Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.mft
File:                     208FFAFD8389347E0A0F0B5521884A995EB099DA.mft (raw, json)
Hash identifier:          Dn0tg4eonT70pgJRYUnavU1mJCyuZ3CMF0eb7HHlHlE=
Subject key identifier:   0D:18:22:3E:37:3A:52:69:5E:C2:41:73:2D:60:B7:9A:7A:2A:46:59
Authority key identifier: 20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA
Certificate issuer:       /CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
Certificate serial:       5CDFF61E7B1DD6C036B79A0FD2C0B13C42B8A33F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.mft
Manifest number:          AC
Signing time:             Wed 17 May 2023 20:03:21 +0000
Manifest this update:     Wed 17 May 2023 19:58:21 +0000
Manifest next update:     Thu 18 May 2023 23:50:21 +0000
Files and hashes:         1: 3136382e3139352e362e302f32342d3234203d3e20323635343036.roa (hash: HTgmWV+TKN2nhdeUe89Y4mLRUx4iKFiSzEihJfRp10Y=)
                          2: 3136382e3139352e352e302f32342d3234203d3e20323635343036.roa (hash: 2PZcpuxOFEn1kUYsFgG2ygEouHRXxhLOm+3u++l2kL0=)
                          3: 3136382e3139352e372e302f32342d3234203d3e20323635343036.roa (hash: Wf3Cv791wK2I4j1U8jfG5HdCHjt6mF7539QO3iSK2Xw=)
                          4: 3136382e3139352e342e302f32322d3232203d3e20323635343036.roa (hash: aisJIEYTM0/E4Z0c7CuEKBHV0kwJgb1gyKS+HxORzfE=)
                          5: 208FFAFD8389347E0A0F0B5521884A995EB099DA.crl (hash: wq0H4dzAukTQFxULFlDe4EZG+7ci3QJbHKMA0PbCruA=)
                          6: 3136382e3139352e342e302f32342d3234203d3e20323635343036.roa (hash: a6VuFwVlxH4VGDbaUtLVSOb7rd9aljCH9EIu36FGFOw=)
                          7: 323830343a333339383a3a2f33322d3332203d3e20323635343036.roa (hash: ChXFDmqwbfCo+TvtQcNMrzVGi8UuWwsqmf7htjM17O4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:df:f6:1e:7b:1d:d6:c0:36:b7:9a:0f:d2:c0:b1:3c:42:b8:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
        Validity
            Not Before: May 17 19:58:21 2023 GMT
            Not After : May 18 23:50:21 2023 GMT
        Subject: CN=0D18223E373A52695EC241732D60B79A7A2A4659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:c1:1c:3f:99:a7:1f:51:92:ec:b4:14:37:
                    ab:6f:62:25:1b:23:ca:a9:26:9a:5b:ad:70:b3:b1:
                    6b:41:f9:76:09:33:01:39:58:11:b5:57:25:2a:f8:
                    5c:bc:7c:ff:8f:20:8a:d6:68:62:bd:2d:fa:65:52:
                    35:5b:cd:9b:25:87:ff:b1:39:b2:68:b1:e0:2f:0b:
                    af:3f:c4:7d:7d:08:d7:cc:ca:d7:6a:6f:77:20:42:
                    9c:c8:72:cc:b1:86:48:10:bc:3b:72:a7:b4:80:e7:
                    9e:3b:cf:a7:5b:45:98:90:6c:c0:b6:c7:82:03:94:
                    67:56:0b:4d:82:cd:59:53:85:9a:bf:cd:70:b2:1a:
                    04:ac:29:1e:b0:88:7a:f2:6f:89:6f:39:02:51:b4:
                    53:c2:f3:12:de:6f:91:f0:a3:1c:56:a5:34:f8:73:
                    81:e4:06:87:4f:95:08:42:ab:a3:61:59:88:9e:27:
                    82:0e:52:60:4a:fb:2b:37:25:81:d2:84:f7:bc:14:
                    e9:bf:df:e8:e3:a3:22:7f:46:e7:9f:8f:2f:64:1d:
                    db:c8:f3:97:e2:d3:01:97:ae:9e:6f:90:9e:7d:58:
                    f4:f4:36:77:72:d3:a2:4d:9f:10:c2:92:7b:89:59:
                    ee:9b:81:c0:d9:ba:d6:76:0b:14:d8:f5:ef:71:47:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:18:22:3E:37:3A:52:69:5E:C2:41:73:2D:60:B7:9A:7A:2A:46:59
            X509v3 Authority Key Identifier:
                keyid:20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1f:f0:01:97:ba:bc:89:ec:32:88:81:8c:57:ff:4e:7f:23:
         09:c4:cf:56:5f:bb:54:16:c3:2f:02:88:67:90:3b:f0:31:00:
         be:4e:1a:9d:94:93:33:d1:8a:10:89:51:1f:74:5d:d2:70:fe:
         03:08:4b:8e:0b:63:09:1f:8a:0f:8a:bf:b0:8d:eb:58:c5:c9:
         3b:cd:c2:c0:43:4e:73:5a:39:94:bb:33:12:07:04:67:e8:f0:
         c7:81:b3:ba:9b:a0:9f:37:5f:79:98:0b:e3:ed:65:dc:88:8c:
         6f:a2:4a:fa:21:42:1b:c7:82:b6:f3:89:dc:c9:f9:be:87:42:
         78:a5:04:fd:86:22:75:b7:80:93:e8:ac:60:89:f4:39:5f:6b:
         ba:30:17:ea:c8:b6:e2:77:87:6d:69:eb:95:aa:65:7d:6d:b7:
         4c:61:66:0e:d7:da:f6:1c:ce:a7:d1:b0:3f:35:79:5e:d1:d0:
         9d:bd:71:ee:2d:b7:2b:25:13:b3:c1:0b:7e:20:9d:7f:b0:62:
         9d:61:07:bd:44:08:e4:1b:84:4f:0d:e7:19:65:12:83:54:f6:
         09:aa:ac:75:e6:bc:ab:f3:b5:bf:75:2f:2e:99:83:14:d9:7f:
         58:1b:18:e1:2f:e2:dd:a3:89:5c:6d:a9:28:3c:cb:e1:d4:29:
         c1:7c:fe:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXN/2Hnsd1sA2t5oP0sCxPEK4oz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA4RkZBRkQ4Mzg5MzQ3RTBBMEYwQjU1MjE4ODRBOTk1
RUIwOTlEQTAeFw0yMzA1MTcxOTU4MjFaFw0yMzA1MTgyMzUwMjFaMDMxMTAvBgNV
BAMTKDBEMTgyMjNFMzczQTUyNjk1RUMyNDE3MzJENjBCNzlBN0EyQTQ2NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGcEcP5mnH1GS7LQUN6tvYiUb
I8qpJppbrXCzsWtB+XYJMwE5WBG1VyUq+Fy8fP+PIIrWaGK9LfplUjVbzZslh/+x
ObJoseAvC68/xH19CNfMytdqb3cgQpzIcsyxhkgQvDtyp7SA5547z6dbRZiQbMC2
x4IDlGdWC02CzVlThZq/zXCyGgSsKR6wiHryb4lvOQJRtFPC8xLeb5HwoxxWpTT4
c4HkBodPlQhCq6NhWYieJ4IOUmBK+ys3JYHShPe8FOm/3+jjoyJ/Ruefjy9kHdvI
85fi0wGXrp5vkJ59WPT0Nndy06JNnxDCknuJWe6bgcDZutZ2CxTY9e9xR9NpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDRgiPjc6UmlewkFzLWC3mnoqRlkwHwYDVR0j
BBgwFoAUII/6/YOJNH4KDwtVIYhKmV6wmdowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlM5U1JNWDRNZ1F0R1hzaGVKV05ydloySldGdks0TEpxUVZCV3JHYzJO
N1QvMC8yMDhGRkFGRDgzODkzNDdFMEEwRjBCNTUyMTg4NEE5OTVFQjA5OURBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwOEZGQUZEODM4OTM0N0Uw
QTBGMEI1NTIxODg0QTk5NUVCMDk5REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MlM5U1JNWDRNZ1F0R1hzaGVKV05ydloySldGdks0TEpxUVZCV3JHYzJON1QvMC8y
MDhGRkFGRDgzODkzNDdFMEEwRjBCNTUyMTg4NEE5OTVFQjA5OURBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApR/wAZe6vInsMoiBjFf/Tn8jCcTPVl+7VBbDLwKIZ5A78DEAvk4anZSTM9GK
EIlRH3Rd0nD+AwhLjgtjCR+KD4q/sI3rWMXJO83CwENOc1o5lLszEgcEZ+jwx4Gz
upugnzdfeZgL4+1l3IiMb6JK+iFCG8eCtvOJ3Mn5vodCeKUE/YYidbeAk+isYIn0
OV9rujAX6si24neHbWnrlaplfW23TGFmDtfa9hzOp9GwPzV5XtHQnb1x7i23KyUT
s8ELfiCdf7BinWEHvUQI5BuETw3nGWUSg1T2Caqsdea8q/O1v3UvLpmDFNl/WBsY
4S/i3aOJXG2pKDzL4dQpwXz+uA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:48 2025 by rpki-client