Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.mft
File:                     A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.mft (raw, json)
Hash identifier:          6I9/CP8HdKIpyCRD4AaaL1XyT0+kbKb73pz4D51hBDA=
Subject key identifier:   9F:BC:11:DA:1A:B3:93:A7:56:7A:08:66:52:00:D3:EB:4C:8D:5F:82
Authority key identifier: A9:D3:36:1F:57:EC:D3:6D:7D:85:CE:10:4D:11:D1:A8:C4:E9:7D:20
Certificate issuer:       /CN=A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20
Certificate serial:       175A5103FC7B64DE5784F1FB59B2ED14ECDC27E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.mft
Manifest number:          66
Signing time:             Mon 20 Jan 2025 18:05:15 +0000
Manifest this update:     Mon 20 Jan 2025 18:00:15 +0000
Manifest next update:     Tue 21 Jan 2025 21:05:15 +0000
Files and hashes:         1: 323830343a383434633a343030303a3a2f33342d3334203d3e20323732323532.roa (hash: CSJLMOev3U58cx7dqFaWtqmRXfIBrtOjswhd26VkDmk=)
                          2: 323830343a383434633a3a2f33342d3334203d3e20323732323532.roa (hash: 8PJtPH9G3C8iv+U2s+rs8IjdT31gSqlELRwL56r8vtA=)
                          3: A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.crl (hash: oWe4udjB7ao2lLEjKipkn+rQrV8F1HIYTxBeIGw+xQc=)
                          4: 323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa (hash: ewFlLnkClSal2XPj2LIj5QMiVHyy0kRcg3SwUFX+wuI=)
                          5: 323830343a383434633a3a2f33322d3332203d3e20323732323532.roa (hash: DFTalaUIxHnu3op7zn2KOBK12O4wN0FeAClq/5H8z5Q=)
                          6: 323830343a383434633a633030303a3a2f33342d3334203d3e20323732323532.roa (hash: +uS+e/6vFddt0Ppam+gin15qM3Msd8Io91Pu2v3Ykrk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5a:51:03:fc:7b:64:de:57:84:f1:fb:59:b2:ed:14:ec:dc:27:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20
        Validity
            Not Before: Jan 20 18:00:15 2025 GMT
            Not After : Jan 21 21:05:15 2025 GMT
        Subject: CN=9FBC11DA1AB393A7567A08665200D3EB4C8D5F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:01:08:be:46:31:36:ef:ac:d4:af:24:12:
                    81:93:6a:59:a8:3b:47:8e:b8:bb:7e:1c:f3:67:74:
                    05:af:ac:02:78:e5:ac:b3:58:78:9f:52:a7:a4:61:
                    82:ce:b7:20:a1:20:c0:64:29:f9:65:cb:62:d1:04:
                    8e:ea:91:4d:39:68:f3:d1:6b:b4:fd:f6:a8:e6:d9:
                    9c:71:3b:db:a4:d7:75:87:f1:22:b5:e4:1e:e3:ad:
                    5f:af:17:c7:b0:8d:fd:dd:89:e8:2c:df:a1:22:a3:
                    c7:a4:9f:6a:52:ad:09:08:48:6b:86:d7:b8:ee:f4:
                    8c:7e:5f:46:34:a5:3d:d4:c4:9a:f8:8b:01:14:23:
                    51:e6:34:96:89:26:91:95:d3:11:17:86:ee:7b:25:
                    98:0a:d7:55:88:dc:e9:4b:41:ae:9b:2c:2b:66:04:
                    b3:61:92:bb:3a:bb:31:b6:71:09:00:f8:ae:70:6c:
                    bd:df:81:b4:c4:ed:f5:5a:8a:92:73:33:20:92:7c:
                    35:69:88:eb:c0:53:b0:71:77:dc:88:e7:7d:2b:f6:
                    0d:8c:fb:38:0c:a8:74:a7:4c:20:5d:aa:79:54:99:
                    c3:bc:48:71:aa:e9:5d:c5:8d:8e:54:1f:3f:70:f3:
                    85:59:f3:59:03:5f:15:00:ca:64:e4:dc:69:4d:c1:
                    d4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BC:11:DA:1A:B3:93:A7:56:7A:08:66:52:00:D3:EB:4C:8D:5F:82
            X509v3 Authority Key Identifier:
                keyid:A9:D3:36:1F:57:EC:D3:6D:7D:85:CE:10:4D:11:D1:A8:C4:E9:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1c:d0:83:a4:64:75:85:80:47:67:46:f0:60:e4:05:0b:44:
         48:2d:5c:6d:74:2f:5c:c6:33:91:49:5c:c2:09:2e:d6:30:cb:
         e0:5e:49:62:98:8e:cb:d7:07:5b:9c:73:f6:a8:84:e1:f4:aa:
         ff:fb:a9:52:8d:78:35:a3:52:b1:20:e6:78:62:47:70:02:19:
         2a:34:91:17:f5:be:d2:2a:ec:4b:54:36:1d:57:4b:83:ad:3a:
         4a:69:3a:28:69:47:62:0b:7f:a3:fb:a5:6d:98:f0:bf:f7:cc:
         10:6a:c9:b3:02:29:42:a1:e1:86:02:10:d2:29:ec:70:56:9c:
         27:e1:b5:96:86:5e:4e:f5:59:f1:e7:d6:eb:8a:e5:52:40:94:
         4d:f8:8e:fe:85:6a:12:ad:82:94:da:5d:52:a9:e4:e6:4e:ca:
         ac:7e:24:96:ad:00:66:54:93:4a:ef:86:2c:c7:1b:89:d5:82:
         be:b2:8f:89:35:86:b4:a8:51:c3:e2:c8:22:0b:1e:d2:40:61:
         5e:b0:43:ba:98:13:14:4d:cd:81:62:85:21:11:c0:cb:c7:d2:
         90:98:f1:f8:41:fc:3e:64:b9:9b:37:0c:ca:3e:39:b5:2b:d6:
         0e:fa:33:69:5b:7d:0a:2d:30:7d:36:6f:bd:33:eb:91:e9:34:
         09:58:d6:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF1pRA/x7ZN5XhPH7WbLtFOzcJ+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlEMzM2MUY1N0VDRDM2RDdEODVDRTEwNEQxMUQxQThD
NEU5N0QyMDAeFw0yNTAxMjAxODAwMTVaFw0yNTAxMjEyMTA1MTVaMDMxMTAvBgNV
BAMTKDlGQkMxMURBMUFCMzkzQTc1NjdBMDg2NjUyMDBEM0VCNEM4RDVGODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GQEIvkYxNu+s1K8kEoGTalmo
O0eOuLt+HPNndAWvrAJ45ayzWHifUqekYYLOtyChIMBkKflly2LRBI7qkU05aPPR
a7T99qjm2ZxxO9uk13WH8SK15B7jrV+vF8ewjf3diegs36Eio8ekn2pSrQkISGuG
17ju9Ix+X0Y0pT3UxJr4iwEUI1HmNJaJJpGV0xEXhu57JZgK11WI3OlLQa6bLCtm
BLNhkrs6uzG2cQkA+K5wbL3fgbTE7fVaipJzMyCSfDVpiOvAU7Bxd9yI530r9g2M
+zgMqHSnTCBdqnlUmcO8SHGq6V3FjY5UHz9w84VZ81kDXxUAymTk3GlNwdS9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn7wR2hqzk6dWeghmUgDT60yNX4IwHwYDVR0j
BBgwFoAUqdM2H1fs0219hc4QTRHRqMTpfSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFNWkZKTXM3U3Q4Q1pqM2JKa1c2NmdZcWZ0eFJKM1ZrRkdzMWM3ZVM3
NkMvMC9BOUQzMzYxRjU3RUNEMzZEN0Q4NUNFMTA0RDExRDFBOEM0RTk3RDIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RDMzNjFGNTdFQ0QzNkQ3
RDg1Q0UxMDREMTFEMUE4QzRFOTdEMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTFNWkZKTXM3U3Q4Q1pqM2JKa1c2NmdZcWZ0eFJKM1ZrRkdzMWM3ZVM3NkMvMC9B
OUQzMzYxRjU3RUNEMzZEN0Q4NUNFMTA0RDExRDFBOEM0RTk3RDIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaBzQg6RkdYWAR2dG8GDkBQtESC1cbXQvXMYzkUlcwgku1jDL4F5JYpiOy9cH
W5xz9qiE4fSq//upUo14NaNSsSDmeGJHcAIZKjSRF/W+0irsS1Q2HVdLg606Smk6
KGlHYgt/o/ulbZjwv/fMEGrJswIpQqHhhgIQ0inscFacJ+G1loZeTvVZ8efW64rl
UkCUTfiO/oVqEq2ClNpdUqnk5k7KrH4klq0AZlSTSu+GLMcbidWCvrKPiTWGtKhR
w+LIIgse0kBhXrBDupgTFE3NgWKFIRHAy8fSkJjx+EH8PmS5mzcMyj45tSvWDvoz
aVt9Ci0wfTZvvTPrkek0CVjWZw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:05 2025 by rpki-client