Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
File:                     B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft (raw, json)
Hash identifier:          VS/Wk8Pf8CJZPt+MibYfjvmNGbxW2XJ92XpajIeEBdY=
Subject key identifier:   72:73:A9:74:86:6A:7B:DE:79:4E:7C:83:20:1F:7A:3D:D7:E3:A2:0C
Authority key identifier: B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3
Certificate issuer:       /CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
Certificate serial:       661AFB06A336E1EF3A57CF81AC79A1B146BEAFE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
Manifest number:          0F
Signing time:             Sat 29 Mar 2025 08:39:32 +0000
Manifest this update:     Sat 29 Mar 2025 08:34:32 +0000
Manifest next update:     Sun 30 Mar 2025 11:29:32 +0000
Files and hashes:         1: 323830343a383237303a3a2f33342d3334203d3e203631363038.roa (hash: IQgcZZ2DHEikM5VHQlrG262INYwomwNFf25WIz8wKKU=)
                          2: 323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa (hash: QWMpT15auvi5IqVQCQkkLDo88tzBpoCVWSbjXMc0oYA=)
                          3: 323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa (hash: JcWJLpbpMgx/WCcUDdztbuxKF/71Ozn0M8Z1sNNX/k4=)
                          4: 323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa (hash: GPNYtEq23d6WWeNjnxhyON9srNvwLK8FegrRlTLG6nw=)
                          5: 323830343a383237303a3a2f33322d3332203d3e203631363038.roa (hash: H9qowQF/SpXmz3S5/d5U/rTdCgt8/nzkpD2mndzgZdo=)
                          6: B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl (hash: wZqci4yckpXnF2DR99VnHR2eo2GF5tdTTokcjrmwXBk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1a:fb:06:a3:36:e1:ef:3a:57:cf:81:ac:79:a1:b1:46:be:af:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
        Validity
            Not Before: Mar 29 08:34:32 2025 GMT
            Not After : Mar 30 11:29:32 2025 GMT
        Subject: CN=7273A974866A7BDE794E7C83201F7A3DD7E3A20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:89:29:4a:99:84:ae:c4:00:6d:40:2c:9b:
                    49:7a:b8:96:9a:6a:bd:f4:cb:21:45:61:aa:2b:bd:
                    00:b2:c8:bd:08:b0:f6:f3:58:4b:b8:bf:5c:e5:2f:
                    e2:68:48:63:e3:e0:e0:f4:a0:97:b9:d4:7c:7a:7d:
                    f9:41:59:d9:c8:0f:ed:07:dc:2b:f3:36:c3:f7:c3:
                    9a:5e:87:85:10:d9:ab:f9:44:67:23:ea:23:3c:97:
                    9e:29:1d:04:3e:3c:14:16:14:18:f5:4f:32:36:75:
                    5b:28:2a:a0:1f:56:d2:e6:1d:0e:70:d5:03:fb:3f:
                    79:a5:06:8a:51:fe:3e:e5:3f:95:fe:78:d1:f4:26:
                    87:14:18:fc:87:55:40:31:10:59:49:5f:02:6e:05:
                    84:5d:e1:ea:b4:a9:2e:24:3d:c3:02:d3:9f:ec:00:
                    88:61:15:d9:15:e1:d6:7c:cb:ae:71:0e:60:30:b9:
                    50:98:b2:b4:76:e7:7c:55:3b:0e:39:7b:86:43:8e:
                    f6:49:2a:20:be:ec:53:09:a7:9b:d5:f1:76:06:8b:
                    15:3c:20:e8:1c:59:98:06:c4:95:c0:42:25:b0:4d:
                    dd:30:7d:bf:95:a2:54:e9:3a:d1:a8:f1:7f:a1:f3:
                    b6:1a:1d:d5:b5:03:fc:17:54:3e:2c:18:24:46:c3:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:73:A9:74:86:6A:7B:DE:79:4E:7C:83:20:1F:7A:3D:D7:E3:A2:0C
            X509v3 Authority Key Identifier:
                keyid:B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:cf:7c:5d:d7:f3:45:cf:66:2d:85:f4:a8:8d:2f:29:26:
         b1:75:2a:1e:f4:fb:78:f5:13:6c:48:7c:e0:34:f4:76:db:5a:
         99:5d:26:67:38:97:f4:93:25:b7:d5:be:89:24:52:56:5c:c8:
         0d:b4:00:22:9e:5e:9b:f8:45:10:0a:1f:d8:24:ed:71:1d:e3:
         7a:cc:99:e5:e4:d5:6f:d2:ba:3a:89:b0:34:62:79:d5:5a:9a:
         ce:5f:74:29:35:3e:0a:f1:6c:2d:b4:d6:3c:ad:5f:46:ef:a4:
         8d:e5:a9:d8:18:f6:d0:b0:cb:a9:a6:c1:aa:05:71:d5:a7:c7:
         25:37:38:19:d9:76:f3:a1:03:02:e0:9b:ac:60:0a:d4:b9:f4:
         e5:c8:ce:3a:93:fc:88:c0:4b:5e:10:8c:9e:0f:26:b2:a1:72:
         7c:0f:0e:5e:c4:85:ab:a9:f9:bf:03:de:40:db:bd:9c:9b:2e:
         a2:c8:e4:40:4b:43:15:87:03:f7:e8:9d:b1:a8:e1:1b:d2:73:
         58:dd:b3:b5:53:09:22:2c:e0:cb:ed:30:e0:06:a3:d0:eb:2a:
         94:1c:fc:82:37:1a:80:bb:a0:a7:ca:f3:a6:3d:72:fe:9b:94:
         a3:f6:e8:0c:ff:39:f7:56:81:b0:32:03:d5:fd:0c:e1:3f:bd:
         d9:ea:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:11 2025 by rpki-client