Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.mft
File:                     8BD6A70FA78C09BB2792766E310F7002F0203A65.mft (raw, json)
Hash identifier:          4UP+MsgOTofmafZthfds2jI4O29fpKQqRx7HGdB+Rgw=
Subject key identifier:   B5:68:63:60:00:C7:07:85:C8:04:13:B1:40:FA:7E:2D:76:F5:0B:2A
Authority key identifier: 8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65
Certificate issuer:       /CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
Certificate serial:       53FCBBD06BA9C13A5D9BC7194D77DB5FEAD5588D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.mft
Manifest number:          D9
Signing time:             Wed 21 May 2025 08:26:51 +0000
Manifest this update:     Wed 21 May 2025 08:21:51 +0000
Manifest next update:     Thu 22 May 2025 09:07:51 +0000
Files and hashes:         1: 3134332e302e34382e302f32322d3332203d3e20323633353434.roa (hash: LzkVSzTqvnVphNoB0B2QtupdBPIOLHSdEFccZfmX5Ks=)
                          2: 3139312e352e3234302e302f32302d3332203d3e20323633353434.roa (hash: YTONAkhAAE1GKUaRDf4SBV+lf7IEtkjXZm8yu3bM36s=)
                          3: 323830343a313361383a3a2f33322d313238203d3e20323633353434.roa (hash: LGiGzXUka9SxygY5Ls1v+iaiwfJya5owIHQuUCWlKZU=)
                          4: 3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa (hash: L4CbNotfKzMEm4VlU7+9G9/LKsAD9fyTBvSnS0tsbpQ=)
                          5: 3137302e37382e3234382e302f32322d3332203d3e20323633353434.roa (hash: bTvm0kdO66eGQ1ZkNJGiAzMeI0eOII+6Jf8MlO7bZQg=)
                          6: 8BD6A70FA78C09BB2792766E310F7002F0203A65.crl (hash: /JQWBu57Gg6BTEYVZ5MOJGZ60OGJTk6h4Ix/qKZIXfc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:bb:d0:6b:a9:c1:3a:5d:9b:c7:19:4d:77:db:5f:ea:d5:58:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
        Validity
            Not Before: May 21 08:21:51 2025 GMT
            Not After : May 22 09:07:51 2025 GMT
        Subject: CN=B568636000C70785C80413B140FA7E2D76F50B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:a4:9e:aa:cf:ee:9e:38:37:9f:56:de:50:
                    79:b6:dc:d8:9e:f8:b2:55:21:cc:a1:17:3a:8f:39:
                    c3:4d:ee:e8:fc:0f:26:a0:9a:ee:68:01:c9:7c:1e:
                    b9:cb:46:14:28:26:b9:e6:cd:c2:98:c6:32:7a:49:
                    97:5d:e9:dc:46:a3:23:a7:6e:0e:11:82:8c:04:5f:
                    1f:b9:73:e7:cb:6a:2e:b8:17:76:f8:40:9d:33:b7:
                    c3:3f:e9:a6:ff:f8:98:06:ad:b0:2f:fa:88:a6:6c:
                    7c:4e:b9:32:15:84:97:cb:c3:90:d8:6d:58:2f:ed:
                    41:53:e2:08:bb:a0:2d:b1:da:58:cd:bd:cf:23:9c:
                    ee:90:0f:22:96:13:67:f5:53:7a:dc:ee:fe:04:bf:
                    47:60:32:9f:ad:80:0d:2d:ee:bd:4a:d6:b3:27:94:
                    84:20:56:ca:b0:aa:06:7d:30:40:9e:17:fb:92:a7:
                    d1:61:0a:b5:1c:38:95:57:c8:3b:42:6a:d3:dd:a2:
                    64:7b:25:af:25:0f:53:1e:c8:90:23:9e:43:53:65:
                    c0:2f:e3:e8:41:c5:90:87:a9:cc:ad:f0:4b:ae:59:
                    39:85:0b:5b:29:90:aa:2f:1b:b5:e2:6d:96:bb:95:
                    18:8c:c0:96:7c:d1:94:9e:bf:9f:32:f0:b3:d5:78:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:68:63:60:00:C7:07:85:C8:04:13:B1:40:FA:7E:2D:76:F5:0B:2A
            X509v3 Authority Key Identifier:
                keyid:8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:1c:9c:69:ad:af:37:70:b7:e2:a1:a0:7f:26:b4:d1:a9:
         bf:56:35:df:e3:3e:40:af:61:fa:78:2a:db:cd:26:7b:f3:8c:
         9d:6f:45:d0:9c:2e:45:55:3d:51:81:c9:d9:c0:f2:0d:7f:a1:
         ba:ef:57:d9:ba:1a:23:b7:1f:7c:89:b4:51:06:c3:e1:7d:0f:
         fa:cf:d1:e8:d6:37:73:52:db:e9:7c:7c:e9:9d:3a:7c:1d:d6:
         76:0d:b2:45:93:11:bc:2a:8f:6e:73:92:61:b7:63:6d:fc:97:
         a0:86:95:07:63:73:79:a1:47:88:7f:d6:0b:ba:f4:f7:60:ca:
         de:a4:e6:6e:e1:02:da:d2:a1:a5:a3:6f:83:44:2f:57:2e:7a:
         da:f1:24:e1:4e:de:f0:c6:b7:0d:9d:94:36:89:53:b1:8f:68:
         b8:29:a4:a3:ff:a3:a3:01:46:ed:ec:05:e9:c4:7b:9b:f0:05:
         0f:35:d2:74:8a:35:63:1a:9e:4b:2f:5e:cf:fb:69:98:13:18:
         6d:43:72:00:cd:8f:37:f7:3c:38:ee:f3:2d:ce:d6:f7:25:8a:
         48:07:15:17:16:d2:01:31:2c:94:ff:38:50:9c:23:ce:9e:33:
         b3:21:ae:8e:fb:1b:fd:7f:0e:cc:35:fa:f1:33:5c:4d:6e:25:
         4d:98:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----