Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.mft
File:                     D6F2C2DD90315168EC79B717E27C0B9C4D27B959.mft (raw, json)
Hash identifier:          mnDRCm8roUdckKkKs9ZguRrjF8W5ilA1e7NPYfXCbh8=
Subject key identifier:   8A:1A:39:8A:40:10:81:07:15:F1:57:7E:1E:98:98:2E:4D:30:B7:BC
Authority key identifier: D6:F2:C2:DD:90:31:51:68:EC:79:B7:17:E2:7C:0B:9C:4D:27:B9:59
Certificate issuer:       /CN=D6F2C2DD90315168EC79B717E27C0B9C4D27B959
Certificate serial:       1E7FC577D51C0840B0CC30BB06701293B36C0359
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.mft
Manifest number:          011F
Signing time:             Tue 06 May 2025 05:05:39 +0000
Manifest this update:     Tue 06 May 2025 05:00:39 +0000
Manifest next update:     Wed 07 May 2025 06:39:39 +0000
Files and hashes:         1: 323830343a363032383a3a2f33322d3334203d3e20323639313439.roa (hash: VnnKNXYHsUx8vRtvbyUIJ6Lsra5fGimD5CtuHYoSJvU=)
                          2: D6F2C2DD90315168EC79B717E27C0B9C4D27B959.crl (hash: cwlfx9zvudo+4wYCLHzw3LUyb28KCMaGRyTahsZepCk=)
                          3: 34352e3138302e3230342e302f32322d3234203d3e20323639313439.roa (hash: mjLFPffrmAsape59eqkATQTvBHoDnye5NqAN90y7blI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7f:c5:77:d5:1c:08:40:b0:cc:30:bb:06:70:12:93:b3:6c:03:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6F2C2DD90315168EC79B717E27C0B9C4D27B959
        Validity
            Not Before: May  6 05:00:39 2025 GMT
            Not After : May  7 06:39:39 2025 GMT
        Subject: CN=8A1A398A4010810715F1577E1E98982E4D30B7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:0e:78:71:8a:9c:9a:fc:3d:cd:98:92:01:
                    ee:80:0f:39:d1:05:35:bf:b8:b9:b0:3e:78:35:47:
                    05:31:62:b3:86:ce:92:82:9b:18:49:86:ab:4d:04:
                    89:d6:47:fd:c6:85:21:9f:79:2d:4b:ed:76:fa:a9:
                    86:ff:de:56:8f:3d:7c:bc:24:80:0a:22:0a:b4:de:
                    53:a4:03:70:df:33:ef:25:59:18:68:33:e2:39:f1:
                    77:31:33:96:ab:26:f6:31:a3:87:b3:b5:0e:2e:df:
                    99:c2:46:f1:d3:b2:b1:10:9c:c6:fa:dc:66:f8:89:
                    a1:4e:a5:5d:d7:a4:4c:06:45:14:37:5e:a0:da:d7:
                    ae:fb:c5:6f:9b:b5:2b:ef:0e:00:ba:19:64:1d:2a:
                    30:e4:11:72:08:d4:e7:3a:5d:32:8e:53:e8:7e:b8:
                    af:55:fc:99:d8:5c:1a:0f:f9:f3:b2:35:09:41:d0:
                    52:5e:15:de:a4:13:17:50:8f:bf:d4:15:e8:8d:a9:
                    b3:a3:c6:d4:1f:ab:85:fd:36:e8:2e:3b:55:3f:15:
                    3b:2d:7b:f0:bb:eb:2b:c6:44:73:60:14:cb:9e:64:
                    2d:6d:7c:c8:b1:82:06:f1:f7:e2:8b:fb:6f:47:f1:
                    8f:c9:2f:b6:47:a6:b4:81:a2:d0:30:3a:52:1f:a4:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1A:39:8A:40:10:81:07:15:F1:57:7E:1E:98:98:2E:4D:30:B7:BC
            X509v3 Authority Key Identifier:
                keyid:D6:F2:C2:DD:90:31:51:68:EC:79:B7:17:E2:7C:0B:9C:4D:27:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:84:45:61:bb:67:5b:1d:31:d4:54:c7:11:83:28:e4:64:c7:
         24:d8:33:0b:58:dd:81:8f:77:b8:57:41:8a:44:03:a0:9b:0d:
         59:8e:94:c2:c9:7b:59:93:5d:64:9c:fa:46:92:a0:66:ff:00:
         8c:bd:8b:85:60:41:b8:51:eb:6f:e1:1d:c3:84:7d:d5:37:26:
         05:f3:38:0d:a4:80:d0:d7:76:91:40:99:7b:c0:40:95:23:9c:
         33:49:78:6e:32:c5:6d:42:d2:97:70:93:c2:35:cf:ac:9a:7a:
         50:49:53:e1:90:a4:68:1a:cc:fb:3d:b0:cc:ef:bc:5b:1a:2c:
         0a:f2:13:e4:ce:33:8c:c1:08:e0:d7:7b:f4:02:4f:29:c7:00:
         c7:dd:33:31:31:9c:b0:6e:40:e6:d8:54:5b:ce:f6:bc:91:36:
         aa:de:0b:08:fb:d0:3b:ab:ff:3a:ff:ab:ba:d9:87:a3:5c:26:
         ad:48:43:32:ff:f0:c9:0d:2e:63:27:a0:ff:f4:ea:ab:88:7d:
         b1:ef:a2:cb:73:cb:0f:5f:bd:3e:0b:e2:5e:90:e2:59:d1:fb:
         e0:c6:8d:40:d3:c1:08:70:1e:af:a9:39:37:2c:27:62:02:3a:
         5d:3b:82:f1:5b:d2:cf:98:31:4d:1a:2e:ea:2d:16:c0:35:ca:
         7d:ba:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:19:22 2025 by rpki-client