Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.mft
File:                     0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.mft (raw, json)
Hash identifier:          6Hq843HuZ8JPL6aBMVmzdgdxmh4bv82OSnFeO1iFQsY=
Subject key identifier:   A7:89:B4:4D:13:56:6B:76:B2:B7:24:E8:66:AC:96:F3:1C:33:0E:DE
Authority key identifier: 0A:AE:6E:1F:E9:A1:32:1E:F6:C2:B5:AE:79:9B:C2:E5:A1:A9:0D:A6
Certificate issuer:       /CN=0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6
Certificate serial:       0B2DCA524B5C358D2109AC3F86C1F017D3CC33AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.mft
Manifest number:          10
Signing time:             Fri 21 Mar 2025 19:49:28 +0000
Manifest this update:     Fri 21 Mar 2025 19:44:28 +0000
Manifest next update:     Sat 22 Mar 2025 21:26:28 +0000
Files and hashes:         1: 0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.crl (hash: LLigmjIr6oRx0WwMqW4JWctIYkT8i7dbpnTBKxuAkaM=)
                          2: 34352e3232352e3134302e302f32322d3234203d3e20323636393338.roa (hash: jab/VemT+m+OIIttI1IJGf2bA6k803pfYdSMPKb0Qmw=)
                          3: 323830343a343539633a3a2f33322d313238203d3e20323636393338.roa (hash: 5VqCiyQ7AHccKroPNbb3L21hzWAmhJkFJ4KLVWJZRUM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2d:ca:52:4b:5c:35:8d:21:09:ac:3f:86:c1:f0:17:d3:cc:33:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6
        Validity
            Not Before: Mar 21 19:44:28 2025 GMT
            Not After : Mar 22 21:26:28 2025 GMT
        Subject: CN=A789B44D13566B76B2B724E866AC96F31C330EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:57:04:1a:0c:8d:56:69:7a:75:3d:44:12:
                    dc:97:4c:1f:66:0a:14:ab:b1:a8:24:86:0f:77:55:
                    f2:a1:20:31:a0:6d:51:d6:65:9e:0a:1c:b5:05:c8:
                    5c:36:ee:22:fd:e5:32:f5:b2:46:44:24:cd:8d:ad:
                    28:3e:b9:70:94:b4:ac:5e:fa:3a:10:8d:95:eb:47:
                    f0:a9:33:d0:23:be:0c:4e:88:35:3e:5f:e4:e7:b8:
                    69:dd:2a:ec:4e:17:8a:b5:a7:f7:2c:41:19:6d:f4:
                    c6:56:3c:e9:8a:49:57:f8:92:ce:20:25:53:58:94:
                    a8:79:6b:05:a3:97:0f:99:4d:09:4b:b6:ee:df:44:
                    66:e9:b0:69:12:8a:a4:fa:e8:28:5a:4a:71:98:39:
                    5f:77:c2:c7:68:f8:d2:4b:e7:fe:80:41:74:49:09:
                    8a:1b:8e:1a:46:1d:7e:2a:6d:49:51:72:e1:62:14:
                    1d:9a:25:de:8c:e3:3b:de:b3:5f:51:f5:17:b9:fa:
                    96:46:97:a8:f1:03:23:14:d6:bf:e1:aa:53:65:67:
                    83:02:51:1d:0d:77:40:b6:dd:ff:a7:78:97:ac:26:
                    24:07:36:33:24:02:62:a6:09:2e:7c:fb:c0:02:54:
                    79:5b:95:32:3a:72:84:d8:ce:2b:3a:0e:81:bc:e9:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:B4:4D:13:56:6B:76:B2:B7:24:E8:66:AC:96:F3:1C:33:0E:DE
            X509v3 Authority Key Identifier:
                keyid:0A:AE:6E:1F:E9:A1:32:1E:F6:C2:B5:AE:79:9B:C2:E5:A1:A9:0D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e6:e7:6d:df:6e:c2:00:ec:2e:ee:ac:01:58:be:76:81:bc:
         11:e0:58:22:54:66:a4:2f:0d:2b:e1:72:ae:2c:20:f3:bd:50:
         74:cf:2c:3a:76:1b:96:98:47:af:2e:bd:c5:87:9c:bf:3b:5c:
         3c:47:d7:8b:f7:f2:35:a7:1c:9f:c3:29:ce:dc:33:4e:7e:14:
         8b:b5:61:4d:2b:32:5c:a7:0a:63:90:a7:6e:34:8f:74:71:69:
         10:af:b8:4c:5b:2e:fa:8b:d0:ef:a7:e8:80:ab:93:cd:ed:f5:
         73:52:be:95:b2:cf:cb:9e:ed:75:bf:51:67:93:84:df:cc:26:
         82:a6:13:c2:aa:d7:ef:a3:a3:43:da:31:ba:de:ff:c1:55:8f:
         78:ef:e9:b4:cb:3a:4f:15:6a:fb:96:5f:40:67:a5:a7:ab:92:
         36:87:61:5b:b1:95:ab:df:56:b2:d8:f0:f6:b4:a5:8b:42:24:
         2e:6e:7f:63:a4:c6:6f:c0:ee:c3:37:f8:27:35:ec:63:e8:76:
         49:1f:be:02:aa:f3:3c:33:c9:c8:9e:c1:6c:ec:e6:26:39:bc:
         75:2d:93:75:a3:8e:71:0f:07:4b:14:fc:aa:3a:32:50:21:4b:
         6f:a5:52:e0:b0:b8:33:37:ec:bf:a6:6f:49:51:f0:b3:a3:35:
         c4:58:48:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCy3KUktcNY0hCaw/hsHwF9PMM6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRTZFMUZFOUExMzIxRUY2QzJCNUFFNzk5QkMyRTVB
MUE5MERBNjAeFw0yNTAzMjExOTQ0MjhaFw0yNTAzMjIyMTI2MjhaMDMxMTAvBgNV
BAMTKEE3ODlCNDREMTM1NjZCNzZCMkI3MjRFODY2QUM5NkYzMUMzMzBFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdg1cEGgyNVml6dT1EEtyXTB9m
ChSrsagkhg93VfKhIDGgbVHWZZ4KHLUFyFw27iL95TL1skZEJM2NrSg+uXCUtKxe
+joQjZXrR/CpM9AjvgxOiDU+X+TnuGndKuxOF4q1p/csQRlt9MZWPOmKSVf4ks4g
JVNYlKh5awWjlw+ZTQlLtu7fRGbpsGkSiqT66ChaSnGYOV93wsdo+NJL5/6AQXRJ
CYobjhpGHX4qbUlRcuFiFB2aJd6M4zves19R9Re5+pZGl6jxAyMU1r/hqlNlZ4MC
UR0Nd0C23f+neJesJiQHNjMkAmKmCS58+8ACVHlblTI6coTYzis6DoG86UQhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUp4m0TRNWa3aytyToZqyW8xwzDt4wHwYDVR0j
BBgwFoAUCq5uH+mhMh72wrWueZvC5aGpDaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRRTk5qanA0V0pOekE0SlRTc1FhMnBWbmFhMlJZeWpETHVSdjlxMXZ2
eXgvMC8wQUFFNkUxRkU5QTEzMjFFRjZDMkI1QUU3OTlCQzJFNUExQTkwREE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQUU2RTFGRTlBMTMyMUVG
NkMyQjVBRTc5OUJDMkU1QTFBOTBEQTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmRRTk5qanA0V0pOekE0SlRTc1FhMnBWbmFhMlJZeWpETHVSdjlxMXZ2eXgvMC8w
QUFFNkUxRkU5QTEzMjFFRjZDMkI1QUU3OTlCQzJFNUExQTkwREE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbubnbd9uwgDsLu6sAVi+doG8EeBYIlRmpC8NK+Fyriwg871QdM8sOnYblphH
ry69xYecvztcPEfXi/fyNaccn8MpztwzTn4Ui7VhTSsyXKcKY5CnbjSPdHFpEK+4
TFsu+ovQ76fogKuTze31c1K+lbLPy57tdb9RZ5OE38wmgqYTwqrX76OjQ9oxut7/
wVWPeO/ptMs6TxVq+5ZfQGelp6uSNodhW7GVq99Wstjw9rSli0IkLm5/Y6TGb8Du
wzf4JzXsY+h2SR++AqrzPDPJyJ7BbOzmJjm8dS2TdaOOcQ8HSxT8qjoyUCFLb6VS
4LC4Mzfsv6ZvSVHws6M1xFhIMw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:48:46 2025 by rpki-client