Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.mft
File:                     5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.mft (raw, json)
Hash identifier:          JNkQoEhMsuz7Lm+V+0BxS1D+sgV8ybYhElkOCQ2WzQI=
Subject key identifier:   F8:15:8F:0C:01:36:48:52:B6:AD:56:CB:1A:04:B0:41:19:11:03:E8
Authority key identifier: 5D:8A:1B:37:68:1A:FE:73:2E:D6:AC:89:D4:68:9C:CD:1E:07:A5:6D
Certificate issuer:       /CN=5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D
Certificate serial:       4E72AA3F31356A2FCE99CDAA79D73E8A61599793
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.mft
Manifest number:          021C
Signing time:             Sat 29 Mar 2025 02:40:00 +0000
Manifest this update:     Sat 29 Mar 2025 02:35:00 +0000
Manifest next update:     Sun 30 Mar 2025 02:40:00 +0000
Files and hashes:         1: 5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.crl (hash: KUN07p/mi7j32V265nQyK6KCIqSfw4hkcaAdGHwegHM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:72:aa:3f:31:35:6a:2f:ce:99:cd:aa:79:d7:3e:8a:61:59:97:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D
        Validity
            Not Before: Mar 29 02:35:00 2025 GMT
            Not After : Apr  5 02:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:69:d8:53:8b:1a:50:ea:f9:c3:ff:67:bd:
                    9f:80:ab:b3:7c:58:9c:ed:e2:3e:ac:84:11:66:9a:
                    19:9f:89:33:a4:0e:b2:f7:53:5a:d6:e2:52:61:38:
                    13:4c:6e:47:d1:a5:e4:b1:33:40:71:7b:65:81:69:
                    22:ba:d5:0b:f8:7e:18:de:53:8d:93:67:8d:12:17:
                    f2:6b:31:6c:df:57:8c:a7:9d:0b:03:7b:6f:92:b2:
                    28:02:4e:7f:03:63:bb:0c:02:06:04:9d:1c:dc:44:
                    ef:bc:15:84:80:93:39:99:76:b7:90:30:2b:0b:de:
                    f8:1a:9e:4b:c9:c8:b7:56:28:19:e3:85:fa:67:16:
                    55:1b:2d:a9:7f:b3:64:9d:c4:0a:49:87:df:81:9f:
                    8f:bf:d4:6a:a0:88:ae:26:0b:24:d3:04:13:94:0b:
                    c7:56:91:77:5e:71:af:e5:96:a7:da:25:b2:e1:ea:
                    6a:63:6d:27:26:ea:a5:53:ff:29:7b:85:de:e6:20:
                    03:ed:cf:2c:98:fc:53:6f:3c:6b:c9:29:c7:ef:be:
                    29:51:1f:71:76:db:26:1b:b9:e5:5f:5d:d9:0d:35:
                    fc:4a:c6:9b:37:8a:82:39:34:07:5e:40:70:3c:8b:
                    60:04:43:bd:01:05:26:c4:98:08:71:54:d8:27:71:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:15:8F:0C:01:36:48:52:B6:AD:56:CB:1A:04:B0:41:19:11:03:E8
            X509v3 Authority Key Identifier:
                keyid:5D:8A:1B:37:68:1A:FE:73:2E:D6:AC:89:D4:68:9C:CD:1E:07:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:d6:8b:7e:98:13:08:cf:f2:8d:44:fd:e4:03:87:74:90:
         66:1c:db:73:04:f9:7c:a0:f2:9c:3e:7f:3e:55:26:88:92:1f:
         93:65:e1:9b:95:86:50:9a:4e:24:af:1b:45:ad:05:1d:33:c4:
         62:ef:90:d2:d5:69:f6:c9:e0:f3:c1:6e:e5:fc:91:08:dd:0b:
         6e:6d:29:f1:2d:b2:5e:eb:06:3c:62:f1:e5:a9:48:a5:04:08:
         8b:fd:06:2c:6a:ad:9c:06:d2:e3:dc:63:6f:15:58:83:bf:00:
         ec:84:af:e5:24:93:6f:89:0d:4b:cc:ea:3b:60:4e:57:c4:39:
         ee:b9:73:dc:34:16:82:19:10:22:71:38:55:82:f3:95:31:1d:
         d6:18:c0:01:47:4e:c4:3e:18:e4:d3:78:99:ce:7b:c2:73:04:
         83:e0:0a:48:ff:e5:62:9f:b7:3c:11:53:55:54:f0:41:89:90:
         b0:70:e6:c2:fd:3c:0b:08:56:c9:f7:fc:b8:f8:bc:21:a1:90:
         2c:2c:5b:ec:d0:32:bd:b3:8d:6f:21:bd:40:55:44:8c:ec:07:
         0e:6c:90:06:fb:bf:ab:61:3e:32:18:85:08:1c:90:3b:79:1d:
         28:07:27:c8:34:07:20:9a:1d:84:1e:b1:6d:8f:5d:ca:77:0a:
         d1:fb:25:24
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUTnKqPzE1ai/Omc2qedc+imFZl5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4QTFCMzc2ODFBRkU3MzJFRDZBQzg5RDQ2ODlDQ0Qx
RTA3QTU2RDAeFw0yNTAzMjkwMjM1MDBaFw0yNTA0MDUwMjQwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUUxQTY5RDg1MzhCMUE1MEVB
RjlDM0ZGNjdCRDlGODBBQkIzN0M1ODlDRURFMjNFQUM4NDExNjY5QTE5OUY4OTMz
QTQwRUIyRjc1MzVBRDZFMjUyNjEzODEzNEM2RTQ3RDFBNUU0QjEzMzQwNzE3QjY1
ODE2OTIyQkFENTBCRjg3RTE4REU1MzhEOTM2NzhEMTIxN0YyNkIzMTZDREY1NzhD
QTc5RDBCMDM3QjZGOTJCMjI4MDI0RTdGMDM2M0JCMEMwMjA2MDQ5RDFDREM0NEVG
QkMxNTg0ODA5MzM5OTk3NkI3OTAzMDJCMEJERUY4MUE5RTRCQzlDOEI3NTYyODE5
RTM4NUZBNjcxNjU1MUIyREE5N0ZCMzY0OURDNDBBNDk4N0RGODE5RjhGQkZENDZB
QTA4OEFFMjYwQjI0RDMwNDEzOTQwQkM3NTY5MTc3NUU3MUFGRTU5NkE3REEyNUIy
RTFFQTZBNjM2RDI3MjZFQUE1NTNGRjI5N0I4NURFRTYyMDAzRURDRjJDOThGQzUz
NkYzQzZCQzkyOUM3RUZCRTI5NTExRjcxNzZEQjI2MUJCOUU1NUY1REQ5MEQzNUZD
NEFDNjlCMzc4QTgyMzkzNDA3NUU0MDcwM0M4QjYwMDQ0M0JEMDEwNTI2QzQ5ODA4
NzE1NEQ4Mjc3MUM0NjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnhpp2FOLGlDq+cP/Z72fgKuzfFic7eI+rIQRZpoZn4kzpA6y91Na
1uJSYTgTTG5H0aXksTNAcXtlgWkiutUL+H4Y3lONk2eNEhfyazFs31eMp50LA3tv
krIoAk5/A2O7DAIGBJ0c3ETvvBWEgJM5mXa3kDArC974Gp5Lyci3VigZ44X6ZxZV
Gy2pf7NkncQKSYffgZ+Pv9RqoIiuJgsk0wQTlAvHVpF3XnGv5Zan2iWy4epqY20n
JuqlU/8pe4Xe5iAD7c8smPxTbzxrySnH774pUR9xdtsmG7nlX13ZDTX8SsabN4qC
OTQHXkBwPItgBEO9AQUmxJgIcVTYJ3HEZQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FPgVjwwBNkhStq1WyxoEsEEZEQPoMB8GA1UdIwQYMBaAFF2KGzdoGv5zLtasidRo
nM0eB6VtMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4dHBBVDJwMVcxZ1RS
dDFlcUdjcFBrcHRHVm04UlI2RGFlbnA1VHlTUzhrLzEvNUQ4QTFCMzc2ODFBRkU3
MzJFRDZBQzg5RDQ2ODlDQ0QxRTA3QTU2RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RDhBMUIzNzY4MUFGRTczMkVENkFDODlENDY4OUNDRDFFMDdB
NTZELmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4dHBBVDJwMVcxZ1RSdDFlcUdj
cFBrcHRHVm04UlI2RGFlbnA1VHlTUzhrLzEvNUQ4QTFCMzc2ODFBRkU3MzJFRDZB
Qzg5RDQ2ODlDQ0QxRTA3QTU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHLD1ot+mBMIz/KNRP3kA4d0
kGYc23ME+Xyg8pw+fz5VJoiSH5Nl4ZuVhlCaTiSvG0WtBR0zxGLvkNLVafbJ4PPB
buX8kQjdC25tKfEtsl7rBjxi8eWpSKUECIv9BixqrZwG0uPcY28VWIO/AOyEr+Uk
k2+JDUvM6jtgTlfEOe65c9w0FoIZECJxOFWC85UxHdYYwAFHTsQ+GOTTeJnOe8Jz
BIPgCkj/5WKftzwRU1VU8EGJkLBw5sL9PAsIVsn3/Lj4vCGhkCwsW+zQMr2zjW8h
vUBVRIzsBw5skAb7v6thPjIYhQgckDt5HSgHJ8g0ByCaHYQesW2PXcp3CtH7JSQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:21:46 2025 by rpki-client