Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.mft
File:                     C00FB53F604F018C47E70501EB1D8A1047AE4DB1.mft (raw, json)
Hash identifier:          qKZqIi4kIxwpqV9z0fCNOPkRvugKVGl6wouwOoXSTbw=
Subject key identifier:   1B:1B:6E:6F:91:44:4C:24:84:3D:76:1F:1F:FC:6D:15:5A:10:76:92
Authority key identifier: C0:0F:B5:3F:60:4F:01:8C:47:E7:05:01:EB:1D:8A:10:47:AE:4D:B1
Certificate issuer:       /CN=C00FB53F604F018C47E70501EB1D8A1047AE4DB1
Certificate serial:       31CCA0F5A1E47AB6328729B0D7CAC3FCE88C332D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.mft
Manifest number:          DB
Signing time:             Tue 10 Dec 2024 20:15:35 +0000
Manifest this update:     Tue 10 Dec 2024 20:10:35 +0000
Manifest next update:     Wed 11 Dec 2024 21:38:35 +0000
Files and hashes:         1: 323830343a313332303a3a2f33322d3438203d3e20323633353137.roa (hash: 6qgTdnDpeAeGByTUVjAuBfWGxN1LswSGbBGq95oa7Z8=)
                          2: C00FB53F604F018C47E70501EB1D8A1047AE4DB1.crl (hash: F7x8CJpsDtJNrU10F8N1zkLelZumiOv5Ue1dbQRBq1E=)
                          3: 3139312e3234332e3232342e302f32302d3234203d3e20323633353137.roa (hash: qnTtVUD3MCCbJ3+p3H8YhwUfiDuoj7RyprxZ2LpiU8Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cc:a0:f5:a1:e4:7a:b6:32:87:29:b0:d7:ca:c3:fc:e8:8c:33:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00FB53F604F018C47E70501EB1D8A1047AE4DB1
        Validity
            Not Before: Dec 10 20:10:35 2024 GMT
            Not After : Dec 11 21:38:35 2024 GMT
        Subject: CN=1B1B6E6F91444C24843D761F1FFC6D155A107692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:4b:f8:40:08:92:d2:6c:57:54:27:57:e8:
                    0b:a8:e1:3a:a6:2d:ee:3a:0a:91:55:79:5c:87:84:
                    14:8a:ed:d1:2d:de:83:48:a8:c3:e8:87:db:4b:a2:
                    9a:40:b9:f7:11:2f:a5:e2:4c:a6:bf:79:07:53:fe:
                    76:37:7a:f9:45:df:96:b5:4b:57:29:90:96:08:b3:
                    f0:03:92:0c:9b:08:5a:cd:7d:75:8e:4b:0e:7e:15:
                    cf:37:32:fb:41:d5:6e:54:14:02:33:aa:9d:db:91:
                    30:d3:5f:f9:a4:91:ec:20:a7:ce:c9:af:b0:6c:cb:
                    f3:80:86:fb:7c:92:1d:7c:f1:fc:41:85:fd:0d:7a:
                    bc:7f:a1:db:e9:16:95:9c:33:48:af:97:d1:2f:6e:
                    17:ce:7d:82:41:5e:e5:e8:6e:0c:5b:31:9b:d3:85:
                    9b:c4:91:bd:77:ed:dd:74:dd:1b:8d:c3:d3:ba:f6:
                    29:8d:bc:a7:60:cf:b7:a8:ed:02:d8:33:c2:7b:9c:
                    9f:a1:69:2a:e5:90:fc:cd:cb:d3:12:bf:d2:ed:08:
                    6a:60:61:9a:1b:8f:4d:e6:d3:ac:41:4a:f3:17:d6:
                    f2:39:3e:d8:06:8b:0d:f2:47:e2:48:cb:43:35:a1:
                    dc:a2:5d:f6:18:10:c6:4a:e2:8d:41:2d:b6:2f:7b:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1B:6E:6F:91:44:4C:24:84:3D:76:1F:1F:FC:6D:15:5A:10:76:92
            X509v3 Authority Key Identifier:
                keyid:C0:0F:B5:3F:60:4F:01:8C:47:E7:05:01:EB:1D:8A:10:47:AE:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b8:6e:82:81:cd:12:c8:c2:80:59:68:d7:f1:1d:df:3e:a1:
         e5:d2:b8:95:fc:78:31:f2:8c:40:c1:39:dc:d2:7d:cd:a1:55:
         dc:79:5c:bf:39:6d:ec:05:5c:5d:ad:79:48:ea:8c:90:79:37:
         3e:33:59:28:66:1b:9d:78:f9:ec:8b:d2:95:60:75:e6:be:12:
         32:7c:1b:29:89:5b:bc:bb:1c:0a:26:5a:bd:f2:e4:5d:1b:e9:
         9d:15:44:9d:4a:08:26:78:4e:ed:c8:2f:45:22:ee:f5:68:27:
         4c:e6:50:c4:51:65:ff:63:fc:eb:dd:56:77:b8:45:43:38:37:
         9e:b8:b1:37:d8:67:cc:a2:2b:68:42:ff:f9:a7:39:fa:65:39:
         f6:df:b0:b1:b1:41:b5:d1:e3:ad:77:ab:be:16:69:ec:b4:c9:
         cc:61:89:38:0b:b3:fb:38:23:ac:c4:bf:9f:3f:a6:56:b3:7f:
         e0:0d:8a:71:8a:4f:95:4c:42:6f:fa:1b:e1:29:83:02:0c:52:
         27:a5:08:48:05:33:ef:54:35:95:f8:ad:d2:b8:61:be:62:dc:
         a0:47:8d:b9:14:f6:8e:86:d3:93:9a:fb:af:b9:4f:31:0e:e1:
         4e:5c:92:f2:40:20:a7:21:a6:57:f7:fd:ae:74:92:b2:b6:80:
         5f:63:64:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMcyg9aHkerYyhymw18rD/OiMMy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwRkI1M0Y2MDRGMDE4QzQ3RTcwNTAxRUIxRDhBMTA0
N0FFNERCMTAeFw0yNDEyMTAyMDEwMzVaFw0yNDEyMTEyMTM4MzVaMDMxMTAvBgNV
BAMTKDFCMUI2RTZGOTE0NDRDMjQ4NDNENzYxRjFGRkM2RDE1NUExMDc2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO50v4QAiS0mxXVCdX6Auo4Tqm
Le46CpFVeVyHhBSK7dEt3oNIqMPoh9tLoppAufcRL6XiTKa/eQdT/nY3evlF35a1
S1cpkJYIs/ADkgybCFrNfXWOSw5+Fc83MvtB1W5UFAIzqp3bkTDTX/mkkewgp87J
r7Bsy/OAhvt8kh188fxBhf0Nerx/odvpFpWcM0ivl9EvbhfOfYJBXuXobgxbMZvT
hZvEkb137d103RuNw9O69imNvKdgz7eo7QLYM8J7nJ+haSrlkPzNy9MSv9LtCGpg
YZobj03m06xBSvMX1vI5PtgGiw3yR+JIy0M1odyiXfYYEMZK4o1BLbYve9CZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGxtub5FETCSEPXYfH/xtFVoQdpIwHwYDVR0j
BBgwFoAUwA+1P2BPAYxH5wUB6x2KEEeuTbEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHNSUzdRNE1lcTliTnRxOVJOYlJHWGZZU0VLejZteUVNUFJhYmRLTG95
UHQvMC9DMDBGQjUzRjYwNEYwMThDNDdFNzA1MDFFQjFEOEExMDQ3QUU0REIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMEZCNTNGNjA0RjAxOEM0
N0U3MDUwMUVCMUQ4QTEwNDdBRTREQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHNSUzdRNE1lcTliTnRxOVJOYlJHWGZZU0VLejZteUVNUFJhYmRLTG95UHQvMC9D
MDBGQjUzRjYwNEYwMThDNDdFNzA1MDFFQjFEOEExMDQ3QUU0REIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGbhugoHNEsjCgFlo1/Ed3z6h5dK4lfx4MfKMQME53NJ9zaFV3Hlcvzlt7AVc
Xa15SOqMkHk3PjNZKGYbnXj57IvSlWB15r4SMnwbKYlbvLscCiZavfLkXRvpnRVE
nUoIJnhO7cgvRSLu9WgnTOZQxFFl/2P8691Wd7hFQzg3nrixN9hnzKIraEL/+ac5
+mU59t+wsbFBtdHjrXervhZp7LTJzGGJOAuz+zgjrMS/nz+mVrN/4A2KcYpPlUxC
b/ob4SmDAgxSJ6UISAUz71Q1lfit0rhhvmLcoEeNuRT2jobTk5r7r7lPMQ7hTlyS
8kAgpyGmV/f9rnSSsraAX2Nk8g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:31 2025 by rpki-client