Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.mft
File:                     B325121E804B0FC95B1063C1102CA90077C97D97.mft (raw, json)
Hash identifier:          58yNll+fmjWfucWZbsvpn/5e5eGkip6IQBMXJ4wCFaw=
Subject key identifier:   55:BD:87:7A:86:FB:83:4B:30:8B:09:1A:98:6C:6D:B8:CB:29:8A:59
Authority key identifier: B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97
Certificate issuer:       /CN=B325121E804B0FC95B1063C1102CA90077C97D97
Certificate serial:       10E30B424019563B341BF468C264F0A2DD5F6A37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.mft
Manifest number:          3E
Signing time:             Tue 18 Mar 2025 13:07:54 +0000
Manifest this update:     Tue 18 Mar 2025 13:02:54 +0000
Manifest next update:     Wed 19 Mar 2025 16:56:54 +0000
Files and hashes:         1: 34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (hash: +7OsYGFLLE34axyXqZZtr1ynea15VxwjyS1k6vQ9Zsw=)
                          2: B325121E804B0FC95B1063C1102CA90077C97D97.crl (hash: ce7gWPL/cNlyUeldZUSgrDOFfb0eCHihKA63OpiqZ04=)
                          3: 34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (hash: FRL5W0RE974/ES2frg5dqWaOt6RjPReRP5bpphtkMOM=)
                          4: 34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (hash: CUVCv0i8so3z7lXmBnj5IRT1LMGMDXwwdKfqGiZLD2w=)
                          5: 34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (hash: SBQ5/VrbfL6QosgKp8clS9dVWExayjm5xcOtmIBsMww=)
                          6: 34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (hash: 318uYl7F/PkBfdlg/qDoj1xyEGjr5hqZ8ItqLZczUF0=)
                          7: 34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (hash: A6R95jAQFrIs3Urq2ONNpGOi2F+3/TsTu22kA4hqSZs=)
                          8: 34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (hash: 03p8gvM5UKaJfHaj2eD7vE8XDV1ekfGOrSf66IWuKfw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:0b:42:40:19:56:3b:34:1b:f4:68:c2:64:f0:a2:dd:5f:6a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B325121E804B0FC95B1063C1102CA90077C97D97
        Validity
            Not Before: Mar 18 13:02:54 2025 GMT
            Not After : Mar 19 16:56:54 2025 GMT
        Subject: CN=55BD877A86FB834B308B091A986C6DB8CB298A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fa:02:a5:9c:87:14:c5:00:7d:9b:fa:c1:32:
                    71:76:17:89:4a:49:4d:43:1e:22:6e:c0:18:13:3a:
                    a2:bb:b2:cc:10:6b:c6:29:58:a3:6d:9a:02:44:d6:
                    fb:ee:33:98:20:69:f2:9d:fc:70:14:61:9a:c0:21:
                    09:3b:25:b3:1e:cc:d0:36:67:e2:d7:d6:83:51:ff:
                    31:f0:2e:b8:3a:c3:2b:27:80:68:dd:13:f0:0f:45:
                    a2:19:09:63:ae:37:a6:98:f1:a2:1c:74:ff:8d:ab:
                    e2:7e:70:fb:77:4e:ca:72:84:a3:f5:93:8f:ad:aa:
                    83:b8:2b:6e:6f:a0:2d:95:1b:cf:dd:55:49:b1:d8:
                    31:0a:8b:d4:3b:02:0c:b3:0f:b8:45:5e:a8:20:27:
                    1b:07:36:6c:46:f1:0e:fd:e2:f0:d3:49:61:c2:6d:
                    f8:ee:32:55:b2:b9:fe:fc:e3:39:75:c1:b0:40:a1:
                    4c:81:a9:e4:ee:5a:cc:d8:cc:fc:52:3e:43:df:f2:
                    43:6d:c2:ab:fb:ae:f9:ed:ab:79:ca:c9:28:c1:57:
                    cf:6e:91:43:74:d3:18:ee:34:41:81:65:a6:9c:1d:
                    d8:66:0f:88:8b:a4:fa:0a:8b:32:6e:5d:e7:a9:ae:
                    0c:d5:46:c5:61:6b:0b:aa:82:65:ec:60:cd:17:42:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BD:87:7A:86:FB:83:4B:30:8B:09:1A:98:6C:6D:B8:CB:29:8A:59
            X509v3 Authority Key Identifier:
                keyid:B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:86:fb:8b:35:c9:e5:63:ff:e4:a6:2b:6a:9f:17:5a:d5:
         70:46:6e:1b:df:8f:b9:3b:d1:c8:66:c5:ac:f8:01:12:ce:75:
         d3:a1:0c:53:19:01:b4:e6:02:af:14:5b:4a:14:13:02:27:00:
         af:52:cb:a2:c1:e3:2e:9b:42:69:01:09:77:57:27:d3:83:97:
         35:58:d4:9a:15:44:ec:99:bb:b3:4a:d4:0c:1a:93:ad:fc:69:
         e7:12:36:e0:fa:3b:66:76:6e:a5:40:3c:55:e6:59:f4:fe:06:
         62:a3:e0:2a:cf:39:1e:4f:6f:45:fd:ca:d1:af:06:bc:91:75:
         63:03:66:5b:d1:fb:15:d4:4d:2e:cc:36:65:ff:8c:6a:dc:ab:
         de:af:42:9b:fd:6c:eb:cb:ab:6a:55:8d:94:c7:bd:72:0c:68:
         8b:ff:0b:d0:0b:a9:a9:9a:c6:3d:23:f5:67:70:9b:0a:da:68:
         a9:15:77:43:76:6e:79:bf:60:f1:ba:41:9c:0d:e7:4f:01:ca:
         fc:b6:c8:f4:da:c3:13:a4:c8:fe:e2:0d:5c:b7:f7:bf:34:75:
         c6:31:bd:6c:bf:f5:85:f3:84:42:23:d5:a1:07:90:d1:78:41:
         6f:96:a0:80:08:22:14:f2:ae:11:f4:f7:ef:22:3b:4f:01:51:
         c5:f7:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:42:55 2025 by rpki-client