Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.mft
File:                     A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.mft (raw, json)
Hash identifier:          ThL+dWqcanpjVwBe5sXG6MTks90nHkijITbVwLXwjcs=
Subject key identifier:   15:6C:6F:08:7D:58:F7:C6:20:34:E4:CA:C1:D1:6A:84:E1:90:AC:62
Authority key identifier: A9:1E:D5:B8:15:CB:75:A0:C7:C3:3D:DC:1F:1E:A9:1F:C3:E2:F1:BE
Certificate issuer:       /CN=A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE
Certificate serial:       6CB54670057FA79141BDCA8D39FEE7F89414F57D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.mft
Manifest number:          0187
Signing time:             Mon 20 Jan 2025 19:13:07 +0000
Manifest this update:     Mon 20 Jan 2025 19:08:07 +0000
Manifest next update:     Tue 21 Jan 2025 21:36:07 +0000
Files and hashes:         1: 323830343a383634303a3a2f33322d3332203d3e20323732363331.roa (hash: jOCUcxrou1+QWFDk/5MIehXEyJ2bn+M/FRdBXCBY4cM=)
                          2: A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.crl (hash: A9B8HMRRWL0FXDs8JUsgb07roNja9IkSPUGOxCDvIcs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b5:46:70:05:7f:a7:91:41:bd:ca:8d:39:fe:e7:f8:94:14:f5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE
        Validity
            Not Before: Jan 20 19:08:07 2025 GMT
            Not After : Jan 21 21:36:07 2025 GMT
        Subject: CN=156C6F087D58F7C62034E4CAC1D16A84E190AC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:d0:20:5e:5e:7a:df:71:23:09:81:5f:7d:
                    be:50:06:7d:5a:b0:c4:5a:e0:94:67:1f:32:a2:a8:
                    5c:ce:a7:ef:80:1e:78:ec:cf:0f:1f:02:aa:31:93:
                    94:d6:29:39:47:46:47:5a:c6:40:cd:18:26:80:7c:
                    65:2f:f5:da:3a:b9:83:04:93:d7:79:76:ec:6d:51:
                    c9:02:97:f0:3c:e7:a2:10:9a:32:ba:90:74:24:e9:
                    bf:c1:0a:54:66:40:6b:ad:4d:ea:22:c1:20:f5:cd:
                    21:be:2a:c6:c7:28:19:6c:0c:7c:3c:99:c9:1a:d6:
                    9a:de:c3:da:74:0c:76:0b:50:ea:ee:0c:c4:9b:c6:
                    f7:cd:5b:06:54:18:da:f0:bf:2b:a4:4f:27:aa:63:
                    50:36:3b:43:51:09:ef:b2:c1:70:b4:39:24:d1:13:
                    1e:36:c7:58:db:ca:00:a3:bd:c8:b8:7b:a2:96:4d:
                    30:1d:49:90:cd:d6:0e:d1:81:09:9a:10:74:bf:e6:
                    d1:e2:20:e1:27:bc:99:35:50:21:2a:f4:c9:24:87:
                    30:ce:73:70:bd:60:79:91:e4:7f:83:13:20:04:4d:
                    3e:82:1a:9d:52:b1:94:4d:f1:0d:35:e4:5d:49:39:
                    42:06:5f:c2:a2:34:fa:69:9c:b4:98:3c:89:ac:4d:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6C:6F:08:7D:58:F7:C6:20:34:E4:CA:C1:D1:6A:84:E1:90:AC:62
            X509v3 Authority Key Identifier:
                keyid:A9:1E:D5:B8:15:CB:75:A0:C7:C3:3D:DC:1F:1E:A9:1F:C3:E2:F1:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6f:05:46:65:30:16:e7:65:02:c2:1c:a9:a2:4b:cb:a8:fb:
         84:1a:aa:f9:0b:73:25:fc:11:a2:37:5b:4a:bc:ea:df:98:d7:
         99:35:59:28:b7:1b:51:57:08:df:b8:23:ff:e6:a1:ad:f1:91:
         bd:64:db:07:2f:18:32:f3:da:a2:8d:9f:4c:21:00:23:0a:41:
         6b:14:ab:f0:eb:d3:14:57:f2:45:82:cf:ac:b0:2f:36:d5:d6:
         07:3e:ec:6d:05:fc:fd:90:17:c0:7d:46:0a:fe:26:a6:f0:e1:
         e2:f6:4b:3e:db:15:40:91:02:5f:7d:90:b0:b2:37:01:f2:82:
         8a:2e:44:c4:f5:b8:58:05:3b:bc:68:47:97:b4:b8:fe:a9:05:
         c5:59:90:6a:81:34:e1:08:75:20:2f:c3:15:cb:16:ee:83:cf:
         68:7b:ef:a9:b0:01:77:13:b9:58:34:e3:f4:eb:b8:51:8e:b2:
         fa:04:1b:98:8c:69:2b:23:8d:2a:d4:f7:ff:54:b2:27:69:3e:
         9e:d9:98:cb:36:b9:98:fd:1b:07:c2:86:12:b4:48:95:cd:b1:
         ea:8f:f6:21:fa:9c:53:74:7b:22:be:57:f0:3c:e1:04:02:5b:
         42:d6:f3:f0:fc:f6:cd:1d:bd:ed:45:1c:81:ec:e9:57:44:71:
         a9:e4:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:19 2025 by rpki-client