Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.mft
File:                     44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.mft (raw, json)
Hash identifier:          9qTd+i3/nH+Z8J8iby1B3+Vq6quRTZsJDW6CiziTcTI=
Subject key identifier:   94:A4:11:BF:AD:DF:27:0A:5D:3D:12:29:7E:D6:70:34:ED:B3:B1:4A
Authority key identifier: 44:F8:F4:99:11:B0:C0:42:B8:FF:5B:CC:2E:11:E5:73:3D:A7:4F:F9
Certificate issuer:       /CN=44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9
Certificate serial:       3CB058BB1A01F3B7B1FFFD00DAADC93A6D8BE221
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.mft
Manifest number:          05
Signing time:             Thu 01 May 2025 21:18:03 +0000
Manifest this update:     Thu 01 May 2025 21:13:03 +0000
Manifest next update:     Sat 03 May 2025 00:51:03 +0000
Files and hashes:         1: 323830343a333466383a3a2f33322d3438203d3e20323635343932.roa (hash: cvJiv6kPVHMmGDNUkkyLFD+6vk+IuSdETeZ87NO7wY0=)
                          2: 44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.crl (hash: zB6sw4jEQQkQA6gcwrfQ3PCAhX36dTJrHI0/LWjd6j8=)
                          3: 3137302e37382e31362e302f32322d3234203d3e20323635343932.roa (hash: TpPZb7q6n7/yvL+Vs7nafTkuYA3bK9XBV0mQz7pS5Js=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b0:58:bb:1a:01:f3:b7:b1:ff:fd:00:da:ad:c9:3a:6d:8b:e2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9
        Validity
            Not Before: May  1 21:13:03 2025 GMT
            Not After : May  3 00:51:03 2025 GMT
        Subject: CN=94A411BFADDF270A5D3D12297ED67034EDB3B14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:c6:2c:69:07:35:6d:4a:fd:2b:88:f4:7e:
                    0b:30:47:2e:e5:67:4f:29:c3:3e:69:08:e9:5f:88:
                    67:1b:12:17:88:f7:41:bd:9a:39:69:73:f3:9b:26:
                    f3:41:d4:bf:e4:ad:4b:43:da:b2:21:12:2f:69:53:
                    b1:2f:68:4b:88:42:25:ef:d1:ce:1f:30:b0:57:e9:
                    eb:32:88:cf:70:e4:be:07:f2:cf:74:83:a3:c3:b5:
                    31:d4:8d:8f:3e:10:14:8d:81:41:91:bb:40:f7:84:
                    30:e4:95:cc:4b:f4:16:88:8d:80:4c:55:41:85:5e:
                    30:42:a4:a7:50:93:61:bd:7a:a6:91:ee:d3:d9:67:
                    9a:17:49:a9:30:c1:16:f1:08:93:ff:c8:e7:7f:16:
                    a0:5d:2d:f8:e7:4a:39:eb:2d:df:8d:f3:96:c4:48:
                    a3:65:c9:3c:b1:1e:15:2d:7a:43:1b:e9:1a:84:05:
                    53:d6:a6:6b:d4:d2:28:a5:1f:c0:18:5d:eb:1c:d0:
                    25:6c:ac:50:a6:1a:bf:ba:d2:e6:aa:28:0a:11:e3:
                    79:b8:92:c3:cd:33:6a:ad:b9:8b:e1:8d:19:ad:78:
                    0a:2a:1e:e9:fa:27:e6:fc:92:d9:f9:e8:a7:24:ee:
                    7d:2e:01:a9:7d:1d:ba:31:34:26:f5:da:f1:de:1a:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A4:11:BF:AD:DF:27:0A:5D:3D:12:29:7E:D6:70:34:ED:B3:B1:4A
            X509v3 Authority Key Identifier:
                keyid:44:F8:F4:99:11:B0:C0:42:B8:FF:5B:CC:2E:11:E5:73:3D:A7:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:38:73:cb:72:a5:fa:74:4f:83:f6:6b:a8:c0:1e:4d:3b:28:
         6f:39:7a:3d:05:d5:97:6b:b0:b1:69:b5:bf:82:01:ee:23:3e:
         30:5f:17:20:f4:cd:88:8f:2f:b1:af:b3:64:2c:74:d4:b8:a6:
         d5:a9:e5:4b:ff:ba:af:81:c1:c0:93:ee:52:85:1b:6b:9d:f1:
         de:3d:7a:1e:22:39:a7:9e:62:a6:b2:c3:e9:4c:4f:bf:f5:fe:
         20:70:2e:e3:3c:af:2b:e3:ab:33:86:f5:24:40:f4:15:09:1c:
         20:9e:18:59:a7:e8:9d:8d:17:0d:5f:7d:6e:de:52:88:46:91:
         3d:14:20:1c:1f:8c:35:83:3a:13:e8:85:fc:f2:93:8e:b1:57:
         91:b1:a7:5b:94:80:f3:37:88:3e:d5:fc:d1:37:e0:a4:7f:44:
         71:c9:ab:e5:c6:b4:25:67:dc:6c:f9:4a:7d:9b:9c:39:a5:b0:
         f3:a5:65:55:dd:4f:fe:ad:fc:89:32:9c:9d:f8:8b:56:34:e3:
         d0:df:8f:e0:2f:3f:a9:62:2c:46:df:30:e5:82:28:62:2e:62:
         39:84:b1:5a:7d:9e:6e:30:be:86:db:37:98:b0:a4:68:ef:4a:
         e4:51:b9:c4:db:da:5e:1c:89:85:5a:d9:2a:6b:5c:1f:2c:b2:
         02:07:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----