Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.mft
File:                     8ABC0347676D4CF73560AAEDBC382C803390BA35.mft (raw, json)
Hash identifier:          R02/PIbNDYFv/phfaUtkdIZ8M1zY5BCPEyRgfE3f8gE=
Subject key identifier:   8B:D4:45:38:0A:F9:DC:3F:85:CB:8A:C5:CF:81:0B:50:B7:C4:56:00
Authority key identifier: 8A:BC:03:47:67:6D:4C:F7:35:60:AA:ED:BC:38:2C:80:33:90:BA:35
Certificate issuer:       /CN=8ABC0347676D4CF73560AAEDBC382C803390BA35
Certificate serial:       170924D5B65227CA66D38C84D3D7B248CDBD7BBD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.mft
Manifest number:          01DD
Signing time:             Fri 28 Mar 2025 05:00:00 +0000
Manifest this update:     Fri 28 Mar 2025 04:55:00 +0000
Manifest next update:     Sat 29 Mar 2025 06:54:00 +0000
Files and hashes:         1: 8ABC0347676D4CF73560AAEDBC382C803390BA35.crl (hash: 97285Z6jMzfWsqhR3YcyUtD7nizXLH7ruNaIproRI9s=)
                          2: 323830343a383136633a3a2f33322d3332203d3e20323732343533.roa (hash: UeQElJT2Z4KOZevkLSV1rnWSftg0re+nAidd+Cf0/rU=)
                          3: 323830343a383136633a3a2f33332d3333203d3e20323732343533.roa (hash: UpwB+WreTF1s4oJZiaftWh17VoBwFqqSPUXl6yUL9ck=)
                          4: 323830343a383136633a3a2f33322d3438203d3e20323732343533.roa (hash: yZiXxy3J/XE0Ezp0KC/K7RpmR72gw94uewFVQ1ryecY=)
                          5: 323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa (hash: GDo7k273/ACBuqVhNjgL96z8KfJKtKPVjS5OubrLJ9M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:09:24:d5:b6:52:27:ca:66:d3:8c:84:d3:d7:b2:48:cd:bd:7b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC0347676D4CF73560AAEDBC382C803390BA35
        Validity
            Not Before: Mar 28 04:55:00 2025 GMT
            Not After : Mar 29 06:54:00 2025 GMT
        Subject: CN=8BD445380AF9DC3F85CB8AC5CF810B50B7C45600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:c3:dd:21:0a:67:c1:04:03:9f:28:0b:a4:
                    fb:dc:d2:f9:db:6f:b4:fe:c0:fc:92:48:b1:0c:48:
                    f9:e5:7e:a9:2c:1b:f5:7b:87:7d:ec:52:45:d4:89:
                    b3:60:9d:94:4a:6e:7e:87:fd:73:4a:34:e7:d3:c1:
                    ba:56:bf:c6:43:c5:5d:e2:11:6a:10:5a:49:ad:30:
                    3b:c6:ff:73:0e:70:52:b6:01:c9:42:a4:fc:28:f3:
                    8f:07:30:37:59:cb:7c:09:32:d5:09:af:33:11:a5:
                    2f:6c:9c:f3:62:89:03:fd:88:73:bf:aa:80:18:0b:
                    09:f0:c0:74:ad:ee:ce:75:b6:5c:46:d4:9b:e9:59:
                    dd:4d:97:04:dd:cb:ef:87:87:19:aa:72:db:36:28:
                    d5:f4:93:3f:86:92:bd:7c:a2:11:71:fa:a4:a7:97:
                    f9:f5:b5:5a:5f:c6:2a:1a:1e:25:b2:e6:93:87:1c:
                    ef:36:aa:18:6a:97:8d:00:09:bc:f5:d5:7b:e2:0c:
                    49:73:52:14:c1:1f:ba:b0:c6:bb:56:ed:d4:d9:55:
                    fd:32:ba:1f:71:e0:db:b6:f3:41:3f:51:99:9e:d3:
                    d9:76:90:93:6e:20:1d:25:5f:fd:c6:c6:61:a6:10:
                    f9:5e:cb:3c:d8:3b:e3:9f:2c:f7:6f:86:ae:dc:cd:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D4:45:38:0A:F9:DC:3F:85:CB:8A:C5:CF:81:0B:50:B7:C4:56:00
            X509v3 Authority Key Identifier:
                keyid:8A:BC:03:47:67:6D:4C:F7:35:60:AA:ED:BC:38:2C:80:33:90:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:1a:9d:c1:24:64:13:81:8e:0e:c4:40:9f:df:6d:55:29:63:
         cd:4e:b6:2d:ed:5d:ff:dd:3d:a3:b5:97:6c:4f:f1:7e:8d:99:
         ff:1a:2c:4e:e8:39:2a:be:41:e4:c8:e0:6b:15:ad:d7:24:91:
         17:4e:67:cb:14:8b:62:02:b3:3d:55:8a:c2:58:ff:bf:c3:f5:
         af:95:0e:39:4f:51:3e:a5:7e:56:f3:82:fa:e9:5b:78:07:5c:
         aa:cd:25:56:58:8c:a0:69:f3:e0:04:d7:21:06:61:0f:71:a5:
         27:49:ac:cc:26:f8:3b:0f:f5:04:bf:f9:b8:fd:04:2d:bd:ba:
         33:8e:7d:e3:be:0d:e1:58:19:2b:85:88:e1:ed:d1:f7:bc:af:
         04:26:a0:53:13:ab:5a:89:6a:12:e0:8a:32:13:b4:b1:a3:dc:
         32:1a:5a:98:7b:7f:16:32:c7:b3:a8:14:35:29:3e:31:f4:0c:
         0f:9a:ca:01:87:4a:4b:75:b8:11:e2:d2:1a:50:e2:96:c6:c8:
         1e:d8:7a:a5:9e:36:c5:86:c7:a9:f9:64:1e:c4:d2:bc:85:84:
         9b:d3:5a:e7:f3:02:3a:1e:ae:b6:86:15:c3:5c:46:bd:32:88:
         5c:6b:3a:18:c9:5c:44:b9:10:00:0a:c2:07:c3:78:46:49:75:
         75:b1:c1:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFwkk1bZSJ8pm04yE09eySM29e70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQzAzNDc2NzZENENGNzM1NjBBQUVEQkMzODJDODAz
MzkwQkEzNTAeFw0yNTAzMjgwNDU1MDBaFw0yNTAzMjkwNjU0MDBaMDMxMTAvBgNV
BAMTKDhCRDQ0NTM4MEFGOURDM0Y4NUNCOEFDNUNGODEwQjUwQjdDNDU2MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSMPdIQpnwQQDnygLpPvc0vnb
b7T+wPySSLEMSPnlfqksG/V7h33sUkXUibNgnZRKbn6H/XNKNOfTwbpWv8ZDxV3i
EWoQWkmtMDvG/3MOcFK2AclCpPwo848HMDdZy3wJMtUJrzMRpS9snPNiiQP9iHO/
qoAYCwnwwHSt7s51tlxG1JvpWd1NlwTdy++Hhxmqcts2KNX0kz+Gkr18ohFx+qSn
l/n1tVpfxioaHiWy5pOHHO82qhhql40ACbz11XviDElzUhTBH7qwxrtW7dTZVf0y
uh9x4Nu280E/UZme09l2kJNuIB0lX/3GxmGmEPleyzzYO+OfLPdvhq7czcrDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUi9RFOAr53D+Fy4rFz4ELULfEVgAwHwYDVR0j
BBgwFoAUirwDR2dtTPc1YKrtvDgsgDOQujUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhI
N1ovMS84QUJDMDM0NzY3NkQ0Q0Y3MzU2MEFBRURCQzM4MkM4MDMzOTBCQTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkMwMzQ3Njc2RDRDRjcz
NTYwQUFFREJDMzgyQzgwMzM5MEJBMzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhIN1ovMS84
QUJDMDM0NzY3NkQ0Q0Y3MzU2MEFBRURCQzM4MkM4MDMzOTBCQTM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1BqdwSRkE4GODsRAn99tVSljzU62Le1d/909o7WXbE/xfo2Z/xosTug5Kr5B
5MjgaxWt1ySRF05nyxSLYgKzPVWKwlj/v8P1r5UOOU9RPqV+VvOC+ulbeAdcqs0l
VliMoGnz4ATXIQZhD3GlJ0mszCb4Ow/1BL/5uP0ELb26M459474N4VgZK4WI4e3R
97yvBCagUxOrWolqEuCKMhO0saPcMhpamHt/FjLHs6gUNSk+MfQMD5rKAYdKS3W4
EeLSGlDilsbIHth6pZ42xYbHqflkHsTSvIWEm9Na5/MCOh6utoYVw1xGvTKIXGs6
GMlcRLkQAArCB8N4Rkl1dbHB/g==
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:24:39 2025 by rpki-client