Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft
File:                     0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft (raw, json)
Hash identifier:          Sldpfvo7/sNQ8KylCJEf8wydTVg7Est13JGcKrh2eHg=
Subject key identifier:   46:F6:EF:AF:59:E3:08:9C:3A:21:DC:5F:DA:B7:22:BB:F7:C6:72:62
Authority key identifier: 03:96:D7:1A:C4:DB:6D:BB:AE:1F:49:1E:E5:7B:3C:FF:D8:08:D7:4E
Certificate issuer:       /CN=0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E
Certificate serial:       3CA23B83D7C4DB8DA9458AC5B2E2E005D2206179
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft
Manifest number:          FB
Signing time:             Fri 28 Mar 2025 19:57:43 +0000
Manifest this update:     Fri 28 Mar 2025 19:52:43 +0000
Manifest next update:     Sat 29 Mar 2025 20:51:43 +0000
Files and hashes:         1: 0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.crl (hash: ABm3xGXjUOFCXUB72PvExBiebqLTJlj2WoOGNfZJUtE=)
                          2: 323830343a356561383a3a2f33322d3333203d3e20323639303438.roa (hash: GgtRGQ+G7xLYqBBzca1A3eA60BC07dtjMTY0g32MMLE=)
                          3: 34352e3137382e3232342e302f32332d3234203d3e20323639303438.roa (hash: EaxaOXwh+jnSgbFiP3QMQ7sZWk7sWa8qhONzCGpCVnk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a2:3b:83:d7:c4:db:8d:a9:45:8a:c5:b2:e2:e0:05:d2:20:61:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E
        Validity
            Not Before: Mar 28 19:52:43 2025 GMT
            Not After : Mar 29 20:51:43 2025 GMT
        Subject: CN=46F6EFAF59E3089C3A21DC5FDAB722BBF7C67262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:b2:2d:1a:28:2e:d8:a6:3c:5a:d0:92:f7:
                    e9:bf:19:e0:d6:f9:dd:b5:21:60:c3:9c:c7:53:93:
                    ce:3b:c1:65:ad:43:82:81:3b:ca:b7:c0:12:c1:23:
                    23:70:1d:fb:44:68:c8:40:d8:36:9f:26:f6:aa:b7:
                    45:2b:3d:ac:d1:f7:54:e8:9f:e4:45:ed:d5:25:13:
                    bc:78:10:75:82:97:5f:b8:fa:40:1d:d0:58:b4:99:
                    0b:63:d0:dc:14:0c:ba:4d:5e:59:f3:85:86:bb:e2:
                    66:b8:10:51:95:ac:cb:ed:e6:48:a3:4d:18:e8:ac:
                    f4:d0:86:35:35:32:e1:43:a2:fe:0e:7c:05:a7:4b:
                    aa:02:48:1d:fc:14:c6:56:4b:b6:1d:a4:4e:fa:c6:
                    53:55:bc:5f:ad:63:db:e6:77:73:e1:af:de:8a:4d:
                    79:bc:2a:6b:e0:42:22:6f:86:4f:e2:82:af:40:7a:
                    b3:75:13:f9:33:c7:c0:c0:c3:2a:20:b2:aa:b6:00:
                    c2:6d:06:f6:5d:96:cc:f5:43:39:75:09:08:ed:50:
                    04:2e:a6:38:c9:14:c2:ad:7f:5a:6b:90:29:86:e2:
                    1b:02:b3:24:7e:ca:ab:e6:2a:ee:28:d2:82:71:48:
                    8c:c3:9f:99:81:48:37:f8:ae:8f:94:ec:4f:2a:19:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:EF:AF:59:E3:08:9C:3A:21:DC:5F:DA:B7:22:BB:F7:C6:72:62
            X509v3 Authority Key Identifier:
                keyid:03:96:D7:1A:C4:DB:6D:BB:AE:1F:49:1E:E5:7B:3C:FF:D8:08:D7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:16:24:2a:e6:68:29:a6:0e:f7:4f:f0:bf:fb:f5:e2:38:94:
         6c:04:de:58:57:d8:c8:bc:33:01:d0:35:d7:3d:8d:19:a9:0b:
         79:d2:a6:a9:6f:56:50:5d:a2:e0:84:5b:18:3c:3d:35:e6:ef:
         c6:3e:75:82:8e:19:1d:73:c0:57:17:c3:c6:90:ee:ca:46:80:
         e5:a3:57:a1:21:32:c2:9c:04:b4:83:75:f9:4b:95:e9:cb:6a:
         c2:2d:bb:72:c6:31:be:51:ce:d9:94:6b:81:36:5f:c2:ff:d8:
         65:ef:a0:01:27:1c:68:06:2a:ad:43:07:da:0c:7a:41:60:ee:
         87:d7:5a:f8:1e:06:f0:07:1a:8f:b3:ff:52:5d:58:5a:95:fa:
         66:25:5c:de:b5:95:6a:2f:77:9c:03:a5:47:a6:65:42:18:3c:
         7b:7e:9b:0c:8e:d9:68:0d:68:73:25:64:9e:3a:35:8c:38:a1:
         73:72:33:23:be:b4:d9:57:23:20:c2:45:92:e2:71:d8:a0:f6:
         18:c0:e1:d0:f3:0b:5c:4e:29:9b:8c:6d:4a:34:7a:58:0a:f9:
         20:23:e8:67:03:5e:9f:67:27:aa:e7:da:47:9a:c3:87:57:98:
         17:5b:a2:60:4c:b6:68:41:04:ca:32:56:89:d1:f7:06:d6:49:
         55:0c:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:43:16 2025 by rpki-client