Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
File:                     6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft (raw, json)
Hash identifier:          dwGv7B55ti+WtbUaHI/Jjh0QA3u1rpvXGfhTypJCHIE=
Subject key identifier:   13:47:8D:2E:A2:2C:C8:11:0F:DE:05:F3:51:90:0F:74:2C:F8:39:91
Authority key identifier: 6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9
Certificate issuer:       /CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
Certificate serial:       3ED584F129A369275794E8B54B0357AF9AECAFFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
Manifest number:          010A
Signing time:             Sat 29 Mar 2025 07:59:56 +0000
Manifest this update:     Sat 29 Mar 2025 07:54:56 +0000
Manifest next update:     Sun 30 Mar 2025 10:56:56 +0000
Files and hashes:         1: 3138392e35302e3231312e302f32342d3332203d3e20323730363232.roa (hash: 69fEKnPEZnbMrMkwRXAiOL28UVzd2w53clS+DXg6XsQ=)
                          2: 323830343a366564383a3a2f33322d313238203d3e20323730363232.roa (hash: CFNNKW2grSFS1rLyKYKJJ1WGkAWyATLKda+7vQdysLE=)
                          3: 6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl (hash: ysT3v/OBUj4zP05CPqJ7zHOGxqj8XjYYB2Fl+U5VAEw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d5:84:f1:29:a3:69:27:57:94:e8:b5:4b:03:57:af:9a:ec:af:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
        Validity
            Not Before: Mar 29 07:54:56 2025 GMT
            Not After : Mar 30 10:56:56 2025 GMT
        Subject: CN=13478D2EA22CC8110FDE05F351900F742CF83991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:03:79:01:a1:a9:91:4a:74:98:7e:c9:32:6e:
                    d2:f6:9d:96:55:95:02:15:f1:ba:a3:3f:ea:5e:c1:
                    e8:e9:10:2a:2e:62:8a:e5:51:8d:8e:c4:04:db:00:
                    87:7e:bb:a6:a2:05:e6:11:ed:46:57:65:92:97:17:
                    82:d7:76:7a:0b:4a:9e:ca:6a:e2:28:ea:37:07:67:
                    83:59:8c:98:3c:49:38:bb:9f:78:5c:c6:03:ae:04:
                    7e:54:48:b6:1a:48:d6:17:ba:25:ae:09:3a:fe:d4:
                    ed:32:c7:e4:b1:1a:8a:90:6a:b0:a3:a7:bd:3a:7f:
                    33:ff:0a:54:bf:a3:24:fb:a2:80:c3:28:73:6d:97:
                    7f:f7:07:75:42:dd:ae:f4:58:53:28:b8:e7:c5:41:
                    db:09:4e:91:cd:58:ec:19:ad:77:b4:52:f3:4e:dd:
                    45:88:69:32:93:25:a4:f2:f0:0b:db:94:20:38:2a:
                    eb:2d:4c:22:11:b3:e8:97:40:75:9a:7b:f7:8f:05:
                    f2:e3:d5:31:e3:7a:80:d6:3e:18:41:1f:86:59:c4:
                    54:7e:47:01:8d:aa:81:45:f4:8a:28:92:57:13:5e:
                    c8:1c:d4:18:59:b3:d2:e0:48:45:43:5d:2c:48:b6:
                    03:8a:2a:05:57:d5:e8:89:ac:3d:13:be:9d:07:58:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:47:8D:2E:A2:2C:C8:11:0F:DE:05:F3:51:90:0F:74:2C:F8:39:91
            X509v3 Authority Key Identifier:
                keyid:6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f2:7b:4d:13:7e:77:b8:2b:17:a4:f0:e7:94:ff:00:51:63:
         86:bb:49:a8:34:a8:67:ab:45:17:62:a9:ca:58:f9:ba:36:33:
         32:cd:fe:be:35:9c:71:1c:91:de:f0:d5:31:7b:2a:46:b3:e5:
         71:8c:b9:d7:fc:5a:93:94:2e:8c:bc:a8:6e:a3:9b:84:7a:b3:
         3f:3f:c0:5e:60:48:7a:e3:16:44:4d:a8:e5:d8:73:85:60:75:
         af:04:e7:bc:10:f9:07:13:d1:79:4f:40:9f:1c:9d:0a:7b:b7:
         8e:8d:ce:81:53:78:0f:be:a7:59:11:e9:b3:b4:96:eb:b8:39:
         d2:a9:d9:15:79:15:70:04:7c:50:88:eb:33:7d:b5:20:e7:58:
         42:06:81:e1:b7:a6:4b:95:d6:ee:61:3d:3f:9f:89:3a:ea:f1:
         25:b6:39:e4:57:38:31:20:e3:f0:0c:06:ac:48:7c:1d:bf:de:
         67:c8:3f:5c:2f:d0:c6:79:50:ed:33:80:ab:91:17:9f:76:42:
         05:06:7f:12:9d:6c:2f:ab:4d:f7:72:37:a5:a8:8c:df:f7:ba:
         8a:93:d8:40:8c:50:51:99:33:a7:ee:81:4a:f5:1e:52:19:82:
         05:84:b2:39:e3:80:bb:ef:24:80:c5:cd:39:51:41:e0:db:d0:
         40:d6:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----