Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft
File:                     0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json)
Hash identifier:          XdZgH4xeQoEcswttJCUEehpWh/a1CHvrf4rpeAwJGSk=
Subject key identifier:   AA:68:C8:CA:F8:E8:5E:A2:4A:FD:4F:78:29:0E:F0:07:9B:1C:42:E7
Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08
Certificate issuer:       /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08
Certificate serial:       69CB3F4FBDD77C1C0F3B703584940D13E1D8C1BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft
Manifest number:          01E0
Signing time:             Sat 29 Mar 2025 02:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 01:56:08 +0000
Manifest next update:     Sun 30 Mar 2025 05:58:08 +0000
Files and hashes:         1: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: 6BQGyRfWPoyBSQCgM4C6Jq/eSUg3l4bDaxyZgDl3HcQ=)
                          2: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: 9idPProu+OIRKeWznbK5SFfE+toR8e+O5B71pfmTCfk=)
                          3: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: k92FdWEorNxKTyarjpxwu6x7nUdmTkLXLHku6hKnTFU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cb:3f:4f:bd:d7:7c:1c:0f:3b:70:35:84:94:0d:13:e1:d8:c1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08
        Validity
            Not Before: Mar 29 01:56:08 2025 GMT
            Not After : Mar 30 05:58:08 2025 GMT
        Subject: CN=AA68C8CAF8E85EA24AFD4F78290EF0079B1C42E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:38:75:8c:c4:d7:41:27:0c:57:1d:6a:9c:
                    2e:8e:48:cc:da:84:d0:75:5f:aa:69:87:d8:28:21:
                    66:58:72:a8:4e:03:2b:75:de:64:26:4e:5c:fe:16:
                    94:0d:0a:37:b1:3f:10:09:db:d2:61:76:9c:fe:cb:
                    b9:09:5b:c8:04:31:5a:40:01:bd:6f:2b:b6:98:bf:
                    6d:d2:69:ec:96:54:3a:3c:65:3a:c8:1a:02:71:68:
                    52:f4:84:d8:0a:71:01:64:56:0f:9d:f4:d5:2c:e9:
                    a2:ca:c8:e3:3e:dd:27:47:0e:66:ed:ae:9d:18:1b:
                    9c:89:d6:74:14:90:d4:5a:84:54:bb:42:12:da:9f:
                    1e:66:ba:de:77:cf:48:c3:e0:11:d8:2f:b5:fc:c8:
                    4e:06:b3:c5:26:43:59:44:50:ae:0e:a9:95:7a:aa:
                    37:85:df:a1:f0:01:ca:70:7d:be:8a:fe:d8:92:78:
                    f6:1c:f9:f9:16:af:8d:37:e2:3a:b9:eb:dd:06:57:
                    42:eb:38:0e:65:72:83:08:b6:34:c9:1b:43:07:8e:
                    5e:3a:9c:98:20:cf:8f:0d:44:66:11:0c:70:14:e6:
                    74:88:48:de:27:73:47:16:dd:cd:c8:47:16:84:85:
                    3e:79:90:66:40:fc:a3:48:99:5b:df:61:04:da:02:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:C8:CA:F8:E8:5E:A2:4A:FD:4F:78:29:0E:F0:07:9B:1C:42:E7
            X509v3 Authority Key Identifier:
                keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:04:43:10:6c:ef:32:3f:35:07:84:3b:55:a8:41:fb:ec:
         69:b9:14:3c:69:63:b6:5b:48:03:9d:76:04:e0:d8:79:e0:1f:
         d3:b7:b9:bd:8c:c0:c5:e4:b6:81:3b:f5:8a:dc:1e:0a:e1:0e:
         b6:0c:d8:00:de:59:6c:71:95:40:91:24:01:0d:c8:83:59:41:
         72:1a:07:d0:58:24:cb:f8:ec:87:e7:38:87:b8:c2:e9:bd:25:
         2d:b8:dd:58:8b:96:4e:41:1b:ef:53:bd:75:50:a5:65:41:66:
         f8:c9:60:df:95:2f:76:0b:aa:e4:8d:6c:f9:3c:3c:50:d7:f7:
         6f:d1:99:74:8e:6c:95:ef:32:92:ae:11:a6:a3:de:ed:ee:5d:
         9d:73:45:6c:ba:4c:12:fd:a2:29:be:f0:c6:34:a8:a4:80:7f:
         e6:22:52:eb:06:23:26:19:12:66:25:31:01:9d:8a:70:13:27:
         b9:07:bb:2e:f9:db:b0:fc:6f:b6:2d:15:ad:0e:3f:86:73:f9:
         6a:31:7c:41:a9:9b:b6:ff:b4:12:84:12:e4:91:02:e2:c6:7f:
         aa:8d:33:08:a3:db:67:da:46:d1:f8:30:aa:b1:d3:e2:84:2f:
         4b:4f:10:77:f8:9f:3d:86:7a:07:c2:92:c2:71:05:21:c5:ae:
         ae:ad:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:46:39 2025 by rpki-client