Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
File:                     AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft (raw, json)
Hash identifier:          ihugNQVxtlJhEbLcVM9mwuqbwwRgTh3iy0k3j2vacaU=
Subject key identifier:   02:3C:CD:6D:21:A9:AB:58:B8:07:65:79:B3:6C:DD:28:96:C0:8C:C6
Authority key identifier: AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83
Certificate issuer:       /CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
Certificate serial:       14C81A025AF8342303F12C6C2A2BD7D2D88BF9D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
Manifest number:          01DC
Signing time:             Fri 28 Mar 2025 23:01:55 +0000
Manifest this update:     Fri 28 Mar 2025 22:56:55 +0000
Manifest next update:     Sun 30 Mar 2025 01:39:55 +0000
Files and hashes:         1: AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl (hash: PE0KyujHCZWhIw30JXhjYR4gF4LOblxj4ihpZHzi7OI=)
                          2: 3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa (hash: s+5Ne+ruwuee94iefO6qySoUqtiZ27tUVu85dvhZvqk=)
                          3: 3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa (hash: Qy6/IRCgdz00QWb/OF4UFtbjB05oGxSUDYg3mEcsRks=)
                          4: 3133382e39342e3137302e302f32342d3234203d3e20323730383736.roa (hash: fZ4nu9xyFEjf2VSTQUqzE4gJtBF+6v1DtyzeJbcT41o=)
                          5: 3133382e39342e3137302e302f32332d3233203d3e20323730383736.roa (hash: AN73hIKPHIa52xMsyDqb18lmPcLMwpHnsZdVpnHDk3c=)
                          6: 3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa (hash: XFnmyki1soPq6XskQ7CzqbpeZ1D2esYxzotNmxRX1zA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c8:1a:02:5a:f8:34:23:03:f1:2c:6c:2a:2b:d7:d2:d8:8b:f9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
        Validity
            Not Before: Mar 28 22:56:55 2025 GMT
            Not After : Mar 30 01:39:55 2025 GMT
        Subject: CN=023CCD6D21A9AB58B8076579B36CDD2896C08CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:1b:ed:89:f4:ca:aa:fe:af:9e:06:52:99:
                    63:f5:09:f3:5a:70:fb:c2:be:32:64:ce:51:9b:21:
                    71:36:18:c2:5e:76:79:f3:52:35:71:37:dd:62:88:
                    9e:16:97:f1:08:ac:73:80:d8:59:ca:f6:c3:01:9c:
                    7e:5d:2a:5f:2d:0c:03:12:39:d1:c8:a9:e9:d2:56:
                    91:bd:fa:43:34:c0:d2:00:00:73:ef:2f:dc:f6:56:
                    16:65:d7:8a:98:4d:09:6a:08:4a:4e:09:f2:a2:7f:
                    b6:82:7e:64:0c:aa:0c:e9:c8:0f:f3:18:49:4f:4a:
                    8a:87:11:89:11:6c:59:91:3b:9b:cb:ab:4c:2a:7a:
                    ce:af:a0:7b:11:62:76:99:c2:1b:f2:ff:3f:d2:5d:
                    61:72:f4:cd:48:8b:10:3f:d3:08:05:fa:d7:07:cb:
                    6c:c1:09:22:ef:89:10:d2:a3:49:e8:44:b9:91:3a:
                    0c:34:fe:08:aa:ae:a5:01:6f:1e:72:92:a1:bb:b0:
                    b9:aa:be:3f:31:96:78:66:34:87:16:46:8f:08:1e:
                    e7:56:4f:01:84:18:e3:89:74:d1:77:a1:59:39:51:
                    46:31:0b:5a:c1:cb:e7:ec:ee:2e:d3:81:f4:99:24:
                    8f:91:81:b3:9b:e3:ae:73:be:36:5f:a6:ae:55:4d:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3C:CD:6D:21:A9:AB:58:B8:07:65:79:B3:6C:DD:28:96:C0:8C:C6
            X509v3 Authority Key Identifier:
                keyid:AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:26:b2:e3:97:67:82:a7:c9:b0:1c:ca:91:65:70:39:4f:
         7f:5c:d9:85:6c:3c:c4:a5:ff:f2:f8:6b:ed:47:47:eb:62:3a:
         99:ec:50:9a:45:56:38:d6:e4:d6:47:db:44:f5:4e:22:37:88:
         2b:3e:83:62:76:10:d4:9b:2a:64:f2:94:4f:bc:1f:ef:0e:4f:
         f2:1e:f3:e4:38:ed:53:fa:09:57:bb:d3:de:76:1b:aa:91:1e:
         b4:60:85:4e:f0:16:27:fb:ca:94:9d:e0:d1:93:b4:66:c1:df:
         2f:36:2f:b4:2f:a7:2b:0e:73:d9:0a:74:35:a8:17:4b:12:bc:
         9f:ce:e3:2a:3c:d4:42:1d:9b:4f:75:84:c1:35:46:e5:e9:cf:
         f5:cb:0b:3f:6a:93:84:53:b8:50:94:2c:d8:87:c0:13:fd:1a:
         92:29:6a:77:9d:80:c0:5a:64:ec:94:ab:03:df:52:bb:ca:56:
         69:83:00:df:de:58:1d:9c:1b:ba:c6:8a:5a:10:77:2a:4b:4a:
         70:e9:fe:04:f2:f3:41:48:c0:85:13:25:8c:a0:bc:b9:93:bb:
         f4:27:8d:b5:19:c8:b2:71:03:bb:6a:7f:37:d5:e6:6d:0c:9c:
         57:a2:67:a3:8a:a1:b3:ce:8e:80:87:6b:15:07:45:6f:a1:07:
         8f:be:d9:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFMgaAlr4NCMD8SxsKivX0tiL+dAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU1OUE0OEJBQTgxNkMxNENCOTZEQUIwQ0ExMDZCNTlC
M0I4REM4MzAeFw0yNTAzMjgyMjU2NTVaFw0yNTAzMzAwMTM5NTVaMDMxMTAvBgNV
BAMTKDAyM0NDRDZEMjFBOUFCNThCODA3NjU3OUIzNkNERDI4OTZDMDhDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmlhvtifTKqv6vngZSmWP1CfNa
cPvCvjJkzlGbIXE2GMJednnzUjVxN91iiJ4Wl/EIrHOA2FnK9sMBnH5dKl8tDAMS
OdHIqenSVpG9+kM0wNIAAHPvL9z2VhZl14qYTQlqCEpOCfKif7aCfmQMqgzpyA/z
GElPSoqHEYkRbFmRO5vLq0wqes6voHsRYnaZwhvy/z/SXWFy9M1IixA/0wgF+tcH
y2zBCSLviRDSo0noRLmROgw0/giqrqUBbx5ykqG7sLmqvj8xlnhmNIcWRo8IHudW
TwGEGOOJdNF3oVk5UUYxC1rBy+fs7i7TgfSZJI+RgbOb465zvjZfpq5VTZnXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAjzNbSGpq1i4B2V5s2zdKJbAjMYwHwYDVR0j
BBgwFoAUrlmki6qBbBTLltqwyhBrWbO43IMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlA3eUNtbmlOQ3lXWjlaWW9GVm5Ic3ZWNndXckdMWjFtb2NCcFVFV1pS
Q1EvMS9BRTU5QTQ4QkFBODE2QzE0Q0I5NkRBQjBDQTEwNkI1OUIzQjhEQzgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFNTlBNDhCQUE4MTZDMTRD
Qjk2REFCMENBMTA2QjU5QjNCOERDODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MlA3eUNtbmlOQ3lXWjlaWW9GVm5Ic3ZWNndXckdMWjFtb2NCcFVFV1pSQ1EvMS9B
RTU5QTQ4QkFBODE2QzE0Q0I5NkRBQjBDQTEwNkI1OUIzQjhEQzgzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAELQmsuOXZ4KnybAcypFlcDlPf1zZhWw8xKX/8vhr7UdH62I6mexQmkVWONbk
1kfbRPVOIjeIKz6DYnYQ1JsqZPKUT7wf7w5P8h7z5DjtU/oJV7vT3nYbqpEetGCF
TvAWJ/vKlJ3g0ZO0ZsHfLzYvtC+nKw5z2Qp0NagXSxK8n87jKjzUQh2bT3WEwTVG
5enP9csLP2qThFO4UJQs2IfAE/0akilqd52AwFpk7JSrA99Su8pWaYMA395YHZwb
usaKWhB3KktKcOn+BPLzQUjAhRMljKC8uZO79CeNtRnIsnEDu2p/N9XmbQycV6Jn
o4qhs86OgIdrFQdFb6EHj77Z1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:39:08 2025 by rpki-client