Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.mft
File:                     20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.mft (raw, json)
Hash identifier:          s/vEdEFRwFL0gqeHdIPBwAG4SKYcP0eKHdpuMgjuEl0=
Subject key identifier:   6C:60:89:B2:EA:01:61:DA:3A:C3:44:5B:E0:E7:57:43:0E:B5:7C:48
Authority key identifier: 20:A6:A3:D5:A5:B9:41:5D:EF:FE:9F:19:45:F6:AD:A2:46:CD:7F:32
Certificate issuer:       /CN=20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32
Certificate serial:       6807F987BEB68740D7FD69102C41890488F3D558
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.mft
Manifest number:          47
Signing time:             Fri 14 Mar 2025 20:47:37 +0000
Manifest this update:     Fri 14 Mar 2025 20:42:37 +0000
Manifest next update:     Sun 16 Mar 2025 00:14:37 +0000
Files and hashes:         1: 323830343a386463383a3a2f33322d313238203d3e20323733333830.roa (hash: gwtqThmFfBBRfY5zv0KC/+3RZZWjpt+QItHoZWMT4JQ=)
                          2: 20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.crl (hash: MlhprLKxtNxLIZpPRIVK/0Z1kAfPSogdMwRJg/3ey5Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:07:f9:87:be:b6:87:40:d7:fd:69:10:2c:41:89:04:88:f3:d5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32
        Validity
            Not Before: Mar 14 20:42:37 2025 GMT
            Not After : Mar 16 00:14:37 2025 GMT
        Subject: CN=6C6089B2EA0161DA3AC3445BE0E757430EB57C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:a0:8d:32:08:e2:a4:29:44:86:d3:ea:e1:
                    c4:50:f7:41:44:32:af:9c:19:09:db:c2:df:72:f6:
                    06:68:36:c0:93:a2:50:e7:b0:74:5b:8d:c0:58:90:
                    c5:ae:9e:a6:c2:e0:55:65:ff:96:ce:04:5c:2f:5f:
                    bc:5d:3a:09:ff:6c:f4:ad:52:09:49:02:91:f2:3d:
                    9b:d5:f2:52:ad:fa:24:07:ea:f9:bf:8e:fe:17:70:
                    50:aa:02:f6:05:e8:bc:26:53:f7:f2:44:28:4f:ac:
                    f8:94:6f:5e:b4:ea:1d:e3:1c:a2:9a:1b:9a:fb:92:
                    0a:ba:27:52:fe:68:a4:43:0e:d9:8e:8a:fd:e4:29:
                    83:a8:09:18:8f:b7:d6:1e:df:c6:26:35:77:83:49:
                    6a:ae:38:38:e7:08:10:86:da:15:a8:cc:d9:0a:ad:
                    24:3d:a2:75:f5:c6:d8:2d:37:5e:bf:ff:77:40:6b:
                    19:8e:78:13:f2:41:b4:f1:55:ce:80:f5:72:47:72:
                    f6:45:85:94:f0:70:b3:54:4f:80:21:1d:9d:a1:c3:
                    f7:40:18:c0:cf:4b:e0:dd:ac:ea:55:7d:6d:22:12:
                    55:69:44:22:d3:28:01:f3:c5:df:32:52:37:7d:c4:
                    e6:62:10:4e:94:84:32:d3:47:cf:2b:c0:fb:97:7f:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:60:89:B2:EA:01:61:DA:3A:C3:44:5B:E0:E7:57:43:0E:B5:7C:48
            X509v3 Authority Key Identifier:
                keyid:20:A6:A3:D5:A5:B9:41:5D:EF:FE:9F:19:45:F6:AD:A2:46:CD:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:33:b1:ed:ba:88:89:77:3a:1c:7d:c2:8f:19:4e:c9:38:9d:
         ff:be:69:b7:b2:e1:27:d3:47:0d:89:8f:f6:49:33:3b:0b:3e:
         b4:1e:86:78:15:00:fa:0c:c7:a6:b2:0a:7e:6b:2b:d8:b5:97:
         1f:2a:58:d8:b3:41:28:28:ec:96:b6:78:15:ee:fd:ee:a9:80:
         78:fb:cb:ab:bc:65:c6:ba:b1:86:9e:d3:e5:79:8f:25:af:f2:
         0b:11:53:0f:3e:5d:79:1d:05:3e:54:fb:ba:2f:5b:e7:f9:5f:
         5b:53:cc:68:1a:06:3d:d2:4e:f9:0e:3a:9f:9f:5a:8f:33:93:
         4e:0a:91:9f:28:d1:aa:1e:37:81:e0:99:af:ce:5a:2b:d4:96:
         77:5a:6a:8f:b3:b8:19:af:03:5c:8b:99:80:67:e9:7e:1d:b6:
         b6:b2:44:2b:49:3e:4f:af:03:be:d2:5b:cb:37:e8:9d:f5:4e:
         2a:5d:d0:67:17:aa:84:48:8d:60:04:47:6c:b4:44:45:0f:db:
         3e:a3:2b:6f:8f:8c:a3:26:f4:38:1e:fd:54:27:47:76:f4:14:
         3c:7b:ec:83:18:cd:89:87:1e:33:b1:05:1a:70:d6:9d:50:2a:
         0c:83:be:40:3f:91:08:97:48:2b:0e:92:09:5b:97:d6:33:af:
         87:2d:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----