Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
File:                     CBB8A038671DF77F8F9579424916B82CCF45F66A.mft (raw, json)
Hash identifier:          OrW4WoZ1AoHxQ4y4C+xoucM02jayy5QlZWnQFFJWEoo=
Subject key identifier:   C1:A6:1C:4B:F9:28:DB:F9:1C:BC:B3:C6:B8:72:DE:64:02:05:7D:7A
Authority key identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
Certificate issuer:       /CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
Certificate serial:       74C49E61740BA1AEDE12DA67B1A8C89444ED0F3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
Manifest number:          0196
Signing time:             Sat 29 Mar 2025 04:53:29 +0000
Manifest this update:     Sat 29 Mar 2025 04:48:29 +0000
Manifest next update:     Sun 30 Mar 2025 08:23:29 +0000
Files and hashes:         1: 323830343a323664633a3a2f33322d3438203d3e20323633383631.roa (hash: YEtwDiRrHGxh30QKAkY7vTgW/uKrAbQFlKcTmg/GvvA=)
                          2: 3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa (hash: ulyarJcPLCoJKmhfI5sU6iMdxgSKZKJLk7GS7grmJIM=)
                          3: CBB8A038671DF77F8F9579424916B82CCF45F66A.crl (hash: pigy0Nk/+NM27c/RF+lOqrIt5SearMnSHG0dYhwwFCc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c4:9e:61:74:0b:a1:ae:de:12:da:67:b1:a8:c8:94:44:ed:0f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
        Validity
            Not Before: Mar 29 04:48:29 2025 GMT
            Not After : Mar 30 08:23:29 2025 GMT
        Subject: CN=C1A61C4BF928DBF91CBCB3C6B872DE6402057D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:4a:bd:12:f6:16:d5:b5:ce:e3:1c:ce:c2:
                    54:16:26:25:da:08:47:72:30:6a:55:f9:6e:cc:5d:
                    8d:dd:7c:d0:ed:65:a0:75:a4:5b:ad:85:cc:72:ad:
                    c6:72:ec:c2:12:46:85:c3:00:03:ba:8f:1a:f3:91:
                    92:de:85:89:42:54:7e:73:32:e1:46:f3:55:0d:bd:
                    cc:33:06:20:8a:96:9c:ef:77:e7:7f:1b:76:94:b1:
                    c4:39:ff:74:5a:7b:01:ed:ae:ce:d4:e1:f6:d5:7b:
                    48:dd:d2:81:2b:c1:e8:2f:91:06:24:c8:ef:73:20:
                    3e:cf:ec:d1:5e:a8:dc:3a:58:a8:54:0e:78:04:61:
                    d3:89:4c:3a:b7:20:a2:83:76:c8:cf:14:5c:eb:74:
                    43:15:0d:0c:4a:94:46:79:bc:56:22:ca:e5:cf:53:
                    dc:11:94:3f:d4:e9:70:02:c5:32:ba:9c:a7:69:56:
                    ad:9e:b0:73:c9:ff:10:88:88:27:fc:f0:c6:44:5e:
                    f3:51:b9:b0:44:0b:9a:de:33:6d:2d:a0:78:96:76:
                    90:2a:b0:ca:97:20:2b:8a:18:30:d2:e3:57:9d:f1:
                    ee:b7:aa:e1:49:27:8f:df:77:a0:84:80:88:8e:a4:
                    b6:d6:83:69:3e:b1:72:c3:5c:2a:a8:c3:b8:6c:78:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:1C:4B:F9:28:DB:F9:1C:BC:B3:C6:B8:72:DE:64:02:05:7D:7A
            X509v3 Authority Key Identifier:
                keyid:CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f5:86:6f:dc:14:f7:84:db:cf:5a:ce:44:55:c4:b2:2b:99:
         54:40:f0:3e:0c:a9:10:ef:52:5f:23:d4:57:2b:8a:7c:aa:63:
         4b:11:8a:f6:16:1a:4b:53:2d:b6:9c:3b:ac:6f:06:1b:ca:44:
         c1:23:03:4c:d0:ad:ff:5b:11:65:4f:79:26:67:c6:7e:4c:ad:
         bb:1a:ca:ba:af:78:7b:9a:ee:72:b8:15:27:e9:d7:c6:58:b5:
         28:60:83:83:cc:bd:a2:fb:dc:39:ad:cf:46:bf:28:c4:44:d3:
         f8:0e:3e:13:b5:90:c9:12:44:2b:ac:16:73:da:f9:60:69:a6:
         68:34:93:c2:5d:90:e9:83:0a:c7:5a:7d:e7:5f:55:9d:57:23:
         12:ef:5f:36:84:a4:b3:37:2b:22:59:e3:52:20:ec:0c:f4:b1:
         fe:dd:fc:03:6c:a6:07:84:6b:38:07:ae:7f:e3:33:9c:76:07:
         62:64:e5:e0:55:d9:f9:9a:e4:9e:00:04:7e:fd:49:47:a5:89:
         4a:8f:b8:aa:3c:19:e2:29:bb:0b:71:a0:3e:db:57:83:e7:3c:
         da:a4:3b:b7:0b:79:03:5c:4f:66:a4:90:6c:04:b5:19:90:ff:
         98:2b:46:7d:a9:87:a5:98:6a:2b:a3:6f:b4:f4:07:9b:6e:85:
         92:09:0e:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdMSeYXQLoa7eEtpnsajIlETtDzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JCOEEwMzg2NzFERjc3RjhGOTU3OTQyNDkxNkI4MkND
RjQ1RjY2QTAeFw0yNTAzMjkwNDQ4MjlaFw0yNTAzMzAwODIzMjlaMDMxMTAvBgNV
BAMTKEMxQTYxQzRCRjkyOERCRjkxQ0JDQjNDNkI4NzJERTY0MDIwNTdEN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuiUq9EvYW1bXO4xzOwlQWJiXa
CEdyMGpV+W7MXY3dfNDtZaB1pFuthcxyrcZy7MISRoXDAAO6jxrzkZLehYlCVH5z
MuFG81UNvcwzBiCKlpzvd+d/G3aUscQ5/3RaewHtrs7U4fbVe0jd0oErwegvkQYk
yO9zID7P7NFeqNw6WKhUDngEYdOJTDq3IKKDdsjPFFzrdEMVDQxKlEZ5vFYiyuXP
U9wRlD/U6XACxTK6nKdpVq2esHPJ/xCIiCf88MZEXvNRubBEC5reM20toHiWdpAq
sMqXICuKGDDS41ed8e63quFJJ4/fd6CEgIiOpLbWg2k+sXLDXCqow7hseKRBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwaYcS/ko2/kcvLPGuHLeZAIFfXowHwYDVR0j
BBgwFoAUy7igOGcd93+PlXlCSRa4LM9F9mowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFJwSDFUQ0pFckxpMkY1YWdOTHRCS0ZpaEpLZ0tyamRjQnNIdnFUS2s1
RG8vMC9DQkI4QTAzODY3MURGNzdGOEY5NTc5NDI0OTE2QjgyQ0NGNDVGNjZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQjhBMDM4NjcxREY3N0Y4
Rjk1Nzk0MjQ5MTZCODJDQ0Y0NUY2NkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFJwSDFUQ0pFckxpMkY1YWdOTHRCS0ZpaEpLZ0tyamRjQnNIdnFUS2s1RG8vMC9D
QkI4QTAzODY3MURGNzdGOEY5NTc5NDI0OTE2QjgyQ0NGNDVGNjZBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfvWGb9wU94Tbz1rORFXEsiuZVEDwPgypEO9SXyPUVyuKfKpjSxGK9hYaS1Mt
tpw7rG8GG8pEwSMDTNCt/1sRZU95JmfGfkytuxrKuq94e5rucrgVJ+nXxli1KGCD
g8y9ovvcOa3PRr8oxETT+A4+E7WQyRJEK6wWc9r5YGmmaDSTwl2Q6YMKx1p9519V
nVcjEu9fNoSkszcrIlnjUiDsDPSx/t38A2ymB4RrOAeuf+MznHYHYmTl4FXZ+Zrk
ngAEfv1JR6WJSo+4qjwZ4im7C3GgPttXg+c82qQ7twt5A1xPZqSQbAS1GZD/mCtG
famHpZhqK6NvtPQHm26FkgkO0A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:24:38 2025 by rpki-client