Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft
File:                     ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft (raw, json)
Hash identifier:          zzxgRtNPT1aLw9Wlr2Wtw2JT5u+J7I1qyboRQqB6shw=
Subject key identifier:   88:68:D9:D9:47:C4:2B:D7:13:12:5A:82:24:27:04:44:D6:5B:2D:91
Authority key identifier: AB:A0:0F:C5:B6:DB:63:AD:D2:ED:5D:33:5E:AE:47:AE:23:48:FD:72
Certificate issuer:       /CN=ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72
Certificate serial:       161F8D3EB6EF37619A6E610C808FE99A66ED5802
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft
Manifest number:          CD
Signing time:             Sat 29 Mar 2025 00:35:47 +0000
Manifest this update:     Sat 29 Mar 2025 00:30:47 +0000
Manifest next update:     Sun 30 Mar 2025 02:09:47 +0000
Files and hashes:         1: 323830343a343834343a3a2f33322d3438203d3e20323637313038.roa (hash: uB9XNssySZfHGUw7w1zGYWwfDVilZH1iH3knd3okjTk=)
                          2: ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.crl (hash: IOFWs2zuLlDYKye/Seai+lJvIFqUHx3MKTD6ZiyYq2Y=)
                          3: 34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa (hash: S3L8OuGCB+BEpMn3TbqD8srloQZVz6KeaUw957ll/pU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1f:8d:3e:b6:ef:37:61:9a:6e:61:0c:80:8f:e9:9a:66:ed:58:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72
        Validity
            Not Before: Mar 29 00:30:47 2025 GMT
            Not After : Mar 30 02:09:47 2025 GMT
        Subject: CN=8868D9D947C42BD713125A8224270444D65B2D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:c7:36:e1:5d:84:f1:b1:73:38:c1:69:ef:
                    a7:49:eb:03:84:3e:c2:4e:de:1f:9a:58:3a:72:ae:
                    ef:66:02:20:48:71:d5:a6:45:d8:7a:77:5b:15:12:
                    71:e2:ee:41:9d:44:b0:33:53:b6:43:35:f5:42:98:
                    7d:3f:59:c0:c3:fb:c1:dd:ee:8d:ef:f3:dd:f8:a9:
                    30:3e:20:c4:71:7f:14:95:36:f3:ac:65:85:8d:9b:
                    af:9b:1d:0a:e7:97:a1:75:12:7b:b4:42:36:fe:13:
                    8a:e9:69:84:76:ca:12:1f:76:e4:8a:d4:9c:23:32:
                    6c:d3:57:19:a5:c0:c8:f7:39:27:32:e4:b5:4f:76:
                    d1:fa:53:f0:14:03:f8:51:86:a4:1c:3f:55:ee:34:
                    3e:0c:67:d2:37:0b:22:51:9d:ec:6f:3a:56:cb:c0:
                    74:d1:74:81:cb:19:b0:a7:1c:22:ff:61:e9:46:20:
                    96:46:13:77:f4:7a:1f:3f:3a:ec:4a:87:7f:f3:c4:
                    fd:59:b7:32:ae:46:1e:22:72:2d:b8:7d:90:ae:11:
                    60:2a:68:6e:88:67:25:ae:dd:ea:b6:e7:46:c6:e3:
                    24:2f:46:11:bd:01:e7:69:64:ce:db:fa:d5:d0:0f:
                    5c:33:1f:21:ce:95:1b:82:43:ee:1c:8e:be:22:40:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:68:D9:D9:47:C4:2B:D7:13:12:5A:82:24:27:04:44:D6:5B:2D:91
            X509v3 Authority Key Identifier:
                keyid:AB:A0:0F:C5:B6:DB:63:AD:D2:ED:5D:33:5E:AE:47:AE:23:48:FD:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:86:d5:82:0a:4d:c0:e5:10:c1:9b:67:0f:16:bc:0f:16:1a:
         35:fd:96:6a:88:a5:51:7d:8e:b3:3b:e9:4a:51:b9:32:ee:96:
         6b:76:6a:cf:86:cd:ba:c7:e3:e8:1b:6b:3c:2f:b8:d8:2a:f5:
         55:56:7f:ef:04:1b:ef:70:ca:db:92:92:8f:25:b9:ac:27:e0:
         07:1f:9d:6d:cb:60:4c:17:f4:62:ff:f3:69:6a:d2:e2:98:37:
         65:ee:1a:91:44:f1:59:c5:4d:cb:f9:e7:7f:0f:8b:c9:03:fb:
         d5:8a:10:c4:19:18:a7:96:83:11:16:ef:da:36:89:87:a6:07:
         71:47:d3:dd:0f:6d:45:5e:08:36:4f:e4:d3:5f:f1:7d:0b:6e:
         eb:71:bb:d6:7c:2b:74:44:da:9c:05:12:47:b5:e9:f1:25:7c:
         b8:aa:57:86:06:ca:8c:98:72:8b:fa:8a:25:11:20:ef:5c:f1:
         6b:3b:0b:b6:85:8e:61:50:43:c1:af:95:87:03:8b:02:fb:f6:
         c3:f8:09:e9:27:3a:a7:cb:d0:ff:b2:b9:a0:5d:60:ad:58:19:
         13:83:95:f9:60:90:ef:35:e3:48:3f:98:7c:56:c4:48:39:74:
         52:4a:c8:2b:ff:c1:56:c6:8f:de:50:db:4f:bc:3c:03:c7:90:
         e3:5d:3e:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFh+NPrbvN2GabmEMgI/pmmbtWAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJBMDBGQzVCNkRCNjNBREQyRUQ1RDMzNUVBRTQ3QUUy
MzQ4RkQ3MjAeFw0yNTAzMjkwMDMwNDdaFw0yNTAzMzAwMjA5NDdaMDMxMTAvBgNV
BAMTKDg4NjhEOUQ5NDdDNDJCRDcxMzEyNUE4MjI0MjcwNDQ0RDY1QjJEOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xcc24V2E8bFzOMFp76dJ6wOE
PsJO3h+aWDpyru9mAiBIcdWmRdh6d1sVEnHi7kGdRLAzU7ZDNfVCmH0/WcDD+8Hd
7o3v8934qTA+IMRxfxSVNvOsZYWNm6+bHQrnl6F1Enu0Qjb+E4rpaYR2yhIfduSK
1JwjMmzTVxmlwMj3OScy5LVPdtH6U/AUA/hRhqQcP1XuND4MZ9I3CyJRnexvOlbL
wHTRdIHLGbCnHCL/YelGIJZGE3f0eh8/OuxKh3/zxP1ZtzKuRh4ici24fZCuEWAq
aG6IZyWu3eq250bG4yQvRhG9AedpZM7b+tXQD1wzHyHOlRuCQ+4cjr4iQM77AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiGjZ2UfEK9cTElqCJCcERNZbLZEwHwYDVR0j
BBgwFoAUq6APxbbbY63S7V0zXq5HriNI/XIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGp2dEhkRExWQmJ1U01mMkN3dGE4azJudTJGRTRaeFJoTlNYUnpRRVhI
c2cvMC9BQkEwMEZDNUI2REI2M0FERDJFRDVEMzM1RUFFNDdBRTIzNDhGRDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCQTAwRkM1QjZEQjYzQURE
MkVENUQzMzVFQUU0N0FFMjM0OEZENzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGp2dEhkRExWQmJ1U01mMkN3dGE4azJudTJGRTRaeFJoTlNYUnpRRVhIc2cvMC9B
QkEwMEZDNUI2REI2M0FERDJFRDVEMzM1RUFFNDdBRTIzNDhGRDcyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACYbVggpNwOUQwZtnDxa8DxYaNf2WaoilUX2OszvpSlG5Mu6Wa3Zqz4bNusfj
6BtrPC+42Cr1VVZ/7wQb73DK25KSjyW5rCfgBx+dbctgTBf0Yv/zaWrS4pg3Ze4a
kUTxWcVNy/nnfw+LyQP71YoQxBkYp5aDERbv2jaJh6YHcUfT3Q9tRV4INk/k01/x
fQtu63G71nwrdETanAUSR7Xp8SV8uKpXhgbKjJhyi/qKJREg71zxazsLtoWOYVBD
wa+VhwOLAvv2w/gJ6Sc6p8vQ/7K5oF1grVgZE4OV+WCQ7zXjSD+YfFbESDl0UkrI
K//BVsaP3lDbT7w8A8eQ410+iw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:18:55 2025 by rpki-client