Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.mft
File:                     9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.mft (raw, json)
Hash identifier:          yEUjWgHBwrhmv4t0T8gS2nzYc2boRdByLgB1bQvVM+g=
Subject key identifier:   07:2D:74:6E:DA:D1:3D:F6:C7:AF:17:61:48:38:51:AF:29:0C:7A:BC
Authority key identifier: 9A:F0:CB:FF:E3:00:0E:7D:89:21:1B:15:F5:EA:30:C8:FA:6C:5F:43
Certificate issuer:       /CN=9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43
Certificate serial:       62FA18B7239303BDC49730751D325B4A55A8D4D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.mft
Manifest number:          20
Signing time:             Sat 29 Mar 2025 09:28:07 +0000
Manifest this update:     Sat 29 Mar 2025 09:23:07 +0000
Manifest next update:     Sun 30 Mar 2025 11:31:07 +0000
Files and hashes:         1: 9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.crl (hash: 9AHa77A/SQXSnhmen/WlKS3auLUN8NNQFERAVzMD820=)
                          2: 323830343a3464343a3a2f33322d3438203d3e20323632343639.roa (hash: aT+6GMt2PyHoUTOuoJMU/SkxyCwpxEdRXIWImEuMc8w=)
                          3: 3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa (hash: vF+oEJ+H4K1vmo/5RnO7umBmrHHN0947zthyPpb6x0U=)
                          4: 3137372e34372e3136302e302f32302d3234203d3e20323632343639.roa (hash: KTnaPF6YHzJN4FUx18N5khApqnDk1y+7fZ18uDvdnRY=)
                          5: 3137392e3132372e39362e302f32302d3234203d3e20323632343639.roa (hash: 7ZeVhcTidV4AE6tyG2+B1iOPoCSjVQQxCwAoQCnLNyI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fa:18:b7:23:93:03:bd:c4:97:30:75:1d:32:5b:4a:55:a8:d4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43
        Validity
            Not Before: Mar 29 09:23:07 2025 GMT
            Not After : Mar 30 11:31:07 2025 GMT
        Subject: CN=072D746EDAD13DF6C7AF1761483851AF290C7ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:33:5f:d1:2b:87:f6:a6:6b:80:6c:bb:7e:
                    f5:ff:97:85:9c:2c:26:7e:7a:29:1b:36:94:92:46:
                    c3:6c:ba:ba:40:be:e5:d6:4f:3a:47:a6:35:10:b0:
                    bb:46:e7:c0:f3:98:f6:27:2a:73:39:63:55:a6:c2:
                    f4:b6:dc:16:10:3f:98:f1:ea:9f:8a:f5:3a:7c:ca:
                    49:cb:fb:2f:91:3c:3e:a3:8b:66:33:2c:ac:e0:ca:
                    99:b9:7a:21:7c:31:03:76:7a:8f:48:53:49:f7:cd:
                    8a:cf:0d:b4:44:7d:8f:e8:7a:af:2e:b1:f1:4e:e7:
                    8b:46:5f:85:1d:59:d9:1c:47:fc:02:5a:c5:ec:c9:
                    17:58:e8:ce:0a:96:e6:4a:9d:22:79:ed:35:86:4a:
                    9f:79:5d:9e:2e:f6:ea:1b:45:d6:d2:c4:f7:ec:f8:
                    af:62:ad:94:b3:9d:1d:c7:36:81:43:81:de:f5:05:
                    04:fb:94:7d:78:90:c3:3f:d0:80:a3:94:ab:ca:b3:
                    78:51:5a:a6:27:2a:eb:8f:58:81:e3:39:be:fe:d5:
                    1e:86:79:8a:ba:e1:53:2b:55:8d:52:da:a6:07:47:
                    00:66:d5:c8:b6:ff:55:70:c2:2e:a7:8d:71:65:82:
                    78:22:b2:14:e9:10:55:c0:29:89:f8:50:7a:ba:fa:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2D:74:6E:DA:D1:3D:F6:C7:AF:17:61:48:38:51:AF:29:0C:7A:BC
            X509v3 Authority Key Identifier:
                keyid:9A:F0:CB:FF:E3:00:0E:7D:89:21:1B:15:F5:EA:30:C8:FA:6C:5F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:4c:c1:8d:e3:16:00:16:93:e1:72:f4:95:44:21:bd:c1:
         95:1f:f7:04:37:bb:6e:da:83:a2:0c:de:c8:22:9c:07:8e:70:
         80:59:61:93:cd:17:07:4b:d2:0e:f2:60:2a:d6:fa:77:a5:40:
         ed:ac:d3:ff:9f:0c:ea:89:89:25:8e:e4:2e:48:3c:2e:2a:0d:
         b1:b0:6e:22:e5:fb:fc:0c:53:f1:2f:8a:00:67:4e:17:1b:1d:
         d8:a6:2e:64:40:7e:d9:37:cc:26:68:e6:82:42:f6:06:e3:2f:
         ca:72:29:5e:af:4e:19:25:80:f4:24:82:ca:07:b1:c3:f8:58:
         43:8d:84:76:67:f6:93:76:73:ad:26:f7:b6:be:2b:10:a3:bf:
         bb:18:89:46:46:bd:44:5b:7a:40:12:59:45:a0:11:81:e5:8f:
         b7:60:bb:80:1a:91:56:1d:05:87:41:9b:4b:b6:8a:c3:78:b3:
         8c:1a:6a:52:30:82:d3:48:32:2c:22:47:81:8b:a9:a5:b9:4c:
         2c:7f:40:e8:2c:9a:b6:58:77:d0:29:76:43:4b:9d:82:14:70:
         56:20:9b:fb:4e:05:21:ac:d4:be:d7:13:38:ed:10:09:82:6e:
         0f:3a:1a:42:e0:0a:f6:e5:3c:32:0c:b8:4b:08:ce:76:d4:d1:
         e1:cf:dd:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYvoYtyOTA73ElzB1HTJbSlWo1NcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFGMENCRkZFMzAwMEU3RDg5MjExQjE1RjVFQTMwQzhG
QTZDNUY0MzAeFw0yNTAzMjkwOTIzMDdaFw0yNTAzMzAxMTMxMDdaMDMxMTAvBgNV
BAMTKDA3MkQ3NDZFREFEMTNERjZDN0FGMTc2MTQ4Mzg1MUFGMjkwQzdBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfTDNf0SuH9qZrgGy7fvX/l4Wc
LCZ+eikbNpSSRsNsurpAvuXWTzpHpjUQsLtG58DzmPYnKnM5Y1WmwvS23BYQP5jx
6p+K9Tp8yknL+y+RPD6ji2YzLKzgypm5eiF8MQN2eo9IU0n3zYrPDbREfY/oeq8u
sfFO54tGX4UdWdkcR/wCWsXsyRdY6M4KluZKnSJ57TWGSp95XZ4u9uobRdbSxPfs
+K9irZSznR3HNoFDgd71BQT7lH14kMM/0ICjlKvKs3hRWqYnKuuPWIHjOb7+1R6G
eYq64VMrVY1S2qYHRwBm1ci2/1Vwwi6njXFlgngishTpEFXAKYn4UHq6+q/5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBy10btrRPfbHrxdhSDhRrykMerwwHwYDVR0j
BBgwFoAUmvDL/+MADn2JIRsV9eowyPpsX0MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUsyZGlxZWlZRGc3RDJQQmZXZndUYTRMcjZNUUVXY3JpZGtOaEd4Rjh0
ZzIvMC85QUYwQ0JGRkUzMDAwRTdEODkyMTFCMTVGNUVBMzBDOEZBNkM1RjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRjBDQkZGRTMwMDBFN0Q4
OTIxMUIxNUY1RUEzMEM4RkE2QzVGNDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUsyZGlxZWlZRGc3RDJQQmZXZndUYTRMcjZNUUVXY3JpZGtOaEd4Rjh0ZzIvMC85
QUYwQ0JGRkUzMDAwRTdEODkyMTFCMTVGNUVBMzBDOEZBNkM1RjQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARvpMwY3jFgAWk+Fy9JVEIb3BlR/3BDe7btqDogzeyCKcB45wgFlhk80XB0vS
DvJgKtb6d6VA7azT/58M6omJJY7kLkg8LioNsbBuIuX7/AxT8S+KAGdOFxsd2KYu
ZEB+2TfMJmjmgkL2BuMvynIpXq9OGSWA9CSCygexw/hYQ42Edmf2k3ZzrSb3tr4r
EKO/uxiJRka9RFt6QBJZRaARgeWPt2C7gBqRVh0Fh0GbS7aKw3izjBpqUjCC00gy
LCJHgYuppblMLH9A6Cyatlh30Cl2Q0udghRwViCb+04FIazUvtcTOO0QCYJuDzoa
QuAK9uU8Mgy4SwjOdtTR4c/dYw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 17:01:21 2025 by rpki-client