Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft
File:                     2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft (raw, json)
Hash identifier:          dWN5cBNJATU/wt3VrHxSJiW6siqbcWjntHy+g+fOGEs=
Subject key identifier:   A2:BC:6A:51:A1:AD:E2:15:1F:D2:88:5D:A8:37:8D:91:AB:83:83:37
Authority key identifier: 2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Certificate issuer:       /CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
Certificate serial:       4B95BC6EE0EED51177FEE7533181B05080E4CB9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft
Manifest number:          01B7
Signing time:             Fri 28 Mar 2025 23:02:01 +0000
Manifest this update:     Fri 28 Mar 2025 22:57:01 +0000
Manifest next update:     Sun 30 Mar 2025 01:24:01 +0000
Files and hashes:         1: 3137392e34322e3133322e302f32322d3234203d3e20323731313636.roa (hash: WUWijeSkNbHEVQee9ybqJB1yXctmUygXB0HWpQac63I=)
                          2: 323830343a373734343a3a2f33322d3438203d3e20323731313636.roa (hash: fkivhbft/e7bs6itQOedchqInRm7GgwUw23sv1MHhBY=)
                          3: 2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl (hash: kGG8lObpQwt8P3k9gi2t/vRFV0es3x4q2VBAfheKaYA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:95:bc:6e:e0:ee:d5:11:77:fe:e7:53:31:81:b0:50:80:e4:cb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Validity
            Not Before: Mar 28 22:57:01 2025 GMT
            Not After : Mar 30 01:24:01 2025 GMT
        Subject: CN=A2BC6A51A1ADE2151FD2885DA8378D91AB838337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:93:21:8b:4a:2f:61:9f:3d:bf:82:e2:44:
                    cb:7d:fc:d5:b3:ba:02:66:77:7e:d2:cf:47:6a:fa:
                    43:3c:c8:b0:56:b1:89:20:14:ed:e2:bb:74:99:b7:
                    f8:97:e9:8b:65:d6:c2:f6:71:89:53:df:2b:cc:71:
                    02:1d:c5:8e:0c:c4:64:1c:6f:06:a6:52:ce:bc:55:
                    9e:4f:72:bf:09:28:33:0c:09:12:c0:11:71:b7:9c:
                    45:8a:b4:2b:7c:92:fc:a5:b7:2f:e8:72:1e:86:7e:
                    ca:97:56:ff:8f:07:8c:cb:5b:68:f7:98:1f:c6:fc:
                    7a:99:9d:93:1b:72:3c:ba:bc:5c:2b:a9:6a:e9:72:
                    aa:ad:32:25:b1:5a:64:b5:cd:03:d9:82:ba:66:2b:
                    7e:da:bf:46:80:35:16:10:2e:50:51:62:71:07:1f:
                    f7:a9:3b:75:23:a7:6f:ff:55:02:df:cb:6a:00:04:
                    7e:92:20:d2:59:65:ad:35:66:7f:27:89:8b:c9:ee:
                    4a:93:b7:cd:63:fc:05:5a:0f:af:ce:11:62:60:4b:
                    77:92:01:b3:03:3d:94:51:ef:48:2b:fa:2e:3b:87:
                    8f:d7:dc:ed:60:50:ac:26:3e:dd:ba:76:a8:ae:87:
                    ad:e1:41:8b:9c:e6:37:ed:58:ea:2a:ed:db:ac:d0:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BC:6A:51:A1:AD:E2:15:1F:D2:88:5D:A8:37:8D:91:AB:83:83:37
            X509v3 Authority Key Identifier:
                keyid:2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:44:f8:3a:ee:44:57:d3:75:4a:7c:0e:1a:ac:28:b1:fe:
         89:34:32:fc:6a:78:52:ab:79:ff:40:e9:91:32:17:f1:17:09:
         f3:08:cb:4e:a3:f1:7a:66:0d:c7:ce:68:ca:3c:13:6b:96:2b:
         89:11:67:dd:db:92:86:ec:ff:31:91:c2:63:fb:ff:43:71:74:
         0e:d8:ba:be:d1:e2:37:97:5d:84:d5:6e:28:a9:b8:a7:36:9a:
         e7:78:ad:b7:d5:46:e5:e3:e7:a7:73:d2:41:6d:5a:58:95:e3:
         38:b1:53:56:eb:44:1c:bf:e4:0c:fb:f1:d6:ce:08:67:d7:06:
         b0:64:57:05:88:d9:a7:dd:be:b5:df:52:bc:77:b5:35:d7:b1:
         28:09:1a:cb:ac:88:44:18:0b:73:8d:2e:8d:c0:fe:95:a9:ec:
         ed:47:78:81:a2:46:9e:e4:5a:ad:96:0b:17:9e:52:66:01:3b:
         d0:d9:7e:bd:c1:bc:62:96:29:42:92:a4:22:1e:a7:9a:f1:2a:
         ec:01:77:bd:58:bf:1a:af:39:cb:35:4e:86:b3:bf:8c:9c:0f:
         05:1c:92:d8:48:21:79:2f:4d:42:7d:36:48:dd:d3:e3:67:02:
         f2:2d:36:f6:92:86:8b:67:f4:ff:84:13:da:cd:7a:65:4e:e9:
         fb:51:c7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----