Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.mft
File:                     16F623F7E404FC45279199F873CB67B24D28DD2E.mft (raw, json)
Hash identifier:          tXWC7pBUUyPLRviYCR95ZL/xxLqx0wyetkvi1b5oWZg=
Subject key identifier:   63:D0:25:79:47:42:AF:10:BF:AC:A6:87:59:C9:13:76:C9:B3:65:55
Authority key identifier: 16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E
Certificate issuer:       /CN=16F623F7E404FC45279199F873CB67B24D28DD2E
Certificate serial:       231961804FBBB269059E52F6A24425AEE8999F23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.mft
Manifest number:          015D
Signing time:             Sat 29 Mar 2025 10:16:40 +0000
Manifest this update:     Sat 29 Mar 2025 10:11:40 +0000
Manifest next update:     Sun 30 Mar 2025 13:29:40 +0000
Files and hashes:         1: 16F623F7E404FC45279199F873CB67B24D28DD2E.crl (hash: KXNniv1kAdqEPVXfIHfPltIvkqImzmrods9i8QelXZU=)
                          2: 34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (hash: o6NfLUXcVtphcRiRaKJq4WeBwV4ug+mFbCOAran+nXM=)
                          3: 34352e3137322e39362e302f32322d3234203d3e20323731323533.roa (hash: dJANcyLmyPGFW1wkd8z1n5IMganTbL/l6PnGzuZ0lVo=)
                          4: 323830343a373839383a3a2f33322d3438203d3e20323731323533.roa (hash: njcQTh/ug2Jtq0Jz00bygucsktw1UsT/KVjK7huhReQ=)
                          5: 3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa (hash: Lok8gRkNA5w7kR9ExWVkNKiB7XOvaM4MkHpIaJ8QXh0=)
                          6: 3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa (hash: SfWNwI6CMOF9L9iYjcVshT04e+JxNj+LphbXXDQb2+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:19:61:80:4f:bb:b2:69:05:9e:52:f6:a2:44:25:ae:e8:99:9f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F623F7E404FC45279199F873CB67B24D28DD2E
        Validity
            Not Before: Mar 29 10:11:40 2025 GMT
            Not After : Mar 30 13:29:40 2025 GMT
        Subject: CN=63D025794742AF10BFACA68759C91376C9B36555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:a4:ff:c2:54:7c:b9:e7:00:16:81:97:32:
                    0d:64:e4:52:fc:23:b7:d9:e5:f6:d8:be:43:36:24:
                    2f:17:ab:b8:49:a4:1e:a6:22:26:5d:de:8d:70:8a:
                    d6:91:ab:74:ae:12:8a:4a:f9:62:7a:4f:a0:74:bf:
                    f8:0c:bf:ca:73:6f:86:49:a0:58:c8:d0:9f:30:6c:
                    3c:bb:12:85:38:19:ab:c0:a1:da:40:da:90:2b:df:
                    f9:73:db:07:ac:04:fc:db:2c:e1:d1:70:a9:22:84:
                    93:c6:b0:95:a3:5d:72:fc:89:fe:34:68:52:f7:f9:
                    f7:30:a6:40:a3:cb:83:38:19:94:3b:e2:32:e9:ee:
                    c9:a8:86:c9:82:b5:83:d0:ca:19:47:42:03:b2:22:
                    be:a4:74:89:ac:e4:8c:22:aa:3c:49:1b:e7:d0:5c:
                    7f:4b:0c:17:2f:10:42:79:5f:1b:27:c9:c0:e3:f4:
                    d6:cb:1b:78:53:07:2b:c4:9d:4c:53:95:12:58:91:
                    03:69:3d:fb:f7:62:c4:db:70:9c:af:87:af:e8:7c:
                    b2:69:0e:1f:7f:2a:3a:a3:b8:b0:2b:5c:26:7a:ba:
                    2f:85:bc:8a:2b:00:de:85:69:73:89:af:a3:48:9b:
                    19:84:32:dc:6f:28:f7:99:ef:d6:6a:85:d8:82:1c:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:25:79:47:42:AF:10:BF:AC:A6:87:59:C9:13:76:C9:B3:65:55
            X509v3 Authority Key Identifier:
                keyid:16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:06:c6:d6:41:6f:d0:e9:68:0c:52:f4:ee:5f:c8:70:fe:eb:
         95:30:db:5e:ee:f3:2d:61:63:aa:c8:89:23:52:d1:34:61:63:
         f3:08:74:d6:97:25:f7:ba:d9:fa:42:f1:83:fe:6d:bc:09:68:
         64:89:98:10:3a:4d:b0:4d:29:9a:6b:fc:21:24:d4:4c:23:ba:
         86:99:4c:b9:af:4b:fe:13:79:23:13:42:42:55:e7:73:46:d7:
         71:63:a8:28:1b:a5:9d:53:d0:8b:29:b7:be:5a:84:2a:88:ed:
         27:6d:cd:d8:06:18:6b:69:16:13:65:3c:15:40:76:30:bd:e4:
         6d:8b:20:2a:c7:f0:a1:40:c4:03:6f:76:0c:ad:75:7b:75:5b:
         4c:7b:62:a1:52:a6:f3:ec:79:4e:cf:f7:b1:19:4e:43:d4:59:
         b6:25:a7:c4:90:10:8c:49:d7:e6:70:a7:7a:84:ee:17:b9:4d:
         7f:b8:00:98:79:6e:f7:ef:9c:d5:d0:4c:f9:7f:db:61:00:1c:
         e7:14:c4:0b:dc:96:2b:1c:54:86:1a:2d:25:73:c6:6d:0c:c3:
         f4:90:47:ec:9f:aa:9f:33:c9:c6:c9:a2:cf:8d:2c:1a:c2:7b:
         74:bc:d5:2a:84:3d:69:e9:bd:e9:20:e1:57:ce:42:e8:f5:b5:
         14:83:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----