Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft
File:                     3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft (raw, json)
Hash identifier:          Q9Lsjz+HPm3Pa5VlimFlXaweLje+KGCuPWF3ULCImww=
Subject key identifier:   AB:02:EC:34:7E:02:57:5F:2E:C5:BF:EA:2E:29:0B:06:6C:BB:C3:C0
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Certificate issuer:       /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial:       5AB4DD7960D10F01249C8BE4FC4D9CD9D3D2215F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft
Manifest number:          018C
Signing time:             Fri 31 Jan 2025 07:27:13 +0000
Manifest this update:     Fri 31 Jan 2025 07:22:13 +0000
Manifest next update:     Sat 01 Feb 2025 09:53:13 +0000
Files and hashes:         1: 323830343a316335343a3a2f33322d313238203d3e203631363530.roa (hash: HWOukoX5t6uFxCWRYqGkyv4mU6qh2xqtoYXHeE4eKG8=)
                          2: 3138372e34392e31312e302f32342d3332203d3e203238313338.roa (hash: DL4Iseq+P+IkkJo/bsQPL7ojT4IA7gk+3ZUPKCNqQjA=)
                          3: 323830343a64343a3a2f33322d313238203d3e203238313338.roa (hash: O5Y8VfTseja7opjK1UNo97uEmji3oQTDexNxuY/azyU=)
                          4: 3138372e34392e31322e302f32322d3332203d3e203238313338.roa (hash: O5bGsG8EeVAqN1lRYwLxOgL1fsJJ2q0Lx4/DY8065iY=)
                          5: 3138372e34392e302e302f32312d3332203d3e203238313338.roa (hash: lsEmfW8eTeNHuDR7EQ8zl8JoyV9kgS5k2IuD5WuE7Qs=)
                          6: 3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl (hash: UH8D4HKNzzd6Opo114x+Od/FldYcP74Y2vpJ7nSPt1Q=)
                          7: 3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa (hash: 8lCDbEJ1OULx7A9Hp9R2NvS2/815DrR5BHZGhP8xfjo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b4:dd:79:60:d1:0f:01:24:9c:8b:e4:fc:4d:9c:d9:d3:d2:21:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
        Validity
            Not Before: Jan 31 07:22:13 2025 GMT
            Not After : Feb  1 09:53:13 2025 GMT
        Subject: CN=AB02EC347E02575F2EC5BFEA2E290B066CBBC3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:1a:f2:e9:e2:ac:4f:dc:59:2e:75:ce:d2:
                    47:e3:84:53:8e:d8:48:2e:7f:ba:e3:6c:fb:2a:dd:
                    d8:00:ef:de:0d:c9:85:f1:8e:51:bd:42:7f:45:69:
                    97:8e:63:7b:55:95:0e:79:98:97:d0:20:a5:e6:48:
                    ac:02:e4:81:f1:49:0c:82:18:23:d9:d0:10:32:b7:
                    c6:7a:01:08:61:8e:e7:b6:3c:13:dc:88:8a:c4:75:
                    4a:9d:11:27:3a:bf:f6:f9:ca:99:65:29:04:67:3a:
                    eb:91:14:1c:f2:de:85:88:05:e8:ca:f9:f2:90:42:
                    12:f4:f4:32:f1:47:a1:de:35:d0:c6:ad:61:b5:6e:
                    b2:67:51:1e:90:60:66:c5:46:6a:dd:6a:4e:6d:91:
                    65:85:e1:42:f1:c1:9c:2f:a1:38:11:45:0b:d1:2b:
                    b3:29:d3:f2:23:08:18:8c:0c:75:3d:79:a8:43:e0:
                    d3:9d:73:88:da:3b:df:1c:97:41:b2:12:0c:5b:2a:
                    18:30:cf:79:61:16:a3:d1:83:c9:98:c9:d6:a7:9e:
                    60:f7:c0:7f:1f:07:52:ef:1f:ed:ca:84:77:71:50:
                    87:db:2c:35:9e:21:8b:2c:77:78:dc:67:83:f5:64:
                    a5:7b:37:91:db:b9:5c:f5:86:c9:5c:83:9d:cc:d5:
                    9a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:EC:34:7E:02:57:5F:2E:C5:BF:EA:2E:29:0B:06:6C:BB:C3:C0
            X509v3 Authority Key Identifier:
                keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:47:2b:9e:4e:d2:71:5f:9f:1d:7c:d0:9c:b2:52:b6:97:
         0e:48:6e:df:40:b7:54:2f:6a:b1:79:54:02:5f:15:9f:34:ec:
         85:a2:10:1a:ba:59:1c:dc:1b:10:d4:07:ae:ef:05:15:bf:fa:
         ac:da:ca:a0:94:2b:d3:e0:a6:69:5e:52:48:8e:06:8f:29:5c:
         6d:0d:6e:cc:15:df:48:2e:c8:15:dd:43:79:12:b7:4c:33:a7:
         49:0a:b7:14:7d:74:21:f5:00:a5:63:8d:9e:03:f5:d7:7c:18:
         96:fd:56:78:cc:b0:87:6c:4f:f5:66:3a:96:ba:64:42:3b:fc:
         a3:8b:3f:d4:79:cb:0f:83:42:67:a3:8b:4a:d5:35:97:b8:9f:
         d0:e5:8d:9e:2d:3c:80:e6:8f:35:d6:ac:3b:c2:14:6e:de:12:
         60:3c:e1:e9:2b:73:ec:29:99:16:58:55:32:8a:6b:86:74:87:
         2f:de:dc:60:9a:13:79:2c:43:2d:12:66:80:d2:59:64:a1:35:
         83:b8:9a:bb:36:be:9c:51:54:fc:14:a5:7f:9b:70:55:eb:d6:
         b1:24:a2:cf:8f:d3:11:23:1b:17:fc:e8:0d:de:e1:42:6c:a4:
         41:4a:0f:b6:5c:e3:cb:97:47:5e:75:04:89:e5:b8:3f:70:4c:
         2d:4c:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:49:59 2025 by rpki-client