Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft
File:                     D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft (raw, json)
Hash identifier:          6fzhel3JuXsZrnA1BpG3v7Rk2i4Pw9S1orGqYtCMKXk=
Subject key identifier:   28:24:8E:80:0B:61:CF:D6:F4:B8:E1:26:2C:A1:0A:3D:2C:0E:6B:E2
Authority key identifier: D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C
Certificate issuer:       /CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C
Certificate serial:       31A0A18785CBADFBE8900D038AE965BB7AB090B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft
Manifest number:          01DE
Signing time:             Sat 29 Mar 2025 10:06:27 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:27 +0000
Manifest next update:     Sun 30 Mar 2025 13:40:27 +0000
Files and hashes:         1: 323830343a333364383a3a2f33322d3332203d3e20323635343230.roa (hash: vEbluKO9WO7Wr/ZFti8PZzzfOsObTPM3B1b8gS1XEcE=)
                          2: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl (hash: ntIZ8FW/OqOSL+pUpW+bgLCDkhL4gCNTsJPxh05/d5M=)
                          3: 3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa (hash: /1UosB7p/H0IpPArGzy1kLCzKmsTI1n2rZyqgUtb7C8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a0:a1:87:85:cb:ad:fb:e8:90:0d:03:8a:e9:65:bb:7a:b0:90:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C
        Validity
            Not Before: Mar 29 10:01:27 2025 GMT
            Not After : Mar 30 13:40:27 2025 GMT
        Subject: CN=28248E800B61CFD6F4B8E1262CA10A3D2C0E6BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:0e:63:82:5a:ab:12:f4:27:5e:bb:fb:8a:
                    44:ee:58:36:71:90:78:21:15:84:30:62:5c:e9:39:
                    b9:9c:3e:ec:20:da:7f:12:25:e4:4a:85:fa:f5:60:
                    bd:37:de:63:4b:f5:29:68:f4:85:d1:09:55:bc:f5:
                    5d:76:e7:ea:ea:b0:8b:bb:ec:8a:58:00:80:58:55:
                    fe:28:ac:69:1f:e0:1d:36:b3:b0:6b:67:62:13:cd:
                    95:78:b4:d1:75:c5:a3:0e:eb:9c:f0:62:47:30:40:
                    41:50:65:37:53:f1:83:7d:7d:90:df:58:b0:4d:c7:
                    37:cb:52:0f:d4:6b:2f:5d:39:de:f0:f8:3b:66:0c:
                    92:ab:ff:30:56:52:c4:c1:5a:f6:0c:31:74:fc:4f:
                    d0:16:f9:ca:e0:00:f0:05:55:c7:ef:11:4b:80:d5:
                    c3:36:39:9f:9c:df:ee:fd:5f:cf:ee:a7:71:80:6b:
                    69:03:01:f9:12:9a:e1:7c:4a:a1:ab:e6:8d:d9:50:
                    38:63:c1:85:bc:26:a7:01:3e:03:ad:48:01:be:50:
                    7c:ad:6d:c6:2b:6b:89:31:e2:17:a4:b9:dd:85:ca:
                    cd:df:fd:46:f7:38:58:50:b3:c8:42:53:42:a7:f8:
                    61:4b:5c:91:85:bb:14:08:82:ec:09:8b:27:05:24:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:24:8E:80:0B:61:CF:D6:F4:B8:E1:26:2C:A1:0A:3D:2C:0E:6B:E2
            X509v3 Authority Key Identifier:
                keyid:D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5b:4f:8d:00:42:8d:bc:a6:aa:bf:6f:28:53:0e:bb:72:5c:
         b9:8a:19:77:0c:f1:35:c6:02:24:3b:ca:1c:5e:83:d8:0e:b0:
         3b:77:79:d0:57:7e:45:ce:41:1c:f4:be:47:4b:86:6d:75:76:
         a1:bd:2d:5d:2d:15:e9:85:d4:1f:a7:af:6d:1e:77:ba:bc:32:
         df:2b:70:8d:b9:5b:76:39:58:b2:cc:0c:7e:5d:3c:45:01:d4:
         2c:45:f6:0a:e8:78:fb:70:41:23:36:6e:a6:0b:43:21:a2:0e:
         64:7d:cf:cc:3c:fa:9a:8a:24:15:45:fb:19:be:f9:cd:62:a9:
         b4:a2:2f:f1:be:e0:06:f2:ef:6d:91:75:b5:8c:a2:f6:94:ac:
         ea:6f:dc:76:22:22:88:1c:3d:a4:d4:81:be:78:b9:90:06:6d:
         58:13:50:07:89:31:62:48:b6:a0:30:ec:e8:11:cf:d6:fc:0d:
         58:c0:38:46:1e:3c:f8:af:21:d6:3c:c1:e6:55:02:c6:8a:2c:
         9f:cd:eb:2c:f7:42:80:37:99:e9:77:7b:2c:14:c6:d1:6a:9d:
         da:89:c5:58:ce:8b:62:fa:a0:46:3f:9e:56:9a:77:3c:75:ee:
         02:dc:14:19:dd:63:70:5c:a2:5b:be:4f:a4:02:0c:03:9d:69:
         a1:b8:2f:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMaChh4XLrfvokA0Diullu3qwkLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1OEJGREI0QkFEM0NCMzhBQ0RBOEZBQzkxOUExQTI0
REVERUI1QzAeFw0yNTAzMjkxMDAxMjdaFw0yNTAzMzAxMzQwMjdaMDMxMTAvBgNV
BAMTKDI4MjQ4RTgwMEI2MUNGRDZGNEI4RTEyNjJDQTEwQTNEMkMwRTZCRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOg5jglqrEvQnXrv7ikTuWDZx
kHghFYQwYlzpObmcPuwg2n8SJeRKhfr1YL033mNL9Slo9IXRCVW89V125+rqsIu7
7IpYAIBYVf4orGkf4B02s7BrZ2ITzZV4tNF1xaMO65zwYkcwQEFQZTdT8YN9fZDf
WLBNxzfLUg/Uay9dOd7w+DtmDJKr/zBWUsTBWvYMMXT8T9AW+crgAPAFVcfvEUuA
1cM2OZ+c3+79X8/up3GAa2kDAfkSmuF8SqGr5o3ZUDhjwYW8JqcBPgOtSAG+UHyt
bcYra4kx4hekud2Fys3f/Ub3OFhQs8hCU0Kn+GFLXJGFuxQIguwJiycFJLKbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKCSOgAthz9b0uOEmLKEKPSwOa+IwHwYDVR0j
BBgwFoAU01i/20utPLOKzaj6yRmhok3t61wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURo
aTIvMS9EMzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNThCRkRCNEJBRDNDQjM4
QUNEQThGQUM5MTlBMUEyNERFREVCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURoaTIvMS9E
MzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd1tPjQBCjbymqr9vKFMOu3JcuYoZdwzxNcYCJDvKHF6D2A6wO3d50Fd+Rc5B
HPS+R0uGbXV2ob0tXS0V6YXUH6evbR53urwy3ytwjblbdjlYsswMfl08RQHULEX2
Cuh4+3BBIzZupgtDIaIOZH3PzDz6mookFUX7Gb75zWKptKIv8b7gBvLvbZF1tYyi
9pSs6m/cdiIiiBw9pNSBvni5kAZtWBNQB4kxYki2oDDs6BHP1vwNWMA4Rh48+K8h
1jzB5lUCxoosn83rLPdCgDeZ6Xd7LBTG0Wqd2onFWM6LYvqgRj+eVpp3PHXuAtwU
Gd1jcFyiW75PpAIMA51pobgvTw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:21 2025 by rpki-client