Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File:                     8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier:          ayqD61jE9xm0YZ9IDNIwyf0kbqtvYOJgnxTWwSnf+ns=
Subject key identifier:   57:1A:18:70:97:6A:4A:4C:AC:50:D5:F6:30:96:3A:DE:F1:B2:C2:E1
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       4335D8F8579F8DA3082971F5DE43EE318EE3960C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number:          016F
Signing time:             Sat 29 Mar 2025 05:42:20 +0000
Manifest this update:     Sat 29 Mar 2025 05:37:20 +0000
Manifest next update:     Sun 30 Mar 2025 09:37:20 +0000
Files and hashes:         1: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: FqvER0LEm1aGoKZWZzaqgUqMzStMQJRPb0C5I8Ju26E=)
                          2: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: YDLU2R2TYfKK6mIWw1mqMSamOpyCufjbxSrdQcWV+nA=)
                          3: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: Im3I+GfRKzzqomfIKGJUeOvcWzt8RDtIzDvg7j5aBYA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:35:d8:f8:57:9f:8d:a3:08:29:71:f5:de:43:ee:31:8e:e3:96:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Mar 29 05:37:20 2025 GMT
            Not After : Mar 30 09:37:20 2025 GMT
        Subject: CN=571A1870976A4A4CAC50D5F630963ADEF1B2C2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:a4:75:e0:4d:f2:8b:7a:31:1e:51:f2:9b:
                    99:74:91:28:bb:9f:fc:25:e4:11:59:06:1a:1d:69:
                    2d:e6:31:af:70:cf:14:8d:db:7c:17:16:ab:17:b9:
                    28:58:d3:75:a4:1e:9e:a5:62:eb:51:dc:be:38:89:
                    77:d6:3b:6c:93:75:b6:f6:ff:be:5c:be:73:6e:50:
                    c3:a2:b8:e3:a1:d8:7e:c4:65:ba:8c:ee:54:88:c2:
                    04:a5:85:91:ca:63:dc:04:e9:ae:5b:e6:64:12:0c:
                    53:89:c3:2f:95:e5:80:f8:f6:5a:f4:b8:29:69:91:
                    90:62:7a:e4:f4:0f:69:04:40:36:35:e5:1b:88:57:
                    eb:ac:73:3f:69:1d:98:fb:c9:b2:9a:18:a5:6c:f8:
                    38:d7:a4:60:35:ca:02:93:55:bd:3d:4b:8b:9e:a3:
                    bd:44:1a:13:30:ac:63:a6:23:57:cd:c6:fc:55:33:
                    51:e5:43:3f:0c:fb:01:b9:30:90:d0:95:bb:37:3f:
                    54:37:aa:dc:92:c2:fd:a1:c2:93:33:fc:e0:0a:c8:
                    e5:84:8d:08:1d:9f:13:32:83:7d:a1:02:ff:c5:06:
                    b1:d7:f0:d6:7c:9c:85:dd:0a:aa:88:d1:85:35:f0:
                    55:01:c1:e1:aa:64:4b:7f:58:de:05:bb:81:e4:34:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:18:70:97:6A:4A:4C:AC:50:D5:F6:30:96:3A:DE:F1:B2:C2:E1
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:88:a3:b5:9e:c7:e4:67:e6:f2:e5:70:32:5c:83:c4:af:5e:
         86:9b:f8:58:16:02:0a:d5:fa:73:11:6e:37:39:79:76:d8:35:
         d9:47:42:46:49:5f:c0:dc:85:98:83:2a:bd:4a:54:64:98:f0:
         bf:9f:3b:d6:ed:d5:3a:35:7b:3c:40:fa:26:5c:15:e2:31:8b:
         8d:ac:bb:a9:49:d3:14:2b:4c:c1:f1:dd:f9:64:41:c0:1f:95:
         30:74:0c:a7:58:7e:56:0e:6f:d0:d9:0d:b4:4f:ee:83:57:cf:
         00:14:06:d1:13:87:98:0c:df:6c:94:5c:4e:fc:e7:6d:61:79:
         c7:93:02:97:10:35:ff:4c:3f:62:75:e2:5b:03:89:ac:fa:89:
         62:77:20:a1:b8:5a:32:e5:70:96:c0:59:2b:fe:55:6d:91:89:
         05:03:57:52:ba:66:a4:32:22:b6:ca:d8:36:a0:3e:99:06:ce:
         d0:c9:b6:e8:9d:df:a7:54:ae:b1:79:81:74:f4:fd:ce:d2:f9:
         f5:07:74:1b:85:05:02:a7:24:a1:2e:51:bb:5d:6e:e2:1c:5c:
         95:00:b9:f7:e6:d6:94:26:52:9d:e1:41:12:ee:79:c2:7d:48:
         38:9b:c4:82:78:40:ec:1c:5e:7c:bd:fe:7a:a7:31:c7:76:d3:
         9f:bf:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----