Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
File:                     E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft (raw, json)
Hash identifier:          7EJvXt+jr27NPFhY79ctRG5jkBq6HNIfRbm73VnDCp4=
Subject key identifier:   52:CC:6C:27:11:54:36:37:7D:88:7E:A7:45:A0:B9:1E:BA:17:B2:59
Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9
Certificate issuer:       /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
Certificate serial:       7083AB21030336366FAEF87834D0CC78D48B6C40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
Manifest number:          016B
Signing time:             Fri 28 Mar 2025 17:24:16 +0000
Manifest this update:     Fri 28 Mar 2025 17:19:16 +0000
Manifest next update:     Sat 29 Mar 2025 20:46:16 +0000
Files and hashes:         1: 323830343a6430303a3a2f33322d313238203d3e203532353833.roa (hash: ANaUa4vyoixcr5Neo53gxUm6Ke6+6JB+jQKW/IcTvLM=)
                          2: 3137372e38372e3136382e302f32312d3332203d3e203532353833.roa (hash: P6rq914T1HddAurTapmwA7u0tmDUTmzlx0JuZrhiSvo=)
                          3: 3139312e352e37362e302f32342d3234203d3e20323638343834.roa (hash: TEJmS+jinMFQHlEre03Shq0+iL0S48QsIL1jZdP+dbI=)
                          4: E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl (hash: AiXnavHqFulPe90qCo4NcATFjA02k1+dp4EWAk6M5oM=)
                          5: 3139312e352e37322e302f32312d3332203d3e203532353833.roa (hash: yAE29ksmNWbuy611Jvbmn1PMGOnZfYpH3WnUp0KX65w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:83:ab:21:03:03:36:36:6f:ae:f8:78:34:d0:cc:78:d4:8b:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
        Validity
            Not Before: Mar 28 17:19:16 2025 GMT
            Not After : Mar 29 20:46:16 2025 GMT
        Subject: CN=52CC6C27115436377D887EA745A0B91EBA17B259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cb:23:ff:5b:ce:a4:6d:05:1f:a2:1a:41:e1:
                    0d:60:08:2e:37:c4:46:36:ef:fc:da:d1:6a:48:d6:
                    22:63:47:17:c4:b0:df:38:1c:00:88:5f:76:b8:b0:
                    d4:b6:9c:d0:ab:71:54:a8:a1:ef:c9:2a:44:a5:93:
                    ea:c9:df:9d:96:00:98:cd:82:91:74:dd:8a:3f:35:
                    6d:f7:3f:72:81:9c:24:2a:f6:5f:12:74:e7:9b:1b:
                    7e:1a:5f:f5:f2:b5:22:0d:8c:0b:d7:c2:f8:d6:44:
                    06:4e:a8:7e:96:d4:42:ae:1f:4a:08:b2:41:49:b5:
                    7d:20:de:f9:08:30:96:1e:69:76:58:0b:df:ff:20:
                    fc:1e:6f:fd:fc:92:3d:7b:ef:c6:1e:05:06:35:31:
                    af:71:15:97:6d:61:bc:90:ff:aa:1a:6f:2a:02:5a:
                    29:cf:cd:be:af:c4:a0:f9:a8:55:2d:5a:a6:20:59:
                    ff:90:4c:0b:31:ad:f7:77:c9:2d:ce:de:44:bd:eb:
                    e6:03:ba:cf:d6:75:9a:dc:42:1b:be:af:4a:a8:08:
                    6a:9f:f0:35:2c:df:8a:d7:3f:c0:07:7c:64:bb:c1:
                    6c:2b:c9:d4:bd:40:48:99:77:93:6e:dc:f8:c8:cd:
                    ae:99:d6:52:6f:bf:e4:35:bc:84:f8:b6:68:a8:08:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:6C:27:11:54:36:37:7D:88:7E:A7:45:A0:B9:1E:BA:17:B2:59
            X509v3 Authority Key Identifier:
                keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:11:f6:96:c7:ae:65:b7:de:a0:c8:2c:3a:f7:e9:3a:57:de:
         26:74:5c:f6:51:3b:7a:f6:f8:cd:97:b7:5b:23:73:8d:66:5b:
         e1:f4:85:60:bf:da:21:43:de:24:fc:46:35:bd:ea:4f:e9:c9:
         00:b9:64:17:4a:d2:5e:5f:38:08:39:09:19:a4:dd:8c:b6:ad:
         37:73:e8:d6:96:75:da:0a:1c:91:25:a2:3a:dd:d8:dd:35:f0:
         d8:93:b1:1c:ce:dd:b8:0c:63:0f:da:f9:6c:c6:e6:7c:ec:21:
         35:1d:a1:43:5b:e5:73:d3:2c:b3:29:7f:24:65:96:65:b7:fc:
         94:74:49:ae:74:47:c9:7b:9d:08:cb:6e:53:4a:17:69:97:e1:
         8e:09:d7:59:a9:c8:f7:34:02:ad:6e:75:f5:5a:b8:3a:e6:da:
         c6:ea:66:74:1d:d8:c0:16:cc:85:f6:e0:ad:32:1f:5d:31:6a:
         09:3d:36:9d:ed:16:9d:25:2c:26:8a:5d:25:61:cc:d3:1a:3b:
         cf:ad:66:b7:98:42:94:1f:5a:07:49:3c:7a:26:53:77:f8:93:
         c9:a7:0e:3e:f9:2a:b6:24:d8:47:92:89:d2:6f:c7:4c:8f:38:
         98:3c:e9:4f:a6:1f:d5:c7:cb:65:0d:7f:eb:aa:cc:43:f5:11:
         6a:e4:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:46:29 2025 by rpki-client