Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
File:                     21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json)
Hash identifier:          QEEyVKFwFxvRMu+qNfJTlFRn7gzlDxoAq5WcL938c0M=
Subject key identifier:   14:A6:3D:11:1E:B2:52:5D:9D:B3:B2:D5:C6:3F:5B:DA:39:37:02:A4
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       3A56657031691391CB098E450D84902638DDFB91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
Manifest number:          33
Signing time:             Sat 29 Mar 2025 05:00:06 +0000
Manifest this update:     Sat 29 Mar 2025 04:55:06 +0000
Manifest next update:     Sun 30 Mar 2025 08:22:06 +0000
Files and hashes:         1: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: /1pYXUGiJNlzcrDlu+7hGgbwVbBdHLvZnAiIEDJ3mgY=)
                          2: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: FVJlg76zsiFIfRzwHjWJZAiSFiMl0j2j2H/CwENa5OQ=)
                          3: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: hTxBNdPsHdR1pRLMbwfTzlRUFGvMXwjPrS7ZVuQLTBI=)
                          4: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: I7xu8XqiplgU4PCcvipFhnLFR9uYEyMAQwYnkk8pujw=)
                          5: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: P72Vo0+btTdKLtZrwM6d6w1d0tSzgvKj3HQWGsIM80w=)
                          6: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: R241NIE5eErEAQdwLYr0SIplvpzgtNrTTFwlfX2dXfY=)
                          7: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: 7xYxxrOSzrS8k5y97eIDahGvI9CFe6PC4Z6wgywaHcA=)
                          8: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: +31HsUw8C3TYGTvwqt5AcpL2raZjwefiUp4j8o+im8s=)
                          9: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: HDx54wdTXW76T09og51BV5Z57Cx2GSP0rNDysCobcg4=)
                          10: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: M5gd/5b8yphWCNw+C9KUG3jIlSUAJO8pUTrE9dAxLXI=)
                          11: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: j7yRviWUtBR47diRRZQSwOhBel2iKKRcdCzb2LcKh5U=)
                          12: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: 2PavSs/XlyAnstVNXVfHqNUh15pZH0dOS5gkVJPXKtM=)
                          13: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: 87P4ZthL45ryd5ao/4BROx3S+QtsOjAMhagAkYjLUrs=)
                          14: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: ZeYgp7BvXvd74/k48bnu+qRITehFL0rvHom26iEGLjk=)
                          15: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: 5qYxf8RXkN8h2eEpN2bZTKCxHdo3reMiK56wr54VAQM=)
                          16: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: zbCbYNA/Sv7aeTAlT2UCgGMCCpHHDrdhHwaAb6T7RlA=)
                          17: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: YSeBPg2lex9h3YRA+gBpl4SonB4GrQPdQMUbhsffoPg=)
                          18: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: fnh0ESskr/VjHvCeSJYSJ+yhqrvpgXqsJ2QHzdbAUrc=)
                          19: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: HpEEDz0SGmZuCTiB2WRYUvaYO0gVRzUCdu5824wi6Ew=)
                          20: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: MO6euXOe3+e/c5Y8E5tznHMe0mpIDKm2mZmkPoTVZII=)
                          21: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 2R2Rf6MPjaw0vHm+MKMheF1N2EcLNQp7FDpH/+osnZs=)
                          22: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: nIftzw3+iZpcDi7LXAU8XgDFUdrkMrxxET01lz87b78=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:56:65:70:31:69:13:91:cb:09:8e:45:0d:84:90:26:38:dd:fb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Mar 29 04:55:06 2025 GMT
            Not After : Mar 30 08:22:06 2025 GMT
        Subject: CN=14A63D111EB2525D9DB3B2D5C63F5BDA393702A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:77:e9:69:52:85:a8:d4:bf:24:b9:10:88:
                    a1:b3:8e:89:68:5a:6c:0b:81:06:cf:d7:ff:58:7e:
                    6b:7f:0a:a1:76:78:45:c1:15:97:ab:9f:58:d2:a4:
                    cb:03:a5:0f:07:fa:5f:98:a1:c6:05:02:07:38:b1:
                    f5:5e:26:e6:31:5b:2f:53:70:e5:b2:0c:41:46:bb:
                    9d:53:e9:88:f2:b3:ef:78:35:1c:f5:bb:59:63:73:
                    1e:9c:de:54:9b:2a:63:3a:e9:7e:ec:19:b6:62:9e:
                    30:5e:e1:5a:5b:cb:cb:e7:f8:1e:39:d3:98:2e:05:
                    9f:1b:96:ca:79:0d:b1:53:07:f2:94:0e:1e:49:e5:
                    01:4a:24:58:5f:d5:5a:2a:3c:c7:cb:5a:89:1e:7c:
                    e6:31:fd:d6:fa:1c:31:d0:2a:14:c0:b1:9e:67:af:
                    55:79:56:93:ff:41:eb:a5:1a:d0:42:8a:e5:18:e1:
                    b4:53:bf:8a:b8:b7:e4:9b:d1:88:6c:c4:c4:35:ed:
                    7b:0f:92:10:a0:3b:52:97:cd:8b:4d:0b:f4:e1:56:
                    14:c8:b9:01:5c:10:e8:61:68:44:53:a9:92:7a:e7:
                    05:05:1c:5f:a7:1e:30:cd:5b:47:be:b0:04:fe:0e:
                    ad:d8:74:64:8f:d8:e0:16:be:f3:4a:c2:1a:10:1f:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A6:3D:11:1E:B2:52:5D:9D:B3:B2:D5:C6:3F:5B:DA:39:37:02:A4
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d4:7b:0d:58:8c:62:d3:15:3f:98:bf:9d:f1:48:cc:dc:15:
         78:54:0a:93:1e:c5:23:cb:27:cb:a2:2e:3a:db:da:ca:06:f2:
         7b:cc:c1:d0:18:15:57:d3:b3:34:43:23:89:62:95:36:77:18:
         5b:c7:45:33:60:84:34:31:d2:50:dd:a2:56:c2:b4:25:8c:4d:
         36:b9:f3:44:a3:d0:88:39:72:11:d8:bd:7f:ea:ad:c8:1b:f2:
         80:26:ef:2c:1b:2e:d9:9a:49:52:ca:9f:e1:18:fd:a2:47:a6:
         ad:f1:63:0d:47:84:9c:5d:95:8d:c7:90:c7:97:65:15:c9:ea:
         44:2b:ba:3d:66:84:d7:5a:e0:ce:ab:1b:db:78:0a:95:cf:bf:
         76:ac:63:71:46:f9:30:2d:cb:df:ce:d3:29:84:3a:6b:69:99:
         dc:c0:c6:d1:f8:64:e0:82:b3:5c:a6:ed:ac:f3:1b:9c:f0:62:
         68:fb:05:58:8f:9f:a2:ca:44:04:e2:c3:e1:7b:e8:1a:69:80:
         9c:71:35:2f:19:3a:69:1f:4d:af:d8:b9:48:a6:61:b8:cc:4e:
         cd:4b:df:eb:28:d4:b0:fd:f5:b5:52:4b:3a:80:6b:ad:65:39:
         35:b2:a2:15:9f:c1:a0:b8:9f:6e:2f:a0:fc:6d:41:44:e8:07:
         af:fd:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:07:04 2025 by rpki-client