Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.mft
File:                     2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.mft (raw, json)
Hash identifier:          OZ2t70cxTiC/hZmtYPfjMd+7nVzGDl87n+912E7quQA=
Subject key identifier:   80:70:1C:0A:9D:02:D4:6C:BA:A0:41:C2:1F:49:46:2F:30:AE:50:32
Authority key identifier: 2E:3C:6F:2B:CA:06:ED:36:CA:44:93:8E:BA:E0:FD:E5:FE:7B:90:99
Certificate issuer:       /CN=2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099
Certificate serial:       28DF1D3B8B8E8AC63E8112FAC9B49DF374827DD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.mft
Manifest number:          0F
Signing time:             Sat 29 Mar 2025 03:37:28 +0000
Manifest this update:     Sat 29 Mar 2025 03:32:28 +0000
Manifest next update:     Sun 30 Mar 2025 07:35:28 +0000
Files and hashes:         1: 34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa (hash: mSw994UjcXxYlr8R2CWfvCLobxMlb69tfXEdjMCsgcU=)
                          2: 323830343a343530633a3a2f33322d3438203d3e20323637363639.roa (hash: DvwNIGOUQR4scWRtPMs4VI3q4xvCRL2NX8HOqP+zFGU=)
                          3: 2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.crl (hash: Uz387J8j3I+qlvQk93F2BDtaoBzYYPMvRtZ0T2uEAXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:df:1d:3b:8b:8e:8a:c6:3e:81:12:fa:c9:b4:9d:f3:74:82:7d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099
        Validity
            Not Before: Mar 29 03:32:28 2025 GMT
            Not After : Mar 30 07:35:28 2025 GMT
        Subject: CN=80701C0A9D02D46CBAA041C21F49462F30AE5032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:7b:73:48:50:49:06:1c:5c:d2:48:c7:84:
                    af:85:f1:a2:a3:21:f0:60:60:ac:b6:5d:5f:fe:ab:
                    43:c0:58:bf:df:58:ea:9a:a6:22:3a:f5:13:07:b0:
                    90:4e:90:5a:00:49:bd:45:e3:08:26:32:6f:57:b4:
                    6e:42:74:c9:c4:2a:6a:51:8a:bc:63:aa:5a:76:fd:
                    81:a2:84:a3:b5:a4:db:c8:e1:af:91:87:92:8d:ab:
                    06:44:73:9c:ee:00:75:29:42:06:36:74:bb:86:00:
                    9b:01:5b:01:34:a1:15:51:ff:53:68:c4:6b:90:ba:
                    55:24:0e:96:72:e3:90:a5:09:4b:ee:e5:7c:2b:35:
                    60:25:24:c4:a7:94:72:a0:75:37:91:6f:7f:f6:bc:
                    c9:32:e4:6a:96:6f:b8:66:c0:e6:df:36:ac:31:2b:
                    a2:84:1c:fe:de:dc:f3:cc:70:ff:b5:8f:9b:a3:f8:
                    f7:79:5d:db:60:7f:83:c5:a6:24:64:b2:44:db:ec:
                    d7:73:70:dd:50:43:3d:b4:03:23:b9:05:1b:89:5f:
                    30:8e:dd:60:10:a8:6c:d3:a9:1c:db:b7:e2:c7:86:
                    40:22:b3:9e:3a:60:eb:5c:b0:8b:14:15:e1:05:d0:
                    fd:84:b5:4d:ca:79:08:3d:43:bb:88:55:43:3d:da:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:70:1C:0A:9D:02:D4:6C:BA:A0:41:C2:1F:49:46:2F:30:AE:50:32
            X509v3 Authority Key Identifier:
                keyid:2E:3C:6F:2B:CA:06:ED:36:CA:44:93:8E:BA:E0:FD:E5:FE:7B:90:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/2E3C6F2BCA06ED36CA44938EBAE0FDE5FE7B9099.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:87:bd:b2:87:16:e5:1c:08:a0:0f:f1:15:42:53:eb:6d:
         91:2e:80:2f:20:6d:f5:6a:2d:94:a8:41:33:c0:07:e2:8e:e2:
         42:4a:ff:bd:04:bd:28:d7:19:d1:08:22:e3:9b:db:ec:08:10:
         64:c6:34:cf:54:f0:93:2d:c8:e9:f2:2a:fb:1a:a0:8d:aa:44:
         c6:c5:a3:f6:e8:0b:2c:08:1c:b0:d0:30:37:03:99:b5:06:dd:
         f2:61:f3:31:cc:73:31:f3:9c:46:77:a8:a1:6d:42:36:54:d7:
         7e:ae:57:5f:23:16:d4:59:d1:f2:7f:1e:69:6c:98:0a:3f:6d:
         ab:c9:a1:21:4b:b8:2a:bd:fb:cf:e1:38:ef:af:bc:94:a5:10:
         f9:99:48:06:04:4f:ef:79:df:f1:ce:da:a9:34:ef:8f:b5:c2:
         8e:d0:ee:75:0f:67:97:fa:d3:0c:c5:e6:98:c8:f4:74:84:e0:
         9e:b3:58:db:7c:aa:02:62:27:6c:59:5d:12:d2:46:64:a7:99:
         c1:24:d4:26:e0:5c:e0:54:1f:3b:28:71:8b:02:78:ee:f9:82:
         3b:86:ab:db:58:fd:b4:0b:45:89:80:80:5b:67:f1:1a:f3:d4:
         31:fe:f0:55:3c:b1:c9:e7:3a:fd:37:90:ef:9a:e5:83:71:58:
         08:d3:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----