Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
File:                     FAF093F291860536EFFC93934E77DC96693302DB.mft (raw, json)
Hash identifier:          XG4g1yAluvi97KgT5mOk2ZTjrqeXow7I9xqrHxBEdy4=
Subject key identifier:   E1:3F:3A:3B:3C:95:38:D9:3E:A6:8F:11:29:B6:AF:6E:76:5F:92:F8
Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
Certificate issuer:       /CN=FAF093F291860536EFFC93934E77DC96693302DB
Certificate serial:       0DB14B1F06A465CD01954A40A39FF63F85993FFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
Manifest number:          9D
Signing time:             Fri 28 Mar 2025 19:49:36 +0000
Manifest this update:     Fri 28 Mar 2025 19:44:36 +0000
Manifest next update:     Sat 29 Mar 2025 22:09:36 +0000
Files and hashes:         1: FAF093F291860536EFFC93934E77DC96693302DB.crl (hash: Ge3xSUTB9Nd5I01xPO68xu/MKRBHjsEhkoRaDq9pkGs=)
                          2: 323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (hash: VoAdhZL4dy4CwwQ5dn/EUOWDbJltxLahEw3mn1FyuU4=)
                          3: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (hash: EhmTEC5QC+H+pd2HDVqUylhWWO+vL5RhWs9lWiFoqmo=)
                          4: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (hash: +6i+XKwWimizfoRbdVJb2YohVqqa/xjfO3uX3N5x8Vw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b1:4b:1f:06:a4:65:cd:01:95:4a:40:a3:9f:f6:3f:85:99:3f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB
        Validity
            Not Before: Mar 28 19:44:36 2025 GMT
            Not After : Mar 29 22:09:36 2025 GMT
        Subject: CN=E13F3A3B3C9538D93EA68F1129B6AF6E765F92F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:ba:d9:50:3e:eb:ed:d3:82:ce:db:6f:6e:
                    2f:f4:40:0c:7d:de:c7:73:fa:21:6b:e7:8b:72:2c:
                    58:8d:06:e8:19:1e:a8:3c:52:be:b7:36:74:e5:85:
                    aa:af:14:16:b7:af:9a:da:65:ab:7f:61:4c:ef:e0:
                    21:99:40:7d:7e:fb:a1:fb:39:62:db:38:d4:c2:85:
                    cd:fc:da:03:ac:5b:fc:95:55:95:8b:d3:c9:4d:96:
                    cf:22:4f:1f:91:fa:91:59:b6:72:6b:7a:d8:28:71:
                    f0:78:6c:15:3d:20:91:70:90:63:fa:7a:26:94:e7:
                    c6:a9:42:b5:bc:1b:7e:04:2c:a4:50:c4:da:12:ce:
                    c5:d8:ca:ce:df:61:50:a5:53:aa:2f:92:1f:05:bb:
                    6f:64:9e:b8:16:54:50:d2:36:c4:3d:f7:db:8a:19:
                    7e:5e:51:d2:a1:cf:66:0f:d9:13:94:0c:0a:f2:0e:
                    95:f0:bd:b4:b6:b4:06:15:3c:a6:d5:21:ed:2e:eb:
                    61:3c:10:af:a6:dd:9c:fa:4d:33:ad:3e:2f:ef:de:
                    d2:cb:19:72:27:3f:86:1f:1e:41:44:bc:4d:ad:27:
                    b0:ad:0a:54:55:84:84:31:3c:80:91:0e:02:c7:c7:
                    bd:fb:eb:18:84:7c:35:65:e9:0c:ca:5f:17:47:22:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3F:3A:3B:3C:95:38:D9:3E:A6:8F:11:29:B6:AF:6E:76:5F:92:F8
            X509v3 Authority Key Identifier:
                keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:0b:a5:be:3c:b3:17:e5:54:89:a2:dc:8d:fd:4a:16:a0:
         38:7f:39:1d:da:24:26:6f:e0:85:d0:c4:b0:c5:9c:53:f8:a9:
         e3:e4:6d:ef:55:df:45:dd:6e:ce:2e:a3:16:5a:33:f2:5e:3d:
         a2:e6:a9:5f:84:28:47:5a:7e:64:b3:07:d1:8b:a2:2e:0c:8c:
         ed:71:49:f0:69:3d:2d:ca:18:6c:1a:4f:7d:09:b5:d8:e2:db:
         68:4e:11:10:d9:12:c2:10:ed:81:53:ef:84:e9:3c:8a:c7:5e:
         0e:e2:c8:0d:a2:80:37:5d:b3:e4:51:41:cd:d8:ae:79:04:ae:
         e7:ee:8d:cb:b0:80:4e:7d:ed:8f:9a:bd:2b:8c:b9:ea:3a:a6:
         48:8b:31:f5:fe:5c:80:32:4a:4e:87:f5:27:eb:ca:6b:8f:d0:
         df:b4:35:db:3f:df:1a:85:3c:ba:d4:59:d1:2c:f2:0b:ea:12:
         59:73:cd:0e:4d:e1:7a:39:b0:48:1a:2a:4b:25:d3:57:c2:96:
         13:1c:7c:f9:f7:95:76:a4:d6:d0:51:29:c7:64:58:ef:eb:b7:
         14:92:d9:4b:f9:6e:f2:b2:11:6b:2f:5a:16:aa:f0:c0:e8:c6:
         7c:89:08:7d:ca:72:ee:f3:0e:c0:d6:56:a8:99:62:b0:7a:75:
         3d:92:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:04:37 2025 by rpki-client