Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3DCiWS6yS2hnMDr7seshU8XP8iob4mvFbVUbFouUMk37/0/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.mft
File:                     6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.mft (raw, json)
Hash identifier:          rNbNxkbsIQcShua44WPuf8EOBJU2p1E7ciZyBdw7kIs=
Subject key identifier:   BA:F5:8B:5A:C7:DB:00:C1:77:E4:EC:9C:02:09:53:5F:93:62:13:E3
Authority key identifier: 6B:FB:85:B8:9C:FB:BD:84:58:35:CA:EB:F1:06:30:80:DF:4D:42:BB
Certificate issuer:       /CN=6BFB85B89CFBBD845835CAEBF1063080DF4D42BB
Certificate serial:       02D9BD5113535665E961B3A46E8B69B6229A8F8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DCiWS6yS2hnMDr7seshU8XP8iob4mvFbVUbFouUMk37/0/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.mft
Manifest number:          49
Signing time:             Tue 15 Oct 2024 06:44:33 +0000
Manifest this update:     Tue 15 Oct 2024 06:39:33 +0000
Manifest next update:     Wed 16 Oct 2024 10:20:33 +0000
Files and hashes:         1: 3133382e39372e34342e302f32322d3332203d3e20323731363134.roa (hash: f8X2/MoFtQolAbtLlID9T+PlC2yE8jBPjTw3C4TL6lc=)
                          2: 6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.crl (hash: 5fGsN7XeWG4NQdQS6ge1WQJ6sVN5W0jqU/LQ9/9bi3A=)
                          3: 323830343a376534383a3a2f33322d313238203d3e20323731363134.roa (hash: mJNpgT7p4M6fMPa/Ehj02k9vujY926vrluU/fQaz+Hw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d9:bd:51:13:53:56:65:e9:61:b3:a4:6e:8b:69:b6:22:9a:8f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BFB85B89CFBBD845835CAEBF1063080DF4D42BB
        Validity
            Not Before: Oct 15 06:39:33 2024 GMT
            Not After : Oct 16 10:20:33 2024 GMT
        Subject: CN=BAF58B5AC7DB00C177E4EC9C0209535F936213E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:cb:3e:f5:de:37:74:11:02:04:8b:fc:e3:
                    17:02:4c:2d:2c:20:3a:81:2e:9f:51:1d:c1:bf:40:
                    e3:3a:4d:28:c8:78:df:78:6e:8c:39:0b:9c:5b:1e:
                    9a:ba:35:ce:c4:7d:3c:81:42:fd:4c:93:1d:65:c8:
                    75:ff:a3:87:5b:67:82:7b:f8:2f:06:b6:5c:f1:ca:
                    34:d7:94:36:0a:43:4b:92:47:9a:4b:ef:1c:4c:c0:
                    da:33:a7:57:ac:d5:d4:c8:03:ea:5e:53:dc:6e:43:
                    b7:ff:3c:44:f8:b4:a4:bc:29:89:32:4f:01:42:10:
                    52:2c:67:7e:2a:75:12:ba:93:84:b4:3c:a4:cb:b5:
                    72:4f:26:0b:93:e7:80:65:c0:24:43:bc:5f:07:9a:
                    9d:33:1e:5e:19:76:3f:c5:a6:71:0f:58:1a:74:7a:
                    43:a6:cf:7b:d8:f1:50:ab:99:1e:6d:d3:5d:7d:9a:
                    7e:12:76:d1:c4:a3:87:56:ae:f6:d5:7e:f6:2e:bd:
                    22:ba:dc:30:fb:aa:68:33:06:ba:81:c3:35:ef:f2:
                    ed:75:96:3a:7a:1a:b1:c1:61:d7:b3:4d:33:24:2a:
                    76:47:58:c0:85:6f:f4:1c:9d:87:41:bb:d3:2b:75:
                    2e:08:8a:8c:6a:e3:db:fb:84:f6:ee:f1:51:d3:ac:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F5:8B:5A:C7:DB:00:C1:77:E4:EC:9C:02:09:53:5F:93:62:13:E3
            X509v3 Authority Key Identifier:
                keyid:6B:FB:85:B8:9C:FB:BD:84:58:35:CA:EB:F1:06:30:80:DF:4D:42:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DCiWS6yS2hnMDr7seshU8XP8iob4mvFbVUbFouUMk37/0/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DCiWS6yS2hnMDr7seshU8XP8iob4mvFbVUbFouUMk37/0/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:ee:6d:b2:d8:a7:39:ad:d0:f7:a0:77:20:bf:29:37:e8:
         84:78:2c:57:9d:25:c3:6f:f4:65:96:52:89:fd:1b:59:31:57:
         71:4a:08:43:48:bd:2c:b4:22:9f:d3:93:ab:ba:0f:3b:35:63:
         ba:2b:49:2c:66:ef:5d:dd:f7:95:20:57:e9:2b:c5:22:a3:e0:
         5d:0a:b9:d8:8e:7c:41:36:e7:de:21:81:a2:53:fd:68:b7:9c:
         0f:07:4d:74:00:e8:69:1b:63:85:cc:a8:bc:42:4b:85:25:96:
         89:5b:db:d7:d3:d3:3d:24:c2:53:7b:f3:80:34:96:ac:8f:22:
         9e:e2:21:47:c3:64:70:34:28:17:8a:80:96:49:af:5f:1d:99:
         f7:00:ea:cf:66:2d:7b:3e:c9:39:86:72:5d:6a:ba:e3:6c:74:
         41:b1:cf:de:6e:8c:10:e0:0b:63:fd:3d:89:d3:ad:82:cc:68:
         bf:4f:74:1a:06:33:a6:51:27:59:5a:9d:d1:2f:b0:3a:b4:5d:
         5c:0c:c1:28:89:a8:4b:f6:ef:fd:52:64:68:61:20:f3:76:88:
         d6:43:e3:60:88:21:14:2a:44:45:1f:56:ea:c7:e7:de:70:1d:
         c3:84:8b:42:72:63:be:3f:d8:07:b5:e3:2a:ed:0a:21:f6:21:
         e2:c2:6f:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAtm9URNTVmXpYbOkbotptiKaj44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJGQjg1Qjg5Q0ZCQkQ4NDU4MzVDQUVCRjEwNjMwODBE
RjRENDJCQjAeFw0yNDEwMTUwNjM5MzNaFw0yNDEwMTYxMDIwMzNaMDMxMTAvBgNV
BAMTKEJBRjU4QjVBQzdEQjAwQzE3N0U0RUM5QzAyMDk1MzVGOTM2MjEzRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7ss+9d43dBECBIv84xcCTC0s
IDqBLp9RHcG/QOM6TSjIeN94bow5C5xbHpq6Nc7EfTyBQv1Mkx1lyHX/o4dbZ4J7
+C8GtlzxyjTXlDYKQ0uSR5pL7xxMwNozp1es1dTIA+peU9xuQ7f/PET4tKS8KYky
TwFCEFIsZ34qdRK6k4S0PKTLtXJPJguT54BlwCRDvF8Hmp0zHl4Zdj/FpnEPWBp0
ekOmz3vY8VCrmR5t0119mn4SdtHEo4dWrvbVfvYuvSK63DD7qmgzBrqBwzXv8u11
ljp6GrHBYdezTTMkKnZHWMCFb/QcnYdBu9MrdS4Iioxq49v7hPbu8VHTrNoFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuvWLWsfbAMF35OycAglTX5NiE+MwHwYDVR0j
BBgwFoAUa/uFuJz7vYRYNcrr8QYwgN9NQrswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0RDaVdTNnlTMmhuTURyN3Nlc2hVOFhQOGlvYjRtdkZiVlViRm91VU1r
MzcvMC82QkZCODVCODlDRkJCRDg0NTgzNUNBRUJGMTA2MzA4MERGNEQ0MkJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCRkI4NUI4OUNGQkJEODQ1
ODM1Q0FFQkYxMDYzMDgwREY0RDQyQkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0RDaVdTNnlTMmhuTURyN3Nlc2hVOFhQOGlvYjRtdkZiVlViRm91VU1rMzcvMC82
QkZCODVCODlDRkJCRDg0NTgzNUNBRUJGMTA2MzA4MERGNEQ0MkJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfGrubbLYpzmt0PegdyC/KTfohHgsV50lw2/0ZZZSif0bWTFXcUoIQ0i9LLQi
n9OTq7oPOzVjuitJLGbvXd33lSBX6SvFIqPgXQq52I58QTbn3iGBolP9aLecDwdN
dADoaRtjhcyovEJLhSWWiVvb19PTPSTCU3vzgDSWrI8inuIhR8NkcDQoF4qAlkmv
Xx2Z9wDqz2Ytez7JOYZyXWq642x0QbHP3m6MEOALY/09idOtgsxov090GgYzplEn
WVqd0S+wOrRdXAzBKImoS/bv/VJkaGEg83aI1kPjYIghFCpERR9W6sfn3nAdw4SL
QnJjvj/YB7XjKu0KIfYh4sJvhw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:45:10 2025 by rpki-client