Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.mft
File:                     41A86F24F08AA1689D41C0058E1D1EF36578625D.mft (raw, json)
Hash identifier:          eAQAsOGaeRJRixM+H+mEwosEJIvezt4GoUmg772N87I=
Subject key identifier:   0E:D2:0F:AB:13:99:9F:12:1D:1A:93:90:0C:FA:0F:E3:AA:65:B0:CB
Authority key identifier: 41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
Certificate issuer:       /CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Certificate serial:       43ADA3F582D6F637D97D43A03E7EE3FBD274B633
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.mft
Manifest number:          2B
Signing time:             Mon 11 Mar 2024 08:20:37 +0000
Manifest this update:     Mon 11 Mar 2024 08:15:37 +0000
Manifest next update:     Tue 12 Mar 2024 12:16:37 +0000
Files and hashes:         1: 323830343a326664383a3a2f33342d3334203d3e20323634393135.roa (hash: pF7XK5Mb1ShDJ+mC1zDBHsFrd1lLR5hcuktNshqyk8Q=)
                          2: 3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa (hash: 1c/DBgaoxeGkpuzlddyhdr+wZAZxoumsgKSm5RFV1Is=)
                          3: 323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa (hash: a6kflQ/Z2Eulhao5IKa4KW7RGzLD2XZZLs7s+GuWfLY=)
                          4: 41A86F24F08AA1689D41C0058E1D1EF36578625D.crl (hash: gXuRd4qwcrRgWGeiMwyfy/OhS46iAr5vyN/6/mqyR3s=)
                          5: 323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa (hash: 27IKhHNT6Y2UBQjjfoZNXdfrcsS6FKAuXLqjb5GCAoI=)
                          6: 323830343a326664383a3a2f33322d3332203d3e20323634393135.roa (hash: a05QTi4jUgCGBC3PMOC+mys/SzhCSLVGmfNUaauriS8=)
                          7: 3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa (hash: pERRbsKI6MkX7cmtzkO67uSy5wkYlr/p0d2lyp4+MEk=)
                          8: 3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa (hash: PE7ZQBGSpZLr4Dec7OjzPpZX9bR9vBuh+UY6LYoFVCo=)
                          9: 323830343a326664383a633030303a3a2f33342d3334203d3e20323634393135.roa (hash: TixzCofpXMohTM8O83nR4poeZjz0rv99oWlKqVwoMx8=)
                          10: 323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa (hash: rxTd/r2YbMwzxNrx6iis9WsAtab5bJLEZ8kv67Axwos=)
                          11: 323830343a326664383a3a2f33332d3333203d3e20323634393135.roa (hash: /datAvlEEpRiZKDMeyL/qI9DDAcn5WeRnSZJxRrmEn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ad:a3:f5:82:d6:f6:37:d9:7d:43:a0:3e:7e:e3:fb:d2:74:b6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
        Validity
            Not Before: Mar 11 08:15:37 2024 GMT
            Not After : Mar 12 12:16:37 2024 GMT
        Subject: CN=0ED20FAB13999F121D1A93900CFA0FE3AA65B0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:a9:53:02:09:92:dd:26:a1:2b:0b:e9:9a:
                    97:00:5a:bb:eb:a1:f5:d8:6b:c7:88:f3:63:85:05:
                    f1:7e:bd:fd:be:9c:1e:78:d5:76:2d:57:7f:08:45:
                    6c:ca:fe:81:ec:3c:83:b9:e7:51:45:ed:0f:f4:1e:
                    e0:88:8d:68:3e:70:ed:08:c4:92:e0:7d:17:c4:89:
                    ec:fc:b5:4d:08:ef:86:83:e0:ca:d4:0b:45:33:ba:
                    25:c5:53:be:bd:ad:61:84:3d:26:a0:7a:1c:05:7c:
                    97:71:00:a4:40:7b:62:73:2d:47:fb:dd:b8:9b:19:
                    2c:fb:5b:ab:24:ef:0e:09:7a:cc:b1:b7:ff:eb:59:
                    a0:85:97:63:95:1e:eb:f8:3b:b8:ac:3a:20:f3:36:
                    9a:81:16:41:72:b6:17:ee:61:44:9c:a5:c2:dd:aa:
                    4f:8b:0b:ad:d7:0b:fe:e1:35:ad:27:4f:55:5c:a4:
                    c9:65:3c:9b:6e:ac:2b:f8:e5:2d:bc:37:d1:b1:25:
                    fa:d8:2e:a3:cc:70:67:20:5f:8e:4d:fa:d0:9d:5e:
                    e0:90:d5:e7:30:72:64:b3:81:3a:42:f3:0c:04:a7:
                    75:8c:1b:0f:64:04:ff:b2:da:29:1a:43:38:4f:ef:
                    a0:63:94:3c:ca:75:3e:9e:2a:83:43:24:51:f2:6d:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D2:0F:AB:13:99:9F:12:1D:1A:93:90:0C:FA:0F:E3:AA:65:B0:CB
            X509v3 Authority Key Identifier:
                keyid:41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:dd:99:da:a0:b9:52:64:4f:df:03:94:21:1d:f7:e2:ef:
         f8:97:c6:33:04:62:1b:8a:00:11:16:d7:be:81:7d:ec:8b:28:
         03:b1:63:2f:f7:af:0d:75:f3:74:fe:b5:f3:cf:23:cd:43:e2:
         9e:01:de:e3:0a:db:5f:0d:d1:5f:8b:d4:3b:ee:db:17:c7:0e:
         02:bb:9e:57:98:22:c9:80:f5:fe:87:6d:99:85:97:9f:a1:09:
         30:48:aa:7e:44:63:2f:03:cf:1a:43:9b:3f:cb:06:a1:b7:6f:
         02:37:30:78:f9:8b:25:d3:a1:08:f0:ac:1a:bc:37:e7:e6:ef:
         ca:82:81:17:fd:5f:7a:95:c6:45:de:7f:ff:ad:9d:5d:e2:46:
         41:84:c9:66:27:cb:10:a3:fa:b9:cf:0c:7f:86:94:e5:44:70:
         60:a1:c9:0e:65:53:6a:75:17:dd:a9:46:8b:2b:10:fe:fd:89:
         2c:56:4e:92:3a:07:d4:ed:a5:8e:db:e6:7f:c0:24:d1:67:75:
         ae:58:9a:8a:d5:01:a9:6e:48:be:73:7d:f4:61:d8:ac:fe:e7:
         0d:e8:72:9d:b8:88:ae:4f:52:53:a5:00:ce:e4:31:09:b3:27:
         5a:fc:c3:c5:43:53:a2:4f:f3:e0:29:a7:24:45:d8:52:39:4c:
         76:96:45:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ62j9YLW9jfZfUOgPn7j+9J0tjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFBODZGMjRGMDhBQTE2ODlENDFDMDA1OEUxRDFFRjM2
NTc4NjI1RDAeFw0yNDAzMTEwODE1MzdaFw0yNDAzMTIxMjE2MzdaMDMxMTAvBgNV
BAMTKDBFRDIwRkFCMTM5OTlGMTIxRDFBOTM5MDBDRkEwRkUzQUE2NUIwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUalTAgmS3SahKwvpmpcAWrvr
ofXYa8eI82OFBfF+vf2+nB541XYtV38IRWzK/oHsPIO551FF7Q/0HuCIjWg+cO0I
xJLgfRfEiez8tU0I74aD4MrUC0UzuiXFU769rWGEPSagehwFfJdxAKRAe2JzLUf7
3bibGSz7W6sk7w4Jesyxt//rWaCFl2OVHuv4O7isOiDzNpqBFkFythfuYUScpcLd
qk+LC63XC/7hNa0nT1VcpMllPJturCv45S28N9GxJfrYLqPMcGcgX45N+tCdXuCQ
1ecwcmSzgTpC8wwEp3WMGw9kBP+y2ikaQzhP76BjlDzKdT6eKoNDJFHybSv7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDtIPqxOZnxIdGpOQDPoP46plsMswHwYDVR0j
BBgwFoAUQahvJPCKoWidQcAFjh0e82V4Yl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3
a2MvMC80MUE4NkYyNEYwOEFBMTY4OUQ0MUMwMDU4RTFEMUVGMzY1Nzg2MjVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxQTg2RjI0RjA4QUExNjg5
RDQxQzAwNThFMUQxRUYzNjU3ODYyNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3a2MvMC80
MUE4NkYyNEYwOEFBMTY4OUQ0MUMwMDU4RTFEMUVGMzY1Nzg2MjVELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhsHdmdqguVJkT98DlCEd9+Lv+JfGMwRiG4oAERbXvoF97IsoA7FjL/evDXXz
dP61888jzUPingHe4wrbXw3RX4vUO+7bF8cOArueV5giyYD1/odtmYWXn6EJMEiq
fkRjLwPPGkObP8sGobdvAjcwePmLJdOhCPCsGrw35+bvyoKBF/1fepXGRd5//62d
XeJGQYTJZifLEKP6uc8Mf4aU5URwYKHJDmVTanUX3alGiysQ/v2JLFZOkjoH1O2l
jtvmf8Ak0Wd1rliaitUBqW5IvnN99GHYrP7nDehynbiIrk9SU6UAzuQxCbMnWvzD
xUNTok/z4CmnJEXYUjlMdpZFSw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:47 2025 by rpki-client