Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.mft
File:                     59176FF2F9921A875762F2166723B5CD48599A49.mft (raw, json)
Hash identifier:          f03tGfbYFNaMwKe9fE1cB4svyMUV5FSY38alAon4nB0=
Subject key identifier:   0F:FE:E3:A9:D9:8A:0F:0F:0E:E9:01:6E:BC:44:C5:76:49:B4:11:1C
Authority key identifier: 59:17:6F:F2:F9:92:1A:87:57:62:F2:16:67:23:B5:CD:48:59:9A:49
Certificate issuer:       /CN=59176FF2F9921A875762F2166723B5CD48599A49
Certificate serial:       456AE5EC229938107753BF8826F20B286AA034B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.mft
Manifest number:          0226
Signing time:             Wed 21 May 2025 06:57:59 +0000
Manifest this update:     Wed 21 May 2025 06:52:59 +0000
Manifest next update:     Thu 22 May 2025 07:27:59 +0000
Files and hashes:         1: 3139302e38392e31322e302f32322d3235203d3e20323730333437.roa (hash: S2sCvjEu7mysFPo/AxOSDj/0O95xaO4fPKjUgfNMu38=)
                          2: 59176FF2F9921A875762F2166723B5CD48599A49.crl (hash: 4RSt3IJ9vvp/bXKWzZA4EK0JZWfz5YWGzVV+mbjs3h4=)
                          3: 323830343a366139633a3a2f33322d3438203d3e20323730333437.roa (hash: QiMold+Q6FfmxrIQyG0ui8zmS4zyXfJiTRphg42c1JU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6a:e5:ec:22:99:38:10:77:53:bf:88:26:f2:0b:28:6a:a0:34:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59176FF2F9921A875762F2166723B5CD48599A49
        Validity
            Not Before: May 21 06:52:59 2025 GMT
            Not After : May 22 07:27:59 2025 GMT
        Subject: CN=0FFEE3A9D98A0F0F0EE9016EBC44C57649B4111C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:a9:76:40:23:d1:2a:d6:0c:ba:ab:98:fd:
                    40:73:24:80:d8:c7:49:e9:f5:d5:05:17:bf:9c:5f:
                    2d:e2:23:d6:a7:57:a4:7c:f2:de:66:cc:19:f1:5d:
                    a4:b8:90:51:d9:29:91:c7:84:c6:65:b5:a2:df:1f:
                    f3:1f:9f:77:9d:cf:9a:d2:66:6f:66:d6:5f:88:9e:
                    f9:47:5b:e5:71:35:c4:7c:89:9b:87:01:90:a8:1f:
                    75:8d:36:49:da:86:c8:aa:58:02:03:fb:d4:39:9f:
                    45:6f:df:fa:49:3e:9d:fa:6b:66:f0:bd:87:a8:ee:
                    63:76:9a:58:83:d6:1b:c1:d0:40:ba:eb:5c:28:12:
                    58:1e:d2:bb:db:ff:53:4d:2e:3d:34:02:78:28:db:
                    33:7f:f3:21:32:01:3f:26:d2:9f:32:65:91:3e:2d:
                    c6:85:98:99:a1:6e:32:7e:86:ad:ca:fb:4d:eb:09:
                    d5:d1:ff:b7:57:ff:89:18:6a:b6:b4:1a:05:1a:99:
                    ff:e8:fa:fc:dd:8e:41:73:db:d9:e8:ad:8d:89:54:
                    df:e6:06:b9:8e:87:ff:c3:9b:64:ba:37:26:f3:36:
                    e9:ec:72:7a:20:3f:34:1e:b2:34:a9:15:ca:23:cf:
                    bf:96:84:ce:07:79:92:98:86:d8:d7:b1:6d:8b:f0:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FE:E3:A9:D9:8A:0F:0F:0E:E9:01:6E:BC:44:C5:76:49:B4:11:1C
            X509v3 Authority Key Identifier:
                keyid:59:17:6F:F2:F9:92:1A:87:57:62:F2:16:67:23:B5:CD:48:59:9A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:65:94:67:8b:c2:20:3c:5b:d3:97:54:5f:78:6e:7d:50:08:
         42:0a:3a:d0:cf:e6:59:7b:e4:d2:01:c4:d1:3f:0d:01:76:0e:
         1b:37:be:82:dd:d5:85:c4:90:d1:5a:5f:2e:d1:a5:60:5e:d5:
         9e:df:cc:b2:af:c4:27:63:dc:a6:79:95:59:78:ee:43:39:07:
         0d:c3:2d:a2:be:0c:3e:af:84:c7:fd:d5:35:fa:c8:49:0a:46:
         11:3c:8b:0d:96:bc:c1:bd:3f:66:64:22:7d:f7:06:bd:81:27:
         37:b7:97:d9:0c:4c:9a:01:fd:9c:b2:23:7f:36:10:03:39:47:
         3e:e6:48:17:12:b9:9f:ee:3e:1f:aa:48:94:44:2d:8a:27:8d:
         f9:05:8f:bd:f1:eb:d4:5d:65:9d:42:b8:9a:39:ff:c8:4c:a2:
         24:0c:7f:af:d8:a8:8e:13:00:8a:40:d2:30:6c:f2:8e:0a:58:
         2a:9f:4f:a6:8d:26:a9:71:d0:48:18:60:da:7b:9a:06:60:99:
         8e:94:d4:19:23:f8:ed:45:5c:8b:48:d1:5f:1a:30:0e:f6:00:
         ae:00:ba:40:fc:ae:27:77:15:6e:01:74:19:96:cd:8e:30:9f:
         ce:26:ee:83:e8:8d:4a:8f:0f:4b:35:b6:58:5f:b3:30:f3:6f:
         fc:42:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:55 2025 by rpki-client