Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft
File:                     8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft (raw, json)
Hash identifier:          ZGDA8dKpvBW8oL0SnR+XXrT3aJmJwp8XivNrzoZ1cNo=
Subject key identifier:   EB:08:52:25:06:06:AD:6D:AE:09:1B:06:D1:A2:71:D7:90:AF:E2:4F
Authority key identifier: 8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5
Certificate issuer:       /CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
Certificate serial:       22E42E9CBFB77FE635A2E3C470FB57F587686A23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft
Manifest number:          01E1
Signing time:             Fri 28 Mar 2025 17:24:12 +0000
Manifest this update:     Fri 28 Mar 2025 17:19:12 +0000
Manifest next update:     Sat 29 Mar 2025 19:52:12 +0000
Files and hashes:         1: 8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.crl (hash: PJGLgqUHIyCWAqNhleSzkOHICdwGJgVRXbYzmu+qIAM=)
                          2: 323830343a343739303a3a2f33322d3438203d3e20323637303632.roa (hash: KcUZSmPuoo/2G8yAcpBb7cmuZGtvYyflQp41uitJEFw=)
                          3: 34352e3232382e382e302f32322d3332203d3e20323637303632.roa (hash: 3wQMCL0S9Yf+qCsjXnp4wgGhdiGDNEZSTWCI/5Vh3C4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e4:2e:9c:bf:b7:7f:e6:35:a2:e3:c4:70:fb:57:f5:87:68:6a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
        Validity
            Not Before: Mar 28 17:19:12 2025 GMT
            Not After : Mar 29 19:52:12 2025 GMT
        Subject: CN=EB0852250606AD6DAE091B06D1A271D790AFE24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:02:7c:dc:51:84:e4:6f:90:46:e8:18:81:
                    ae:0c:c3:36:ea:25:bb:ff:82:24:67:e6:cc:6f:cc:
                    48:64:7d:75:e9:fb:66:52:9a:52:58:0e:3a:44:9e:
                    4a:90:7a:4c:2d:ff:3a:8c:05:d8:78:46:e7:01:16:
                    70:1a:57:af:b8:0d:17:6f:3d:5b:63:bf:7e:ce:10:
                    69:4c:47:06:ff:3d:f2:53:da:64:5b:71:bb:e6:d2:
                    cd:6f:d9:cf:7b:a2:9b:27:38:b7:93:2c:f5:1d:dc:
                    69:93:3b:5f:e2:e1:98:24:fe:57:77:87:59:16:f5:
                    53:90:ca:b1:4f:dc:cc:59:7c:34:dd:77:8e:3f:2e:
                    a3:d6:2f:ae:9f:08:dd:90:93:06:e1:10:0a:e3:8f:
                    2f:19:59:5f:e6:b5:2b:f5:af:47:48:70:4a:b6:1b:
                    b5:24:e7:68:59:3f:97:ce:13:e9:81:2b:c0:93:d8:
                    b0:13:a0:1f:bd:a1:06:65:34:4e:f8:11:03:fd:8b:
                    32:51:ca:f8:22:99:97:89:29:84:be:93:e6:f3:0c:
                    ab:d8:23:ac:ae:a8:12:9e:66:fa:72:88:39:f8:14:
                    51:ef:02:63:18:6e:f4:71:69:3b:5e:d3:7f:0b:fa:
                    58:32:83:49:e9:a1:50:45:2d:d9:4b:bf:85:f3:c0:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:08:52:25:06:06:AD:6D:AE:09:1B:06:D1:A2:71:D7:90:AF:E2:4F
            X509v3 Authority Key Identifier:
                keyid:8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1f:e2:f5:05:dd:49:bb:17:48:11:a0:f7:0e:97:d2:24:39:
         3f:88:eb:9f:88:f0:de:b0:c4:30:63:d0:c8:ce:d1:4a:5f:a3:
         0e:65:40:9b:9b:6e:97:af:8e:01:1c:83:06:c0:9e:bd:7b:96:
         ec:b4:86:e4:90:71:5c:67:02:14:15:fe:15:a5:fb:86:b8:39:
         10:d0:6c:7f:2c:d2:40:da:28:f4:c1:56:3d:83:d1:08:12:67:
         88:6c:0a:4b:fb:70:ee:4e:0e:97:04:ff:a0:01:53:c1:a8:b3:
         39:5b:d9:33:87:d2:2a:d3:2d:3a:21:78:92:f6:9d:aa:87:0b:
         d6:bb:5f:11:35:4d:89:74:0c:3d:7b:9f:56:3c:21:d6:c9:10:
         c6:74:55:dc:f8:dc:95:90:9c:41:03:00:c2:37:3f:9e:c2:07:
         3a:84:87:56:b6:9a:65:bb:9f:e6:63:0e:d4:18:7b:6b:10:58:
         ee:73:fc:05:0d:eb:4b:a2:d3:a8:d3:af:e1:cd:68:33:5c:6f:
         5f:c8:fe:3b:86:5e:41:25:bd:9b:7b:66:f6:99:81:79:da:d1:
         3e:cd:24:8c:c0:dd:37:f8:77:7e:44:31:3e:b2:5d:c1:23:a6:
         df:5b:a9:ea:90:8d:2c:6a:d9:9a:1f:ec:8c:a2:36:20:b1:ef:
         ba:82:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----