Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.mft
File:                     F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.mft (raw, json)
Hash identifier:          BTEiYQhR2JiduubyqYtB6W6xJ44Zgkv0kBSYqwgYrdA=
Subject key identifier:   B7:54:DB:D4:F6:5D:6E:95:F7:C9:D2:6A:6C:4B:14:D8:23:FE:24:4B
Authority key identifier: F9:F7:B1:CD:A4:04:47:60:11:A4:CC:28:A2:45:5A:83:B6:BB:5B:6C
Certificate issuer:       /CN=F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C
Certificate serial:       6536EE8C218AD9282F1882338814A4BE30128E68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.mft
Manifest number:          14
Signing time:             Wed 12 Mar 2025 11:22:53 +0000
Manifest this update:     Wed 12 Mar 2025 11:17:53 +0000
Manifest next update:     Thu 13 Mar 2025 13:43:53 +0000
Files and hashes:         1: 323830343a366335303a3a2f33322d313238203d3e20323730343539.roa (hash: kcLNwUoWNpycMxq6VWyWCiBe2W/MGm0nGLphNAB73l0=)
                          2: 3230302e32362e3234342e302f32322d3332203d3e20323730343539.roa (hash: jF65vlkJbTNdJOjja7yPgbevbVBscpEo30PZdYMwm9A=)
                          3: F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.crl (hash: X3jZperz6o2vhDOmbqbuXe5hfcbkBowtZu2kykmVkS8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:36:ee:8c:21:8a:d9:28:2f:18:82:33:88:14:a4:be:30:12:8e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C
        Validity
            Not Before: Mar 12 11:17:53 2025 GMT
            Not After : Mar 13 13:43:53 2025 GMT
        Subject: CN=B754DBD4F65D6E95F7C9D26A6C4B14D823FE244B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:19:ae:83:17:13:9e:fc:7e:c5:6b:e2:c9:
                    5e:1b:79:77:67:8b:36:1a:a5:52:84:9c:eb:a8:b5:
                    73:a2:8c:4b:2f:4f:bd:5a:7d:07:e0:b0:b7:98:cd:
                    95:ff:cf:53:4a:71:bc:d5:59:68:a0:6e:22:d3:e9:
                    9d:47:4b:ec:dc:1c:d5:dd:e6:2c:20:b1:be:23:30:
                    a0:9a:07:9a:bf:46:52:fb:2a:6a:5e:b0:bc:cd:3a:
                    20:72:6b:69:aa:c8:c5:3f:cd:8f:ef:b0:e5:3b:33:
                    c9:3b:99:b9:1b:fe:6c:e1:52:8a:6a:3b:87:7e:84:
                    c4:14:ac:1d:4f:cb:2e:d9:27:2f:1e:fb:7c:6d:a5:
                    ef:3d:fb:eb:12:f6:2e:8d:80:97:dd:15:e1:44:5b:
                    ea:e4:67:9a:53:80:0a:ec:dd:04:de:62:18:c7:02:
                    4d:81:1c:ca:18:81:20:ad:29:d7:42:b0:f0:58:ef:
                    4c:8d:fa:b0:b9:53:0c:4f:fd:4c:d3:0d:b5:69:c3:
                    08:e8:9c:1c:8d:9c:a1:3f:00:8a:9a:d2:11:ae:dc:
                    9a:81:f3:a0:fd:bf:23:98:ac:eb:20:4a:d5:f8:3a:
                    8a:50:d1:4b:17:12:e0:ff:9c:e8:4e:81:1f:fb:42:
                    72:94:f1:17:9c:1c:41:bc:80:23:88:cb:49:bf:0d:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:54:DB:D4:F6:5D:6E:95:F7:C9:D2:6A:6C:4B:14:D8:23:FE:24:4B
            X509v3 Authority Key Identifier:
                keyid:F9:F7:B1:CD:A4:04:47:60:11:A4:CC:28:A2:45:5A:83:B6:BB:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:48:89:88:23:c9:eb:a0:54:fc:90:5c:e2:64:ab:ea:40:19:
         5d:54:95:ef:1e:71:13:86:11:b8:4b:ff:ff:1e:63:d1:c4:7a:
         5b:39:3b:0d:70:93:73:2a:d0:dd:6d:52:62:29:51:52:b9:c7:
         8d:ee:4b:4e:e9:6a:c5:7c:35:e7:bf:5a:4b:5c:c8:d0:8d:c2:
         4d:eb:88:b3:2f:1b:9f:a0:87:5e:e9:af:76:a7:5e:a8:8b:d3:
         04:4e:60:3f:0d:b8:7a:39:1b:e7:e1:3b:10:18:0f:c0:1c:02:
         ea:2f:e2:cf:82:fe:4d:77:0c:86:6e:2c:9c:c9:41:85:73:2f:
         78:ad:43:8b:11:63:a9:a7:9a:23:95:f9:a7:42:8e:86:b1:18:
         ab:c2:6e:d0:15:f2:8f:a5:e8:93:84:48:4b:31:bc:8a:6e:af:
         26:77:6a:2c:67:09:13:c6:a9:51:81:ee:cb:97:8d:57:7e:bc:
         e8:56:e9:2a:6b:fb:3a:5a:2f:98:80:c1:58:5c:b5:04:c4:54:
         0f:1f:19:54:85:f9:c1:f7:14:04:65:0d:00:9e:52:2c:81:09:
         10:02:4a:f8:44:c1:c6:57:cb:9b:33:79:8a:2c:2b:fb:c9:d2:
         68:7c:04:41:cd:f2:a7:70:c8:d7:db:46:5a:37:ee:9a:aa:99:
         96:55:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----