Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
File:                     3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft (raw, json)
Hash identifier:          ebibRJj535av/LBP5RmBwJnZa7/9X4QlL1aGRU/NXVM=
Subject key identifier:   64:3C:53:49:22:5C:92:CE:4E:3A:F8:7E:E7:B8:65:FC:B2:38:F3:A6
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Certificate issuer:       /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial:       04720B0F0AE0DBED3CCAB03CBEF82D7FEE735C69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
Manifest number:          01BF
Signing time:             Sat 29 Mar 2025 02:13:10 +0000
Manifest this update:     Sat 29 Mar 2025 02:08:10 +0000
Manifest next update:     Sun 30 Mar 2025 07:29:10 +0000
Files and hashes:         1: 3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl (hash: y27+n109RN1UmD7x238eINCiOGX67kvfDjPlc9ObC3I=)
                          2: 3137302e38302e3235322e302f32322d3234203d3e203533303738.roa (hash: ucQLK33e3lcZsfN4L6Vyg4Ul/FcTHyDFpVJU4H+3Swo=)
                          3: 3138362e3139332e31362e302f32302d3234203d3e203533303738.roa (hash: HFD8621N4zcN1Aga3+TL8X1eSyydb0Vc6jp0iB4sYJE=)
                          4: 3133312e302e36342e302f32322d3234203d3e203533303738.roa (hash: o9gCS34gYgAxCn5rAA9cxKkZllaZzHZ4EMIv7GZEhhU=)
                          5: 3138372e39342e3230382e302f32302d3234203d3e203533303738.roa (hash: x+a2ScQsKjIFDnzOkbBW6AEiW+lYwogj1Ca7D8sGNWw=)
                          6: 323830343a3662633a3a2f33322d3438203d3e203533303738.roa (hash: BTGkfSwfEudT1b+TwAwWnDRhcVoFxoIBM0o7aIngO98=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:72:0b:0f:0a:e0:db:ed:3c:ca:b0:3c:be:f8:2d:7f:ee:73:5c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
        Validity
            Not Before: Mar 29 02:08:10 2025 GMT
            Not After : Mar 30 07:29:10 2025 GMT
        Subject: CN=643C5349225C92CE4E3AF87EE7B865FCB238F3A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:55:1f:e4:18:90:92:6f:38:a2:56:68:0c:
                    c6:0e:24:91:4d:11:e4:d2:3b:2a:5b:1e:81:71:22:
                    10:0e:b2:9d:8f:aa:18:8f:06:30:85:eb:33:9a:47:
                    c4:7d:f8:41:14:54:4f:16:bc:38:e3:6c:37:de:bd:
                    e0:cc:9c:12:b2:a9:a6:e9:57:7a:5d:2e:8e:b6:2c:
                    ca:64:dd:4c:f7:b5:1f:d8:d5:86:e5:3c:1a:f2:f3:
                    c6:d8:c0:cf:cf:04:c6:fa:f5:d8:b8:6b:1d:4e:44:
                    94:25:05:e4:79:de:03:91:b5:10:88:c2:35:87:db:
                    2c:56:18:a9:18:a1:47:82:f8:f3:ce:18:b4:9b:65:
                    7c:bb:c3:d0:50:7d:04:93:9a:43:03:77:e4:b5:a6:
                    87:6f:03:6f:0e:05:10:e7:77:01:d0:7f:b0:66:91:
                    d8:8f:cc:02:25:74:80:53:2a:37:23:3d:bc:19:74:
                    01:ca:e4:eb:6c:b3:71:91:c1:b3:eb:5d:77:39:47:
                    e8:b0:41:1c:db:49:48:bb:1b:fe:5f:59:96:64:71:
                    29:21:a6:64:9d:94:3f:51:c6:09:ba:99:8a:d4:b1:
                    e4:18:a0:e4:51:92:37:7b:08:61:fe:84:16:8f:64:
                    f5:c6:5f:77:c9:82:51:a2:0e:d2:93:ae:95:4c:ab:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3C:53:49:22:5C:92:CE:4E:3A:F8:7E:E7:B8:65:FC:B2:38:F3:A6
            X509v3 Authority Key Identifier:
                keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9b:c4:eb:b1:8d:8d:e2:08:86:b3:92:5a:89:dc:f2:6e:de:
         55:d8:15:f2:e1:de:9e:61:9b:9f:3c:62:68:cf:6c:4b:97:73:
         eb:ea:3c:38:de:c2:5e:b6:ad:06:65:86:0b:cd:57:2e:97:37:
         a8:5e:9e:9f:96:75:81:01:3c:fa:5a:92:fe:b3:7b:56:21:ab:
         fc:f9:f5:43:db:e9:99:a3:e9:84:8b:88:03:f0:15:5f:af:3f:
         8b:64:5f:8b:9b:d6:f0:4e:da:b4:be:ec:0b:1e:f2:a1:57:d0:
         61:d5:d7:84:63:04:a6:ae:b6:1c:76:2e:38:5e:da:dc:14:7c:
         f4:dd:ef:67:a8:25:40:f2:db:35:88:6c:b4:33:39:1a:02:1c:
         2f:da:43:02:cd:95:70:bc:45:85:5b:30:5c:b7:6b:7e:a5:b1:
         3e:de:3f:c4:2d:b6:f7:f7:d4:33:4f:45:e6:2b:f0:fe:29:56:
         9c:a8:45:a6:bf:2e:55:9b:ef:cb:49:df:02:1d:36:cd:55:be:
         00:21:8a:0d:d0:5b:55:01:2d:48:a0:f9:ae:f7:71:d0:8b:27:
         d9:ac:16:b9:16:29:7a:0e:46:47:01:c6:aa:a9:d9:d3:21:3c:
         f5:c0:b8:97:59:f3:66:2c:ea:79:3a:b7:b5:de:ee:07:bd:28:
         57:ca:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----