Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.mft
File:                     B803BC9703804FF887278F7D7670E2C3CDEB88F2.mft (raw, json)
Hash identifier:          KbZHVyllKSaapRkT76m4zDGeWv86fAeA1hAgSh+B8Zc=
Subject key identifier:   D1:9C:A5:EB:64:16:C0:28:C9:3B:98:82:4C:A8:D9:13:05:88:E8:E5
Authority key identifier: B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2
Certificate issuer:       /CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
Certificate serial:       7C823015B228488ECB88AB4D3BB5B1ABE67866D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.mft
Manifest number:          91
Signing time:             Thu 27 Mar 2025 21:48:29 +0000
Manifest this update:     Thu 27 Mar 2025 21:43:29 +0000
Manifest next update:     Sat 29 Mar 2025 01:45:29 +0000
Files and hashes:         1: 3138312e3139312e3231362e302f32332d3233203d3e20323637353630.roa (hash: eCC+WlLoF5l1JBHV0F62ofIfLGFxTQ4slpp8uABbOek=)
                          2: 3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa (hash: c1PbjYd8Xa50sbijXYvLKJEKxkkuicloLht4TufIrfI=)
                          3: 3138312e3139312e3231362e302f32322d3232203d3e20323637353630.roa (hash: jqwwQjg3Iway7AgwfQD49A9u+Ek+4DeM+C8P4Rh7qZc=)
                          4: 3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa (hash: veLf7T2kQxxN/q4Y+4SU7P1diarnLzt6TBLR31itBK4=)
                          5: 323830343a343334383a3a2f33322d3332203d3e20323637353630.roa (hash: G2a4dtnTvYywl+tpsWv3JmK7126PRSyxS7elMekyYik=)
                          6: B803BC9703804FF887278F7D7670E2C3CDEB88F2.crl (hash: vzav9YH353C2i4iUve+8yyqsfcoMAhLIp0tt3bnpv0w=)
                          7: 3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa (hash: 9oXjwopPbr3HQ/a1dM4xhEB1wkuhSND4ufS/+/rqFzc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:82:30:15:b2:28:48:8e:cb:88:ab:4d:3b:b5:b1:ab:e6:78:66:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
        Validity
            Not Before: Mar 27 21:43:29 2025 GMT
            Not After : Mar 29 01:45:29 2025 GMT
        Subject: CN=D19CA5EB6416C028C93B98824CA8D9130588E8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:8b:3d:01:09:cf:1c:93:92:c4:2e:e8:90:
                    d6:35:a6:77:be:9c:41:a2:29:88:d1:26:61:01:a5:
                    a4:4e:ba:a7:57:c0:8e:d9:7d:2b:76:5c:14:0c:b2:
                    7f:1b:ad:15:f9:1e:74:2d:26:55:ce:d6:b4:b6:93:
                    9f:06:22:81:f8:f5:b3:14:3b:28:30:91:93:43:12:
                    18:89:d1:8b:a7:74:32:0b:dc:93:c9:e0:37:fd:1e:
                    f2:3f:50:d6:a8:12:53:eb:06:dc:74:ab:60:95:54:
                    40:33:c5:71:9c:e5:7f:4c:85:9a:11:2e:07:b0:b6:
                    9d:74:8e:16:d9:75:17:02:e5:37:b3:d4:16:e3:d8:
                    e9:98:0f:8c:01:2d:c0:ff:b6:41:35:31:60:9d:c3:
                    63:6f:24:77:a3:df:82:a1:2f:7a:bf:22:e6:84:ec:
                    5c:68:42:63:93:73:74:af:d6:66:7f:4c:f5:d3:d8:
                    9c:e9:4f:d1:29:e7:e3:0e:23:aa:74:c1:4b:e3:ad:
                    fb:7a:06:f6:d2:3a:9a:3a:25:7d:38:2c:58:32:33:
                    29:64:9e:ff:f9:37:f1:e6:08:d4:19:c9:93:7f:22:
                    e0:ec:cc:87:78:d1:eb:de:bf:a2:ef:0d:7d:6a:5c:
                    99:f1:32:ee:95:b9:86:a6:6d:20:1f:00:93:c0:ad:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9C:A5:EB:64:16:C0:28:C9:3B:98:82:4C:A8:D9:13:05:88:E8:E5
            X509v3 Authority Key Identifier:
                keyid:B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:96:77:dc:e6:11:ba:86:ed:93:31:29:7c:ea:2c:79:59:
         5d:ce:f7:5b:d7:fb:d1:d4:b9:54:74:49:ac:2f:bd:0a:44:70:
         f5:ed:68:ec:d3:a5:a5:f4:3e:e8:87:4a:39:ac:90:10:32:28:
         3a:7b:75:a5:be:c3:60:bc:4a:1d:e0:00:8f:0e:47:cc:72:21:
         f8:20:9a:1f:15:08:97:56:29:7a:fb:95:a1:9f:70:93:2b:f1:
         4f:d8:48:59:42:1e:97:cf:91:e9:8e:2a:7a:4b:9e:6a:a0:22:
         78:1f:51:b5:24:13:67:fb:21:e4:30:5d:7a:ba:91:ef:a2:9a:
         3c:1f:c8:9a:73:39:b3:d1:f6:e9:e4:d8:23:4d:0d:ab:41:8d:
         9a:d7:8d:a0:9a:32:92:48:5f:0b:e0:4a:aa:3f:e4:70:b3:34:
         28:7d:a4:b0:70:02:19:35:03:64:b0:46:8e:c7:23:0b:3f:aa:
         9b:c6:13:59:27:67:63:bd:f9:19:74:9a:21:49:6d:84:bb:9d:
         61:30:83:e3:99:a2:23:bd:3f:59:7c:e8:67:37:1a:27:e8:51:
         b6:af:6c:84:99:3b:a5:97:a1:92:91:ed:a8:b6:5b:73:6a:74:
         19:5c:c5:bb:47:78:d8:2f:25:ed:0c:cc:0f:cc:f7:31:0b:66:
         95:14:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----