Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft
File:                     A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft (raw, json)
Hash identifier:          W3TrsK51dxLLpjlz0ZdOiieP7Pr2x88Oa48jPjWPA7I=
Subject key identifier:   5D:6E:4B:A7:2F:F8:FF:54:BF:6A:91:86:7B:BF:81:71:13:DB:B5:8E
Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
Certificate issuer:       /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Certificate serial:       432DFC1E5D980FFB5D77F5882FE3B89BC6261BFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft
Manifest number:          7F
Signing time:             Sat 29 Mar 2025 10:46:59 +0000
Manifest this update:     Sat 29 Mar 2025 10:41:59 +0000
Manifest next update:     Sun 30 Mar 2025 11:52:59 +0000
Files and hashes:         1: 323830343a336230633a3a2f33322d3333203d3e20323636313236.roa (hash: b78eH9iE1lP2ssDkb0TNloMMWzmhsxuPlTJnnpjNVZo=)
                          2: 34352e362e37322e302f32322d3234203d3e20323636313236.roa (hash: fqgs2eFmIRLdUTGy5kMf68dcobrxQa4f6/bOtmUuRGc=)
                          3: A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl (hash: bkDGhCgxnq1XI0poHxbuR5/2/aOOdd6A/Dui0NgC1Pw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2d:fc:1e:5d:98:0f:fb:5d:77:f5:88:2f:e3:b8:9b:c6:26:1b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
        Validity
            Not Before: Mar 29 10:41:59 2025 GMT
            Not After : Mar 30 11:52:59 2025 GMT
        Subject: CN=5D6E4BA72FF8FF54BF6A91867BBF817113DBB58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:4c:f9:7a:04:b8:ec:ed:ee:61:fd:89:54:
                    1a:69:bc:41:30:26:c0:b4:f5:d8:e4:1c:23:cc:74:
                    07:6c:00:07:65:50:9a:82:aa:58:1e:52:44:ff:35:
                    54:bc:61:5a:ab:0f:52:b2:61:5f:00:95:8c:0d:b6:
                    a2:be:91:db:bf:0f:50:3b:1d:42:54:18:ee:06:65:
                    99:da:c8:f2:cf:2a:89:c9:40:b6:a7:8c:4a:82:30:
                    2c:4d:55:e4:46:89:a3:1c:ec:ad:42:3f:b4:56:0f:
                    6e:8f:6a:40:84:7d:41:14:03:bd:e2:8c:23:06:09:
                    21:3b:dd:75:4b:53:c2:d1:d9:40:f5:7d:2a:b4:08:
                    5d:94:ff:ea:2c:0e:ab:9d:07:0b:1b:5e:c5:09:d5:
                    c3:67:e3:62:2d:50:e5:d3:e4:05:c2:e4:67:c7:7e:
                    49:7d:16:87:d6:bc:81:35:7f:8e:aa:f7:45:15:0d:
                    53:c6:e8:a8:f1:2f:67:6f:ff:f1:dc:da:e7:44:18:
                    70:5e:e4:41:95:54:a4:50:96:db:a1:00:90:56:51:
                    07:88:1c:b4:de:6f:23:64:3c:ef:a0:a8:8b:dc:d9:
                    9d:25:82:b8:ac:c8:f1:61:5f:b2:ca:78:2a:60:88:
                    4f:dc:47:4f:3e:a8:2b:68:c9:50:c6:84:52:41:36:
                    fa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6E:4B:A7:2F:F8:FF:54:BF:6A:91:86:7B:BF:81:71:13:DB:B5:8E
            X509v3 Authority Key Identifier:
                keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:1c:2b:fb:04:12:e8:3b:56:4c:f1:43:6d:27:8a:a5:fc:
         04:cb:43:e7:14:bb:0f:b1:a2:a8:69:c8:be:a0:f5:84:4b:d6:
         48:82:45:4a:cc:1f:da:58:07:89:c5:68:bf:03:9b:ab:e8:e4:
         1b:70:44:f2:cb:fa:6e:32:9a:24:04:5d:aa:5d:ba:52:48:f3:
         64:38:c5:e1:c6:84:53:9a:f9:2c:01:4a:11:a1:00:41:28:7e:
         c1:32:18:d9:83:bd:99:44:75:73:2f:ad:7c:18:50:1e:0e:06:
         fa:b7:12:ee:d0:d2:a9:50:60:24:f6:38:7d:b2:af:ff:f6:57:
         9e:52:b0:f0:87:dd:fc:3b:70:49:3c:b6:6b:45:ff:3e:d8:9c:
         07:9a:24:38:be:22:d6:7c:6b:3e:2a:63:92:36:ce:01:c6:be:
         bb:8d:af:70:fa:af:52:59:8c:99:7c:27:73:6b:00:ca:5f:0a:
         7c:e3:44:95:5d:3a:7e:fe:31:d9:fb:cf:1a:d4:58:6a:d0:47:
         67:25:0f:05:89:01:28:59:11:26:16:ca:02:6b:51:01:86:0c:
         68:d8:18:8e:47:7e:b5:23:50:3e:2f:c4:3f:7e:91:aa:3f:37:
         42:2d:f2:af:99:0b:db:3c:9c:3d:ed:81:2f:78:5a:2c:34:85:
         3c:96:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:56:38 2025 by rpki-client