Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
File:                     9954871A58BD1D563C66245B157E43881A74A8D7.mft (raw, json)
Hash identifier:          QGumYxHKgQu1tQanWnF0Z8anoVWOowxLh+0MGFwUiXo=
Subject key identifier:   DE:89:9B:01:C7:B7:63:56:61:65:54:E4:66:FD:AD:A0:CD:B3:B6:C0
Authority key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Certificate issuer:       /CN=9954871A58BD1D563C66245B157E43881A74A8D7
Certificate serial:       2D631884580846665F5A7BF1EFF76A5C9C2FDC5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
Manifest number:          01E3
Signing time:             Sat 29 Mar 2025 06:22:23 +0000
Manifest this update:     Sat 29 Mar 2025 06:17:23 +0000
Manifest next update:     Sun 30 Mar 2025 08:32:23 +0000
Files and hashes:         1: 3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa (hash: floZekyWrSX+zO0A6N9pd6GuhRSJfQ7RkPEPo1F1k9k=)
                          2: 9954871A58BD1D563C66245B157E43881A74A8D7.crl (hash: rlwFjJqcsv0JGsBKRN/8HKqyVySFtJ0+brVi9R30wY4=)
                          3: 3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa (hash: g2ciLQp8xBSwqK2haNhsJtJGAmdHrWpaK24rfC6KMaM=)
                          4: 3137302e3234352e3235322e302f32322d3234203d3e203631383536.roa (hash: +rzgWAM0J39lfPXIn1e0sEx5MVNXgdEmv//i0bEsix4=)
                          5: 3133312e302e34302e302f32322d3234203d3e203631383536.roa (hash: ic/7EO36gA6gozGKV7WZf99l/hUhRSPlMSp47gbZx9A=)
                          6: 323830343a316135633a3a2f33322d3438203d3e203631383536.roa (hash: ka57TFgNA07EevIabxK2WI1B1FcsCrw7HkDv0euQ/Rc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:63:18:84:58:08:46:66:5f:5a:7b:f1:ef:f7:6a:5c:9c:2f:dc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9954871A58BD1D563C66245B157E43881A74A8D7
        Validity
            Not Before: Mar 29 06:17:23 2025 GMT
            Not After : Mar 30 08:32:23 2025 GMT
        Subject: CN=DE899B01C7B76356616554E466FDADA0CDB3B6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:98:55:b6:11:89:58:60:33:b4:59:d3:b6:
                    80:07:f7:0d:51:d8:9c:bb:a0:7b:ef:0f:c8:f4:71:
                    97:ba:07:cd:1e:54:ed:3e:06:7f:57:6d:80:c7:0e:
                    22:4b:9a:8c:be:d3:71:a1:9f:46:db:a0:4e:b1:07:
                    22:31:7a:4b:40:b4:10:8d:2d:93:e4:fb:c2:2c:da:
                    d8:56:ee:31:97:fd:aa:dd:7e:5f:e4:85:0c:f3:6d:
                    ee:b3:c4:9a:28:05:da:f2:d2:4a:de:28:9a:64:c7:
                    77:95:67:d5:7e:76:56:b8:9e:42:5e:30:6a:8d:e1:
                    4d:6c:92:d6:21:fd:4b:ab:64:16:fc:e9:6f:36:4f:
                    5f:3d:8b:fa:11:11:e2:98:73:70:fa:6e:d3:9b:5b:
                    cc:ea:a6:6f:58:5f:44:f3:e7:f1:35:d9:b9:49:47:
                    60:b6:7a:5a:e3:b7:00:b4:82:e8:69:3c:03:de:9e:
                    c3:05:b9:b5:39:f3:9d:8b:04:8a:a5:33:e3:97:57:
                    61:bd:bf:b3:80:7d:83:00:e8:15:ee:21:ea:1f:5e:
                    cc:c6:6e:95:eb:77:24:98:c1:6e:37:8e:13:fa:d2:
                    eb:c6:24:50:7a:a2:ec:49:0b:28:0e:38:64:8e:95:
                    22:54:e3:3c:f7:41:f0:fc:ae:98:15:a9:7a:2c:da:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:89:9B:01:C7:B7:63:56:61:65:54:E4:66:FD:AD:A0:CD:B3:B6:C0
            X509v3 Authority Key Identifier:
                keyid:99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b2:05:00:eb:a9:3d:ee:c6:be:f1:f9:3e:94:4a:9a:28:be:
         be:38:04:74:0d:ca:8e:e4:f2:ba:49:99:66:85:db:ed:b0:a9:
         aa:5d:eb:cc:3f:8e:7a:9d:e3:b6:b5:b7:d4:f7:1e:9e:03:b6:
         43:14:ab:b8:fb:5f:12:61:06:dc:fc:97:bb:e6:27:78:47:3a:
         7c:bc:18:07:ca:92:00:db:0e:99:a0:7c:9f:75:0c:44:02:e1:
         ca:5b:d4:67:e4:b0:2e:13:9d:34:8d:66:e6:f7:6b:2c:1c:51:
         71:a2:bd:17:97:9d:c3:e3:50:01:82:3d:f2:c0:f8:ed:3f:8b:
         ea:74:ea:51:3d:64:e4:4a:cb:b9:32:a8:4b:8f:83:e4:af:e3:
         c8:90:01:a4:25:a1:00:b0:c7:33:62:35:1f:bc:16:b6:60:9b:
         13:c8:d3:37:96:31:b6:2c:9f:e0:e7:2e:71:0a:db:a8:8d:fa:
         e2:d1:6f:46:d6:c6:ea:a6:d1:62:78:39:7a:40:e9:f6:15:50:
         af:12:a3:72:f9:e8:16:1a:06:b7:ac:0f:44:06:03:65:db:33:
         3a:ac:ae:bb:a8:56:a4:c7:5f:a8:2a:22:14:1a:06:e6:b5:eb:
         9f:b0:92:ab:b4:b2:b3:cb:dd:1c:2e:97:ba:ea:c8:9e:b6:df:
         a1:74:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----