Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FW6JkbTQ3NUsHb8zrntgfxyXemnDNLYvovvdZJ6kqeND/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.mft
File:                     B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.mft (raw, json)
Hash identifier:          XGzxEHs0w6ZgQ60VJVKOvT7157Si8DUJuauGOKYS73c=
Subject key identifier:   EC:B3:5F:5B:CB:C7:AF:30:A6:CB:81:13:2D:4C:34:B9:E6:F8:63:50
Authority key identifier: B0:20:B3:BE:42:77:F6:09:9B:24:5F:3A:04:D7:AF:D1:EC:33:AF:FE
Certificate issuer:       /CN=B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE
Certificate serial:       09E41B54B5094EC8F873D2D5215BA3963E4EFA02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW6JkbTQ3NUsHb8zrntgfxyXemnDNLYvovvdZJ6kqeND/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.mft
Manifest number:          0100
Signing time:             Wed 15 Mar 2023 22:04:35 +0000
Manifest this update:     Wed 15 Mar 2023 21:59:35 +0000
Manifest next update:     Fri 17 Mar 2023 00:05:35 +0000
Files and hashes:         1: B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.crl (hash: aWA72C7bxg4nVQZZUSIIK3n3pCEOvazGD4iGjD17SjY=)
                          2: 3138362e3235302e3136362e302f32342d3234203d3e203532383934.roa (hash: kucZnlDX95Mg6rfI5zuqD5BPMfyPIqLhLLFhErNhX4g=)
                          3: 3138362e3235302e3136342e302f32332d3233203d3e203532383934.roa (hash: A8mwsxe6wbnxtwwdJ4yfI/xv3U0MuYPWxrHmXezyfTc=)
                          4: 3138362e3235302e3136352e302f32342d3234203d3e203532383934.roa (hash: tjMwZBXHwVgGpDJTvcZwhv+R3tl4VfX1m5i1oWoHknk=)
                          5: 3138362e3235302e3136342e302f32322d3232203d3e203532383934.roa (hash: laVRIQk8d3yxk7bkzOQQ0ubEKJDXwRnuDv/yEoyHnYU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e4:1b:54:b5:09:4e:c8:f8:73:d2:d5:21:5b:a3:96:3e:4e:fa:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE
        Validity
            Not Before: Mar 15 21:59:35 2023 GMT
            Not After : Mar 17 00:05:35 2023 GMT
        Subject: CN=ECB35F5BCBC7AF30A6CB81132D4C34B9E6F86350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:09:bb:0d:6d:28:5a:5f:9a:d9:09:86:30:
                    e8:b0:b9:f5:32:10:1f:6d:ed:e7:fc:aa:a4:20:37:
                    d5:39:e9:43:32:4a:17:d7:cd:69:13:d4:48:30:ef:
                    4e:24:4a:a5:b4:07:7a:29:3b:27:70:7d:ce:6c:dc:
                    45:4d:c0:7c:35:5b:bc:b1:5c:f3:47:06:4a:a1:8a:
                    b0:dd:b2:ff:99:8e:43:7a:f7:7b:9f:31:ef:4c:ae:
                    b1:41:36:c8:c9:35:fb:99:bd:fd:c1:39:1b:fa:6c:
                    9f:e1:ea:89:fd:04:0b:4f:f6:ff:96:48:0a:63:35:
                    55:f1:62:65:a8:75:9b:bf:68:fa:b5:52:e0:f4:09:
                    a3:29:ad:7f:30:f6:3d:2e:2c:fa:eb:8e:c6:42:54:
                    b4:59:02:b6:49:56:df:44:80:5b:a8:d0:c1:aa:c8:
                    42:ba:56:88:07:42:97:ba:d7:28:4d:af:b7:c2:d7:
                    a0:5f:73:ef:09:fa:19:36:3d:ce:99:6c:f9:73:cc:
                    55:38:8c:c7:ee:00:3c:6d:86:5d:d8:60:a2:44:4c:
                    de:01:25:00:9f:69:81:b7:01:d9:52:91:a3:77:ac:
                    c7:48:c1:de:e1:f8:d9:6f:c2:22:60:eb:ba:17:02:
                    65:ea:19:12:6b:20:aa:a0:83:ae:38:04:e4:19:60:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:5F:5B:CB:C7:AF:30:A6:CB:81:13:2D:4C:34:B9:E6:F8:63:50
            X509v3 Authority Key Identifier:
                keyid:B0:20:B3:BE:42:77:F6:09:9B:24:5F:3A:04:D7:AF:D1:EC:33:AF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW6JkbTQ3NUsHb8zrntgfxyXemnDNLYvovvdZJ6kqeND/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW6JkbTQ3NUsHb8zrntgfxyXemnDNLYvovvdZJ6kqeND/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:23:cc:54:95:89:f4:7d:40:8e:51:d1:29:9d:b7:9f:b3:2a:
         56:5f:1d:39:27:1c:10:53:b6:80:82:54:52:87:46:b3:08:00:
         b6:e4:91:34:25:4d:0e:b8:54:35:0b:ec:cd:ff:be:cb:5c:3d:
         20:8a:f8:1b:8b:f2:55:b8:f1:79:76:2a:08:0f:25:53:3c:fb:
         95:f1:ce:61:b6:7a:66:f2:60:29:98:cc:84:35:1a:c1:c7:dd:
         f9:07:c4:1d:91:04:48:50:c9:7c:31:b6:27:21:b8:c4:ca:e8:
         2a:67:e6:bc:d2:ba:7b:77:20:59:7c:f6:98:67:e7:82:c8:5c:
         e1:f8:1e:30:e8:63:50:ed:30:bf:0a:de:6b:13:d4:00:93:81:
         18:9e:8f:9a:ce:a6:eb:64:64:e6:ca:f1:a4:74:94:71:36:9e:
         20:33:4e:69:d8:04:a5:fc:c7:6d:b7:1d:62:7e:16:9e:75:73:
         d3:22:bc:84:88:5d:9a:36:a0:bc:ca:d2:f3:c0:80:21:8f:25:
         01:d7:87:17:ea:da:18:dc:27:b3:6e:6d:78:33:16:02:d7:15:
         aa:0a:ad:62:0d:b0:3b:2b:93:de:09:41:8c:2b:e4:fe:f1:63:
         5a:61:c5:dd:4c:6b:9d:de:d8:c3:31:d6:ea:03:0f:6c:1f:75:
         22:78:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:16:24 2025 by rpki-client