Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
File:                     CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json)
Hash identifier:          whmbrglQcA6QW9LNvulCvDVDVkfC6Zj57e72iJFLLwQ=
Subject key identifier:   DF:D8:DF:30:80:4C:CC:ED:2E:CE:CA:58:1E:4E:B7:CA:A8:E7:3C:15
Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA
Certificate issuer:       /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
Certificate serial:       7C945FBC6FC9245B37A9DE7FA56FAAADDB99EAD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
Manifest number:          01E1
Signing time:             Sat 29 Mar 2025 10:04:24 +0000
Manifest this update:     Sat 29 Mar 2025 09:59:24 +0000
Manifest next update:     Sun 30 Mar 2025 10:30:24 +0000
Files and hashes:         1: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: N9HuU1W9ryFGU85A3ZfF+Ao4jsgW1hWTRMLA6XPYlk0=)
                          2: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: S4KrLWwdIEhNPyXKuaFJlVuhSlbQX/LNBGOvl0cUgZM=)
                          3: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:94:5f:bc:6f:c9:24:5b:37:a9:de:7f:a5:6f:aa:ad:db:99:ea:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
        Validity
            Not Before: Mar 29 09:59:24 2025 GMT
            Not After : Mar 30 10:30:24 2025 GMT
        Subject: CN=DFD8DF30804CCCED2ECECA581E4EB7CAA8E73C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:8c:a9:2c:b4:84:fc:2f:dd:9a:84:5a:0a:
                    2d:d6:9a:e5:f4:e8:3e:f8:0c:cd:2a:91:52:cf:59:
                    3c:04:6e:44:59:39:1e:49:39:a6:29:25:d3:e7:b0:
                    c1:25:01:a9:10:6c:a0:87:52:f4:1c:06:49:83:e6:
                    eb:0e:ee:50:cd:ce:ac:bf:f3:29:ad:9e:9c:21:ee:
                    17:a7:1d:8f:e1:3b:0e:89:f2:a4:4d:0a:8b:fc:e1:
                    a1:63:23:45:86:b9:2f:7f:4f:b1:43:ca:7b:68:23:
                    7a:13:0e:cc:f4:43:c3:79:40:c4:e8:99:63:4d:72:
                    aa:53:88:4d:06:96:09:42:b2:86:33:9f:82:74:61:
                    7c:9b:ff:6f:0d:35:d3:ad:ba:e8:f3:8e:fc:35:6a:
                    fa:84:a3:d4:ad:c2:ff:78:b9:79:d9:61:c0:65:fc:
                    c5:ed:ac:bd:67:55:5b:0d:f8:97:5e:6e:36:5c:71:
                    7b:82:41:58:1d:2f:88:aa:73:2b:f2:a9:9f:36:b8:
                    9e:3f:b1:4c:5b:47:89:0b:71:57:0b:5f:ef:2a:5a:
                    3a:16:5b:48:1b:15:67:b3:4f:f2:a3:aa:54:46:b2:
                    28:a7:02:2f:2a:27:0e:d8:ac:4a:9f:9a:7c:12:31:
                    0d:19:b9:1e:52:a1:81:56:f4:db:b7:52:38:b2:67:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D8:DF:30:80:4C:CC:ED:2E:CE:CA:58:1E:4E:B7:CA:A8:E7:3C:15
            X509v3 Authority Key Identifier:
                keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:de:b7:00:f7:5d:07:c2:ea:b9:5d:40:e2:4b:93:4b:9e:ab:
         fb:84:40:1c:fd:9f:f1:9f:07:64:11:1d:f0:9e:b2:43:92:3e:
         77:8a:95:84:8d:de:08:f9:e1:3d:0b:56:c6:d8:d7:1f:0d:fc:
         d7:14:32:46:74:87:db:84:21:e8:2e:04:3c:36:af:c1:89:a5:
         81:af:73:e4:43:41:78:93:07:28:c2:51:89:7a:88:47:7c:01:
         17:af:03:32:30:d6:46:d1:82:69:79:fb:42:2d:fc:5b:77:21:
         a1:d3:48:25:15:57:e4:7f:41:be:b2:ae:76:d8:34:56:62:a9:
         82:24:11:25:b4:61:a9:a1:28:e4:1c:a3:0a:22:80:87:44:6a:
         29:82:70:7f:ea:6d:99:f1:3f:fc:64:c2:34:60:e1:6d:04:da:
         b2:34:4a:20:d3:c7:a0:34:1f:f7:02:62:23:9d:20:c5:99:83:
         1e:5d:d4:da:0f:7f:b0:52:d0:a4:a8:bd:de:7b:d8:cf:12:5a:
         4e:1b:73:61:9b:03:34:ec:62:4a:38:d1:33:48:05:85:67:9b:
         33:dd:be:7a:0c:6c:f4:e0:90:cb:22:0c:ca:f8:d1:a4:05:fc:
         98:0e:69:cc:83:f5:1f:76:1a:5c:25:be:5a:5f:ad:a7:3c:10:
         22:3c:d5:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfJRfvG/JJFs3qd5/pW+qrduZ6tEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExQzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNC
REFCNEJFQTAeFw0yNTAzMjkwOTU5MjRaFw0yNTAzMzAxMDMwMjRaMDMxMTAvBgNV
BAMTKERGRDhERjMwODA0Q0NDRUQyRUNFQ0E1ODFFNEVCN0NBQThFNzNDMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmL4ypLLSE/C/dmoRaCi3WmuX0
6D74DM0qkVLPWTwEbkRZOR5JOaYpJdPnsMElAakQbKCHUvQcBkmD5usO7lDNzqy/
8ymtnpwh7henHY/hOw6J8qRNCov84aFjI0WGuS9/T7FDyntoI3oTDsz0Q8N5QMTo
mWNNcqpTiE0GlglCsoYzn4J0YXyb/28NNdOtuujzjvw1avqEo9Stwv94uXnZYcBl
/MXtrL1nVVsN+JdebjZccXuCQVgdL4iqcyvyqZ82uJ4/sUxbR4kLcVcLX+8qWjoW
W0gbFWezT/KjqlRGsiinAi8qJw7YrEqfmnwSMQ0ZuR5SoYFW9Nu3UjiyZwJ3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU39jfMIBMzO0uzspYHk63yqjnPBUwHwYDVR0j
BBgwFoAUyhxLVGIi7hVqDUNI0qsAQ72rS+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK
U1MvMS9DQTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUM0QjU0NjIyMkVFMTU2
QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS9D
QTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEd63APddB8LquV1A4kuTS56r+4RAHP2f8Z8HZBEd8J6yQ5I+d4qVhI3eCPnh
PQtWxtjXHw381xQyRnSH24Qh6C4EPDavwYmlga9z5ENBeJMHKMJRiXqIR3wBF68D
MjDWRtGCaXn7Qi38W3chodNIJRVX5H9BvrKudtg0VmKpgiQRJbRhqaEo5ByjCiKA
h0RqKYJwf+ptmfE//GTCNGDhbQTasjRKINPHoDQf9wJiI50gxZmDHl3U2g9/sFLQ
pKi93nvYzxJaThtzYZsDNOxiSjjRM0gFhWebM92+egxs9OCQyyIMyvjRpAX8mA5p
zIP1H3YaXCW+Wl+tpzwQIjzVyw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:29:58 2025 by rpki-client