Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft
File:                     A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft (raw, json)
Hash identifier:          CTONAbQuwEnPNvADyDHy/oypFYm4K2Tv9yBBGLeH7Z4=
Subject key identifier:   6D:0A:34:75:35:7A:2B:79:B1:DE:A5:05:03:19:06:C0:3F:B0:17:C3
Authority key identifier: A2:51:AB:5E:09:E5:D3:EE:16:5B:0B:E5:1F:6A:FC:8C:B2:15:04:AD
Certificate issuer:       /CN=A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD
Certificate serial:       551B61B135732F5BA3634AC0A42E3BF3DD0A65DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft
Manifest number:          4B
Signing time:             Mon 17 Feb 2025 04:21:24 +0000
Manifest this update:     Mon 17 Feb 2025 04:16:24 +0000
Manifest next update:     Tue 18 Feb 2025 06:25:24 +0000
Files and hashes:         1: A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.crl (hash: Q0HZjatubEYTsltwr6FRXoyyQ9/7Wyvy2HdGK9uQXyQ=)
                          2: 3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (hash: Mhqs011CDdtqM8FadqHh9HYAyE5Ts0jgonbpJAZ1CeQ=)
                          3: 323830343a373735343a3a2f33322d3438203d3e203631363034.roa (hash: 9HhCtQf/FhJjMSIQTTm0/zP5bOk+hCXNZvURg/qoUTE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1b:61:b1:35:73:2f:5b:a3:63:4a:c0:a4:2e:3b:f3:dd:0a:65:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD
        Validity
            Not Before: Feb 17 04:16:24 2025 GMT
            Not After : Feb 18 06:25:24 2025 GMT
        Subject: CN=6D0A3475357A2B79B1DEA505031906C03FB017C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:53:46:12:a4:19:26:9d:c5:e8:2b:da:c9:
                    22:cf:4f:7d:ad:78:a1:18:27:f1:ea:ea:11:dc:22:
                    89:8f:16:a0:35:4b:88:9c:7e:19:5c:ce:77:a2:9b:
                    68:ab:c1:97:6d:a7:50:a8:ce:65:c3:53:fb:f7:98:
                    b0:21:3f:13:eb:3b:37:d7:19:55:57:65:38:f3:83:
                    85:43:42:71:66:9d:08:a1:9b:8e:24:d0:b9:f7:27:
                    7a:93:41:e2:74:1b:f2:55:71:d2:6e:23:96:ad:7e:
                    40:92:44:9e:04:7b:03:77:62:3d:a3:9a:98:36:cd:
                    a0:85:80:c1:c5:bc:30:86:4e:4c:65:6e:8d:b8:30:
                    88:0b:14:36:f5:0b:0a:79:17:dc:ba:85:6c:8b:7c:
                    35:7b:ab:8f:5a:de:bf:5d:7c:6b:37:73:05:43:ea:
                    d1:ef:34:5e:94:93:ee:b2:ea:4c:00:6f:7a:fb:d2:
                    cc:2e:b7:c3:a3:08:82:cd:76:06:0f:a0:a4:3e:ce:
                    79:b8:de:56:ff:0f:4c:20:06:1e:55:25:25:b8:91:
                    3d:17:0f:0e:3d:05:02:96:eb:35:3c:2a:40:ee:dc:
                    92:13:78:25:04:89:d5:03:a7:1e:4c:6e:e4:37:0a:
                    c4:f2:c5:bf:80:87:d6:10:6b:24:f1:b6:82:b1:9d:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0A:34:75:35:7A:2B:79:B1:DE:A5:05:03:19:06:C0:3F:B0:17:C3
            X509v3 Authority Key Identifier:
                keyid:A2:51:AB:5E:09:E5:D3:EE:16:5B:0B:E5:1F:6A:FC:8C:B2:15:04:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:09:b6:1f:d4:2d:d8:18:54:d6:96:3a:5b:f2:a3:cc:e9:d1:
         82:b3:a7:33:0b:2b:43:6d:27:88:7c:2b:45:3d:14:ae:f5:89:
         ca:5c:a3:ce:86:06:71:7e:aa:fc:8b:20:8e:09:ba:c4:6f:0e:
         30:55:82:60:89:88:dc:e5:a3:42:ed:62:89:9f:ea:85:c2:a4:
         c1:bf:78:9e:13:aa:07:fb:2e:9a:14:3b:a0:2d:7e:41:23:bb:
         6e:ef:f5:47:46:0d:6f:79:d7:3f:aa:1a:6e:c1:c3:1b:4c:93:
         5f:64:9d:d8:d9:4c:20:f6:ba:35:c0:d4:27:97:20:6d:ae:e2:
         f0:1e:6a:c0:a2:9d:a1:78:82:5c:56:88:cc:d4:93:da:80:82:
         f8:17:87:4a:c4:d5:dc:2b:c0:81:07:40:85:83:98:80:5b:e3:
         6f:3c:70:1c:70:52:f9:ba:79:40:e3:e1:1b:6e:1c:a2:36:bf:
         71:7e:1d:f0:36:9d:1a:c0:86:93:17:c4:d3:c5:9f:b3:da:a9:
         f5:47:2e:29:95:aa:a6:20:14:1c:1b:b2:1b:e3:e2:db:d0:db:
         03:ba:73:bb:0a:09:3e:cd:ce:4f:09:71:b2:73:f3:82:77:9f:
         39:f7:1c:52:84:64:a4:5e:2e:18:b9:5c:b5:b4:fb:f7:87:84:
         32:e5:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:06 2025 by rpki-client