Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft
File:                     0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft (raw, json)
Hash identifier:          NNcq2jU88EwT4ovOVOhLTr6aABHe6tDHdkQG2tUuE20=
Subject key identifier:   BF:4B:45:4D:C9:B4:3B:E5:B0:87:66:66:AC:DA:B9:EA:82:08:9E:F4
Authority key identifier: 0C:97:1C:51:E8:3D:2A:1D:AD:7F:20:CB:F7:08:84:CA:50:8D:AA:B6
Certificate issuer:       /CN=0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6
Certificate serial:       63FDB5348CEAF422EE7EFB16B417B46266D333E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft
Manifest number:          0128
Signing time:             Fri 14 Feb 2025 19:06:27 +0000
Manifest this update:     Fri 14 Feb 2025 19:01:27 +0000
Manifest next update:     Sat 15 Feb 2025 20:47:27 +0000
Files and hashes:         1: 34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa (hash: rYqvnjm9W4l+3MRK9xePKhddcpFpn55WfKdeiIGNhN4=)
                          2: 323830343a356337303a3a2f33322d313238203d3e20323638393039.roa (hash: E+4tFhdzdiBHPxW/qesx43yDxqasTs3F2qQzAkV5Ymo=)
                          3: 0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.crl (hash: DlcCljUkjML7tqRKiv4Dz72xgcSgOjtaF7/kWxOmYGg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fd:b5:34:8c:ea:f4:22:ee:7e:fb:16:b4:17:b4:62:66:d3:33:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6
        Validity
            Not Before: Feb 14 19:01:27 2025 GMT
            Not After : Feb 15 20:47:27 2025 GMT
        Subject: CN=BF4B454DC9B43BE5B0876666ACDAB9EA82089EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:b2:1e:27:32:6b:7a:f3:88:d2:26:8d:8c:
                    01:26:6e:f2:83:e5:c3:90:a5:30:08:44:c8:38:ab:
                    9e:2d:03:49:60:91:8f:80:ac:7f:ee:f9:39:e7:d9:
                    79:54:8a:85:06:8c:dc:97:94:08:d6:e8:af:33:42:
                    17:f8:0f:3a:c8:53:22:8a:f9:fd:d3:d5:80:2f:c0:
                    16:42:ba:1a:b3:af:47:c9:5c:f8:95:f4:b6:a0:e7:
                    1d:62:7d:d4:e3:bc:2f:28:4d:27:18:31:a7:d6:80:
                    13:88:cc:d7:c5:f7:ce:b5:51:75:8c:d5:3d:ce:3e:
                    b2:83:53:96:6c:cf:18:44:df:87:d2:91:53:3d:2f:
                    b8:3e:99:08:43:4c:b5:9c:dd:19:cd:7c:96:a5:22:
                    ea:8c:ad:7d:42:8f:35:09:53:df:5b:1a:a1:12:fd:
                    fe:60:97:a7:15:ae:e2:be:0c:e7:8a:bb:94:59:1f:
                    e3:25:5e:e9:21:87:d4:39:87:66:1b:28:f2:03:9b:
                    af:25:7b:00:0f:ca:aa:82:1b:37:70:4d:ee:e7:46:
                    1b:2f:10:c4:a7:71:4f:cc:37:d6:1c:f6:93:4b:5b:
                    53:e0:20:d7:0a:1d:df:bd:d8:fb:1f:b5:05:cb:24:
                    72:58:5c:69:9b:67:73:5a:74:f4:a5:0d:be:dd:f7:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4B:45:4D:C9:B4:3B:E5:B0:87:66:66:AC:DA:B9:EA:82:08:9E:F4
            X509v3 Authority Key Identifier:
                keyid:0C:97:1C:51:E8:3D:2A:1D:AD:7F:20:CB:F7:08:84:CA:50:8D:AA:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c4:2f:81:b4:02:47:89:55:02:85:ac:23:41:cb:96:bd:f0:
         f0:3e:f2:44:84:e0:ad:16:5a:1b:35:b6:04:00:9d:09:42:e1:
         ca:4c:fc:c0:3e:2d:b3:53:11:32:9c:18:fa:99:f2:be:fc:da:
         53:ee:7d:62:28:15:cf:51:d9:88:6b:17:3d:e3:83:4f:e7:bf:
         df:58:a0:4a:f5:af:bd:b2:b3:29:7d:aa:ce:04:eb:99:18:7e:
         5b:3e:47:1d:f3:f3:74:b4:d4:42:c0:59:1b:9a:c0:d5:17:58:
         bf:39:c2:79:ca:b4:12:3f:4f:79:01:f8:a5:f4:f5:f6:d2:4f:
         4e:c9:44:42:0f:7f:f1:7c:11:b0:b1:e4:78:7e:53:69:a1:ae:
         87:d6:6d:1a:e3:bf:0b:6d:10:14:99:da:4c:30:56:87:c6:8a:
         71:93:0c:dc:26:cd:f1:bb:e2:de:8f:cb:7e:5b:2d:66:d6:9a:
         a0:52:f6:2a:c0:f1:ba:ac:4d:ba:fa:b1:80:a5:b3:85:ec:88:
         de:ee:98:39:bf:7b:f9:77:fe:32:e6:81:f3:94:24:22:9d:85:
         40:1c:9a:80:3f:56:ba:12:db:3e:30:9c:1a:f2:93:76:a1:b7:
         83:3d:f6:73:69:a8:64:b2:2c:01:d9:4c:2a:dc:65:e2:ed:f8:
         62:27:58:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----