Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.mft
File:                     98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.mft (raw, json)
Hash identifier:          idS6bFVH5CdxHfTJEFI6ORG4F0Xck48HILU40KfdzI8=
Subject key identifier:   95:36:ED:F9:C8:58:66:FC:66:8D:D6:8C:6C:4C:6A:98:2D:D4:94:0B
Authority key identifier: 98:B1:F9:F2:FC:04:61:84:27:83:D5:FB:F3:C8:25:AD:1E:8C:20:A7
Certificate issuer:       /CN=98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7
Certificate serial:       46DA82013B4DE4A71B9528A50AF8857109557DC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.mft
Manifest number:          4F
Signing time:             Tue 15 Apr 2025 09:14:55 +0000
Manifest this update:     Tue 15 Apr 2025 09:09:55 +0000
Manifest next update:     Wed 16 Apr 2025 10:10:55 +0000
Files and hashes:         1: 98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.crl (hash: Gl33ZmmhwxdzfM4XULhKv9+3Af+0gsKY+HuRDI3ikNY=)
                          2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: VcL7B1OQkNgswYRQ2sJC2PXuMCLHKedCAHH7MkUnH3s=)
                          3: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: mzLtq1JCPuHrIeQ9q9qOTQjafE/z/+yhvDd++fksUgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:82:01:3b:4d:e4:a7:1b:95:28:a5:0a:f8:85:71:09:55:7d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7
        Validity
            Not Before: Apr 15 09:09:55 2025 GMT
            Not After : Apr 16 10:10:55 2025 GMT
        Subject: CN=9536EDF9C85866FC668DD68C6C4C6A982DD4940B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:19:bd:13:ea:e6:62:d5:67:9e:1c:c7:79:
                    db:27:5d:5a:fd:f6:3c:27:4b:c2:8e:b7:6e:9d:c0:
                    7e:f4:47:44:9d:a3:52:82:0c:b8:82:c7:4d:04:d2:
                    b7:63:8c:56:b2:76:58:36:de:2d:a8:c9:c0:75:d7:
                    39:80:6e:6b:7c:5f:df:68:1a:d7:13:86:97:29:9b:
                    90:5f:9a:8f:33:0b:79:19:4e:9c:94:c6:55:02:ae:
                    b8:0e:27:d5:4d:ce:3c:a5:14:4e:2b:40:4b:92:99:
                    20:92:96:0d:93:5d:7b:ec:d5:2f:42:4a:e9:97:c9:
                    43:ce:23:ae:8b:eb:37:34:c4:6c:fc:02:c3:fa:bc:
                    a7:d1:9f:62:f4:82:7a:d6:76:a9:ed:54:1b:0d:16:
                    e4:25:c1:d4:f6:0b:ae:e1:49:b9:aa:c5:41:d2:3a:
                    7c:10:32:62:cc:a6:55:6d:c0:13:1c:c8:3c:c5:45:
                    01:aa:eb:0e:7b:3d:ba:a0:5e:3f:74:18:00:38:d8:
                    08:e1:76:19:c4:43:82:c8:50:ad:9f:7c:75:70:9b:
                    7b:db:32:fd:f9:cc:ed:25:8d:cc:33:f2:41:1a:0d:
                    6c:76:5d:47:1b:2d:45:0c:65:9c:64:bd:1a:dd:f2:
                    94:3c:34:28:fc:fe:b6:ec:2a:20:22:62:40:19:6c:
                    9c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:36:ED:F9:C8:58:66:FC:66:8D:D6:8C:6C:4C:6A:98:2D:D4:94:0B
            X509v3 Authority Key Identifier:
                keyid:98:B1:F9:F2:FC:04:61:84:27:83:D5:FB:F3:C8:25:AD:1E:8C:20:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:f5:4e:be:be:ed:a9:b8:41:ef:39:35:85:30:f6:50:b9:
         32:2a:d6:38:51:c7:e4:ff:79:53:3a:e3:2c:23:02:57:6f:ab:
         1a:9e:a9:a2:de:d0:2e:d5:6d:e8:57:c3:22:e6:36:bf:c3:cb:
         87:96:51:c9:05:97:66:89:9c:be:b0:78:23:11:7e:bc:75:4c:
         c5:15:8f:c0:09:f9:b7:bb:ca:35:15:be:6a:05:c1:00:3d:0d:
         cc:50:bd:2d:cb:71:4c:4e:b5:03:b3:8a:a9:b9:51:45:2d:4a:
         a6:dd:b6:72:bf:10:6e:72:e5:8e:d4:0b:ca:1c:37:59:26:f7:
         e0:f5:a2:58:0e:b1:92:a3:e5:5d:71:71:2e:a8:2d:a4:96:3a:
         5b:7e:6b:da:e4:22:25:f8:15:56:9b:7d:98:02:4e:01:51:23:
         0b:e4:c1:b8:a6:5b:6d:bf:a7:dc:86:ca:31:fb:05:4d:08:86:
         26:99:0a:2d:4a:02:e5:fd:1c:dd:6a:f3:dd:db:f2:86:ca:9f:
         0d:e6:a4:08:6d:f5:7a:17:20:0c:84:b0:69:37:db:61:7e:14:
         69:86:a4:7b:d1:cb:01:46:07:74:ce:21:50:c9:1c:e5:3e:01:
         b0:b5:15:52:9a:97:3e:f8:ec:fd:b1:78:78:6a:02:3f:97:b8:
         88:7f:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----