Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
File:                     AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json)
Hash identifier:          IvnZ3XsEnhpUShiY0d91OR+FZrEbh71VeojVz9q+5bM=
Subject key identifier:   A2:48:C2:19:EA:35:1F:9B:DA:BC:BF:59:98:A0:06:DD:CA:8A:BD:8D
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Certificate issuer:       /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial:       6AE27296D774E20F4FD92ABDCFD445B92AA8868C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
Manifest number:          3C
Signing time:             Fri 31 Jan 2025 12:39:11 +0000
Manifest this update:     Fri 31 Jan 2025 12:34:11 +0000
Manifest next update:     Sat 01 Feb 2025 13:08:11 +0000
Files and hashes:         1: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: P3iRqeK3Yv57QU7Bwadb2mGTtOHbUHSsYSW0mi15khA=)
                          2: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Ae2efMgnwM2PCNT7dU75s66Sccj5kzLKU0a/b++2GsQ=)
                          3: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: B4rsolHKzdBSdWsn0reHLT204JsoZB6p/OzwDYpGoTc=)
                          4: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: W6Il1nJqq5qqLa4TPlQ/OzjTUK08KOF0OrC0Ec1PXjE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e2:72:96:d7:74:e2:0f:4f:d9:2a:bd:cf:d4:45:b9:2a:a8:86:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Validity
            Not Before: Jan 31 12:34:11 2025 GMT
            Not After : Feb  1 13:08:11 2025 GMT
        Subject: CN=A248C219EA351F9BDABCBF5998A006DDCA8ABD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:44:d1:93:ca:30:c0:3a:00:5a:d2:3d:7b:
                    d2:53:79:47:5f:d1:f7:05:90:96:b7:03:69:d2:b0:
                    36:15:fb:68:ec:95:dd:2b:51:d7:36:32:6b:1f:d4:
                    8a:82:a4:8f:d6:e4:ea:13:78:c1:10:3c:6e:8f:c2:
                    3d:a3:15:ed:9e:cd:78:5b:39:0d:00:d5:c4:8b:81:
                    c1:37:eb:15:e8:14:20:42:ed:46:83:f0:d6:4b:64:
                    b8:f3:2e:6a:de:20:f4:e6:05:f2:f6:38:2e:58:f0:
                    17:8b:d0:dd:4d:46:9d:91:b4:69:aa:0f:98:71:81:
                    b7:e2:4d:23:96:20:e4:df:a0:6a:07:19:71:c9:b3:
                    57:b8:7b:61:74:1f:89:96:02:ac:4b:bc:1e:e4:62:
                    01:54:55:f9:ac:1e:d6:62:fd:12:48:95:be:55:12:
                    7f:bc:9a:6a:6f:6a:e9:29:81:ad:93:97:aa:eb:f1:
                    e1:44:38:95:8c:7b:fa:a2:35:51:52:c7:a0:88:05:
                    8d:d5:a3:59:e1:02:84:ce:0b:5e:0a:ab:3c:d9:3c:
                    64:7d:c5:91:e5:15:ac:46:1b:4b:6e:f8:b2:22:35:
                    af:a0:e2:06:07:2b:a4:17:ee:b2:c4:eb:71:06:00:
                    95:ae:72:89:c3:25:0c:23:ea:d6:74:f4:f4:df:2c:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:48:C2:19:EA:35:1F:9B:DA:BC:BF:59:98:A0:06:DD:CA:8A:BD:8D
            X509v3 Authority Key Identifier:
                keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:db:f3:30:32:fc:fb:49:7b:a4:f6:1b:2c:26:29:64:90:f4:
         1f:82:21:ea:8b:ac:2e:a1:56:52:65:a2:a0:f3:58:03:f7:a9:
         f1:b2:1b:79:30:2b:f7:37:83:21:40:79:f3:8e:ff:86:ca:ba:
         1d:06:27:00:dc:f7:22:6f:ff:c8:54:f4:dc:77:d4:56:4d:21:
         cb:45:69:9b:29:a0:39:c8:72:45:be:6a:da:6b:85:73:92:d8:
         87:e4:04:06:32:e3:c1:00:9b:dd:8e:d9:cf:f4:54:3d:8b:28:
         8e:82:39:78:ac:c4:7a:e4:d0:25:c6:c9:5d:dc:d2:3c:83:3b:
         12:1a:f3:58:dd:c2:63:6a:bf:6a:19:0e:69:27:be:2f:d3:b2:
         d5:07:85:96:40:53:be:95:e5:6d:04:77:48:3c:73:14:b6:88:
         2e:8d:e5:36:bf:17:bb:e7:9d:66:be:af:a5:cc:3e:76:75:eb:
         86:27:41:3f:d9:66:34:b9:8c:77:e0:93:b4:76:77:4b:20:13:
         ee:1f:a4:70:a9:8f:41:84:a4:26:c3:c0:b8:92:43:1d:80:1f:
         fd:6c:77:d0:39:29:59:8c:22:8c:c2:14:0e:71:7a:e1:39:c4:
         9f:9a:2e:20:0a:30:c8:2b:a5:85:fc:93:61:38:12:2c:f9:10:
         ae:06:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:10 2025 by rpki-client