Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/25089DCD3744CF5779120D2EC9DF3677EBC48A03.mft
File:                     25089DCD3744CF5779120D2EC9DF3677EBC48A03.mft (raw, json)
Hash identifier:          xcpZOwYdzalQwbRDz+/FdjASe68dQUkepWIxXtk2Z4Y=
Subject key identifier:   8E:CF:42:24:3F:D0:DF:77:18:06:07:93:6A:B9:0C:6C:6A:0C:EE:2E
Authority key identifier: 25:08:9D:CD:37:44:CF:57:79:12:0D:2E:C9:DF:36:77:EB:C4:8A:03
Certificate issuer:       /CN=25089DCD3744CF5779120D2EC9DF3677EBC48A03
Certificate serial:       06F1A11407787263F932452C5B26F8CB35668157
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25089DCD3744CF5779120D2EC9DF3677EBC48A03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/25089DCD3744CF5779120D2EC9DF3677EBC48A03.mft
Manifest number:          2C
Signing time:             Fri 31 Jan 2025 12:30:57 +0000
Manifest this update:     Fri 31 Jan 2025 12:25:57 +0000
Manifest next update:     Sat 01 Feb 2025 14:09:57 +0000
Files and hashes:         1: 25089DCD3744CF5779120D2EC9DF3677EBC48A03.crl (hash: arFR9JUo1GfsHnyWH+vhkIDiX6v7mpbF09mBGPBpwck=)
                          2: 323830343a343131343a3a2f33322d3336203d3e20323636303032.roa (hash: Q7cvrPUAxEGPK+zP+2a8Sw379e7Kitszf1hY1lwjap4=)
                          3: 3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa (hash: eYpoJ9zK5q5USbrsm51cH2zNhC8iVYXI0HhG1KzGVyc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f1:a1:14:07:78:72:63:f9:32:45:2c:5b:26:f8:cb:35:66:81:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25089DCD3744CF5779120D2EC9DF3677EBC48A03
        Validity
            Not Before: Jan 31 12:25:57 2025 GMT
            Not After : Feb  1 14:09:57 2025 GMT
        Subject: CN=8ECF42243FD0DF77180607936AB90C6C6A0CEE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:d1:6e:2d:7d:f2:02:32:cc:02:9d:67:34:
                    2f:fa:ba:2c:61:3f:f9:a4:e4:a5:2a:39:d7:a8:84:
                    c9:09:6b:ab:ce:ef:cb:7a:f4:ed:d6:eb:9c:93:aa:
                    50:ae:da:43:e1:1d:ab:d2:4e:3d:5f:ad:c9:73:25:
                    7e:fd:4d:62:58:51:0f:e7:a4:2f:0e:77:7c:f7:25:
                    da:8d:e2:d0:00:f4:f5:4a:98:65:29:78:66:93:3b:
                    47:0b:9a:68:cd:ca:a2:52:71:13:d7:1b:06:f3:33:
                    a2:c1:a6:66:d7:ed:03:7e:53:16:5e:b6:68:4e:5e:
                    4c:ec:33:d1:13:15:94:b6:80:3c:fe:3f:de:ed:a4:
                    1d:7c:3d:15:85:90:e4:eb:bc:bc:2c:48:b4:9c:8b:
                    79:11:9a:5e:1e:01:dd:30:eb:4b:4a:a7:63:cd:de:
                    1f:0f:b7:ad:03:4c:7f:d6:44:fb:77:3e:b6:21:71:
                    97:d1:8c:ab:df:e6:2b:98:ef:b4:55:78:bd:57:f1:
                    19:69:8c:d8:66:4e:09:8c:07:13:db:8f:dc:a6:33:
                    79:2b:a4:3a:e5:20:7a:00:25:08:83:f6:f1:05:8d:
                    40:e4:ab:9f:67:38:9a:f4:45:2f:c3:36:04:2d:4c:
                    60:3a:1f:c6:c2:ba:ce:5c:5a:0b:58:b1:22:f6:3b:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CF:42:24:3F:D0:DF:77:18:06:07:93:6A:B9:0C:6C:6A:0C:EE:2E
            X509v3 Authority Key Identifier:
                keyid:25:08:9D:CD:37:44:CF:57:79:12:0D:2E:C9:DF:36:77:EB:C4:8A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/25089DCD3744CF5779120D2EC9DF3677EBC48A03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25089DCD3744CF5779120D2EC9DF3677EBC48A03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/25089DCD3744CF5779120D2EC9DF3677EBC48A03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:18:ea:d6:67:36:ab:1a:08:a2:b1:59:17:63:78:b7:e4:03:
         76:5c:9e:93:2f:b6:e6:6e:b6:bd:0a:3f:6e:61:1c:2a:bb:81:
         69:8f:2e:d3:98:36:0e:f7:c5:7f:27:3d:3c:30:2a:af:27:04:
         a6:46:0b:75:e1:a3:65:06:bd:f5:4a:58:13:03:f7:ee:b6:85:
         6f:2c:be:db:12:91:a8:9c:32:1f:8e:1e:5a:6e:fc:d1:f9:5c:
         f0:2c:76:65:b3:f0:db:6f:4e:50:c5:31:ea:04:3f:54:e4:b9:
         9f:88:67:76:cf:1d:6d:af:11:e9:8b:b9:c9:04:21:d1:c0:f1:
         cb:e3:39:10:1b:72:ce:90:db:6b:85:9a:3f:c2:53:6f:fb:43:
         6a:22:10:76:d0:f9:2d:bf:ac:14:38:57:4b:5b:67:6e:a3:42:
         ff:64:3e:0f:45:3d:97:52:63:ce:90:d1:ba:bc:02:10:e0:e5:
         a1:fd:a7:f0:39:fb:5e:f3:37:c6:e8:67:5a:b0:d8:19:5f:15:
         7f:c1:03:58:a5:82:5d:ca:a8:d2:85:dc:ac:cc:0a:b4:9f:31:
         f4:db:5b:b5:87:2d:10:3f:bd:6b:ff:1d:d6:b1:98:b0:0e:4a:
         f9:00:71:1b:af:95:65:2a:08:be:5e:31:f7:eb:e4:45:71:c0:
         16:97:b1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:03:16 2025 by rpki-client