Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft
File:                     211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft (raw, json)
Hash identifier:          p6+5G/mW1hhUGJ3G33hQY9Yxo6gGPau1rRtK07njSu8=
Subject key identifier:   D0:D4:DC:DA:9F:9D:F0:43:C5:58:AE:A8:0C:2E:6A:56:88:EB:52:F8
Authority key identifier: 21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8
Certificate issuer:       /CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
Certificate serial:       2E7FB0AE7DE90AF1961EB99D49EE0EEBCA6915BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft
Manifest number:          6A
Signing time:             Thu 27 Feb 2025 13:41:46 +0000
Manifest this update:     Thu 27 Feb 2025 13:36:46 +0000
Manifest next update:     Fri 28 Feb 2025 16:06:46 +0000
Files and hashes:         1: 323830343a353562383a3a2f33322d313238203d3e20323637393532.roa (hash: /73K3hTxHSTHeFeJurKGp4NJmSxvPNjOmRCDWd4mo9s=)
                          2: 211BF480C17107F7AE6882CC3FE220E37AFE75F8.crl (hash: BgFApdbtfgdTnajYfwyPXNOA9RTE57Kv9HXDBBLqUPc=)
                          3: 34352e3136362e34382e302f32322d3332203d3e20323637393532.roa (hash: e2suDiJaEpXBSlrJ1/EXQi7hg5S1UF3n3Et8JCDE39Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7f:b0:ae:7d:e9:0a:f1:96:1e:b9:9d:49:ee:0e:eb:ca:69:15:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
        Validity
            Not Before: Feb 27 13:36:46 2025 GMT
            Not After : Feb 28 16:06:46 2025 GMT
        Subject: CN=D0D4DCDA9F9DF043C558AEA80C2E6A5688EB52F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:8e:8d:4c:ea:d0:22:33:90:b2:24:08:c0:
                    da:93:06:67:c1:9b:c7:fa:9f:34:2f:cd:d0:f9:67:
                    6f:59:0b:29:d7:e2:61:09:60:45:b4:da:93:3a:03:
                    0f:a3:3f:52:9f:f0:0b:69:85:c4:9b:72:d9:53:6f:
                    25:ed:ce:a1:ce:17:eb:e7:12:7a:0b:ea:c1:a4:f2:
                    dc:35:0a:6d:b7:3a:a8:fb:d5:d3:2f:c1:a6:20:20:
                    02:e4:31:b1:ac:d0:0d:3b:43:01:b8:63:9b:a4:84:
                    80:14:bf:5a:a7:d2:84:d8:0e:85:73:31:d4:9a:ee:
                    d7:7d:c4:16:d5:9b:94:c7:97:d6:e7:d7:1e:8d:fc:
                    c0:86:c8:3b:35:ac:87:35:40:bd:1d:4d:df:38:d3:
                    14:39:58:d2:33:79:56:3a:0c:bc:30:06:0a:8f:8e:
                    5e:73:b7:fa:ce:61:3f:df:19:b5:0b:bc:f7:b6:fa:
                    72:0a:da:a7:7e:c9:af:0c:8e:b4:f7:24:a8:44:5d:
                    52:32:f1:22:fb:00:62:f5:0c:f7:a3:74:29:93:f0:
                    e2:f0:83:7c:35:8c:65:43:db:20:eb:83:d0:06:cd:
                    ea:30:d3:5b:b6:24:25:f6:ce:e1:ca:50:b5:2b:ea:
                    99:54:33:f5:4b:87:a1:89:75:2a:2e:c3:b9:f9:19:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D4:DC:DA:9F:9D:F0:43:C5:58:AE:A8:0C:2E:6A:56:88:EB:52:F8
            X509v3 Authority Key Identifier:
                keyid:21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:09:f2:eb:0d:db:68:66:27:33:8b:8b:b9:d4:60:98:f4:8a:
         0a:5f:11:14:2f:a1:95:4a:8f:aa:a5:94:e8:97:10:d0:d8:86:
         40:e3:5d:4f:a8:0d:c8:f2:3b:38:fa:f6:a8:36:06:0d:17:dd:
         c1:3e:30:86:c7:6d:a8:f8:61:ba:ee:6b:9f:c9:6f:35:fc:fd:
         6a:4d:1b:72:46:26:ed:40:0d:ce:e9:ca:98:3a:68:24:ab:f6:
         f4:63:73:cd:77:26:f2:a3:a8:0d:fb:df:dc:b9:f1:65:a7:5a:
         63:80:91:74:51:3c:16:81:26:d7:63:11:b6:3d:d5:ae:66:9f:
         24:b6:55:d4:1f:63:95:e6:6f:63:75:00:cd:db:e8:70:1e:3b:
         b3:26:65:70:6a:eb:97:6b:b6:85:c3:75:10:d0:6b:c1:6c:cb:
         a9:6b:66:15:3a:8a:fd:80:8a:b8:86:bb:5a:ad:71:4e:f9:25:
         08:3a:a5:8a:26:2f:59:9d:56:01:d5:cf:1c:9c:63:68:c0:09:
         5f:11:f7:f5:d1:fd:eb:04:47:c5:0d:6a:51:42:58:35:9e:5b:
         96:0e:b7:f3:84:32:63:f0:21:e9:21:fa:a6:8a:db:c6:5f:01:
         8d:dc:dc:3e:8b:d7:08:14:2c:b9:0c:da:17:c9:57:81:89:7a:
         a8:cc:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:42:44 2025 by rpki-client