Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.mft
File:                     DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.mft (raw, json)
Hash identifier:          38itf1xh5Ie68z986bRfmNjkTfekmoip/TL+aajbqZI=
Subject key identifier:   63:4F:39:D2:18:2D:1A:FD:26:35:4D:37:EC:1F:02:28:95:8C:AE:B8
Authority key identifier: DA:3D:B6:37:AE:12:F8:19:57:62:BD:A1:E7:31:8F:8E:63:DF:8F:C0
Certificate issuer:       /CN=DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0
Certificate serial:       2D255A25069ABB75C57C39D799BE047DCDEBA608
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.mft
Manifest number:          15
Signing time:             Tue 13 May 2025 09:24:01 +0000
Manifest this update:     Tue 13 May 2025 09:19:01 +0000
Manifest next update:     Wed 14 May 2025 12:41:01 +0000
Files and hashes:         1: 323830343a323765303a3a2f33322d3332203d3e20323632383137.roa (hash: dkyv8hCBIfd0CuNGNXJlgLQmvADciorVHefuUOfbsZc=)
                          2: DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.crl (hash: G4bk8hKzouXBd3KNl5C/MCWYyaHcV4iwgFLFbmnjPzU=)
                          3: 3133382e3231392e3135302e302f32342d3234203d3e20323632383137.roa (hash: YTxktvWRTnCAGt3PPSOCXKsbJWEloAz0AOafexTkT28=)
                          4: 3138362e3235302e3132302e302f32332d3233203d3e20323632383137.roa (hash: H5q5wvHB//EsovGkCwRIcRbejIY6sb+LuF3Ogi9BvwE=)
                          5: 3133382e3231392e3134392e302f32342d3234203d3e20323632383137.roa (hash: ymWthWi0B02YQ0ev1rQfVGd89SvCnQttyWdjQOb7e98=)
                          6: 3138362e3235302e3132322e302f32332d3233203d3e20323632383137.roa (hash: K52EI+Q3Ey5IeH/aocuBa9eGHr2nRdjE7S7xKMwJgbU=)
                          7: 3138362e3235302e3132302e302f32322d3232203d3e20323632383137.roa (hash: 0kPsoNApdGIP0T2YGuOAlLv+tQL26P7rCqTweHyN3go=)
                          8: 3133382e3231392e3134382e302f32322d3232203d3e20323632383137.roa (hash: 0RuB2tREoVF7mgQXU13xx3KexYb6tQ5TPYGFUr+ev7A=)
                          9: 3133382e3231392e3135302e302f32332d3233203d3e20323632383137.roa (hash: RyAI31Bh9anxcR9PTp+WFrJO3OMxUNuQNndFKpl04rY=)
                          10: 3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa (hash: 4pb+gO3w/P6Q765SG+d4iRh/7s8pf426fqv4+/wXnv0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:25:5a:25:06:9a:bb:75:c5:7c:39:d7:99:be:04:7d:cd:eb:a6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0
        Validity
            Not Before: May 13 09:19:01 2025 GMT
            Not After : May 14 12:41:01 2025 GMT
        Subject: CN=634F39D2182D1AFD26354D37EC1F0228958CAEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:f9:4a:cc:dc:78:68:2b:97:07:38:bb:05:
                    b4:51:b8:21:ea:59:07:e0:02:bb:55:a4:1d:60:97:
                    1e:97:45:94:03:e9:ab:d5:7c:69:4b:e4:32:7b:18:
                    c4:e1:49:25:93:9b:75:f3:ad:dc:82:64:ad:81:0a:
                    d9:ea:44:cc:e3:ef:c7:7c:71:32:8c:fd:e8:3a:e7:
                    a3:b0:a9:b0:ba:6b:36:c1:30:26:a2:95:5d:c6:03:
                    bc:d8:28:ac:d0:66:cc:dc:20:e2:53:02:14:37:ec:
                    d9:33:9c:58:05:e0:8e:7c:5e:0b:22:0d:8c:3c:c3:
                    88:9f:c4:89:dd:7c:88:e4:83:80:da:72:b9:34:73:
                    f3:8b:31:99:e2:d8:f6:db:f1:d9:42:18:33:fc:79:
                    1e:b3:cc:34:31:9e:aa:75:a0:27:87:73:11:c8:43:
                    d3:56:9a:65:ae:1c:f1:0a:87:35:0c:19:64:69:7b:
                    2c:b7:f9:d1:c7:60:f7:75:65:fe:1a:b2:c1:e4:7e:
                    d6:5f:a6:38:77:88:0f:1b:6f:91:df:44:d8:02:fc:
                    cf:16:6f:5b:6c:b9:a2:ce:8a:a4:8a:0f:74:22:b5:
                    c1:fd:4e:1e:c6:d1:40:1f:1a:3b:03:69:50:47:4e:
                    e5:80:6a:4c:d0:a5:0b:38:80:24:d4:2a:50:fa:4a:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4F:39:D2:18:2D:1A:FD:26:35:4D:37:EC:1F:02:28:95:8C:AE:B8
            X509v3 Authority Key Identifier:
                keyid:DA:3D:B6:37:AE:12:F8:19:57:62:BD:A1:E7:31:8F:8E:63:DF:8F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/DA3DB637AE12F8195762BDA1E7318F8E63DF8FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:54:33:e4:ae:0c:23:a4:d8:d2:38:d1:11:d3:8e:31:55:4f:
         0e:4f:25:20:d9:23:1e:23:65:83:10:32:bb:d8:fa:83:4c:30:
         da:ac:5c:bb:46:29:3c:1e:2a:2b:07:a4:3a:b5:69:6f:be:4f:
         f0:03:c3:45:d6:fd:74:5e:77:0f:ca:1d:16:d3:a8:4b:1d:47:
         91:dc:80:e5:c7:eb:95:2f:20:c8:1f:b0:35:48:a2:7b:1e:e3:
         d2:13:01:36:24:d4:6a:0c:49:dd:97:9d:e3:b5:10:10:c5:2b:
         47:9b:8b:40:21:b2:ce:51:30:78:67:29:df:80:e4:2b:f0:d0:
         51:c4:ce:7e:35:c9:6a:f8:01:25:76:af:e7:17:b8:de:71:d3:
         58:d0:76:3e:15:79:ad:6e:02:da:a8:33:bf:e3:00:82:cc:ed:
         27:22:6a:75:73:da:c6:87:9a:b1:eb:30:44:41:20:27:d7:92:
         6a:d5:7b:1b:6a:2a:8e:aa:75:87:ca:88:d2:8a:2d:81:03:05:
         8e:13:b8:b8:8a:87:0a:b9:2e:54:df:44:70:6a:ed:07:b6:c6:
         5c:ff:07:e9:9b:3e:32:f1:fe:f3:66:0d:2f:83:cd:ff:d7:52:
         7d:1c:5a:b5:1f:f1:80:ac:77:de:3b:bd:77:06:9a:1d:c5:16:
         a9:56:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:42:48 2025 by rpki-client