Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft
File:                     C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft (raw, json)
Hash identifier:          YEY3eUpVi7zu8OBHoHxzwk71tTH72WUmnXHsckllV0g=
Subject key identifier:   FF:5F:44:D4:31:3C:4C:6E:A1:14:BF:66:86:0E:18:7A:A7:AD:F1:45
Authority key identifier: C0:AF:97:A4:88:EE:7A:27:D1:DD:A7:B6:D5:98:27:08:54:0F:AD:67
Certificate issuer:       /CN=C0AF97A488EE7A27D1DDA7B6D5982708540FAD67
Certificate serial:       2F5976F377BA46FA2CC5517658BAC11394EB4199
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft
Manifest number:          01E1
Signing time:             Sat 29 Mar 2025 10:49:24 +0000
Manifest this update:     Sat 29 Mar 2025 10:44:24 +0000
Manifest next update:     Sun 30 Mar 2025 14:23:24 +0000
Files and hashes:         1: 323830343a346262343a3230303a3a2f34302d3434203d3e20323637333235.roa (hash: 9gYff9fBRulPwjeFuSq34+y9zPndK5lFp+taI+X7nFk=)
                          2: 323830343a346262343a3330303a3a2f34302d3434203d3e20323637333235.roa (hash: qYO7TG3jRmuwXISh7CYQ4fXo+DOyDHVTiOPPvXORBgQ=)
                          3: C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl (hash: iGpGhdSsXqld3PXqS3EoLGRbP780Nr80xntLLgUDfxI=)
                          4: 323830343a346262343a313030303a3a2f33362d3338203d3e20323637333235.roa (hash: L8BGRFiTtudvsEKPed1DZuWKkf5cvl/2AQGQ3fl16T0=)
                          5: 323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa (hash: SR67MdxGNsPvyTxgm+JN7mfkSRF6U2WY76p4K9xjI8o=)
                          6: 34352e3233332e3137362e302f32322d3234203d3e20323637333235.roa (hash: SFno6H8QV9UkvILMup+WNLlGk6gvLDk59HQUTpBQq/Q=)
                          7: 323830343a346262343a3a2f33322d3334203d3e20323637333235.roa (hash: ra1uQu46o9kDbe4atLsetzB+R64N4cO1caTZ/cL/Cuw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:59:76:f3:77:ba:46:fa:2c:c5:51:76:58:ba:c1:13:94:eb:41:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0AF97A488EE7A27D1DDA7B6D5982708540FAD67
        Validity
            Not Before: Mar 29 10:44:24 2025 GMT
            Not After : Mar 30 14:23:24 2025 GMT
        Subject: CN=FF5F44D4313C4C6EA114BF66860E187AA7ADF145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:db:f0:5f:e2:bb:3b:dc:7d:6a:a6:48:dd:
                    12:76:51:4c:97:5a:15:03:aa:90:c4:38:e5:0d:de:
                    42:58:c9:0e:96:f5:65:13:62:ac:0a:9d:af:8b:46:
                    81:31:a8:b9:2a:5e:7f:7a:30:9d:35:4a:88:93:2d:
                    2f:09:ab:fc:5e:c9:f4:7a:54:da:98:6e:0a:78:9e:
                    72:b1:6c:32:51:a7:a4:b9:c7:78:02:08:35:4a:7e:
                    19:23:7d:21:d6:b6:ec:d1:95:97:bd:14:8b:09:67:
                    72:ce:11:bc:2b:76:dd:8d:20:c5:ea:4a:ee:e8:8d:
                    97:a4:ed:24:a1:aa:9a:79:8a:81:14:71:a8:b2:d7:
                    ac:d9:39:a6:83:79:cd:49:ce:76:bf:b8:e0:ca:39:
                    30:1b:fe:a6:89:38:f6:2d:4f:cf:5d:b7:60:c6:44:
                    bc:fc:7f:26:d0:8f:b8:e7:f7:99:fc:70:fa:a4:6d:
                    16:f6:51:57:81:05:4e:e7:4d:ac:3b:19:68:01:c5:
                    01:d2:39:5d:4d:b9:03:f5:20:ea:70:d3:1f:68:ba:
                    4e:68:e7:47:d1:64:75:a8:d9:2d:4e:bb:c9:43:68:
                    00:ec:0c:b9:9c:ed:53:15:a4:ea:eb:b1:e5:82:ed:
                    8b:6a:43:4a:60:00:21:49:b0:93:b4:4a:b7:e5:28:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5F:44:D4:31:3C:4C:6E:A1:14:BF:66:86:0E:18:7A:A7:AD:F1:45
            X509v3 Authority Key Identifier:
                keyid:C0:AF:97:A4:88:EE:7A:27:D1:DD:A7:B6:D5:98:27:08:54:0F:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:65:30:5f:97:e3:bc:4f:d4:b0:b6:4b:74:60:3f:7c:42:
         6a:9f:28:c3:a7:63:e7:88:1b:b5:c9:ad:37:5e:75:6b:05:fd:
         c2:38:65:36:10:46:d0:5b:f8:60:a2:aa:87:77:35:69:e6:d8:
         14:43:e4:9d:1c:bb:a1:36:f4:a2:bb:72:a6:80:49:4c:15:3e:
         e0:fa:66:9e:22:7d:d8:a2:5f:f6:06:fe:bf:db:f7:99:3a:84:
         d1:e9:b9:64:f7:83:5b:15:e1:2d:a0:3f:79:d6:a3:ad:26:01:
         37:ff:42:67:84:13:fd:d4:cd:f8:7b:05:2e:e2:8d:87:8f:f7:
         f3:89:74:3f:b9:4e:35:4a:65:4a:e1:a6:fb:1d:43:9a:95:2f:
         9b:33:98:83:23:1d:dd:b0:b3:9a:de:3a:e5:c8:03:43:88:fd:
         5d:14:32:cb:eb:ff:1e:98:f5:18:ae:aa:86:cc:a4:06:b3:3f:
         e5:ce:77:3d:fd:ed:13:f7:4f:1a:4f:94:89:c6:e5:f5:ad:53:
         52:96:68:da:81:c7:07:ab:64:bf:26:78:58:bf:5c:f6:ce:f9:
         22:46:18:79:74:86:a3:29:46:c2:d7:7a:61:bc:49:b3:f5:16:
         6b:93:02:4e:d3:f2:3b:21:21:9f:d9:61:f0:7c:7f:ef:c8:79:
         23:00:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:22:17 2025 by rpki-client