Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
File:                     3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft (raw, json)
Hash identifier:          zmWcCTZOuOFUWYQB7fjYyuQMbYcpZTTTWfjmKf9rFlc=
Subject key identifier:   C6:54:8D:9C:AA:BB:74:95:2D:E7:92:65:D9:6C:2D:6B:C1:F0:2E:DC
Authority key identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE
Certificate issuer:       /CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
Certificate serial:       06DDC57717BD7114EE335FE498828EC721D8B7C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 07:37:38 +0000
Manifest this update:     Fri 31 Jan 2025 07:32:38 +0000
Manifest next update:     Sat 01 Feb 2025 07:46:38 +0000
Files and hashes:         1: 323830343a326539633a3a2f33322d3438203d3e20323635333535.roa (hash: erAaQCkQgmpWtthS4wzs7A8EsOSYNvqPqoqk/bq+WUs=)
                          2: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl (hash: sHU1JVYCFsHz0GYw+A7FlBgE3bOpzOqI2bofb+i4YoA=)
                          3: 3136382e3230352e37362e302f32322d3234203d3e20323635333535.roa (hash: IQwtu0EPeOgM54QXknflU+guD+qyTZI8SVaCNHB3fng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:dd:c5:77:17:bd:71:14:ee:33:5f:e4:98:82:8e:c7:21:d8:b7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
        Validity
            Not Before: Jan 31 07:32:38 2025 GMT
            Not After : Feb  1 07:46:38 2025 GMT
        Subject: CN=C6548D9CAABB74952DE79265D96C2D6BC1F02EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:6a:66:71:8f:9a:53:e1:8c:bd:ed:19:92:
                    8b:3b:21:36:0b:5e:1a:49:d5:07:16:2e:95:31:91:
                    40:d9:6b:64:02:f8:c6:1f:5e:7f:9f:a6:cd:fa:89:
                    0c:92:29:96:a2:99:26:74:6d:67:a6:28:91:e5:6a:
                    fb:b0:56:4d:88:94:20:0f:9b:de:df:86:51:8d:60:
                    e6:f9:cd:3f:d0:35:7d:02:e8:3e:11:55:c2:31:49:
                    41:16:e9:4a:a7:fe:e9:6c:b5:54:31:b6:07:e6:1a:
                    9d:32:b1:3a:38:26:77:54:dd:c9:65:f2:34:59:ab:
                    61:d8:a2:75:69:39:20:15:fd:ec:51:f3:77:f6:e1:
                    b5:38:2d:8a:7d:8e:ff:e3:b6:35:61:7e:e5:f5:d7:
                    2b:d5:29:14:05:7a:c0:da:21:e3:f9:7a:9b:dc:9c:
                    99:59:56:3f:71:f0:43:18:cd:98:e2:ae:0f:47:44:
                    92:29:d4:c1:6d:e9:95:fa:6f:1d:d4:fb:93:c8:eb:
                    56:ec:73:3d:c0:23:e4:1a:b6:cd:bc:e3:8d:2a:12:
                    4e:2c:8f:46:1b:25:38:ee:20:4b:03:45:f4:0b:78:
                    55:ad:5d:16:6d:f7:33:d1:b5:0a:56:70:68:64:e5:
                    fa:03:26:4c:b0:2b:b8:28:7a:fe:d6:77:75:4d:90:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:54:8D:9C:AA:BB:74:95:2D:E7:92:65:D9:6C:2D:6B:C1:F0:2E:DC
            X509v3 Authority Key Identifier:
                keyid:30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:20:7c:5e:31:cf:cd:cb:d9:4b:2d:b4:52:99:0e:18:6f:94:
         4e:7f:26:41:2b:bd:9e:15:5f:8a:33:4a:cb:18:f8:6f:e8:e9:
         b2:31:23:21:22:a4:b0:8f:a9:4e:30:ba:7e:d9:5c:f2:1e:e7:
         2c:3e:85:81:77:4d:ff:1c:7d:0b:3f:1c:f2:64:7c:47:a3:cf:
         ad:e2:3c:f0:77:d9:1c:36:5d:4b:35:7f:43:ca:d7:14:23:80:
         1b:7d:01:f3:6a:a1:b7:1c:28:f7:8f:8f:72:50:4c:06:3e:07:
         1a:0a:4b:a0:27:46:cb:10:64:bf:fc:d6:7c:ce:68:83:11:6b:
         f0:a2:03:af:6f:1b:cb:9b:90:27:58:d0:0e:58:13:27:dd:58:
         b4:ae:99:9b:f8:da:bd:06:2f:9f:a8:2e:a7:1b:1a:e1:fb:9c:
         81:81:e4:be:5f:39:ca:7b:a0:47:49:92:65:af:80:08:9f:74:
         71:7f:ec:ba:cb:00:cd:33:3b:ef:4c:6d:c2:36:42:35:22:fd:
         0e:4e:d5:3f:61:dd:f2:29:01:2b:9c:8b:3c:d2:a3:fb:59:e4:
         55:8b:16:fb:a5:c8:0d:88:05:5d:e0:1f:fc:a6:3d:00:aa:e4:
         09:a8:5e:97:46:4f:03:4e:ef:60:0b:ce:54:5c:0c:d8:59:c7:
         18:c7:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:23:32 2025 by rpki-client