Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/23EA9A431B801C70D987D17DAC30F48448D22E50.mft
File:                     23EA9A431B801C70D987D17DAC30F48448D22E50.mft (raw, json)
Hash identifier:          R3dp0LIY/OqT2JD1LxHXbKhbpyeYGOY4JCIA+kwZinU=
Subject key identifier:   A6:E0:44:E9:B1:DE:B4:DF:28:EF:26:8F:53:C0:22:91:55:17:59:9C
Authority key identifier: 23:EA:9A:43:1B:80:1C:70:D9:87:D1:7D:AC:30:F4:84:48:D2:2E:50
Certificate issuer:       /CN=23EA9A431B801C70D987D17DAC30F48448D22E50
Certificate serial:       22DD31D648F2B15B3FDFA1DE57E6B1A67C06A456
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23EA9A431B801C70D987D17DAC30F48448D22E50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/23EA9A431B801C70D987D17DAC30F48448D22E50.mft
Manifest number:          0E
Signing time:             Fri 26 Jan 2024 10:28:00 +0000
Manifest this update:     Fri 26 Jan 2024 10:23:00 +0000
Manifest next update:     Sat 27 Jan 2024 11:17:00 +0000
Files and hashes:         1: 3137302e38312e37362e302f32322d3234203d3e20323636333934.roa (hash: WrgPf2SowAORaLH86cXn8WXTAGjwmB7kt+l0mWLrbT8=)
                          2: 23EA9A431B801C70D987D17DAC30F48448D22E50.crl (hash: FpjiLv4n8ZERBCe8oTAqFOAJrvKRgeN8YHkFaUAGaIM=)
                          3: 323830343a333732633a3a2f33322d313238203d3e20323636333934.roa (hash: z6K52R8A8QtJ0ysPO29zyvKS21hEgEVaSsHsUYsbfJQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:dd:31:d6:48:f2:b1:5b:3f:df:a1:de:57:e6:b1:a6:7c:06:a4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23EA9A431B801C70D987D17DAC30F48448D22E50
        Validity
            Not Before: Jan 26 10:23:00 2024 GMT
            Not After : Jan 27 11:17:00 2024 GMT
        Subject: CN=A6E044E9B1DEB4DF28EF268F53C022915517599C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:3a:be:d5:87:1a:c1:7c:e1:4c:01:8c:00:
                    7a:6b:74:3a:10:72:59:d7:e1:0a:17:ba:51:ca:88:
                    4f:13:07:66:96:43:6c:39:84:b9:07:80:bb:5e:10:
                    e3:10:6f:45:11:9e:c8:15:67:79:76:c4:0a:44:71:
                    6b:cc:20:38:96:e5:9d:0f:20:7a:c6:81:1a:cd:49:
                    2b:31:e2:2e:72:ce:03:bb:3e:57:af:ca:b2:0c:70:
                    2c:4a:9c:b0:da:3b:df:b7:5b:c5:de:fd:ed:a4:bf:
                    3e:62:b1:b6:14:7c:76:56:94:fe:34:b7:5b:3e:6a:
                    21:5f:4f:1f:5a:b2:66:65:55:ec:e1:1d:06:6b:ce:
                    0d:56:d7:52:e7:a7:4f:1b:d4:61:64:3f:75:59:5e:
                    fb:5c:47:65:bc:ba:de:af:e7:28:ad:a7:06:8f:6b:
                    99:ee:51:e3:ec:85:47:ae:f1:32:fd:42:cd:0c:49:
                    14:ab:c4:96:f4:ff:46:7d:35:cf:95:26:ac:f9:45:
                    b3:0f:d1:e2:7c:28:de:5b:99:a5:0d:34:de:2c:be:
                    3f:33:5c:75:71:74:84:cb:e4:6b:3a:98:9b:c1:24:
                    5b:0f:09:38:53:7c:e8:a1:e8:18:7b:94:4e:c7:01:
                    c5:c9:f8:bd:aa:79:9e:79:21:ac:72:70:43:61:14:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E0:44:E9:B1:DE:B4:DF:28:EF:26:8F:53:C0:22:91:55:17:59:9C
            X509v3 Authority Key Identifier:
                keyid:23:EA:9A:43:1B:80:1C:70:D9:87:D1:7D:AC:30:F4:84:48:D2:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/23EA9A431B801C70D987D17DAC30F48448D22E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23EA9A431B801C70D987D17DAC30F48448D22E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/23EA9A431B801C70D987D17DAC30F48448D22E50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8b:28:80:c5:ce:76:34:a5:f6:cd:df:dc:4a:b0:b1:1b:81:
         16:cf:d9:22:62:3e:35:ca:5f:9e:32:2e:c0:aa:08:d7:a2:97:
         75:18:81:20:4c:0f:5f:f0:6d:0f:92:9c:ab:73:bb:de:a6:dc:
         bc:d9:25:c3:0f:53:a8:10:6c:c6:63:13:e5:c2:4f:5d:fa:44:
         38:16:07:9f:c2:f2:0d:b2:4b:bf:dd:9a:b0:99:dd:0c:52:2a:
         32:18:b3:2a:e0:a6:cb:16:f0:c4:68:af:13:43:27:9b:f6:64:
         27:8c:d7:74:64:96:a5:6a:4e:b6:17:0f:fc:77:20:e1:54:10:
         9b:0d:61:63:ef:7b:c6:55:8b:97:e6:a9:b2:ae:3c:77:5a:56:
         8f:84:c0:67:e9:4b:f2:4d:9f:ca:f1:e8:a6:93:1d:ce:ba:90:
         b2:f2:eb:f9:c3:7d:9a:f9:8b:98:0b:70:95:93:ff:8c:a1:15:
         f3:72:da:25:6d:03:86:0b:9a:8f:83:15:82:05:0e:8c:cb:91:
         79:ce:52:1e:8a:39:8c:6b:ed:ae:6e:9a:d0:d4:1b:bf:6a:4b:
         a9:d4:56:7a:6a:6d:b2:e9:c5:fe:34:fd:16:69:8c:f1:a8:b3:
         5e:80:16:94:ea:61:06:b7:ca:45:aa:b4:b7:e9:eb:e5:a5:a4:
         f0:1f:1d:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIt0x1kjysVs/36HeV+axpnwGpFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNFQTlBNDMxQjgwMUM3MEQ5ODdEMTdEQUMzMEY0ODQ0
OEQyMkU1MDAeFw0yNDAxMjYxMDIzMDBaFw0yNDAxMjcxMTE3MDBaMDMxMTAvBgNV
BAMTKEE2RTA0NEU5QjFERUI0REYyOEVGMjY4RjUzQzAyMjkxNTUxNzU5OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDexTq+1YcawXzhTAGMAHprdDoQ
clnX4QoXulHKiE8TB2aWQ2w5hLkHgLteEOMQb0URnsgVZ3l2xApEcWvMIDiW5Z0P
IHrGgRrNSSsx4i5yzgO7PlevyrIMcCxKnLDaO9+3W8Xe/e2kvz5isbYUfHZWlP40
t1s+aiFfTx9asmZlVezhHQZrzg1W11Lnp08b1GFkP3VZXvtcR2W8ut6v5yitpwaP
a5nuUePshUeu8TL9Qs0MSRSrxJb0/0Z9Nc+VJqz5RbMP0eJ8KN5bmaUNNN4svj8z
XHVxdITL5Gs6mJvBJFsPCThTfOih6Bh7lE7HAcXJ+L2qeZ55IaxycENhFDj7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpuBE6bHetN8o7yaPU8AikVUXWZwwHwYDVR0j
BBgwFoAUI+qaQxuAHHDZh9F9rDD0hEjSLlAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRmdTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNM
QWYvMC8yM0VBOUE0MzFCODAxQzcwRDk4N0QxN0RBQzMwRjQ4NDQ4RDIyRTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIzRUE5QTQzMUI4MDFDNzBE
OTg3RDE3REFDMzBGNDg0NDhEMjJFNTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkRmdTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNMQWYvMC8y
M0VBOUE0MzFCODAxQzcwRDk4N0QxN0RBQzMwRjQ4NDQ4RDIyRTUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsIsogMXOdjSl9s3f3EqwsRuBFs/ZImI+NcpfnjIuwKoI16KXdRiBIEwPX/Bt
D5Kcq3O73qbcvNklww9TqBBsxmMT5cJPXfpEOBYHn8LyDbJLv92asJndDFIqMhiz
KuCmyxbwxGivE0Mnm/ZkJ4zXdGSWpWpOthcP/Hcg4VQQmw1hY+97xlWLl+apsq48
d1pWj4TAZ+lL8k2fyvHoppMdzrqQsvLr+cN9mvmLmAtwlZP/jKEV83LaJW0Dhgua
j4MVggUOjMuRec5SHoo5jGvtrm6a0NQbv2pLqdRWemptsunF/jT9FmmM8aizXoAW
lOphBrfKRaq0t+nr5aWk8B8dQA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:52 2025 by rpki-client