Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.mft
File:                     8BD6A70FA78C09BB2792766E310F7002F0203A65.mft (raw, json)
Hash identifier:          Su9OLNRoC5pRkYvlOU8Cv6rzh7JOSNlRHspw3cqrkaE=
Subject key identifier:   86:44:8E:36:76:E0:5A:E6:4D:6A:EE:22:BD:C5:DC:39:02:76:F7:02
Authority key identifier: 8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65
Certificate issuer:       /CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
Certificate serial:       753D6581B545D2C7374DCCC122FB290541EE6BC7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.mft
Manifest number:          46
Signing time:             Fri 31 Jan 2025 12:38:11 +0000
Manifest this update:     Fri 31 Jan 2025 12:33:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:39:11 +0000
Files and hashes:         1: 3134332e302e34382e302f32322d3332203d3e20323633353434.roa (hash: LzkVSzTqvnVphNoB0B2QtupdBPIOLHSdEFccZfmX5Ks=)
                          2: 323830343a313361383a3a2f33322d313238203d3e20323633353434.roa (hash: LGiGzXUka9SxygY5Ls1v+iaiwfJya5owIHQuUCWlKZU=)
                          3: 3137302e37382e3234382e302f32322d3332203d3e20323633353434.roa (hash: bTvm0kdO66eGQ1ZkNJGiAzMeI0eOII+6Jf8MlO7bZQg=)
                          4: 3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa (hash: L4CbNotfKzMEm4VlU7+9G9/LKsAD9fyTBvSnS0tsbpQ=)
                          5: 8BD6A70FA78C09BB2792766E310F7002F0203A65.crl (hash: R3rzF7CmJIvF3n0+5Sv9wlHcJQJLkJf0aZaViJxaQRk=)
                          6: 3139312e352e3234302e302f32302d3332203d3e20323633353434.roa (hash: YTONAkhAAE1GKUaRDf4SBV+lf7IEtkjXZm8yu3bM36s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3d:65:81:b5:45:d2:c7:37:4d:cc:c1:22:fb:29:05:41:ee:6b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
        Validity
            Not Before: Jan 31 12:33:11 2025 GMT
            Not After : Feb  1 14:39:11 2025 GMT
        Subject: CN=86448E3676E05AE64D6AEE22BDC5DC390276F702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:9b:ca:7c:6d:85:5c:60:96:b3:74:dc:51:
                    38:d4:42:e9:63:0b:73:fb:a4:5d:62:fa:99:67:5e:
                    09:36:0b:65:1d:b7:81:e6:de:78:dc:40:dc:82:07:
                    d8:e5:2c:2a:d7:d2:a7:27:93:0b:f9:ce:59:7e:73:
                    e4:58:d4:f7:4b:aa:d6:d3:8b:e2:b0:52:91:04:5b:
                    29:cf:61:d9:37:82:7a:4f:06:d4:b7:36:45:48:b5:
                    ec:14:53:6c:df:01:ff:c3:de:04:e0:b8:20:43:ca:
                    5d:06:b2:6a:91:0e:36:75:68:b0:a5:da:d9:f5:25:
                    fe:e5:86:dc:33:22:cf:7d:0b:f8:00:a5:30:a9:8c:
                    75:f0:f4:80:14:50:93:77:43:e8:95:fa:db:ef:6b:
                    ea:fb:55:be:7e:95:c4:fe:94:f7:89:f5:27:64:70:
                    75:ad:02:58:28:87:a0:dd:58:93:4d:dd:a4:13:ee:
                    06:18:6a:96:3a:b9:e3:13:7f:7a:72:ae:ba:fa:ec:
                    dd:75:df:7b:90:ab:52:54:54:f9:48:52:f0:42:23:
                    00:be:2d:85:03:8e:44:51:f8:1b:0d:06:3c:54:35:
                    e6:4b:a4:e6:f0:23:e7:e6:73:69:6b:1f:ee:4f:d5:
                    c6:78:2f:43:5f:63:43:02:ed:5f:d8:5c:e2:62:7c:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:44:8E:36:76:E0:5A:E6:4D:6A:EE:22:BD:C5:DC:39:02:76:F7:02
            X509v3 Authority Key Identifier:
                keyid:8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4c:bf:50:37:13:ea:c6:5e:a8:14:3d:9f:b0:45:dc:2b:88:
         46:7f:a1:38:36:9c:1a:d0:46:48:84:f6:49:cd:1b:e5:53:19:
         b4:93:9f:fa:47:d5:a9:db:60:71:14:bf:8d:0e:69:68:e6:0f:
         d0:a6:14:0f:3a:91:53:72:a7:15:24:12:d9:91:60:9d:7e:1f:
         17:41:5a:4d:af:6b:67:89:8c:0f:0a:31:2b:e2:92:ff:4c:d2:
         04:89:3e:66:c5:a3:32:b3:5e:83:88:8a:29:b9:1e:40:39:74:
         9e:c8:a9:1d:9c:7d:f8:db:cc:3e:da:b6:19:f8:ea:9a:e5:63:
         a1:51:d5:2e:8c:88:4e:f2:4a:54:71:c0:83:60:75:96:38:e2:
         8b:0c:32:0c:a1:6e:84:26:15:ff:8e:56:04:f5:e6:fe:5b:b2:
         9f:14:9a:a3:89:22:07:63:c2:2a:76:63:43:f9:ca:6e:9b:2b:
         28:fc:00:0d:73:6c:a0:5a:98:be:0d:7b:f0:18:af:52:a5:92:
         93:64:bd:ce:8c:de:bb:8e:f5:63:2e:07:cb:53:64:10:54:62:
         a8:1d:0a:dd:7e:2a:e3:7a:2a:9b:68:ff:78:4e:96:49:bf:f7:
         d0:86:b4:2e:b3:84:4d:c3:33:29:6f:e8:1c:db:bc:68:6a:76:
         e9:8e:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:53:43 2025 by rpki-client