Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/43D2235C9A370300FEC33EDB7AA910513ECA26FA.mft
File:                     43D2235C9A370300FEC33EDB7AA910513ECA26FA.mft (raw, json)
Hash identifier:          O28cYsX5X2feaHejTgeK7twlNT0tWFD/S7P2NAjXVk4=
Subject key identifier:   B1:9B:A8:93:42:10:13:AB:BF:54:A7:27:99:56:83:CD:60:E0:90:BA
Authority key identifier: 43:D2:23:5C:9A:37:03:00:FE:C3:3E:DB:7A:A9:10:51:3E:CA:26:FA
Certificate issuer:       /CN=43D2235C9A370300FEC33EDB7AA910513ECA26FA
Certificate serial:       7FEA973EB6FFB7D4B051403E046BBAAC6B4AA8FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43D2235C9A370300FEC33EDB7AA910513ECA26FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/43D2235C9A370300FEC33EDB7AA910513ECA26FA.mft
Manifest number:          2B
Signing time:             Fri 05 Jul 2024 03:29:15 +0000
Manifest this update:     Fri 05 Jul 2024 03:24:15 +0000
Manifest next update:     Sat 06 Jul 2024 04:38:15 +0000
Files and hashes:         1: 323830343a323931383a3a2f33322d3334203d3e20323633393937.roa (hash: kbqnAV47JATJPb2gA6gBgVEx4iXem0b/Jsd6r634E+Q=)
                          2: 43D2235C9A370300FEC33EDB7AA910513ECA26FA.crl (hash: x/KzeQ9eenfLDjjIJe2M8BGcCgel2ICpJ7qniGGMNYE=)
                          3: 3134332e302e35322e302f32322d3234203d3e20323633393937.roa (hash: +JUcx1ERWTwIfdpebwsCCvQl+POm7X4ACVaq+HB6a6U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:97:3e:b6:ff:b7:d4:b0:51:40:3e:04:6b:ba:ac:6b:4a:a8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D2235C9A370300FEC33EDB7AA910513ECA26FA
        Validity
            Not Before: Jul  5 03:24:15 2024 GMT
            Not After : Jul  6 04:38:15 2024 GMT
        Subject: CN=B19BA893421013ABBF54A727995683CD60E090BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:69:5f:4b:5f:b4:1a:96:70:70:cc:4f:6f:
                    21:ca:df:c4:c2:d3:8b:c4:dc:49:d1:d5:4e:e0:41:
                    1c:9d:0b:69:84:00:85:05:b0:17:15:9e:f5:21:89:
                    95:33:56:7d:97:57:4c:5d:07:18:ff:b0:38:73:c3:
                    9b:7b:09:ac:14:0e:fb:ab:9c:1a:97:01:12:f3:d1:
                    41:cb:24:5d:1f:ab:18:0e:7e:00:c5:11:6a:1d:1b:
                    90:f4:df:e0:1d:ba:3c:39:90:27:f3:47:3f:19:b2:
                    24:6c:bb:75:82:57:11:f2:68:73:81:64:fe:38:65:
                    99:61:ae:d3:bd:6d:6f:f3:47:4d:a0:32:af:40:06:
                    1e:3e:9d:11:f2:e0:a5:0f:73:f1:f8:54:2d:e5:33:
                    36:31:d7:e2:74:a5:66:1a:35:b6:23:b2:79:5b:e4:
                    0d:ac:ad:d2:5d:f5:e3:a5:07:3d:7c:ae:c9:d5:f1:
                    12:bd:e8:ca:1c:e7:f4:bc:0e:25:5c:7f:13:ff:c0:
                    a3:8c:0b:57:94:2d:2f:d2:43:3b:f7:92:d6:6c:ca:
                    0d:c5:2d:6d:49:1e:d8:81:45:c5:d3:2f:4e:39:04:
                    5f:3b:43:05:79:e5:fb:ac:17:ef:be:d1:67:e3:2e:
                    9e:32:d2:46:88:d1:22:49:11:83:48:1d:d2:59:37:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9B:A8:93:42:10:13:AB:BF:54:A7:27:99:56:83:CD:60:E0:90:BA
            X509v3 Authority Key Identifier:
                keyid:43:D2:23:5C:9A:37:03:00:FE:C3:3E:DB:7A:A9:10:51:3E:CA:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/43D2235C9A370300FEC33EDB7AA910513ECA26FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43D2235C9A370300FEC33EDB7AA910513ECA26FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/43D2235C9A370300FEC33EDB7AA910513ECA26FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:df:b9:01:96:b0:61:6a:14:4d:ab:31:07:40:58:17:dd:c5:
         01:51:e3:c8:e8:52:4b:70:67:df:90:a3:78:ea:4a:c0:12:59:
         bb:dd:52:6a:0d:38:0f:6c:46:63:18:00:80:f4:0f:87:de:ad:
         bf:0c:bd:4e:da:97:fd:47:e9:1f:83:7a:cd:cf:18:40:d3:7c:
         06:66:5c:c2:9e:e9:3f:52:94:7a:66:5c:ed:fe:c3:76:9e:fd:
         ea:5a:d8:29:dd:93:cc:a2:58:f7:11:d3:7e:e9:dd:ee:b4:73:
         6d:29:9d:96:ff:8a:e3:84:c4:19:bb:86:25:b2:e2:5f:1c:e6:
         77:73:3c:c8:78:e5:b7:72:00:8a:65:ec:20:8b:ec:53:4d:48:
         e2:59:e9:77:77:eb:ba:11:27:34:19:6a:b1:4c:71:46:8c:a7:
         ec:87:13:d3:01:84:eb:53:68:46:a4:21:42:37:cb:21:99:24:
         f7:85:51:9f:99:f3:ab:41:dc:f9:fc:dc:c4:15:de:da:ba:02:
         46:f2:e3:39:ce:00:90:1e:14:e9:56:e5:49:b3:28:78:44:d0:
         e4:e0:47:02:29:d3:d2:e5:9c:db:98:c1:ca:8e:51:3a:d1:03:
         f0:f7:ca:a5:05:89:ef:5a:2c:da:f0:0e:7b:a6:17:18:3e:ca:
         17:9e:a7:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUf+qXPrb/t9SwUUA+BGu6rGtKqPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNEMjIzNUM5QTM3MDMwMEZFQzMzRURCN0FBOTEwNTEz
RUNBMjZGQTAeFw0yNDA3MDUwMzI0MTVaFw0yNDA3MDYwNDM4MTVaMDMxMTAvBgNV
BAMTKEIxOUJBODkzNDIxMDEzQUJCRjU0QTcyNzk5NTY4M0NENjBFMDkwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClG2lfS1+0GpZwcMxPbyHK38TC
04vE3EnR1U7gQRydC2mEAIUFsBcVnvUhiZUzVn2XV0xdBxj/sDhzw5t7CawUDvur
nBqXARLz0UHLJF0fqxgOfgDFEWodG5D03+Adujw5kCfzRz8ZsiRsu3WCVxHyaHOB
ZP44ZZlhrtO9bW/zR02gMq9ABh4+nRHy4KUPc/H4VC3lMzYx1+J0pWYaNbYjsnlb
5A2srdJd9eOlBz18rsnV8RK96Moc5/S8DiVcfxP/wKOMC1eULS/SQzv3ktZsyg3F
LW1JHtiBRcXTL045BF87QwV55fusF+++0WfjLp4y0kaI0SJJEYNIHdJZN6YdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsZuok0IQE6u/VKcnmVaDzWDgkLowHwYDVR0j
BBgwFoAUQ9IjXJo3AwD+wz7beqkQUT7KJvowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdudDJvQkZ3MW5rajZwM3BFS1dLekZYSjhYbnBUaGRmdGpKYUtuOVBV
VmQvMC80M0QyMjM1QzlBMzcwMzAwRkVDMzNFREI3QUE5MTA1MTNFQ0EyNkZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRDIyMzVDOUEzNzAzMDBG
RUMzM0VEQjdBQTkxMDUxM0VDQTI2RkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEdudDJvQkZ3MW5rajZwM3BFS1dLekZYSjhYbnBUaGRmdGpKYUtuOVBVVmQvMC80
M0QyMjM1QzlBMzcwMzAwRkVDMzNFREI3QUE5MTA1MTNFQ0EyNkZBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm9+5AZawYWoUTasxB0BYF93FAVHjyOhSS3Bn35CjeOpKwBJZu91Sag04D2xG
YxgAgPQPh96tvwy9TtqX/UfpH4N6zc8YQNN8BmZcwp7pP1KUemZc7f7Ddp796lrY
Kd2TzKJY9xHTfund7rRzbSmdlv+K44TEGbuGJbLiXxzmd3M8yHjlt3IAimXsIIvs
U01I4lnpd3fruhEnNBlqsUxxRoyn7IcT0wGE61NoRqQhQjfLIZkk94VRn5nzq0Hc
+fzcxBXe2roCRvLjOc4AkB4U6VblSbMoeETQ5OBHAinT0uWc25jByo5ROtED8PfK
pQWJ71os2vAOe6YXGD7KF56n2w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:16 2025 by rpki-client