Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.mft
File:                     DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.mft (raw, json)
Hash identifier:          5Mx13yTTfdfq5Up5Go7GYbyUWBviPyiefDGjH+/XFYU=
Subject key identifier:   8E:68:00:5A:D1:56:6D:D9:F0:30:6A:5B:45:7E:EB:31:C9:89:A9:A1
Authority key identifier: DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
Certificate issuer:       /CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
Certificate serial:       4F8595033806932454366A1439E6FF70D557BBD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.mft
Manifest number:          0D
Signing time:             Mon 09 Dec 2024 21:26:00 +0000
Manifest this update:     Mon 09 Dec 2024 21:21:00 +0000
Manifest next update:     Tue 10 Dec 2024 23:54:00 +0000
Files and hashes:         1: 3133382e3131382e35362e302f32322d3232203d3e20323634323436.roa (hash: 0vGprLO41eSd+7O572AhKRDn4wZdr1ixJKPHkjqeWSc=)
                          2: 3133382e3131382e35382e302f32342d3234203d3e20323634323436.roa (hash: Q1AHfzMUcRlk21uosJL5iM3wA90WTfZ5zYTh+EoJEBE=)
                          3: 3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa (hash: HL3Jer0ytfdDET8sJ517qp3sTGOjvo2t+GR1sZL1dqQ=)
                          4: DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.crl (hash: JVxHXL1nxFaJx9xI1lORBwq9LlCs2YNCgMgvGH8Ryhk=)
                          5: 323830343a323465303a3a2f33322d3332203d3e20323634323436.roa (hash: tJPMFWZ+1qGj+ROUXRV14fvUXilJfLStoQ5sJtZHN+s=)
                          6: 3133382e3131382e35392e302f32342d3234203d3e20323634323436.roa (hash: zEV1TxQct6YAZr+QLXR76XNF67IZwXiQk1OnQl9rHs4=)
                          7: 3133382e3131382e35382e302f32332d3233203d3e20323634323436.roa (hash: TaM3E2vqOSoLJnMKsm37Bb0woV/ybRdnC0boUP7gBNM=)
                          8: 3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa (hash: lt2kuEiaRRw/TjbIcGcTN8HRpAXggooVwpZJk4XCMrA=)
                          9: 3133382e3131382e35362e302f32332d3233203d3e20323634323436.roa (hash: oR7mbb9vi1mT00CIzATUeIxQUVBnkWWjBpjSVQ3B38g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:85:95:03:38:06:93:24:54:36:6a:14:39:e6:ff:70:d5:57:bb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
        Validity
            Not Before: Dec  9 21:21:00 2024 GMT
            Not After : Dec 10 23:54:00 2024 GMT
        Subject: CN=8E68005AD1566DD9F0306A5B457EEB31C989A9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:b5:ab:4a:e2:e3:6c:de:5d:09:7d:96:b7:
                    9c:2d:15:b5:e3:a1:fa:27:c1:40:7b:4a:79:8f:9a:
                    9c:6a:32:3a:69:53:2a:9b:b3:53:74:02:9b:bb:8e:
                    17:b3:0d:10:6b:26:61:37:9e:a5:7a:6a:15:49:5e:
                    8f:c6:d8:5b:1b:e0:04:aa:84:3d:9c:ea:d2:b0:d6:
                    85:e3:a1:1b:d9:bf:de:91:51:47:8c:5d:54:cb:34:
                    bc:5e:6e:3d:4d:e6:8e:33:0c:04:4a:5a:d3:4b:6b:
                    ac:32:5c:1c:ca:5d:64:55:14:24:e5:52:57:10:19:
                    98:b5:d2:e4:98:f6:8b:07:a2:2d:7d:15:e4:18:1b:
                    ce:97:38:93:1b:c3:c8:ae:e7:b7:c1:27:b6:91:db:
                    84:0b:92:a0:fd:3e:f9:56:b5:af:73:8d:75:66:1a:
                    14:b1:e4:1f:98:cc:8d:e7:19:c9:48:bb:21:e8:f0:
                    03:bd:40:4e:8f:c9:21:d2:98:47:a8:01:93:76:a8:
                    11:f0:81:bc:7c:38:07:d5:72:3f:7f:60:5b:f1:9c:
                    4b:cd:ad:77:ef:db:e6:5b:ae:b7:76:38:a5:97:52:
                    7d:65:e0:1d:e1:28:fa:ec:d3:63:c7:f0:1c:a4:48:
                    52:71:94:70:b9:aa:2f:d3:ce:41:02:99:79:ac:3e:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:68:00:5A:D1:56:6D:D9:F0:30:6A:5B:45:7E:EB:31:C9:89:A9:A1
            X509v3 Authority Key Identifier:
                keyid:DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:39:7c:b6:e1:21:8a:8b:9d:b6:a4:fe:7b:33:b3:38:a0:b9:
         1b:20:40:39:a8:70:fb:1c:01:c6:a8:2a:6d:f6:4c:e6:16:5b:
         26:92:a6:1d:c3:d3:4b:b5:9d:ef:22:a2:45:7e:bb:5a:13:52:
         6a:af:2a:86:7d:7a:28:2f:21:df:77:e4:62:f8:d9:91:97:ff:
         50:4d:40:f8:45:f7:6e:63:d1:cf:f0:ae:2d:6a:15:30:03:5d:
         60:27:84:f0:98:7b:45:2e:2d:26:c0:25:46:24:b2:84:a2:af:
         61:9f:bc:6e:e3:29:ef:ff:2c:41:6a:fa:5f:31:09:5c:2f:08:
         2d:ad:70:5c:6b:47:f9:18:f2:c4:7d:fd:d0:78:59:ec:e9:af:
         ec:c6:6a:6f:82:39:ea:03:de:c0:69:fc:f5:6a:da:3e:f9:43:
         c2:2f:1e:d3:e0:fe:5f:7a:46:98:ee:ae:3d:d5:2d:a5:9f:d2:
         5f:4d:df:ed:a4:ec:f5:6b:27:05:1f:b1:b7:22:bd:a8:e6:93:
         80:b2:6e:b3:d0:f0:95:8a:12:b3:03:2a:4d:3f:ad:7e:80:30:
         e5:51:d5:fb:22:ff:a0:59:37:f1:0d:ad:a1:e3:d4:5f:29:2d:
         53:7d:3a:63:f6:69:e8:f0:00:a7:d3:04:b4:0c:fa:b5:b1:e9:
         90:03:59:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT4WVAzgGkyRUNmoUOeb/cNVXu9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJBNDk2MUU2QzhBQjhDNUY3MEJFQjY3MEMxQURCMkY5
RDA5RDNGQzAeFw0yNDEyMDkyMTIxMDBaFw0yNDEyMTAyMzU0MDBaMDMxMTAvBgNV
BAMTKDhFNjgwMDVBRDE1NjZERDlGMDMwNkE1QjQ1N0VFQjMxQzk4OUE5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvbWrSuLjbN5dCX2Wt5wtFbXj
ofonwUB7SnmPmpxqMjppUyqbs1N0Apu7jhezDRBrJmE3nqV6ahVJXo/G2Fsb4ASq
hD2c6tKw1oXjoRvZv96RUUeMXVTLNLxebj1N5o4zDARKWtNLa6wyXBzKXWRVFCTl
UlcQGZi10uSY9osHoi19FeQYG86XOJMbw8iu57fBJ7aR24QLkqD9PvlWta9zjXVm
GhSx5B+YzI3nGclIuyHo8AO9QE6PySHSmEeoAZN2qBHwgbx8OAfVcj9/YFvxnEvN
rXfv2+Zbrrd2OKWXUn1l4B3hKPrs02PH8BykSFJxlHC5qi/TzkECmXmsPuPLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjmgAWtFWbdnwMGpbRX7rMcmJqaEwHwYDVR0j
BBgwFoAU26SWHmyKuMX3C+tnDBrbL50J0/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHAzSzdaektzcnhxak16NGptcDNlWEJaZzhkY1FMdjhBWHl0b01wODEx
RE4vMC9EQkE0OTYxRTZDOEFCOEM1RjcwQkVCNjcwQzFBREIyRjlEMDlEM0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTQ5NjFFNkM4QUI4QzVG
NzBCRUI2NzBDMUFEQjJGOUQwOUQzRkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHAzSzdaektzcnhxak16NGptcDNlWEJaZzhkY1FMdjhBWHl0b01wODExRE4vMC9E
QkE0OTYxRTZDOEFCOEM1RjcwQkVCNjcwQzFBREIyRjlEMDlEM0ZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfDl8tuEhioudtqT+ezOzOKC5GyBAOahw+xwBxqgqbfZM5hZbJpKmHcPTS7Wd
7yKiRX67WhNSaq8qhn16KC8h33fkYvjZkZf/UE1A+EX3bmPRz/CuLWoVMANdYCeE
8Jh7RS4tJsAlRiSyhKKvYZ+8buMp7/8sQWr6XzEJXC8ILa1wXGtH+RjyxH390HhZ
7Omv7MZqb4I56gPewGn89WraPvlDwi8e0+D+X3pGmO6uPdUtpZ/SX03f7aTs9Wsn
BR+xtyK9qOaTgLJus9DwlYoSswMqTT+tfoAw5VHV+yL/oFk38Q2toePUXyktU306
Y/Zp6PAAp9MEtAz6tbHpkANZuA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:29 2025 by rpki-client