Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
File:                     117560A27F42885C52E66148007C2989B0339DAD.mft (raw, json)
Hash identifier:          7U2+QR+jpoFVX+avkS4NNyghjId/T+10poLW0VKdzow=
Subject key identifier:   9C:D9:EA:EB:9E:58:23:B2:89:64:52:87:4C:B7:6E:F8:29:D9:46:55
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       3E2280D4C92493233863EEE0F05CEF5AE0CA3B9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
Manifest number:          55
Signing time:             Sat 29 Mar 2025 09:55:34 +0000
Manifest this update:     Sat 29 Mar 2025 09:50:34 +0000
Manifest next update:     Sun 30 Mar 2025 10:11:34 +0000
Files and hashes:         1: 3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa (hash: eaPmTPN0pKkcKOtrEquMUQp+UXQF/ookE75h2R2/ipc=)
                          2: 3133312e3130382e3136302e302f32322d3232203d3e203631363735.roa (hash: lfUAYU5muERMvqqEjkRPAiv8iff9paIqhjH2W5tHNnc=)
                          3: 3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa (hash: TpMe21/y7N0hpatEwrFUwO3jGlX7QHMEgWX4xeJ/TDA=)
                          4: 117560A27F42885C52E66148007C2989B0339DAD.crl (hash: 9j5Pivn+K9rLa66wZZzB4Qz2XwV+Ytei38IzgJ3IKrs=)
                          5: 323830343a316363383a3a2f33322d3332203d3e203631363735.roa (hash: h0sAlKSBteG5e9UspnLUj4TrJvUGL24yn03JgzFpoR0=)
                          6: 3133312e3130382e3136312e302f32342d3234203d3e203631363735.roa (hash: EHaBubJbNTvMDQfi91UInX9N43xy0AaDbLvzR5QAJj4=)
                          7: 3133312e3130382e3136302e302f32342d3234203d3e203631363735.roa (hash: FAmEwKo3j5jFWrWKgpWyWqsqYmyhwf3nFZ/D+5dSzUM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:22:80:d4:c9:24:93:23:38:63:ee:e0:f0:5c:ef:5a:e0:ca:3b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Mar 29 09:50:34 2025 GMT
            Not After : Mar 30 10:11:34 2025 GMT
        Subject: CN=9CD9EAEB9E5823B2896452874CB76EF829D94655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:89:80:f0:e5:86:64:44:db:07:ae:f4:0b:
                    06:14:d9:30:96:b8:8b:27:c6:17:1d:41:10:18:c6:
                    29:67:b0:3c:68:5e:bd:99:ad:70:41:0b:a6:29:3d:
                    2d:c5:59:c3:d3:a8:91:30:03:11:0b:86:0f:2d:f5:
                    b9:7f:d1:c3:b4:c7:0d:88:82:b4:68:e9:1c:1b:74:
                    e0:98:ba:67:39:57:e6:2a:2b:c9:81:4e:8a:b3:f4:
                    c6:70:8e:95:e1:60:4b:51:11:df:b0:e6:5f:f8:dd:
                    fe:cf:07:97:27:6d:61:88:2a:d2:4c:3b:8e:fd:44:
                    2e:a2:3d:c2:70:02:1c:ad:ad:88:37:c5:b7:3f:1c:
                    03:2a:96:b7:a5:1f:9c:30:73:b2:b0:74:5c:a8:52:
                    86:21:c9:0e:7d:a9:83:09:16:c9:0c:42:83:7c:71:
                    8b:24:ea:db:f0:75:1f:a0:6a:14:c1:8b:22:12:01:
                    9c:f5:7d:fd:d9:58:2e:8d:81:ea:74:fc:0e:6b:c9:
                    81:95:17:e9:98:2e:c3:6e:e7:33:d4:50:8a:3a:b8:
                    9c:c1:0e:61:36:c7:cf:c4:42:b3:a5:7a:61:60:c3:
                    c6:5f:b6:30:5b:13:e5:7e:ce:5d:6d:fc:c0:ff:98:
                    1b:68:37:f7:e6:b8:c9:d7:a6:d1:94:7b:6f:cc:f5:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D9:EA:EB:9E:58:23:B2:89:64:52:87:4C:B7:6E:F8:29:D9:46:55
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:54:29:ac:8d:cd:08:49:0f:f6:ad:e5:e7:92:2b:c6:fb:
         63:12:a7:f0:99:b0:a8:97:af:8d:00:67:b2:3a:2f:04:c5:98:
         e4:18:44:72:dd:cb:55:13:bd:6a:be:e2:7f:ee:5d:7c:ed:50:
         6e:5e:49:97:5d:a0:3d:b2:1b:fa:51:0b:ee:2d:29:05:58:2d:
         55:22:77:86:92:40:ac:c4:32:ca:23:73:6f:63:fc:8c:a1:30:
         53:42:3b:5b:bb:20:cd:4b:18:02:48:1d:e0:2b:29:b4:89:fa:
         7d:3d:24:d8:b8:69:8c:60:f6:91:2b:94:03:bf:14:49:16:38:
         e8:88:6e:5c:92:9e:c4:c9:5d:da:be:98:72:69:b8:97:b0:43:
         75:dd:da:9c:ca:82:42:24:1d:7b:df:7e:da:17:a8:7b:a6:87:
         bb:7f:76:bf:3b:28:5b:97:6e:8a:5c:cd:29:96:68:f3:fc:77:
         66:49:6b:dd:53:f0:3c:88:a0:4a:26:a3:07:01:41:9c:f6:58:
         7b:e3:7e:a1:3f:3c:33:7b:64:8c:96:80:e7:7e:f4:4e:61:f6:
         5c:f3:f1:bb:75:2b:6b:28:5b:82:80:26:68:70:99:c8:12:46:
         e1:1b:f0:c2:b2:5b:3e:ea:03:fd:ef:6f:f5:81:eb:6c:d9:c3:
         1c:3e:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:19:16 2025 by rpki-client