Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.mft
File:                     6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.mft (raw, json)
Hash identifier:          fiXhcXJCH/R0IP+U3dEzyIUZ5kPEZdbW7jNTncOTBy0=
Subject key identifier:   C5:52:BC:A3:72:EC:0C:93:25:07:FF:8B:D0:AA:78:D3:4A:95:25:C6
Authority key identifier: 6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE
Certificate issuer:       /CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
Certificate serial:       3535A0D7420351FBC6C073DEF3B303F2AEEF88C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.mft
Manifest number:          D2
Signing time:             Wed 09 Nov 2022 20:25:05 +0000
Manifest this update:     Wed 09 Nov 2022 20:20:05 +0000
Manifest next update:     Thu 10 Nov 2022 23:58:05 +0000
Files and hashes:         1: 3137372e31322e3136302e302f32302d3234203d3e203238323939.roa (hash: 3aQG/9iXSpW6DInkQKRlx54YBMMY8DLzIaPiz46x6kM=)
                          2: 3138372e312e3132382e302f32302d3234203d3e203238323939.roa (hash: vnP2jRGU4laGIVFMkzppdiUCE2wDLxbSmTA++OztsWo=)
                          3: 3138392e33382e38302e302f32302d3234203d3e203238323939.roa (hash: vKxLIlSHd24EzBM5cBTtfU1dBiJJt7Ja3nj+8fGjoN4=)
                          4: 3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa (hash: evo14g9pFuwIzRaypnoddtVjXN/ll8rfoP5BWcd2vIM=)
                          5: 3139312e362e3139322e302f31392d3234203d3e203238323939.roa (hash: zah6E0CU8qfFHmmoruj7xUZhfuYpjYlF45wHNLd4ucI=)
                          6: 6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.crl (hash: CTEkN6L/Wk+PbB1dYL+S9l85/CQoHr6+nQZqjybYyA4=)
                          7: 323830343a31303a3a2f33322d3438203d3e203238323939.roa (hash: a/bT3mypkB2ZMFV11K3Utbpdu9zZ29FbRQKNlUTI+Hc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:35:a0:d7:42:03:51:fb:c6:c0:73:de:f3:b3:03:f2:ae:ef:88:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
        Validity
            Not Before: Nov  9 20:20:05 2022 GMT
            Not After : Nov 10 23:58:05 2022 GMT
        Subject: CN=C552BCA372EC0C932507FF8BD0AA78D34A9525C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:d9:b7:bd:88:63:d1:1f:5a:53:7f:60:78:
                    82:0e:41:7d:57:10:79:e7:c5:20:28:21:3c:c1:92:
                    78:fe:f9:d7:88:35:75:e2:d3:19:12:8c:5a:fd:29:
                    2b:2d:5b:d4:45:f4:4c:d8:77:e8:42:53:ff:86:ad:
                    67:20:1f:11:6d:69:44:2c:23:61:c2:df:4f:3b:38:
                    1a:2e:82:88:f2:41:dc:24:c9:53:be:75:c2:75:18:
                    c5:2b:b1:13:03:69:bc:21:3a:c7:6a:aa:a3:16:ad:
                    0f:92:b4:4f:0a:fb:fd:3c:e5:d2:e8:90:1d:07:dd:
                    e0:07:c3:a6:59:d0:d1:ee:3b:05:25:a1:62:d3:89:
                    08:54:8c:04:95:5f:e0:1a:a5:1f:14:33:55:bb:af:
                    28:6a:31:15:c1:1a:e1:97:2a:dc:e5:89:44:f2:45:
                    a4:30:6c:87:49:54:e6:2c:8d:6d:8e:92:b6:7c:0f:
                    b5:09:d2:07:17:9b:c4:28:ed:f7:15:85:f8:42:d6:
                    3b:a6:36:50:d0:8f:e8:1c:c1:4d:32:a3:54:7d:b5:
                    61:ae:5f:a5:2f:63:c2:2d:37:27:f5:08:6a:43:66:
                    33:95:fa:73:b9:fe:66:12:fb:4c:be:a3:12:10:59:
                    10:73:86:6b:24:c6:a8:fb:86:fa:6e:d8:d1:60:be:
                    2c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:BC:A3:72:EC:0C:93:25:07:FF:8B:D0:AA:78:D3:4A:95:25:C6
            X509v3 Authority Key Identifier:
                keyid:6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:16:99:33:c0:37:c1:de:fd:c8:48:f2:81:c0:20:33:6c:f7:
         60:b2:c2:c6:e6:dd:ba:d8:27:dd:86:7c:ea:b3:61:f6:0e:8c:
         33:52:2c:4a:76:42:05:1c:f6:86:7d:d0:f1:fe:20:4c:40:f0:
         52:7c:75:f5:7e:62:78:1b:42:94:e4:76:cf:80:a7:91:61:23:
         70:89:68:9d:57:e1:7f:c2:49:ba:b4:32:98:61:ca:4c:2c:8d:
         5b:29:08:b1:cb:da:40:68:68:eb:9a:ea:c9:c4:d1:a7:50:c0:
         8e:42:af:56:b6:c7:72:90:de:0e:e0:b3:f3:5a:4c:c5:2f:28:
         4f:89:4f:56:60:49:17:b8:33:b3:b0:13:78:80:00:73:2d:1e:
         53:34:18:3d:f7:85:ba:b3:f9:39:52:b2:73:52:99:4d:bf:e9:
         b1:7b:54:84:49:11:e7:ac:3e:ff:b9:36:53:b1:3f:c2:8a:b7:
         0f:73:4b:e7:44:e5:1b:03:1f:bc:50:a3:6a:57:3f:30:51:0a:
         d4:da:f1:07:a0:c9:bb:36:15:9a:06:c3:7d:1e:19:9f:85:e7:
         8e:f3:4a:14:24:49:31:0f:9e:6e:17:07:91:4e:8c:b3:80:7b:
         2a:5c:ad:85:19:16:72:eb:a9:08:e0:57:cb:f6:7f:a7:f8:3d:
         a7:99:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:52:17 2025 by rpki-client