Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.mft
File:                     AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.mft (raw, json)
Hash identifier:          Tac0d3oJ5C/2mpWuNl7HlM4UwI4XVaGllgxmlLCc3EI=
Subject key identifier:   CA:67:A8:8E:15:0E:74:BE:8D:B6:24:81:A6:6D:BD:3E:48:C4:41:BB
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       66A14A5223FE0C708DBCA6AED3D96759659750C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.mft
Manifest number:          AD
Signing time:             Sun 30 Mar 2025 09:07:50 +0000
Manifest this update:     Sun 30 Mar 2025 09:02:50 +0000
Manifest next update:     Mon 31 Mar 2025 10:40:50 +0000
Files and hashes:         1: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: mkCQh8EDg8ox84JdfnIofTxT3TloXhpN2UsaG8wsdsY=)
                          2: 323830343a313235343a3a2f33322d3438203d3e20323633343730.roa (hash: EFaKIak9ZYu4f2opkF2mnZFxeL+4vrthADVHagwtnlM=)
                          3: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: jMrMUs4VOBCAYlY5M26tCHTLt4f9W78y5caiTUlHdQ4=)
                          4: AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl (hash: GwEaOk3UwhRFDkDzPP51xLoiC9yRB7DpzatNiTjT/LQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a1:4a:52:23:fe:0c:70:8d:bc:a6:ae:d3:d9:67:59:65:97:50:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Mar 30 09:02:50 2025 GMT
            Not After : Mar 31 10:40:50 2025 GMT
        Subject: CN=CA67A88E150E74BE8DB62481A66DBD3E48C441BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:bf:02:30:82:65:6b:f0:23:5d:6a:89:2f:
                    b2:32:59:70:05:a8:2e:28:ac:91:19:20:50:52:58:
                    c3:d0:57:64:77:3a:55:4f:74:1c:4c:0b:42:fe:bb:
                    ab:b8:cf:a7:e1:a6:48:50:7e:7c:44:d4:d0:4d:39:
                    20:f9:75:4a:64:95:06:36:b1:c5:0c:76:bc:97:90:
                    b0:12:5b:fd:c4:17:ec:2f:97:ae:5b:37:0c:ea:6c:
                    c5:d4:3a:86:00:35:37:41:a5:53:e7:83:8e:da:0c:
                    59:9c:fa:5b:1b:ae:29:90:e8:2e:62:9e:85:af:47:
                    86:7d:8a:ce:fd:a8:07:cf:2d:a4:d2:4c:78:da:b1:
                    ff:30:4f:b7:36:c9:16:a4:01:2d:b3:b2:45:70:50:
                    19:3b:2d:c8:26:2e:23:17:14:07:cf:7f:1f:f1:4f:
                    20:6a:9a:8c:0c:10:d6:74:41:ff:e4:0a:92:83:1b:
                    95:1d:f7:12:fb:ef:e6:d1:de:20:3e:e1:6c:78:d4:
                    f2:a4:21:79:23:c3:cc:60:82:d8:8e:37:be:15:dd:
                    94:93:fa:b9:36:9d:43:5a:17:81:0d:c2:41:f8:13:
                    b0:12:4e:fc:af:69:d5:7c:fe:f7:3b:7f:a3:ef:8e:
                    ad:e6:b5:8c:09:63:32:5d:ca:d9:9b:54:05:5e:92:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:67:A8:8E:15:0E:74:BE:8D:B6:24:81:A6:6D:BD:3E:48:C4:41:BB
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b3:ff:1e:91:e2:9d:9b:3c:8e:35:da:ce:6b:11:52:30:09:
         ae:d2:2a:5b:74:4f:14:1c:fd:5d:a4:5a:a2:d7:06:fd:d2:45:
         45:87:47:0b:67:75:17:d4:35:d8:aa:23:65:48:c0:b4:6a:6b:
         f0:68:d0:2c:39:7d:d9:0d:63:15:c3:b4:7e:d2:d5:5d:d0:8b:
         ab:d1:20:b7:02:99:12:25:ec:e8:45:ab:85:cc:b6:bb:0e:1d:
         ae:d4:dc:c7:03:71:ae:c3:9c:b4:d6:ce:4e:bb:aa:e6:bc:82:
         e8:5d:28:04:69:b5:49:df:6f:92:97:62:d0:1c:63:65:5b:71:
         5f:b9:70:13:a0:0c:4e:b2:0a:8b:ec:49:a3:00:77:43:ed:93:
         88:bb:2a:cd:69:46:71:fd:e7:8e:1e:61:1e:c5:3c:b9:90:f8:
         2c:b9:64:e3:b4:57:4e:1d:f7:2d:e0:63:03:6a:89:ae:64:85:
         aa:de:6a:84:5d:aa:7e:37:21:63:71:47:b8:15:ef:a9:fc:6a:
         72:d3:3b:03:d3:bd:2f:d0:ba:43:2e:11:51:b2:c9:0c:ff:48:
         09:06:36:be:02:e5:ba:61:f4:68:98:17:b9:f1:0d:63:ba:77:
         e5:31:d9:89:7b:dd:62:b3:e8:b1:24:c0:b1:0d:45:38:b3:31:
         f5:5c:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 18:42:12 2025 by rpki-client