Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.mft
File:                     5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.mft (raw, json)
Hash identifier:          QzmZ5T5XasM7KT5nLNTRAZUP+mM9dqH2PsztmzJgKaI=
Subject key identifier:   4C:6F:86:5A:33:24:4F:E7:A0:74:39:87:83:E8:AE:C1:A6:40:C6:E2
Authority key identifier: 5B:0D:B9:32:4C:BC:0F:FD:24:57:26:6E:0D:95:99:8A:2E:EA:3B:74
Certificate issuer:       /CN=5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74
Certificate serial:       11054A39554940B22F491E53608326DFCC313A2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.mft
Manifest number:          FB
Signing time:             Fri 28 Mar 2025 23:13:07 +0000
Manifest this update:     Fri 28 Mar 2025 23:08:07 +0000
Manifest next update:     Sun 30 Mar 2025 01:33:07 +0000
Files and hashes:         1: 5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.crl (hash: 1lp79g6581QT5b1y9+Aj4IjEiqTURwyeRJsuMM/h9lo=)
                          2: 32342e3135322e38382e302f32322d3234203d3e20323730343839.roa (hash: jRcsx1bAzuVM96GUHyppno/SAK1Qpg1Milx5tbf3ocE=)
                          3: 323830343a366363303a3a2f33322d313238203d3e20323730343839.roa (hash: TVMVrGKO974sx7xshYszkMI5IHN56JhF9uDcC/p7CXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:05:4a:39:55:49:40:b2:2f:49:1e:53:60:83:26:df:cc:31:3a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74
        Validity
            Not Before: Mar 28 23:08:07 2025 GMT
            Not After : Mar 30 01:33:07 2025 GMT
        Subject: CN=4C6F865A33244FE7A074398783E8AEC1A640C6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:60:dc:de:c4:98:f2:d7:e3:a3:44:ac:9d:
                    d4:1e:16:2e:90:31:b7:23:b0:88:27:a5:a0:1d:23:
                    48:9d:be:0b:21:3f:e6:69:6c:e7:39:68:90:69:a0:
                    a6:ab:79:79:84:4c:ab:29:7a:a4:de:7a:c2:e6:73:
                    0d:0d:38:95:42:e2:c5:d8:77:88:c2:80:35:f9:07:
                    3c:59:66:11:d9:04:cd:a0:cc:e2:3e:19:9c:c8:cb:
                    47:a4:18:fd:7c:b6:d1:e2:4e:8f:0b:43:3b:4c:23:
                    66:d8:47:4f:87:26:29:93:85:6e:63:c3:81:ee:42:
                    b1:55:ac:12:f7:ba:30:5f:65:71:0b:24:03:23:af:
                    a5:23:1a:5a:4a:be:6c:15:d8:81:15:ab:c0:42:e9:
                    3a:20:df:e2:54:7f:c0:a9:ec:06:f4:29:de:11:78:
                    22:45:39:5a:b3:aa:84:f8:e6:30:0f:89:55:41:f4:
                    20:49:69:1d:88:5d:05:a5:73:ac:88:31:80:f2:cc:
                    c8:51:61:5f:95:21:67:14:9b:ba:48:55:4f:bb:dc:
                    2d:3d:78:2b:22:38:db:71:8c:84:d8:9b:42:89:49:
                    0a:a9:9d:ad:a6:9b:e1:a1:8c:97:2f:8c:67:19:46:
                    dc:d0:f7:2d:81:c3:4e:9e:78:ad:73:de:15:f0:c7:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6F:86:5A:33:24:4F:E7:A0:74:39:87:83:E8:AE:C1:A6:40:C6:E2
            X509v3 Authority Key Identifier:
                keyid:5B:0D:B9:32:4C:BC:0F:FD:24:57:26:6E:0D:95:99:8A:2E:EA:3B:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H271QMdvWExEAdwHK57gTuwdKJeknrKdce4hTcpi2nDo/0/5B0DB9324CBC0FFD2457266E0D95998A2EEA3B74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:2d:94:00:45:0b:76:fd:46:cb:51:9f:a2:12:c0:b7:8f:
         47:cf:b9:db:41:f8:9c:02:7f:26:90:34:e9:e0:f8:92:02:75:
         0f:95:e6:6d:ca:46:ba:aa:e2:48:3c:5d:d3:ff:fa:40:bc:f9:
         04:9e:19:ac:38:b4:87:95:89:fb:13:0a:81:72:a9:a7:a5:3e:
         a4:25:cd:6c:e5:d6:88:da:80:6f:16:c1:55:2d:e8:ee:f2:a8:
         b6:7c:46:db:16:76:da:f6:14:4b:9f:68:b3:31:6c:ff:72:96:
         9d:3c:f2:77:f4:50:4a:3b:69:fe:24:1a:a3:a6:e3:e2:9d:d4:
         0e:67:8a:64:75:b2:28:b6:fa:a8:8e:c5:17:36:c4:66:ef:72:
         fb:54:fa:e2:c1:bc:78:3f:a6:6c:11:d4:06:e4:34:de:d3:2b:
         86:2e:48:b5:66:f8:af:3b:00:eb:3a:3a:6b:ec:01:35:c8:d5:
         d6:21:ee:e9:c3:39:ae:11:01:6e:28:3d:fd:7d:e2:82:ba:47:
         7f:08:49:92:21:dd:5a:7d:53:a7:ba:34:a5:23:c9:eb:c8:08:
         ba:84:3f:f5:c4:c3:a7:2d:6b:91:9b:d7:ed:b7:2f:80:ef:ef:
         00:19:fa:31:1d:6e:ee:d0:7a:4f:69:4b:b3:a1:d8:d6:70:a8:
         f4:6b:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:11:42 2025 by rpki-client