Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.mft
File:                     8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.mft (raw, json)
Hash identifier:          v/eF42LxmcQr4QQIzjpVBKTo0rRi0vTVEuLqOt6k0LQ=
Subject key identifier:   4D:D4:51:9F:13:1B:FC:A7:F2:F1:E1:BB:F1:4B:08:27:F0:4E:DA:4B
Authority key identifier: 8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28
Certificate issuer:       /CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
Certificate serial:       4E2799AF5FA498A05DFC5EFF0B2132ED7930884A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.mft
Manifest number:          33
Signing time:             Fri 28 Mar 2025 18:13:49 +0000
Manifest this update:     Fri 28 Mar 2025 18:08:49 +0000
Manifest next update:     Sat 29 Mar 2025 21:23:49 +0000
Files and hashes:         1: 34352e3233392e35322e302f32322d3332203d3e20323638333533.roa (hash: oXAidIStYuvsKe7IKRL94ir6wRdQTmodwBB6Ta01DIk=)
                          2: 8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.crl (hash: iuXLogy8ckvpdSVkG+Ijl992jzW0uYWBkp2mdAM3LMI=)
                          3: 323830343a346664383a3a2f33322d313238203d3e20323638333533.roa (hash: 7bq2qN4ZwhgAVIKamUIceJpAAJYNdiGkag8n963Fznw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:27:99:af:5f:a4:98:a0:5d:fc:5e:ff:0b:21:32:ed:79:30:88:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
        Validity
            Not Before: Mar 28 18:08:49 2025 GMT
            Not After : Mar 29 21:23:49 2025 GMT
        Subject: CN=4DD4519F131BFCA7F2F1E1BBF14B0827F04EDA4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:ea:bc:b1:23:6c:67:fa:46:4d:45:cb:37:
                    5e:c1:73:31:7c:98:63:5e:71:68:8a:81:8b:52:83:
                    9f:e0:76:64:70:02:16:a1:91:96:2a:df:08:de:fa:
                    46:91:2d:dd:93:86:1e:8e:f4:54:cd:c9:1d:55:60:
                    ed:c1:76:7e:8d:82:ff:8f:cf:1a:a1:c3:09:0b:c8:
                    d4:aa:ca:2c:16:45:b5:bb:8c:39:94:6e:38:1b:57:
                    5b:ea:86:31:c9:ce:e1:14:d3:72:ed:a3:a7:aa:d7:
                    3b:3e:0f:9e:2a:75:66:fc:a9:02:72:2c:35:46:a5:
                    35:b5:b8:02:ff:6b:86:9a:3b:2d:91:0b:32:20:83:
                    55:9b:98:a6:7b:59:8c:1a:11:d7:23:fd:7a:9c:b9:
                    1f:19:f0:83:7b:c4:f5:b7:7a:bc:22:1a:35:64:26:
                    b6:1e:7f:a0:83:2d:6c:77:a5:41:04:4c:3d:75:47:
                    26:ab:ee:b1:97:5e:36:ca:c6:1a:19:29:00:2d:ae:
                    76:c5:93:18:d5:4b:e3:f0:5a:7e:8b:6b:cd:f0:dc:
                    57:ce:87:5e:84:bb:fd:78:9a:ac:4c:f9:64:ca:2a:
                    4c:78:5e:a2:4a:72:44:aa:84:70:c9:f1:69:8b:c7:
                    5a:db:b5:34:b6:c7:85:15:b0:ef:1d:a9:05:23:48:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:51:9F:13:1B:FC:A7:F2:F1:E1:BB:F1:4B:08:27:F0:4E:DA:4B
            X509v3 Authority Key Identifier:
                keyid:8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9a:bb:f2:fb:f1:76:15:ca:60:f5:94:39:85:fa:55:47:fe:
         2d:f1:a3:3c:a1:58:7d:f6:92:ab:12:d5:d4:1c:f9:3c:95:ad:
         0a:db:77:36:bd:a5:5a:53:25:64:cd:21:05:6a:52:6e:69:b9:
         fb:9a:b7:5d:d1:e6:10:99:c9:4b:e9:01:3f:47:c7:39:10:38:
         2c:01:bd:08:52:00:fb:64:c6:84:6e:47:1a:ef:9c:ef:72:65:
         26:1c:43:a9:55:75:36:da:11:b1:33:0c:7c:4d:f1:fd:ea:c0:
         f7:94:42:03:ff:e0:a8:8a:cf:77:84:b7:84:15:6c:ec:73:25:
         46:95:2a:3e:23:b7:c7:70:0e:44:88:2c:a8:47:1e:54:85:0a:
         b6:44:c3:5c:8f:38:8c:88:f6:c5:98:33:22:27:44:05:72:f2:
         fc:6b:a5:62:4b:6f:58:05:ec:20:08:8c:ce:2d:17:71:44:c6:
         f1:38:bf:f5:58:4a:e0:16:af:4c:3a:37:34:67:17:ce:59:4c:
         c9:2b:af:3d:dc:17:17:8c:b7:bc:d8:83:b9:e7:04:5a:97:10:
         f9:a8:e2:56:74:90:16:f5:86:be:3d:3f:6e:e3:63:91:d6:7b:
         6c:ae:91:0a:b6:b7:6f:03:65:a6:49:4f:ca:57:4f:44:3f:38:
         f0:43:83:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTieZr1+kmKBd/F7/CyEy7XkwiEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ0QUVDMTk4QkI0RUI0NkVDNzAxREQ0QUJBRkIyREI4
NzFGRDAyODAeFw0yNTAzMjgxODA4NDlaFw0yNTAzMjkyMTIzNDlaMDMxMTAvBgNV
BAMTKDRERDQ1MTlGMTMxQkZDQTdGMkYxRTFCQkYxNEIwODI3RjA0RURBNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTvuq8sSNsZ/pGTUXLN17BczF8
mGNecWiKgYtSg5/gdmRwAhahkZYq3wje+kaRLd2Thh6O9FTNyR1VYO3Bdn6Ngv+P
zxqhwwkLyNSqyiwWRbW7jDmUbjgbV1vqhjHJzuEU03Lto6eq1zs+D54qdWb8qQJy
LDVGpTW1uAL/a4aaOy2RCzIgg1WbmKZ7WYwaEdcj/XqcuR8Z8IN7xPW3erwiGjVk
JrYef6CDLWx3pUEETD11Ryar7rGXXjbKxhoZKQAtrnbFkxjVS+PwWn6La83w3FfO
h16Eu/14mqxM+WTKKkx4XqJKckSqhHDJ8WmLx1rbtTS2x4UVsO8dqQUjSLSFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTdRRnxMb/Kfy8eG78UsIJ/BO2kswHwYDVR0j
BBgwFoAUjUrsGYu060bscB3Uq6+y24cf0CgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWd3RnIxcWczdlJESGhwQW00ZjI3NWZnVW9VYW5ZUVppeFpvd2o3TmZL
aGgvMC84RDRBRUMxOThCQjRFQjQ2RUM3MDFERDRBQkFGQjJEQjg3MUZEMDI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhENEFFQzE5OEJCNEVCNDZF
QzcwMURENEFCQUZCMkRCODcxRkQwMjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWd3RnIxcWczdlJESGhwQW00ZjI3NWZnVW9VYW5ZUVppeFpvd2o3TmZLaGgvMC84
RDRBRUMxOThCQjRFQjQ2RUM3MDFERDRBQkFGQjJEQjg3MUZEMDI4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEZq78vvxdhXKYPWUOYX6VUf+LfGjPKFYffaSqxLV1Bz5PJWtCtt3Nr2lWlMl
ZM0hBWpSbmm5+5q3XdHmEJnJS+kBP0fHORA4LAG9CFIA+2TGhG5HGu+c73JlJhxD
qVV1NtoRsTMMfE3x/erA95RCA//gqIrPd4S3hBVs7HMlRpUqPiO3x3AORIgsqEce
VIUKtkTDXI84jIj2xZgzIidEBXLy/GulYktvWAXsIAiMzi0XcUTG8Ti/9VhK4Bav
TDo3NGcXzllMySuvPdwXF4y3vNiDuecEWpcQ+ajiVnSQFvWGvj0/buNjkdZ7bK6R
Cra3bwNlpklPyldPRD848EOD6A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 17:26:16 2025 by rpki-client