Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft
File:                     3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft (raw, json)
Hash identifier:          aHDenkMmxwjK3sdOdSozX4cfqeKDx+QcIrSy0zp0U8A=
Subject key identifier:   8D:DE:09:A3:FB:C1:D9:51:61:57:C3:3A:E4:62:94:10:89:EF:30:1A
Authority key identifier: 3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A
Certificate issuer:       /CN=3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A
Certificate serial:       6CFF3F6A64807D12FA470B2B54B27556B83184BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft
Manifest number:          0101
Signing time:             Fri 14 Mar 2025 07:47:00 +0000
Manifest this update:     Fri 14 Mar 2025 07:42:00 +0000
Manifest next update:     Sat 15 Mar 2025 09:56:00 +0000
Files and hashes:         1: 3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (hash: VDgLzWuOkvCGxuLQJu+Oaocm0uNBR7MLzQnf9U+qMBk=)
                          2: 323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (hash: CI0Boaa6U/czRmNwlu08awXx1YU7TKO7Cd6+Q+xbA3k=)
                          3: 3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.crl (hash: mrGcRsYtPnMmhx3P3phb56t+pDAo9nCSes/kqoWwGvs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ff:3f:6a:64:80:7d:12:fa:47:0b:2b:54:b2:75:56:b8:31:84:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A
        Validity
            Not Before: Mar 14 07:42:00 2025 GMT
            Not After : Mar 15 09:56:00 2025 GMT
        Subject: CN=8DDE09A3FBC1D9516157C33AE462941089EF301A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:26:05:ff:c4:70:5c:60:1f:07:4e:4b:24:
                    a5:fa:92:ca:24:74:9c:4b:19:f2:a6:48:c2:3f:99:
                    7f:4e:13:62:2a:25:08:15:a8:46:97:50:f9:d9:6b:
                    c7:be:4c:82:81:7d:56:46:be:a4:bd:5b:de:9d:ea:
                    e6:fc:ac:12:1a:b6:bd:62:72:78:84:07:b5:7c:aa:
                    60:22:76:aa:1d:6f:99:67:72:0c:41:8a:54:54:cb:
                    15:f6:49:c0:7b:a0:aa:1e:3e:b1:ea:a9:0b:26:7c:
                    d1:f3:86:a7:f9:93:6d:4d:b6:d7:3c:8f:06:cd:e7:
                    81:91:f9:9c:b2:db:52:c8:6c:ca:70:1c:15:09:5b:
                    61:da:ca:fe:6f:e1:ed:0c:0d:e9:10:35:a1:c2:ae:
                    ee:3d:bc:1b:83:bb:ae:9c:0e:0d:71:cf:c7:ed:47:
                    bd:3b:55:71:d5:e5:12:10:0f:17:01:31:89:21:ad:
                    b6:ba:50:79:93:3e:98:06:9d:8f:f5:95:f2:35:25:
                    dc:e0:82:76:03:4e:d6:42:e0:f5:0b:f8:d2:8a:df:
                    3a:4c:27:2f:b6:99:49:30:cc:ee:22:45:ae:cc:b8:
                    93:9c:ad:72:e1:44:e7:18:e8:79:1d:21:17:27:df:
                    15:6a:a6:3f:64:36:4d:f6:c1:ba:55:59:89:d6:5f:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:09:A3:FB:C1:D9:51:61:57:C3:3A:E4:62:94:10:89:EF:30:1A
            X509v3 Authority Key Identifier:
                keyid:3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:19:3f:1a:f6:c6:22:38:8f:e8:9f:86:ac:71:99:99:17:34:
         86:f7:cc:16:ac:0a:af:b8:1d:f0:8d:59:bb:4b:01:cf:19:94:
         e7:3d:ae:c1:1b:a7:1a:fa:e5:7b:50:7d:c6:bf:94:53:05:9d:
         c3:0b:e2:bb:9c:39:4e:47:37:2f:b1:7a:9e:76:c9:e3:f1:9e:
         62:6f:5a:69:c6:fd:9d:6c:73:e1:70:bb:a2:69:00:46:49:33:
         71:0b:ad:9e:03:78:f9:94:30:d0:da:ad:bf:91:bd:6b:42:f3:
         51:c0:77:3b:06:8b:87:cf:b4:d8:72:82:f1:2e:ab:97:54:4a:
         58:1c:10:03:a5:16:49:44:02:a5:67:b0:67:11:4d:e9:63:9e:
         88:cd:c0:4b:f6:15:50:a6:0c:27:c0:df:38:f8:81:e9:21:29:
         42:9d:d1:99:d4:70:29:f9:cf:3b:18:00:6a:6c:48:da:87:b4:
         d7:d1:e6:80:11:1d:7f:56:17:15:0e:d4:f1:65:50:d0:fd:5c:
         4d:63:03:c1:57:69:24:79:38:04:51:8c:47:8f:0d:30:99:d4:
         84:78:3a:6f:ae:38:72:c3:6b:71:fd:f0:d3:a4:a8:35:bb:f8:
         16:4b:3d:64:ba:d7:24:97:60:97:9e:eb:58:81:7f:f9:73:51:
         ee:d8:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:59 2025 by rpki-client