17:CC:21:5B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/BA027AB7F3CF1ACF583420261DE8A117CC215B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA027AB7F3CF1ACF583420261DE8A117CC215B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/BA027AB7F3CF1ACF583420261DE8A117CC215B71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a6:d4:47:7f:bd:f0:96:b1:97:71:6d:d8:a8:9c:ec:06:11:
         74:b7:16:67:bd:e3:b8:23:10:0c:a7:07:62:4e:e9:08:b9:f2:
         09:c5:03:10:cd:f6:08:aa:33:67:2b:06:df:30:99:a5:9f:3b:
         f7:93:d6:7a:06:ed:22:ee:19:64:3a:75:c7:a8:05:bb:a5:be:
         8d:58:43:b5:a9:20:d3:e4:b5:5a:cc:f9:25:a9:23:2a:a5:47:
         fa:2b:d8:ce:db:5a:55:e7:0d:78:6d:e2:61:4d:e1:24:05:b1:
         4c:64:2e:6e:d7:02:f3:ba:7a:4d:ba:25:6d:1d:9b:34:6e:61:
         bd:6d:74:3f:cc:1c:a4:f3:20:27:64:75:6f:0b:c3:24:6c:a9:
         a3:83:06:9a:23:35:12:83:e4:0d:c4:df:f2:0e:fb:34:2b:03:
         40:be:16:fa:6f:11:dc:21:54:4c:4b:7b:66:3f:5e:2f:3f:d7:
         48:d5:36:2c:57:e2:13:83:51:3d:52:38:9f:f3:dd:9d:0b:ee:
         16:35:bd:d8:de:8d:f1:d0:86:0e:57:fb:77:4b:fa:13:e8:69:
         a2:91:3c:19:bd:8c:fd:6a:78:10:3d:a3:19:c4:b2:77:3b:1c:
         a9:06:f6:69:77:96:6f:ca:73:ea:c8:2c:9f:ae:1b:49:4a:85:
         6d:ea:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:44:42 2025 by rpki-client