Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.mft
File:                     D6F2C2DD90315168EC79B717E27C0B9C4D27B959.mft (raw, json)
Hash identifier:          4RVCKq3jti5i1kWgkJIKuhQXDL6UZ5Au4N5KGVB1epA=
Subject key identifier:   69:36:B9:7B:FA:E5:70:FB:5E:B6:1A:77:1F:50:EF:82:19:4C:18:D5
Authority key identifier: D6:F2:C2:DD:90:31:51:68:EC:79:B7:17:E2:7C:0B:9C:4D:27:B9:59
Certificate issuer:       /CN=D6F2C2DD90315168EC79B717E27C0B9C4D27B959
Certificate serial:       61106B45D0F1FE638954425FD2387E28CA5C5815
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.mft
Manifest number:          A3
Signing time:             Fri 31 Jan 2025 18:28:22 +0000
Manifest this update:     Fri 31 Jan 2025 18:23:22 +0000
Manifest next update:     Sat 01 Feb 2025 22:04:22 +0000
Files and hashes:         1: D6F2C2DD90315168EC79B717E27C0B9C4D27B959.crl (hash: p3vj4EqTNnIHHYoDhgZJMM8yLMXOnY1FdqT9p/6WE6c=)
                          2: 34352e3138302e3230342e302f32322d3234203d3e20323639313439.roa (hash: mjLFPffrmAsape59eqkATQTvBHoDnye5NqAN90y7blI=)
                          3: 323830343a363032383a3a2f33322d3334203d3e20323639313439.roa (hash: VnnKNXYHsUx8vRtvbyUIJ6Lsra5fGimD5CtuHYoSJvU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:10:6b:45:d0:f1:fe:63:89:54:42:5f:d2:38:7e:28:ca:5c:58:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6F2C2DD90315168EC79B717E27C0B9C4D27B959
        Validity
            Not Before: Jan 31 18:23:22 2025 GMT
            Not After : Feb  1 22:04:22 2025 GMT
        Subject: CN=6936B97BFAE570FB5EB61A771F50EF82194C18D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:47:ec:9b:52:e5:be:75:57:a3:9e:aa:ec:
                    6e:c2:1e:e9:c1:2a:30:4f:bf:fe:5b:ff:ee:a8:6d:
                    6a:6c:0c:93:5e:63:ba:f3:64:40:53:16:d2:ac:92:
                    ce:ff:75:fb:7c:e5:bc:a6:35:d4:69:ee:a6:5d:c8:
                    67:f1:90:27:c8:33:66:35:04:37:35:05:7c:00:e0:
                    69:bf:d6:f2:f1:7c:69:1e:f8:e3:fb:6e:84:96:cd:
                    ff:b0:a1:e0:a1:c0:80:6e:68:e2:24:42:d2:c3:65:
                    9f:aa:45:d5:60:0f:cb:97:73:13:4d:30:8f:e5:fd:
                    ad:b6:d0:cb:7e:31:d0:3d:74:cc:a0:3c:02:50:73:
                    85:4e:a5:7e:f2:04:17:c9:5c:a0:b4:71:98:dc:68:
                    9c:ef:2b:1e:c7:fa:a5:35:2f:df:e0:5a:74:cd:52:
                    ea:b5:18:7d:98:09:a0:ec:39:93:dc:46:53:40:9d:
                    47:b2:0a:8e:54:ca:6d:5a:3b:65:cc:79:75:80:36:
                    ab:37:58:f6:8b:12:7a:c0:b3:b5:ca:1d:d7:21:8d:
                    2e:3e:23:92:30:a7:eb:57:fd:8d:30:06:79:9d:ac:
                    8f:16:a2:72:63:e4:8f:d8:4c:43:32:f5:0b:a3:f6:
                    15:27:f3:d3:5a:c2:8b:03:eb:04:48:79:fe:bd:2d:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:36:B9:7B:FA:E5:70:FB:5E:B6:1A:77:1F:50:EF:82:19:4C:18:D5
            X509v3 Authority Key Identifier:
                keyid:D6:F2:C2:DD:90:31:51:68:EC:79:B7:17:E2:7C:0B:9C:4D:27:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/D6F2C2DD90315168EC79B717E27C0B9C4D27B959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d5:88:0a:09:43:dc:60:14:84:79:6f:07:27:e8:6f:65:12:
         9a:2f:4c:33:93:03:b0:20:fc:85:82:9a:80:02:3c:9a:7f:72:
         c7:7d:0c:df:35:70:70:84:00:b1:bb:05:4a:42:ae:c7:73:47:
         8a:d6:2f:2a:97:49:5b:a6:46:be:0b:a9:dc:9b:bf:5c:8b:43:
         e8:41:ec:c2:ce:df:ca:cb:f1:0b:9d:be:8a:14:4a:61:ad:94:
         7d:98:c2:8a:20:ed:50:bf:4a:ed:35:1a:5f:b2:aa:6e:e6:51:
         a6:4c:b6:23:c6:44:99:4d:6f:1b:a9:55:e9:ce:bb:11:35:fa:
         61:e2:ec:03:b7:6d:83:bc:eb:23:7b:f1:98:51:e2:81:e0:1f:
         98:24:3c:94:9f:2a:46:b1:01:f2:87:58:6a:b4:b1:72:4b:3f:
         f4:35:4b:ea:a0:88:31:34:8b:95:9e:c9:b3:3a:63:71:b2:d1:
         de:3d:d1:ee:e2:d5:7c:dd:02:19:2b:d6:8c:89:f2:62:fa:95:
         14:18:ca:e7:cc:9e:99:c3:20:d1:88:03:2c:0d:b7:1e:ec:c2:
         a5:b0:fe:6f:50:f1:1b:55:79:5f:54:15:af:7a:68:77:1a:76:
         c2:69:12:7b:d9:5e:fa:79:8d:23:46:ee:bb:38:02:74:b9:04:
         20:ba:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:27 2025 by rpki-client