Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.mft
File:                     BFDBD735371A4093C08BE20ED8C03701114BA75E.mft (raw, json)
Hash identifier:          Q3sLhnISoLyXUgJuKHWz/T1wWIJRQKM6ZZLYcq2Um/s=
Subject key identifier:   C8:6D:5F:BD:50:CA:A5:04:0C:49:35:DC:97:C2:21:82:3F:99:60:10
Authority key identifier: BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E
Certificate issuer:       /CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
Certificate serial:       1D680D25F3441D47A5AB4D161ECBDF86A52C27CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.mft
Manifest number:          08
Signing time:             Fri 31 Jan 2025 18:42:22 +0000
Manifest this update:     Fri 31 Jan 2025 18:37:22 +0000
Manifest next update:     Sat 01 Feb 2025 21:53:22 +0000
Files and hashes:         1: 3137372e39312e3134332e302f32342d3234203d3e20323633323935.roa (hash: Tgm+F99rwULx01hLT5265aYzFgjMeo6D52JkDceb1Zs=)
                          2: 323830343a313639383a383030303a3a2f33332d3333203d3e20323633323935.roa (hash: fPj7rg7fZc0ufuW37UUqQ7tQMzP+c37sSLxXLXuCFbE=)
                          3: 3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa (hash: SV4Ikc+BF008nXvQNGgwZ+NQxBdRuoz/+tubA3Jd1sw=)
                          4: 3137372e39312e3134322e302f32332d3233203d3e20323633323935.roa (hash: vuXsjZ6MpkeMVlh22mWplGx2SmpZi83sA12r1HHzhkE=)
                          5: 323830343a313639383a3a2f33332d3333203d3e20323633323935.roa (hash: XTLItNVgJvvctiyzNO0IF6rIWSSiH4USE5jURMUztWM=)
                          6: BFDBD735371A4093C08BE20ED8C03701114BA75E.crl (hash: UfOXoaG2bSzn6d28mkwQY/hjfK3lCd/EzgEVBuHikN4=)
                          7: 3137372e39312e3134302e302f32342d3234203d3e20323633323935.roa (hash: IW47Ic/hai7mwVBl7wplwS67b0QK+R4/q0xcNbkF+U8=)
                          8: 3137372e39312e3134322e302f32342d3234203d3e20323633323935.roa (hash: Y5ohGlrLeZNYJAkPJKx42Um7ku95w++ukHn40xXvwDU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:68:0d:25:f3:44:1d:47:a5:ab:4d:16:1e:cb:df:86:a5:2c:27:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
        Validity
            Not Before: Jan 31 18:37:22 2025 GMT
            Not After : Feb  1 21:53:22 2025 GMT
        Subject: CN=C86D5FBD50CAA5040C4935DC97C221823F996010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e0:1a:3f:3f:9e:ab:9d:5b:16:ef:f8:6e:36:
                    63:e1:a3:cd:7e:12:77:ca:c4:95:fa:6a:88:06:40:
                    ac:35:e3:7f:2b:3e:08:67:04:9b:91:1f:12:0c:7e:
                    6a:9f:c2:8c:ba:44:93:ad:37:47:cd:45:71:f3:0b:
                    05:10:0b:26:0b:af:e8:77:ee:a3:ad:b3:12:26:0a:
                    54:ee:23:15:80:de:9b:9e:55:a3:ff:24:0f:dd:cb:
                    24:19:0a:55:79:02:08:c7:68:1d:77:72:fe:42:a3:
                    b1:d6:4f:a4:e5:4a:38:4f:bb:39:65:4a:de:5a:28:
                    af:78:00:dd:8d:d9:82:2c:bf:cd:7e:1f:ef:8e:a1:
                    f5:1b:93:c9:46:85:49:c2:1e:7a:d8:20:57:a1:8e:
                    fd:a2:bd:e8:a2:ed:af:a9:b8:b3:8b:dd:95:e7:1b:
                    f6:ac:44:79:81:53:4f:7a:40:67:cc:8e:d4:05:87:
                    1c:b3:7f:20:d4:47:39:77:8a:57:ee:25:c9:80:8a:
                    e0:0f:c6:34:27:14:a8:34:4e:f9:47:05:0b:84:b5:
                    34:33:9c:18:f5:df:01:df:1a:b3:e6:a5:cc:22:fe:
                    e1:b4:13:63:de:40:b2:37:59:e8:6e:cf:ec:f8:cc:
                    af:f0:4d:df:67:42:5e:94:5f:61:36:d3:75:71:8b:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:5F:BD:50:CA:A5:04:0C:49:35:DC:97:C2:21:82:3F:99:60:10
            X509v3 Authority Key Identifier:
                keyid:BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:f3:a8:e2:da:70:35:6b:af:74:91:b1:a7:a3:6e:e5:0c:
         5d:31:db:40:18:97:4a:4d:1d:11:ae:ea:6f:fa:22:88:64:b9:
         87:5a:db:fc:d3:7c:ff:20:4e:54:c1:22:b3:d8:c4:a4:ef:f8:
         02:3d:54:65:72:a9:82:bb:42:ce:21:ed:35:09:84:8f:28:68:
         0c:4a:31:1a:11:c3:2d:53:37:59:bc:c5:8a:a1:d9:75:d9:32:
         f5:55:be:54:60:e6:45:3f:03:a8:d5:66:07:9d:57:e4:f8:63:
         af:e1:f9:25:8d:2d:c4:9c:4d:7b:e6:77:87:11:c9:63:17:e3:
         ba:8d:44:7f:83:07:10:e0:6f:43:a8:67:c7:68:50:da:44:79:
         ed:1f:83:71:46:7b:cc:06:b9:8e:5b:eb:3d:f2:24:33:ec:f1:
         d7:a5:ed:1f:8a:f5:a2:24:1d:6f:33:82:d3:18:26:58:ba:25:
         b1:27:09:03:a5:8a:bd:ad:a0:77:2e:79:bb:f8:75:96:37:1e:
         83:de:ae:25:a0:cb:29:b5:34:1c:94:58:70:2b:f7:df:5e:9a:
         c6:10:f0:f1:ce:ff:25:36:f5:6d:d3:42:93:c1:a4:a5:3e:0b:
         be:85:fd:87:35:5b:45:ef:41:61:27:b8:04:9f:6e:e8:60:d5:
         42:70:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:58 2025 by rpki-client