Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
File:                     3D4867F11A1D652682FA95ED911B20D81139853D.mft (raw, json)
Hash identifier:          6e7BlLha7ywvXQ5IRiMLnk/7cqfWZMW/x/jxvbFdqbU=
Subject key identifier:   41:2B:63:C6:F9:64:22:BB:C9:4B:95:5B:C2:0B:69:1D:F4:CC:84:0B
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       076DC702779165B09ED00FB2B113CF6977CC48B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
Manifest number:          011D
Signing time:             Sat 29 Mar 2025 10:11:44 +0000
Manifest this update:     Sat 29 Mar 2025 10:06:44 +0000
Manifest next update:     Sun 30 Mar 2025 10:28:44 +0000
Files and hashes:         1: 34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (hash: EBgFFTNZxxqeFDpmbKEhzeoySxDpiX2ACODx+CMlS8o=)
                          2: 323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (hash: P/aI2fOCjmqHtLTryd38yNfUhNiOBbbGFBS63z6FtWU=)
                          3: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (hash: iOl1Jhws0osNJtC4QhQxd1miHQOtEQjp0Segq2G7SBk=)
                          4: 34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (hash: yZuoUZXrLN5QOpQkonHmaQwv1Bwvs5LAhAb58cNmqEQ=)
                          5: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (hash: Sd3Ar7cDAQJDd6Hd1vmlThIrr+zDSVpTdG2tNxMrHeU=)
                          6: 3D4867F11A1D652682FA95ED911B20D81139853D.crl (hash: StKc4Gj85fvb02AUJbQImTGhzFONqtlDTcLR3jDUcBE=)
                          7: 34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (hash: Q70kyTfj+QxKruCCBrn3WSIrMJSsLPyhkAU/ItLP5bw=)
                          8: 34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (hash: jCASJLtwmLLKSPVjnJWx0y6Nop2/miPxAX+p8ne3kVU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6d:c7:02:77:91:65:b0:9e:d0:0f:b2:b1:13:cf:69:77:cc:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Mar 29 10:06:44 2025 GMT
            Not After : Mar 30 10:28:44 2025 GMT
        Subject: CN=412B63C6F96422BBC94B955BC20B691DF4CC840B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:0a:2b:d8:46:0a:37:5f:01:0e:53:9f:78:
                    a0:12:ae:2a:e4:b4:16:b3:31:c0:02:34:e4:cb:73:
                    a7:c2:1e:84:f9:85:be:cb:f5:c1:c6:34:0a:f5:74:
                    46:e5:a4:db:1a:5d:55:22:95:26:37:cf:3e:e3:f7:
                    8d:fc:11:1a:35:6d:ee:94:a1:84:98:9b:50:0b:53:
                    f3:7e:dc:93:43:6f:a3:ca:fb:9f:e6:21:e3:e0:6b:
                    75:18:00:6e:b0:73:91:55:a8:01:a8:02:16:7b:ba:
                    80:4d:76:16:62:23:56:af:89:e0:e7:a1:e6:9e:7c:
                    c9:fd:60:16:f3:ca:ad:35:ac:62:1f:e3:0b:5c:72:
                    ea:e5:82:fc:be:72:6a:7b:d0:84:5b:ad:6a:89:9a:
                    90:8b:72:76:54:2d:5a:ed:f9:d3:ff:db:2f:40:b4:
                    ec:91:13:86:2e:77:3c:1f:45:ec:ed:fa:10:a5:77:
                    9c:19:e9:5c:07:6b:98:e8:ca:fe:1a:9e:de:59:e0:
                    3d:85:96:c8:63:2a:ec:a2:cb:d6:bd:72:26:35:c2:
                    a4:fb:9e:50:83:2a:f4:31:69:3a:d0:f4:b0:69:c4:
                    c5:a3:76:6e:24:89:32:02:01:01:5a:94:1d:94:83:
                    a8:cd:10:01:4a:dc:a1:65:f1:e3:ef:a3:45:d9:6d:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2B:63:C6:F9:64:22:BB:C9:4B:95:5B:C2:0B:69:1D:F4:CC:84:0B
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:b1:44:96:71:3b:3e:d2:f4:44:5c:79:36:34:60:ed:ec:
         b8:85:78:51:9f:7c:e3:fd:fc:87:4f:bf:d8:e0:2a:eb:a0:f9:
         03:15:6b:9e:7d:dd:7a:92:cf:d7:b1:b7:4e:b6:82:84:2f:96:
         26:54:f4:c2:1c:87:1c:dd:95:a1:5e:30:6a:44:e8:12:06:d2:
         f6:cf:98:f5:a4:a1:1c:78:0c:98:ed:54:39:d3:50:15:a5:d9:
         9b:ff:ee:59:3a:c7:08:7f:61:c5:84:09:31:09:e5:b4:60:31:
         15:8c:c4:7c:96:d4:2a:b6:59:7c:45:23:7d:b4:f7:5b:8e:8a:
         04:e8:ce:04:bd:51:10:10:57:f1:33:db:25:6a:53:f8:63:09:
         7f:89:b1:96:11:6d:5e:aa:3e:24:7e:20:d4:e1:d6:a7:c2:cb:
         0f:9b:0d:81:46:c1:6f:89:5d:2f:ae:38:06:b0:ce:a6:d5:b7:
         36:19:e4:2f:c4:51:53:90:25:12:5e:82:4a:6f:2b:fc:70:c2:
         f2:d9:fd:74:cf:7e:57:28:c1:18:87:0f:89:fd:01:da:e8:05:
         9b:a7:64:17:ff:c6:40:db:d7:d1:f9:b5:1e:fa:2b:1f:ed:88:
         0d:83:02:f6:73:46:64:ba:93:f5:10:67:ae:09:4f:6f:da:26:
         8c:b7:5c:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUB23HAneRZbCe0A+ysRPPaXfMSLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0ODY3RjExQTFENjUyNjgyRkE5NUVEOTExQjIwRDgx
MTM5ODUzRDAeFw0yNTAzMjkxMDA2NDRaFw0yNTAzMzAxMDI4NDRaMDMxMTAvBgNV
BAMTKDQxMkI2M0M2Rjk2NDIyQkJDOTRCOTU1QkMyMEI2OTFERjRDQzg0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJwor2EYKN18BDlOfeKASrirk
tBazMcACNOTLc6fCHoT5hb7L9cHGNAr1dEblpNsaXVUilSY3zz7j9438ERo1be6U
oYSYm1ALU/N+3JNDb6PK+5/mIePga3UYAG6wc5FVqAGoAhZ7uoBNdhZiI1avieDn
oeaefMn9YBbzyq01rGIf4wtccurlgvy+cmp70IRbrWqJmpCLcnZULVrt+dP/2y9A
tOyRE4YudzwfRezt+hCld5wZ6VwHa5joyv4ant5Z4D2FlshjKuyiy9a9ciY1wqT7
nlCDKvQxaTrQ9LBpxMWjdm4kiTICAQFalB2Ug6jNEAFK3KFl8ePvo0XZbb95AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQStjxvlkIrvJS5VbwgtpHfTMhAswHwYDVR0j
BBgwFoAUPUhn8RodZSaC+pXtkRsg2BE5hT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3
aWQvMC8zRDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDg2N0YxMUExRDY1MjY4
MkZBOTVFRDkxMUIyMEQ4MTEzOTg1M0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3aWQvMC8z
RDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXO6xRJZxOz7S9ERceTY0YO3suIV4UZ984/38h0+/2OAq66D5AxVrnn3depLP
17G3TraChC+WJlT0whyHHN2VoV4wakToEgbS9s+Y9aShHHgMmO1UOdNQFaXZm//u
WTrHCH9hxYQJMQnltGAxFYzEfJbUKrZZfEUjfbT3W46KBOjOBL1REBBX8TPbJWpT
+GMJf4mxlhFtXqo+JH4g1OHWp8LLD5sNgUbBb4ldL644BrDOptW3NhnkL8RRU5Al
El6CSm8r/HDC8tn9dM9+VyjBGIcPif0B2ugFm6dkF//GQNvX0fm1HvorH+2IDYMC
9nNGZLqT9RBnrglPb9omjLdccw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:44:13 2025 by rpki-client