Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
File:                     B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft (raw, json)
Hash identifier:          KP4PCxq4wnybCVc73uL0KXZKLJV7B7ixPzicQNFwy3s=
Subject key identifier:   39:BF:2F:19:E1:FC:9D:47:F2:AF:6B:07:3B:DA:2B:D3:AB:CC:67:47
Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
Certificate issuer:       /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Certificate serial:       191932A5D2F9DE9839B914318B9802E0D2CBCB01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
Manifest number:          01A7
Signing time:             Fri 28 Mar 2025 17:58:40 +0000
Manifest this update:     Fri 28 Mar 2025 17:53:40 +0000
Manifest next update:     Sat 29 Mar 2025 21:44:40 +0000
Files and hashes:         1: 323830343a323639343a3a2f33322d3336203d3e20323633383430.roa (hash: ZjkF1pUkXBmEKQAO6ncC9SG9coykehR9f2eTUCha5/w=)
                          2: B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl (hash: eATK3Kr0/2+4gB5ZxccjMgE0fYGNhduvDa/D0hsuY7E=)
                          3: 3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa (hash: cSpVPmKqiNCfvBOUC18C4A0VaK/2K/ff7DMRQzyxnOQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:19:32:a5:d2:f9:de:98:39:b9:14:31:8b:98:02:e0:d2:cb:cb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
        Validity
            Not Before: Mar 28 17:53:40 2025 GMT
            Not After : Mar 29 21:44:40 2025 GMT
        Subject: CN=39BF2F19E1FC9D47F2AF6B073BDA2BD3ABCC6747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:7f:ae:cc:4d:66:12:42:a0:59:0d:f4:64:
                    8d:8f:fd:94:27:c1:cd:8d:d1:2d:69:13:ae:bd:1d:
                    83:1a:2c:f7:2e:5a:19:eb:06:3e:7b:b0:26:dd:2b:
                    b6:e5:0f:a0:17:8a:e0:53:44:e7:68:ba:55:87:fc:
                    0e:20:30:d2:e6:72:e7:0e:c0:fb:e1:cd:18:bf:b2:
                    8f:37:f7:33:6c:28:95:e7:cc:14:de:49:ee:5a:1c:
                    66:63:94:16:30:49:b1:17:c0:53:65:ca:30:b2:9e:
                    e1:53:47:20:61:12:aa:b3:65:b7:7c:f2:87:a6:42:
                    0e:f3:2c:67:6d:10:be:76:17:89:3d:1a:36:39:d7:
                    ba:9a:70:8d:ac:ee:3d:04:c6:b5:18:02:65:08:e3:
                    7b:7a:19:ed:2c:9e:f5:68:e4:56:5a:3d:25:9d:e5:
                    c8:50:53:9d:02:01:43:c4:b5:f4:a5:fc:54:25:6b:
                    b2:e8:87:2f:f8:a5:a1:77:99:6b:42:c0:52:84:ba:
                    a5:77:48:27:96:a8:10:bb:fe:68:ee:27:f8:e1:97:
                    1a:06:10:57:64:86:cf:72:43:3d:5d:85:a0:f7:3b:
                    58:37:e6:ad:9a:bf:d4:dc:61:2f:49:cb:c4:16:a8:
                    b4:88:55:d7:d9:4a:71:a4:49:1c:c6:0f:30:d2:80:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BF:2F:19:E1:FC:9D:47:F2:AF:6B:07:3B:DA:2B:D3:AB:CC:67:47
            X509v3 Authority Key Identifier:
                keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ec:35:ce:fb:16:15:4c:9d:34:60:14:21:91:33:35:b4:ac:
         6d:bf:56:b6:8d:cd:04:53:70:d5:c8:cc:c7:c3:43:74:39:47:
         69:c3:1f:09:e3:bc:4d:61:29:5c:90:7d:f2:57:85:50:31:20:
         d8:0d:a6:34:d6:90:3e:ff:7c:c3:1c:df:eb:c0:4e:bd:67:6d:
         6e:c2:4f:b1:72:ec:c9:e3:fc:86:d7:33:99:c2:3c:ca:fe:ae:
         08:df:95:8e:9a:a6:57:88:02:8a:27:63:0f:0c:17:ba:8b:68:
         10:76:7a:a8:27:a1:17:d4:4f:81:3e:7c:b9:b0:c3:82:47:bb:
         c1:f6:8c:64:f9:b7:1e:d1:93:fc:19:7a:72:9f:4d:f5:ba:db:
         e4:c8:0c:97:c5:dc:36:82:2e:b1:fd:13:e7:61:a2:15:3d:d2:
         c1:d7:3b:e0:ac:e3:b9:da:fe:83:a5:b1:80:61:97:7f:a5:d4:
         b0:6e:f6:a2:b8:67:71:09:87:4c:48:bd:49:1c:fa:c4:89:c9:
         08:1e:74:25:b2:43:ed:34:0c:35:28:df:0e:e1:07:3c:19:ef:
         0d:3c:da:e2:42:c1:70:8b:69:e7:e6:e7:e7:ed:1a:a9:c1:df:
         b3:d7:aa:56:8e:e0:ee:d4:89:2d:73:fb:2e:b8:43:09:5f:24:
         17:2c:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:20 2025 by rpki-client