Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.mft
File:                     E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.mft (raw, json)
Hash identifier:          vci/9XRRTddOs57ZZ06ySkswhRR3GlQbkQuWV8yMUDI=
Subject key identifier:   6D:1E:06:E5:9E:82:28:52:A6:9F:33:01:27:3D:AC:45:C5:DD:50:A7
Authority key identifier: E0:0A:7C:09:09:2F:A9:2D:BB:3C:C8:77:91:CF:71:DB:9E:AF:04:7A
Certificate issuer:       /CN=E00A7C09092FA92DBB3CC87791CF71DB9EAF047A
Certificate serial:       456DF738B93DAFC1FB16BEFCBD70E69A64B93725
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.mft
Manifest number:          03
Signing time:             Mon 24 Feb 2025 20:48:52 +0000
Manifest this update:     Mon 24 Feb 2025 20:43:52 +0000
Manifest next update:     Tue 25 Feb 2025 22:36:52 +0000
Files and hashes:         1: E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.crl (hash: KCeyIyXMD0ZfC/mljg2i39hxWux1xH/SMhskr0y+7d8=)
                          2: 34352e3137362e302e302f32322d3332203d3e20323638393234.roa (hash: HTtqTVGU62fFzOVhUyTcgoQB1uXLJxUzTzpick/04kM=)
                          3: 323830343a356362303a3a2f33322d313238203d3e20323638393234.roa (hash: F0xTSiwnzXDkd1AkNb78HDli7pjU4JCdOZeLmRpGOLk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6d:f7:38:b9:3d:af:c1:fb:16:be:fc:bd:70:e6:9a:64:b9:37:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00A7C09092FA92DBB3CC87791CF71DB9EAF047A
        Validity
            Not Before: Feb 24 20:43:52 2025 GMT
            Not After : Feb 25 22:36:52 2025 GMT
        Subject: CN=6D1E06E59E822852A69F3301273DAC45C5DD50A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:9c:31:62:13:32:44:56:fe:04:63:29:ca:
                    3c:9b:4e:85:a5:2f:2e:02:1c:aa:b8:72:92:25:de:
                    26:80:1b:ee:a6:0a:1d:e5:34:6f:41:ef:6c:2f:99:
                    7e:48:47:3b:7c:e3:6d:df:58:58:f8:b9:0c:5d:0a:
                    70:be:e1:57:e8:13:b6:3d:1d:0c:94:db:cb:92:f1:
                    66:6c:17:37:3a:a6:df:12:41:66:7a:f6:12:01:f1:
                    68:c6:b2:90:60:05:bd:ea:53:1e:a8:9d:e1:c8:1d:
                    92:34:7f:b4:81:6e:fa:85:b0:5c:fe:34:fb:39:fe:
                    58:37:5c:90:1d:1b:e5:9c:b5:54:52:9b:d8:21:91:
                    21:b1:94:96:dd:b6:e1:42:ed:a1:37:6d:51:e7:16:
                    27:08:b3:37:69:e5:2e:35:37:98:ef:f8:c8:49:0a:
                    a0:6a:02:65:54:eb:0e:eb:e2:60:7e:4e:66:9c:6b:
                    8f:7b:a3:51:9b:23:35:74:23:d3:1a:3b:75:5d:38:
                    69:ca:ee:43:69:af:0f:54:5a:5a:bc:f1:24:60:84:
                    da:b0:07:2a:0d:12:3c:bc:f1:ba:d4:5f:8c:27:41:
                    0e:74:f2:9a:4e:9c:46:5d:a9:43:28:1d:be:cf:a5:
                    ab:d6:76:f7:3b:e6:56:04:0a:e3:9e:93:11:0d:c9:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:06:E5:9E:82:28:52:A6:9F:33:01:27:3D:AC:45:C5:DD:50:A7
            X509v3 Authority Key Identifier:
                keyid:E0:0A:7C:09:09:2F:A9:2D:BB:3C:C8:77:91:CF:71:DB:9E:AF:04:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:86:ac:c4:1d:a4:72:03:0b:98:52:0e:f6:b2:b8:46:1e:
         ab:99:48:e1:e7:59:a1:e4:94:7e:c5:07:c0:c0:12:58:05:13:
         28:b1:39:24:fb:f5:2a:43:3d:eb:1c:8a:ad:d6:1f:79:09:7d:
         30:31:1d:b2:95:e6:5b:21:d5:14:74:b0:8c:c8:b0:5d:13:9e:
         42:40:91:27:b9:70:0f:9d:40:16:66:80:39:ae:50:d7:a4:82:
         51:92:dd:f0:ed:a6:9d:ae:f7:ac:34:23:53:a6:18:d5:53:8d:
         f0:5b:e3:9d:32:9c:01:3e:a5:f9:8b:7e:af:31:c1:76:c2:09:
         59:fb:03:22:d9:ab:67:a2:8e:5f:3e:1b:5a:13:b6:3b:b1:7a:
         79:84:71:fa:95:85:f1:6e:4d:f3:74:be:78:0f:3f:d8:7e:ba:
         80:6e:fc:22:f5:d4:d2:ed:06:3e:da:93:4d:33:63:2c:65:c4:
         7b:25:bc:54:d2:d9:ba:67:8b:39:af:9d:85:3e:a0:3e:e4:5f:
         d7:ad:72:23:6d:61:0d:58:23:7a:cb:99:d1:28:af:54:db:75:
         b8:6a:c7:40:7e:28:0e:b1:1d:9d:0d:4c:39:12:90:fe:e7:43:
         3d:60:7c:5b:7e:af:04:23:ee:8a:d1:a0:1a:fd:db:47:62:4d:
         c9:b8:89:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURW33OLk9r8H7Fr78vXDmmmS5NyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwQTdDMDkwOTJGQTkyREJCM0NDODc3OTFDRjcxREI5
RUFGMDQ3QTAeFw0yNTAyMjQyMDQzNTJaFw0yNTAyMjUyMjM2NTJaMDMxMTAvBgNV
BAMTKDZEMUUwNkU1OUU4MjI4NTJBNjlGMzMwMTI3M0RBQzQ1QzVERDUwQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+pwxYhMyRFb+BGMpyjybToWl
Ly4CHKq4cpIl3iaAG+6mCh3lNG9B72wvmX5IRzt8423fWFj4uQxdCnC+4VfoE7Y9
HQyU28uS8WZsFzc6pt8SQWZ69hIB8WjGspBgBb3qUx6oneHIHZI0f7SBbvqFsFz+
NPs5/lg3XJAdG+WctVRSm9ghkSGxlJbdtuFC7aE3bVHnFicIszdp5S41N5jv+MhJ
CqBqAmVU6w7r4mB+Tmaca497o1GbIzV0I9MaO3VdOGnK7kNprw9UWlq88SRghNqw
ByoNEjy88brUX4wnQQ508ppOnEZdqUMoHb7PpavWdvc75lYECuOekxENyYSDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbR4G5Z6CKFKmnzMBJz2sRcXdUKcwHwYDVR0j
BBgwFoAU4Ap8CQkvqS27PMh3kc9x256vBHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTI4TnJkZHI4WW1Cc0NqY1hKdHVQbUt2NGhweEFkRmhRYUFSbkdKSmdV
cHQvMC9FMDBBN0MwOTA5MkZBOTJEQkIzQ0M4Nzc5MUNGNzFEQjlFQUYwNDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMEE3QzA5MDkyRkE5MkRC
QjNDQzg3NzkxQ0Y3MURCOUVBRjA0N0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTI4TnJkZHI4WW1Cc0NqY1hKdHVQbUt2NGhweEFkRmhRYUFSbkdKSmdVcHQvMC9F
MDBBN0MwOTA5MkZBOTJEQkIzQ0M4Nzc5MUNGNzFEQjlFQUYwNDdBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW4+GrMQdpHIDC5hSDvayuEYeq5lI4edZoeSUfsUHwMASWAUTKLE5JPv1KkM9
6xyKrdYfeQl9MDEdspXmWyHVFHSwjMiwXROeQkCRJ7lwD51AFmaAOa5Q16SCUZLd
8O2mna73rDQjU6YY1VON8FvjnTKcAT6l+Yt+rzHBdsIJWfsDItmrZ6KOXz4bWhO2
O7F6eYRx+pWF8W5N83S+eA8/2H66gG78IvXU0u0GPtqTTTNjLGXEeyW8VNLZumeL
Oa+dhT6gPuRf161yI21hDVgjesuZ0SivVNt1uGrHQH4oDrEdnQ1MORKQ/udDPWB8
W36vBCPuitGgGv3bR2JNybiJPg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:41:03 2025 by rpki-client