Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.mft
File:                     A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.mft (raw, json)
Hash identifier:          3p5iGdCx7Uj6VZO43ms4d3D9senVwgmFseRoPabkYw8=
Subject key identifier:   E2:5A:99:F7:E5:26:1D:7B:F6:47:1C:E4:B3:6F:22:88:7D:64:D7:75
Authority key identifier: A7:0F:96:97:1E:1B:BF:4E:4D:65:ED:DA:A7:4B:53:BB:73:BE:81:35
Certificate issuer:       /CN=A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135
Certificate serial:       69AC6ECA84CDC0B71F878359634EE0CBE50C0A05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.mft
Manifest number:          19
Signing time:             Sat 29 Mar 2025 04:26:03 +0000
Manifest this update:     Sat 29 Mar 2025 04:21:03 +0000
Manifest next update:     Sun 30 Mar 2025 07:30:03 +0000
Files and hashes:         1: A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.crl (hash: biNKYvHaNAzkPaB61+cS3pape0dY+GbFJdNs/FM0Tq4=)
                          2: 323830343a316235383a3a2f33322d313238203d3e203631373233.roa (hash: 0CMHRm3uDDULPS+sAWHonCW8vmBotIyhJ/K2l4oGmjA=)
                          3: 3133312e37322e34302e302f32322d3332203d3e203631373233.roa (hash: im173488SZYAXAbzSZ0fpPp3U4tcIiC89aoCqLs7R2s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ac:6e:ca:84:cd:c0:b7:1f:87:83:59:63:4e:e0:cb:e5:0c:0a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135
        Validity
            Not Before: Mar 29 04:21:03 2025 GMT
            Not After : Mar 30 07:30:03 2025 GMT
        Subject: CN=E25A99F7E5261D7BF6471CE4B36F22887D64D775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:9e:cb:cf:69:f9:9d:25:12:6f:21:12:5d:
                    7c:93:9c:2c:62:be:3f:e8:74:cd:77:b6:50:0a:27:
                    d1:98:af:d9:13:ce:cd:6a:f6:d4:7f:d1:e2:72:b9:
                    17:29:47:1b:b2:6b:f6:2e:f1:98:d8:79:6d:bc:2b:
                    12:6e:5e:d7:85:39:cc:01:5e:c4:38:bd:82:e0:c3:
                    2e:01:ec:d6:55:9e:51:13:b8:3a:d4:e3:61:c9:77:
                    68:39:cb:ef:0b:97:52:ec:d8:22:d8:0d:96:e9:24:
                    6b:bf:c6:d3:1e:54:c8:30:ea:a3:6e:a6:45:d4:4b:
                    ae:d4:d8:51:69:62:07:75:ee:24:46:40:63:93:7a:
                    14:fe:69:88:a6:03:b5:60:e6:6e:cf:a8:e1:42:3c:
                    6c:0a:cd:6e:ac:84:c7:cd:02:d1:ae:dc:b6:ab:29:
                    5e:e9:a6:ad:20:0a:11:ea:18:be:e7:f2:ac:4d:5e:
                    62:06:65:6c:90:94:96:ef:7c:f0:c8:60:2f:86:3b:
                    d2:8f:13:5a:3c:98:0a:ef:90:62:ca:4e:5f:20:92:
                    24:59:d2:4c:a7:3e:99:a0:4f:83:49:b6:7f:11:6e:
                    99:16:b5:5d:2f:86:a7:80:21:cf:45:c6:0c:d6:24:
                    4c:a5:c2:76:4c:cc:b4:f8:67:a4:6f:8f:1c:c7:d8:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5A:99:F7:E5:26:1D:7B:F6:47:1C:E4:B3:6F:22:88:7D:64:D7:75
            X509v3 Authority Key Identifier:
                keyid:A7:0F:96:97:1E:1B:BF:4E:4D:65:ED:DA:A7:4B:53:BB:73:BE:81:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/A70F96971E1BBF4E4D65EDDAA74B53BB73BE8135.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f8:2e:3e:8b:91:21:e5:d9:b6:27:96:6f:76:7e:e5:92:73:
         65:f3:9b:90:7d:3c:f6:1f:06:5a:d4:e4:b0:71:fb:f3:8c:d6:
         a4:a1:57:ba:81:e4:b1:4d:3c:17:79:f8:8b:7d:72:67:4b:53:
         ba:62:fd:b6:cb:d8:35:7a:d0:48:f4:7a:71:0f:d4:ba:de:9d:
         60:42:cd:fe:d2:59:0e:dc:60:eb:09:c4:a4:4e:3e:bf:74:e5:
         8a:c5:2d:fc:de:1e:b6:c9:49:4c:54:1a:a5:e0:5d:41:de:cb:
         b7:f5:16:05:cb:f5:42:e2:94:f0:09:ff:65:b0:53:fb:96:e3:
         96:b9:30:81:80:cf:e9:27:79:e5:b5:27:90:97:4d:c5:1c:1d:
         43:3f:e4:8a:63:0e:63:a0:8c:09:bc:68:31:59:89:dd:47:9b:
         77:ef:e0:34:16:13:1b:96:8d:73:57:fe:d8:fa:3b:c2:c0:d8:
         4c:bd:1c:c5:28:c4:dc:51:d2:02:05:33:91:58:3d:a9:68:38:
         93:42:6c:99:a6:2b:72:bf:f6:87:1f:69:97:b9:21:cf:aa:f8:
         a7:e9:82:fc:9e:df:f0:e8:ff:e2:8a:f1:ef:61:cf:f1:fd:b1:
         de:74:8f:a9:d4:2d:73:4f:f3:04:84:63:ff:89:30:c9:fc:39:
         89:6c:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:42:32 2025 by rpki-client