Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
File:                     B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft (raw, json)
Hash identifier:          BDeOWxh314iHUPjbp8oLy91sZkIWIF72IJeUxpZpnHo=
Subject key identifier:   13:3C:3B:A4:82:ED:0C:2A:BB:F4:6D:5D:1C:25:80:48:56:9B:2B:34
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       38A2A99A1AB4668E80F5BC60EBE85EB02F2111BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
Manifest number:          0211
Signing time:             Fri 02 May 2025 18:23:59 +0000
Manifest this update:     Fri 02 May 2025 18:18:59 +0000
Manifest next update:     Sat 03 May 2025 20:49:59 +0000
Files and hashes:         1: 3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa (hash: BeCzGByZUVWSEJT69iKqyQ+jSIx4s3it5bGyR85YnmY=)
                          2: 3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa (hash: LO1ik9g8nSHTwisi94xQHPbDASrI0utul2j1iJMsGsc=)
                          3: 323830343a343163343a3a2f33342d3334203d3e20323637343535.roa (hash: POHv5XBzj3m2BDvt3cuKFyka+8VXC1pdbq3IYRYoZ4E=)
                          4: 3136342e3136332e3232322e302f32342d3234203d3e20323637343535.roa (hash: IjOd2pAQPRGCu4BwwJFgJXiZllxyyikkBV5abA2LjvE=)
                          5: 3136342e3136332e3232302e302f32342d3234203d3e20323637343535.roa (hash: lRPxGB1Ou8IHvBTmk76QyjBOGoV7plW0d01uzuxjX50=)
                          6: 323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa (hash: l4qRjt1ei2sV3BJfevDgBFEdarI7WTlrRKzMRAvr/vI=)
                          7: 323830343a343163343a3a2f33322d3332203d3e20323637343535.roa (hash: tT6ix3BVhHRTTPvluucqzGa4zGuPNt0OoA8nxrIhJGQ=)
                          8: B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl (hash: Z1T6CAQ6KOn+4DFyIocTbswFes+Zni42SwB9VeLWLpU=)
                          9: 3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa (hash: plGm1uNGRu8aOTDF8zrNFZ0j75/NKBOWrpI64P4iuL4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a2:a9:9a:1a:b4:66:8e:80:f5:bc:60:eb:e8:5e:b0:2f:21:11:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: May  2 18:18:59 2025 GMT
            Not After : May  3 20:49:59 2025 GMT
        Subject: CN=133C3BA482ED0C2ABBF46D5D1C258048569B2B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:99:47:97:6c:ae:c9:53:62:c9:5c:6d:03:
                    17:e4:2e:fa:9d:5d:a7:ae:56:60:42:e4:38:96:6a:
                    07:6d:bf:64:f3:6b:0a:32:ef:a0:b0:9e:1b:8e:e4:
                    4e:b5:d7:41:df:69:04:fb:07:14:db:45:e4:61:86:
                    f6:14:76:17:b5:1a:7c:35:13:f7:44:46:3b:8b:45:
                    90:e7:18:64:db:df:a7:f8:64:f2:5d:1e:c9:c9:4d:
                    62:47:26:65:46:f5:7a:46:57:1c:39:4e:10:ce:48:
                    ed:46:87:5b:5a:03:a3:9a:99:45:59:f9:ab:27:83:
                    44:8d:31:12:81:7d:79:30:0d:b6:0b:89:6d:e2:be:
                    7d:db:00:7a:80:08:ef:11:83:46:ef:dc:9e:91:7a:
                    0e:0a:60:99:ce:f5:03:30:d3:54:29:d5:66:a2:9e:
                    6e:1b:82:ce:df:4f:ff:df:84:3d:e6:c3:f3:15:69:
                    48:2c:b5:10:7a:7c:21:18:bf:3b:78:9b:30:c7:5d:
                    ef:52:49:89:3a:bb:6a:49:72:69:4a:76:20:da:6f:
                    b5:39:7a:6a:d5:16:cb:64:5a:2d:77:24:b9:26:84:
                    05:f4:a0:5f:52:3c:68:ea:2e:62:02:f1:b1:a4:5d:
                    b5:fc:4c:d4:2c:6d:30:73:df:9e:15:bf:61:d1:11:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3C:3B:A4:82:ED:0C:2A:BB:F4:6D:5D:1C:25:80:48:56:9B:2B:34
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2a:ab:7a:34:9f:21:0c:73:1f:a2:b1:b3:20:88:a4:bb:d4:
         37:f3:a9:5c:e2:72:fc:11:1a:a7:2a:66:23:2b:1a:89:58:ec:
         d2:4e:18:30:83:cd:39:74:21:f9:dd:b1:e2:cc:cc:fd:14:d0:
         49:60:53:60:c1:e9:be:24:67:8d:50:fb:c3:77:24:c6:79:d9:
         90:92:fa:38:7e:34:75:e9:23:95:98:e3:be:96:9a:5a:9d:87:
         b1:45:32:ad:84:f9:d4:14:fa:85:e6:39:dc:94:7c:70:c4:7c:
         20:bd:17:52:c3:13:e8:d8:9d:cd:6f:71:4a:55:7c:14:85:74:
         7f:e8:8a:d2:bf:5e:1c:59:2a:2d:c3:60:c4:af:b3:f9:3b:45:
         b9:81:d3:0d:c1:86:77:db:2b:91:54:97:e8:94:32:17:d9:96:
         32:3b:02:eb:63:6e:46:53:cb:dc:3b:af:a4:99:9f:a6:d6:f3:
         65:b7:79:7d:e3:99:b1:e5:8e:af:61:38:b8:28:f9:b2:5e:5a:
         0a:e7:ee:e2:91:64:5d:14:44:18:be:9f:00:d8:2a:1f:30:d4:
         51:87:d7:d8:b9:ad:ab:30:cd:cb:ad:68:0e:39:54:5c:4b:02:
         01:25:dc:6d:fb:a5:b1:a3:f2:6c:87:24:18:c7:07:a1:a8:ea:
         aa:98:3a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:50:59 2025 by rpki-client