Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.mft
File:                     F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.mft (raw, json)
Hash identifier:          7sZ1RN2pQ7TdfNPLGJVsJBa11YNrpI2N9dYgPyu0J7g=
Subject key identifier:   73:4C:B2:C5:32:C3:9C:DC:06:19:96:4A:8D:5E:47:A6:F0:04:DE:E5
Authority key identifier: F5:E3:8B:02:74:44:0B:C8:66:16:FA:3A:AA:7B:E0:FA:8A:4D:EA:2D
Certificate issuer:       /CN=F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D
Certificate serial:       682E87351AE8D4B62F7186C83137AD24929C857A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.mft
Manifest number:          87
Signing time:             Sat 29 Mar 2025 01:25:02 +0000
Manifest this update:     Sat 29 Mar 2025 01:20:02 +0000
Manifest next update:     Sun 30 Mar 2025 02:35:02 +0000
Files and hashes:         1: 3139312e3234332e36342e302f32312d3332203d3e20323633343937.roa (hash: Cm1IROdEHMAz0VJ7PhfKO1nhTZ3fs/8V5WrZtodCmF8=)
                          2: F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.crl (hash: K7fVYX238OZrqECNxbYgh3LAEh1pfzhVZe+RqccdKX0=)
                          3: 323830343a313263343a3a2f33322d313238203d3e20323633343937.roa (hash: 4yFRhoRdY3nd9ExGdTrhTMTTlk3qAEd7wct8X1aVDBM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2e:87:35:1a:e8:d4:b6:2f:71:86:c8:31:37:ad:24:92:9c:85:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D
        Validity
            Not Before: Mar 29 01:20:02 2025 GMT
            Not After : Mar 30 02:35:02 2025 GMT
        Subject: CN=734CB2C532C39CDC0619964A8D5E47A6F004DEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:8d:0f:e8:ac:97:01:4f:9b:3c:76:9f:5c:
                    4f:ae:8e:0f:87:d0:26:52:28:5a:54:a1:23:38:8c:
                    e5:3b:f1:f1:3a:ec:dd:81:4d:cc:37:29:2a:e1:bd:
                    18:9b:79:eb:c5:a6:7e:0a:62:48:b8:a7:24:24:d4:
                    05:4b:94:c8:a1:c5:d4:4b:c0:8f:53:52:9c:17:6b:
                    38:7c:4c:6e:f0:cb:2d:43:ef:7c:5b:db:9c:94:b7:
                    bf:6d:44:ac:eb:6b:e4:33:9b:b4:b6:63:69:ef:51:
                    a3:a3:39:af:7c:5e:7d:35:d7:dc:81:b5:25:4a:f0:
                    90:b7:8b:97:84:9b:8c:64:f9:a3:e5:a0:93:c2:c6:
                    4e:72:f6:7d:25:b3:4c:b1:32:32:63:fc:63:09:d4:
                    42:92:cb:94:10:04:24:c4:9a:e7:4f:35:84:fc:17:
                    14:24:ea:f5:bc:c6:74:29:ce:bd:5f:ae:d0:3f:56:
                    47:b8:b4:e5:62:8a:56:71:26:3c:c8:16:ee:d6:4c:
                    0e:eb:cf:6b:ea:b0:f0:14:b5:9a:a4:c1:0d:b6:c6:
                    a0:bc:c5:12:02:1d:ac:5c:f4:fe:2a:fc:ac:ac:ec:
                    06:48:e6:00:d1:00:cd:5d:5c:ca:66:b7:46:96:06:
                    b5:24:4e:b5:82:29:d9:39:7c:2e:f7:4a:e3:f0:4d:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4C:B2:C5:32:C3:9C:DC:06:19:96:4A:8D:5E:47:A6:F0:04:DE:E5
            X509v3 Authority Key Identifier:
                keyid:F5:E3:8B:02:74:44:0B:C8:66:16:FA:3A:AA:7B:E0:FA:8A:4D:EA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:a1:d2:5c:2b:55:a5:5e:b8:c0:c0:08:7f:e1:83:49:c3:7b:
         d9:dc:03:9e:67:92:47:ec:06:81:5c:9c:93:1f:82:28:55:12:
         20:36:69:97:83:8c:c7:37:e5:91:e9:15:55:df:57:95:22:58:
         54:70:16:c3:a1:f1:89:68:ac:64:fa:db:90:fe:a2:aa:a0:94:
         90:d3:0e:14:98:b1:c8:d8:14:e9:1e:e9:37:08:8b:8f:42:96:
         09:ea:72:04:f3:30:59:6c:38:ac:94:d8:dc:fd:a5:fd:cd:88:
         5c:01:6b:d9:0c:36:77:ad:66:fd:f0:b5:70:b5:80:89:38:69:
         47:32:c9:5e:44:5a:49:79:e5:39:62:99:b0:81:19:26:df:d4:
         28:ef:d0:11:96:95:1b:f9:d3:a8:76:55:da:33:37:16:58:be:
         d9:5d:ae:ce:93:43:44:a3:d6:f1:46:28:3d:4d:e6:95:bf:c8:
         01:52:a7:4e:75:c5:dd:c9:55:77:46:7e:7d:a2:6b:f2:3b:b6:
         30:9c:23:c6:1e:3e:74:85:a1:d7:92:81:f2:35:43:64:dc:16:
         2f:f8:df:58:99:ee:fd:1f:b7:3a:6b:24:49:ee:e1:df:c8:8b:
         72:16:9c:17:b3:09:d5:db:8e:f2:7c:80:ce:44:80:64:9c:2a:
         72:93:1e:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaC6HNRro1LYvcYbIMTetJJKchXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVFMzhCMDI3NDQ0MEJDODY2MTZGQTNBQUE3QkUwRkE4
QTRERUEyRDAeFw0yNTAzMjkwMTIwMDJaFw0yNTAzMzAwMjM1MDJaMDMxMTAvBgNV
BAMTKDczNENCMkM1MzJDMzlDREMwNjE5OTY0QThENUU0N0E2RjAwNERFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6I0P6KyXAU+bPHafXE+ujg+H
0CZSKFpUoSM4jOU78fE67N2BTcw3KSrhvRibeevFpn4KYki4pyQk1AVLlMihxdRL
wI9TUpwXazh8TG7wyy1D73xb25yUt79tRKzra+Qzm7S2Y2nvUaOjOa98Xn0119yB
tSVK8JC3i5eEm4xk+aPloJPCxk5y9n0ls0yxMjJj/GMJ1EKSy5QQBCTEmudPNYT8
FxQk6vW8xnQpzr1frtA/Vke4tOViilZxJjzIFu7WTA7rz2vqsPAUtZqkwQ22xqC8
xRICHaxc9P4q/Kys7AZI5gDRAM1dXMpmt0aWBrUkTrWCKdk5fC73SuPwTaWfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc0yyxTLDnNwGGZZKjV5HpvAE3uUwHwYDVR0j
BBgwFoAU9eOLAnREC8hmFvo6qnvg+opN6i0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhnTFY3VDlqZVpUZGNhVzJBU3NUOUJVWUJlNXlndndyTnM5aFlHdzdk
QW8vMC9GNUUzOEIwMjc0NDQwQkM4NjYxNkZBM0FBQTdCRTBGQThBNERFQTJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1RTM4QjAyNzQ0NDBCQzg2
NjE2RkEzQUFBN0JFMEZBOEE0REVBMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFhnTFY3VDlqZVpUZGNhVzJBU3NUOUJVWUJlNXlndndyTnM5aFlHdzdkQW8vMC9G
NUUzOEIwMjc0NDQwQkM4NjYxNkZBM0FBQTdCRTBGQThBNERFQTJELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxaHSXCtVpV64wMAIf+GDScN72dwDnmeSR+wGgVyckx+CKFUSIDZpl4OMxzfl
kekVVd9XlSJYVHAWw6HxiWisZPrbkP6iqqCUkNMOFJixyNgU6R7pNwiLj0KWCepy
BPMwWWw4rJTY3P2l/c2IXAFr2Qw2d61m/fC1cLWAiThpRzLJXkRaSXnlOWKZsIEZ
Jt/UKO/QEZaVG/nTqHZV2jM3Fli+2V2uzpNDRKPW8UYoPU3mlb/IAVKnTnXF3clV
d0Z+faJr8ju2MJwjxh4+dIWh15KB8jVDZNwWL/jfWJnu/R+3OmskSe7h38iLchac
F7MJ1duO8nyAzkSAZJwqcpMeGw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:25:39 2025 by rpki-client