Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.mft
File:                     ED09475052657B74A139F63C8A27BCD9B26B6B19.mft (raw, json)
Hash identifier:          7ehAS/vpxTrGjqtI9kL2JCQNBi+MjGxTYrUs/7eN5nQ=
Subject key identifier:   B0:96:45:C0:8B:77:23:DA:4C:83:CB:94:99:33:E7:AC:3D:67:F9:12
Authority key identifier: ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19
Certificate issuer:       /CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
Certificate serial:       0DF4094BCA5FF26E6B14E62DC386747A7DEF7837
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.mft
Manifest number:          022A
Signing time:             Thu 22 May 2025 15:48:12 +0000
Manifest this update:     Thu 22 May 2025 15:43:12 +0000
Manifest next update:     Fri 23 May 2025 17:34:12 +0000
Files and hashes:         1: 34352e37302e35322e302f32322d3234203d3e20323637353739.roa (hash: jz2fFxsuG1LUPNFNTRlhaK4aGQhJhkESGPAI73IoTto=)
                          2: ED09475052657B74A139F63C8A27BCD9B26B6B19.crl (hash: fLIBlHRw5Qp3kozHKPjWIPltR734WeAR++tW/14CsGU=)
                          3: 323830343a343339633a3a2f33322d3334203d3e20323637353739.roa (hash: gdtNMJmCVhI19nCwgwjAYRfqvHm0dwNC6holxx6iIQY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f4:09:4b:ca:5f:f2:6e:6b:14:e6:2d:c3:86:74:7a:7d:ef:78:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
        Validity
            Not Before: May 22 15:43:12 2025 GMT
            Not After : May 23 17:34:12 2025 GMT
        Subject: CN=B09645C08B7723DA4C83CB949933E7AC3D67F912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:6e:0a:3a:75:2f:6e:3b:46:91:08:55:27:
                    ca:a5:7e:22:4e:18:31:07:cb:66:41:84:42:9b:d2:
                    11:5b:f1:3f:5b:29:1f:45:ee:b0:8f:13:86:38:2e:
                    66:bb:4f:1d:a7:02:6c:79:6c:a5:ff:f7:8c:66:36:
                    99:8d:fa:90:73:bf:d1:e3:c8:d9:53:e8:c7:23:4d:
                    b7:35:18:2d:2d:68:72:07:41:65:6b:00:20:b0:8f:
                    5d:a3:65:55:b0:f3:9c:76:eb:f5:67:bb:9f:44:7c:
                    d2:ac:54:0d:55:c3:ec:36:24:6e:ba:64:8e:66:0d:
                    87:5c:22:95:40:4f:e3:b5:36:80:41:9d:b4:9a:ca:
                    e1:58:42:5d:75:ec:5f:84:61:29:33:50:f4:93:22:
                    c3:88:f1:3f:32:5b:b6:c9:b2:30:94:d9:09:37:fe:
                    37:03:a3:fe:44:04:f6:83:1d:cf:eb:60:c6:6a:9a:
                    e5:33:f1:df:1a:2a:9e:19:2c:13:2e:8c:8e:42:56:
                    c0:cb:62:dc:98:a3:44:52:41:dc:e0:a8:bf:3e:ef:
                    9c:a7:7b:22:16:74:38:aa:19:a4:42:6d:05:56:01:
                    ae:7d:32:a8:27:cf:ab:65:c8:c3:c8:3f:b9:1e:76:
                    ea:37:fb:2b:d6:77:cb:01:cc:cb:ca:56:e6:62:0a:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:96:45:C0:8B:77:23:DA:4C:83:CB:94:99:33:E7:AC:3D:67:F9:12
            X509v3 Authority Key Identifier:
                keyid:ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:94:8a:0a:b1:68:d2:f5:9d:f2:cd:0e:9b:98:69:39:34:28:
         7d:04:1c:e3:06:3a:a0:c3:de:73:d1:28:a4:4c:cb:a8:d1:d6:
         99:58:5b:a2:d6:91:a7:8a:64:9e:d0:ff:9c:81:cb:b2:de:23:
         a3:b2:b3:7b:71:9b:df:84:ae:34:f0:78:d3:f4:e1:c1:d2:b9:
         36:1e:c1:63:91:cf:ee:6d:e7:5e:e5:7a:f1:57:e3:2b:0d:b8:
         ac:a3:99:46:2e:52:68:e8:d4:01:ee:57:e6:e3:0e:20:35:79:
         f7:95:34:04:82:b3:ba:1d:10:dc:bc:37:1f:11:b4:dc:b4:62:
         f5:56:06:5a:fd:6b:93:20:03:71:1f:7c:8d:3b:3c:81:42:75:
         7b:0f:6f:1a:1c:79:36:97:91:04:15:23:58:fc:d5:61:20:eb:
         b9:81:2c:9f:09:40:fc:de:e7:1d:44:c2:fd:be:88:34:4a:9c:
         67:c9:b6:99:91:c2:80:c4:97:36:5f:7d:5c:66:db:f0:5c:89:
         a7:fd:82:ec:00:84:17:cc:b8:5d:ca:e7:7d:51:ae:a9:15:50:
         80:1f:ff:74:ac:55:1d:de:45:52:17:f7:52:52:8e:cd:51:bb:
         a3:aa:3d:47:ef:96:d1:54:0a:bb:33:73:26:f0:f5:38:fa:d1:
         da:50:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----