Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft
File:                     4AB66EE372C17AF7E98850BE54F8A77444900F94.mft (raw, json)
Hash identifier:          zDrgwRo77xpQpucecZCOPj3nfkIaw7tzVyvhTfF5M04=
Subject key identifier:   A3:06:C5:DE:CC:E6:0E:7C:F7:B6:3E:40:C8:78:FC:3B:86:A2:8A:E5
Authority key identifier: 4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94
Certificate issuer:       /CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
Certificate serial:       4B6EA57E91BF0A54113B7FE597D23B70A07497AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft
Manifest number:          0217
Signing time:             Mon 23 Jun 2025 22:32:22 +0000
Manifest this update:     Mon 23 Jun 2025 22:27:22 +0000
Manifest next update:     Wed 25 Jun 2025 01:01:22 +0000
Files and hashes:         1: 3133312e3139362e34382e302f32322d3232203d3e20323635383934.roa (hash: sXUBZqaYet96O9Q45LWmn3MOSbVlIgKaOenKXtUbuGM=)
                          2: 323830343a336637383a3a2f33322d3334203d3e20323635383934.roa (hash: sZ4geRCftDHs+VX9p3JvD5+7c8GSwWXZs/MV8QJRbfo=)
                          3: 4AB66EE372C17AF7E98850BE54F8A77444900F94.crl (hash: 7w1B+HHQpgB3GJXW4UN4r1vuRF/u0/CzxtSc8l7KJko=)
                          4: 3133312e3139362e35312e302f32342d3234203d3e20323635383934.roa (hash: Od+dmL6w8DDvacBEUaoH/8j2IdIJNHOqxr3Gasp54ng=)
                          5: 3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa (hash: 8+usWcSegUEUvcuIspfZGUPrFRMxfY0kVemMc5qbRiA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6e:a5:7e:91:bf:0a:54:11:3b:7f:e5:97:d2:3b:70:a0:74:97:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
        Validity
            Not Before: Jun 23 22:27:22 2025 GMT
            Not After : Jun 25 01:01:22 2025 GMT
        Subject: CN=A306C5DECCE60E7CF7B63E40C878FC3B86A28AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:6d:d6:c0:0f:ef:25:47:04:44:f0:d2:b4:
                    32:f9:2d:dd:91:9b:64:a7:8a:94:e5:e2:6c:d2:3c:
                    32:5f:84:58:eb:95:7e:27:5e:84:58:f6:bc:eb:d4:
                    ea:56:39:44:54:1e:9f:f6:bc:d1:f1:ca:bf:d1:0b:
                    38:b4:dc:9d:39:9c:06:e2:82:41:f2:57:6f:25:ab:
                    4c:5a:24:be:f5:73:10:63:7e:1b:31:c5:dc:16:94:
                    2b:cb:82:bf:2d:4d:d0:4f:ba:a2:07:bf:23:d9:a4:
                    7a:ac:7f:14:19:24:f8:d0:a0:11:d3:71:44:33:ba:
                    fe:93:9e:49:8c:55:84:f4:eb:ab:4a:6e:89:7f:af:
                    eb:9b:bd:d5:76:57:df:cc:df:8f:5c:7b:39:a1:55:
                    ed:c0:7f:e4:ed:0f:7e:8b:46:ee:34:36:fb:24:3e:
                    23:9b:84:36:ff:e9:c9:35:1b:15:bf:63:53:83:09:
                    3d:3d:23:33:15:32:c1:b7:38:c8:83:4f:ff:7c:56:
                    f0:f6:e0:5f:6d:67:4f:3d:95:24:b8:79:d6:51:51:
                    df:cc:5d:35:d9:e2:94:5f:ad:b2:d7:2c:9b:f6:9e:
                    c1:da:83:f0:91:b9:10:35:19:32:c2:19:0a:22:86:
                    00:c1:fb:25:2b:3c:fb:c6:bc:67:eb:27:df:6c:bf:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:C5:DE:CC:E6:0E:7C:F7:B6:3E:40:C8:78:FC:3B:86:A2:8A:E5
            X509v3 Authority Key Identifier:
                keyid:4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:72:e5:9a:67:cf:09:46:0b:c4:3d:e0:e7:fa:3f:02:f2:ce:
         50:7a:26:b8:94:ff:29:a2:65:63:a3:5a:1d:96:a6:be:07:9c:
         a0:f2:95:87:6a:12:67:c3:91:77:f8:c2:da:62:7a:cf:c5:24:
         d2:84:b7:7d:a9:46:ea:e9:3b:c4:ee:59:96:03:98:74:a3:f8:
         73:17:8f:dd:fd:32:d6:d8:ba:6b:02:b6:df:91:49:67:f6:6d:
         43:24:d0:24:b4:47:02:c7:4c:fb:f4:09:f8:b8:31:d3:97:9c:
         4a:9d:1b:db:55:40:e3:d6:ea:4a:90:90:c1:55:9d:89:84:f5:
         bf:ed:92:91:d8:66:9c:74:86:15:4e:14:88:92:0c:eb:84:75:
         c5:d9:11:25:3f:3b:b6:40:0b:17:78:7a:be:15:9e:0a:45:ea:
         3c:1f:34:93:25:cd:73:70:a9:60:92:ae:c0:14:87:4b:f0:5f:
         70:c2:90:77:4a:e1:7a:ec:d8:31:19:d2:80:36:d3:13:9a:90:
         a4:09:f2:c8:6b:29:df:b3:e0:ba:11:0a:af:58:a0:da:26:9b:
         8c:75:e6:b6:dd:c3:e0:50:2c:66:8e:21:73:34:1d:a4:06:ad:
         4d:5a:2a:b0:a9:2b:bd:e1:a4:24:90:0e:b2:63:8e:8f:de:c7:
         91:d4:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----