Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.mft
File:                     BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.mft (raw, json)
Hash identifier:          Evj4X/VgdB2nbkbw00B3B2qQ14qwomLd7hOu9rUAPoU=
Subject key identifier:   F8:67:44:6A:94:7B:4E:68:72:C0:B8:CD:E9:AE:8A:FF:BD:DC:49:9C
Authority key identifier: BF:AA:18:EA:50:36:84:4F:FC:F9:BB:AE:36:14:8E:EB:C2:C7:5F:51
Certificate issuer:       /CN=BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51
Certificate serial:       70327A6CD1D3A65B9AB330E7AB533E8F9CE76706
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.mft
Manifest number:          B0
Signing time:             Fri 06 Dec 2024 22:18:35 +0000
Manifest this update:     Fri 06 Dec 2024 22:13:35 +0000
Manifest next update:     Sat 07 Dec 2024 23:22:35 +0000
Files and hashes:         1: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (hash: 7j7UP1+9yF/VAOiPFmW1meA80uskJKHEV1+fzeE0pwI=)
                          2: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (hash: eSSfRwhiMUHrfr6/712kMgwCFwSNVtgM9Zc2as6MV28=)
                          3: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (hash: +YXN06jvCERnhw0E5TkfXTeeqX0boLy3zn7hoN37Zfo=)
                          4: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (hash: nEiDxU/o15ePUaHRuT+i1bDqTXfns9JvX5aObhnPMz8=)
                          5: BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.crl (hash: uBiJhXbZ2lpvwImwyxe6OYgiew8kW0Z0NWaXs/rPY/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:32:7a:6c:d1:d3:a6:5b:9a:b3:30:e7:ab:53:3e:8f:9c:e7:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51
        Validity
            Not Before: Dec  6 22:13:35 2024 GMT
            Not After : Dec  7 23:22:35 2024 GMT
        Subject: CN=F867446A947B4E6872C0B8CDE9AE8AFFBDDC499C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:5a:88:2a:e0:b1:4d:2d:fa:ea:1c:e9:cf:
                    b0:44:4d:39:6c:13:46:c3:c8:a7:c2:50:74:28:0a:
                    5c:e2:11:0d:2a:05:6e:58:c0:39:cc:95:b3:20:f0:
                    02:40:92:6c:32:63:93:84:ca:05:00:f6:07:c6:5f:
                    d5:36:3c:06:7d:a2:6e:67:a4:e2:a8:ed:fb:82:c3:
                    44:b2:72:35:70:a3:ce:6a:02:74:c7:d9:97:1a:05:
                    e4:44:61:55:ee:e5:17:59:56:2e:2f:17:1b:66:d6:
                    80:d5:e4:29:41:bc:35:62:84:62:cf:8c:83:5a:81:
                    4e:97:88:20:b8:d0:1b:5f:7e:a3:d9:c4:8a:2f:a0:
                    15:f0:c1:9e:22:b8:a0:cc:8e:c7:22:c6:f2:a7:d8:
                    02:fb:68:8d:a6:32:15:56:b9:2d:eb:8e:df:4a:a2:
                    4d:e2:65:bd:27:20:77:65:39:d9:02:0a:d3:93:bd:
                    89:c3:66:ad:71:18:f2:18:f5:77:a5:d0:90:87:97:
                    a9:1c:85:ab:62:a3:e8:72:aa:0d:0a:df:c7:a7:df:
                    82:a4:b9:4c:59:55:0d:2c:cc:93:72:6b:e8:50:34:
                    46:a6:03:24:fb:ed:f2:b8:50:b0:c7:dc:52:44:12:
                    dd:14:37:f2:b0:81:32:a8:fc:e7:a0:83:c6:7d:59:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:67:44:6A:94:7B:4E:68:72:C0:B8:CD:E9:AE:8A:FF:BD:DC:49:9C
            X509v3 Authority Key Identifier:
                keyid:BF:AA:18:EA:50:36:84:4F:FC:F9:BB:AE:36:14:8E:EB:C2:C7:5F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6e:29:46:76:a2:32:ea:c8:83:dd:98:e9:0a:53:0b:40:ae:
         5a:f3:68:76:f9:82:72:67:6b:0a:c6:08:6d:c7:e4:b3:30:7c:
         d1:aa:72:d7:65:89:97:6c:f0:f0:cd:48:fb:61:45:83:ca:bb:
         46:a9:ef:af:10:8f:33:29:c9:32:ea:4b:af:07:5d:9c:35:29:
         bd:c0:5c:3f:49:f0:13:e7:27:a8:88:7a:6a:d4:a2:d0:09:50:
         69:5e:3d:4c:bc:e6:5b:b4:f0:eb:b1:a0:1c:86:ae:7c:f1:0d:
         62:ae:a6:38:bf:36:39:e8:7f:26:db:36:d6:ee:b4:72:1a:90:
         05:30:b1:df:e1:25:57:56:81:2c:11:48:8f:03:a8:b8:14:cc:
         a1:85:08:b4:06:08:ae:ec:a3:42:87:69:f1:ee:b1:80:32:db:
         3a:42:27:9e:4d:0e:ac:72:10:f1:6e:cb:b1:f9:56:25:68:43:
         43:f9:8f:4e:fe:88:5a:51:3a:2f:43:c7:a2:7f:ca:96:74:54:
         99:24:be:aa:8b:51:e5:2d:07:85:b6:8e:7d:87:d7:f9:25:3a:
         71:bd:47:0c:d4:2b:8b:61:fa:c2:c7:55:cb:2f:c4:cd:44:ed:
         5e:70:d6:71:b4:25:60:35:2a:74:c8:c5:73:6c:31:cf:42:57:
         01:ba:4c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:20:11 2025 by rpki-client