Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
File:                     88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft (raw, json)
Hash identifier:          6gPvu1jFbCN3NrBm9sEiGpee6JS5H74TCLs6PP43TAE=
Subject key identifier:   06:D2:A4:16:19:64:7C:A5:FB:80:8A:1C:25:87:2D:66:77:48:57:97
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       667C80689C0B8AFDC8CB88A01C214CA7529E7F8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
Manifest number:          3E
Signing time:             Fri 28 Mar 2025 21:37:04 +0000
Manifest this update:     Fri 28 Mar 2025 21:32:04 +0000
Manifest next update:     Sat 29 Mar 2025 22:51:04 +0000
Files and hashes:         1: 3136382e3139352e3235322e302f32322d3234203d3e20323632333733.roa (hash: 7sWyrI81Z37Z/i+DY8U3ZU+8DlTqXyhk06nFZC1N4dc=)
                          2: 88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl (hash: 5VJ6lfjGB3fNZHQzUc20GU5D8+FWdevuVhtmSv1gSuQ=)
                          3: 323830343a3837343a383030303a3a2f33332d3438203d3e20323632333733.roa (hash: t3jdFiVwSRO7Ad5euD4aQGfm6lT+BHgHHIvPH74tWVI=)
                          4: 3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa (hash: pEQ55vnuzI4a01rOA4B1rNFMJMHsext1maSMKYYBTbs=)
                          5: 3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa (hash: PIXO4w8k5ZO1TizrX49ZorX5Atowl5UagglafnQMKIM=)
                          6: 3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa (hash: f4pZrHVScZI9OSv+CNCol2+E/xZPM63XNFE+wvHJJdA=)
                          7: 323830343a313738303a3a2f33322d3438203d3e20323633313531.roa (hash: Ua4N1Y+zXJALqPQqLfr4TYN8F+d+KkOtpTvusoM2JX8=)
                          8: 3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa (hash: AlsOpILNDut9Uq7S2qsDodegEwgp5fJF/7EF6g5SYhg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7c:80:68:9c:0b:8a:fd:c8:cb:88:a0:1c:21:4c:a7:52:9e:7f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Mar 28 21:32:04 2025 GMT
            Not After : Mar 29 22:51:04 2025 GMT
        Subject: CN=06D2A41619647CA5FB808A1C25872D6677485797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:6a:50:21:12:3d:db:42:7d:9e:ac:ea:32:
                    4a:11:ba:20:14:6b:6c:3e:22:0d:55:d5:9a:55:2b:
                    2e:c4:62:f2:0d:81:f9:63:ed:77:3d:03:7d:46:3b:
                    83:ad:df:3d:e9:e5:7b:ae:6d:29:8a:ca:de:f8:74:
                    5d:5b:f4:ad:f8:cd:d2:89:e0:aa:b4:39:c4:e7:ad:
                    4a:67:22:cf:89:dc:b7:2f:63:ea:f4:e1:d8:0e:1a:
                    d2:28:81:9e:21:af:0f:a8:46:f0:49:82:2f:40:09:
                    32:34:72:e3:2f:32:17:32:a2:fd:7d:7e:a3:60:f4:
                    12:30:4a:f0:fa:d5:62:61:53:76:63:9c:46:ae:6c:
                    5f:9b:b2:49:6f:d3:21:37:13:f6:a1:fb:bc:86:50:
                    4b:d2:60:47:f2:bb:1f:31:30:89:d7:5a:80:39:04:
                    7b:50:80:78:1b:5e:d1:94:87:1a:32:fb:c7:3c:18:
                    b7:78:bb:46:05:ad:43:d0:11:9a:01:e8:fd:1c:2a:
                    8d:a4:72:f2:45:1f:c8:6f:f2:f9:1f:e8:2a:88:c9:
                    6b:10:0c:c7:4a:bb:dc:7e:e7:d2:f0:a2:eb:a1:41:
                    0f:c2:b7:90:b1:8a:c0:db:db:b0:1b:0d:4a:cb:44:
                    52:dd:33:47:3c:99:f5:4e:3b:c6:26:1e:51:57:81:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D2:A4:16:19:64:7C:A5:FB:80:8A:1C:25:87:2D:66:77:48:57:97
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:0a:dc:92:bb:6a:10:ea:d9:ca:30:d2:56:72:31:e4:7e:
         2d:1d:8a:a7:eb:22:98:4c:71:f9:4f:0c:7b:9b:28:25:7b:ac:
         90:48:58:ec:a7:a0:e4:e5:fb:d3:93:ad:35:e0:4c:cf:20:df:
         a7:21:de:73:88:b9:fc:4a:5d:1b:19:4b:fe:5f:da:72:0b:56:
         13:07:f4:da:ca:8e:74:88:48:e1:35:2c:16:fe:52:e8:e3:2f:
         63:47:5f:b3:6e:5a:fb:f3:42:76:b7:13:4e:5d:d4:1f:56:cf:
         45:70:47:e2:ac:2d:41:5c:40:c5:a1:fb:34:33:45:d2:3a:67:
         d9:1a:0e:6e:b8:86:1c:0d:cb:33:e9:c4:e0:73:24:3e:3b:75:
         23:46:e8:70:9b:49:3c:37:e6:13:17:ea:87:30:5b:3c:19:39:
         94:b5:70:cd:78:4d:6c:b7:9e:de:3d:7a:09:3e:e5:14:c2:70:
         c8:af:bf:c4:9c:9f:e0:1f:60:04:43:63:39:09:ee:1d:17:f6:
         db:d4:3c:26:35:08:4d:af:de:eb:d4:21:a6:41:72:df:3d:6d:
         44:5e:58:18:25:1e:eb:d1:60:8a:9b:5f:dd:e4:f4:40:59:42:
         2d:85:a9:95:5e:e0:32:5d:ad:da:b6:05:9c:1c:44:11:c0:77:
         3e:13:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:04:47 2025 by rpki-client