Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/45E77B80E717DC2AF79EA5C03072487CF2DFF790.mft
File:                     45E77B80E717DC2AF79EA5C03072487CF2DFF790.mft (raw, json)
Hash identifier:          J79JczFlcSZbEHMlWF0ztFDRX2ruyG0imN7YmAKGBpc=
Subject key identifier:   E4:1C:97:6D:E6:37:3B:B0:1B:3C:61:D4:39:9E:9C:12:2F:C8:28:6F
Authority key identifier: 45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90
Certificate issuer:       /CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
Certificate serial:       47150AAD51620E5DB918343671627E5A0E87BC6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/45E77B80E717DC2AF79EA5C03072487CF2DFF790.mft
Manifest number:          45
Signing time:             Wed 20 Nov 2024 17:11:09 +0000
Manifest this update:     Wed 20 Nov 2024 17:06:09 +0000
Manifest next update:     Thu 21 Nov 2024 18:22:09 +0000
Files and hashes:         1: 323830343a6633383a3a2f33322d3438203d3e20323633353731.roa (hash: C7KL0Hj+4m4a4j1kC7HP0C3Vccx/WkXmLOwfH9/F+Oc=)
                          2: 3137372e35352e38382e302f32332d3234203d3e20323633353731.roa (hash: SMNDpxZqHr92ZWXfzcsEgfJ7YUbhuN9txn8kbXOHHCM=)
                          3: 3137372e35352e39342e302f32332d3234203d3e20323633353731.roa (hash: Ne+pzvhdCXCjpIA+Pcj7upIh1qQL44o9vf31JrW2I8s=)
                          4: 45E77B80E717DC2AF79EA5C03072487CF2DFF790.crl (hash: 9QSgIaLXRYbWWkC6JBMZ5Hh0m9P4q8RF+d+THb/6PoQ=)
                          5: 3137372e35352e39302e302f32342d3234203d3e20323633353731.roa (hash: hjQ4HuGw3LDb0W1R3B6BEuDJPcOAt/ahUAJ+/QI16Q0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:15:0a:ad:51:62:0e:5d:b9:18:34:36:71:62:7e:5a:0e:87:bc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
        Validity
            Not Before: Nov 20 17:06:09 2024 GMT
            Not After : Nov 21 18:22:09 2024 GMT
        Subject: CN=E41C976DE6373BB01B3C61D4399E9C122FC8286F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:b3:27:de:84:90:85:18:5d:81:b9:79:f3:
                    ff:32:57:b8:d6:4e:7a:52:18:06:c3:76:04:5c:2a:
                    fd:ba:12:ed:30:35:42:6d:33:75:55:ef:c2:81:39:
                    b3:d9:88:a6:59:9b:56:d2:f3:fa:c5:60:9b:3c:c9:
                    71:40:55:15:a9:f8:11:b7:5d:0d:1e:e3:45:c0:77:
                    89:34:c4:55:81:40:93:4c:e3:c3:05:77:82:1e:6a:
                    03:a2:2c:52:75:4e:c5:ff:9b:04:8a:f5:0e:52:92:
                    4d:6b:a4:54:8d:53:30:2c:e7:70:eb:f3:24:91:3d:
                    89:14:4b:28:57:c8:8b:fe:6b:b4:53:cc:86:40:b3:
                    34:38:2d:14:15:3a:8f:1d:02:24:7e:ef:e4:10:dc:
                    4e:7c:18:46:de:28:79:3e:3f:74:12:48:77:ae:9d:
                    31:81:9f:fc:02:18:6e:a1:92:08:78:70:f9:0a:59:
                    01:f8:d4:c2:fd:54:f0:a5:22:23:f7:da:94:75:f6:
                    1e:eb:49:e8:38:e5:6a:0a:1b:5b:26:6f:8f:5f:19:
                    98:59:89:75:5c:7c:7f:5b:3f:42:b1:c4:40:0f:b6:
                    48:b5:96:41:1d:7b:3b:dc:17:a6:73:cb:89:bc:38:
                    55:44:2b:94:a0:ad:bd:e8:cb:24:3b:e5:36:30:e3:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1C:97:6D:E6:37:3B:B0:1B:3C:61:D4:39:9E:9C:12:2F:C8:28:6F
            X509v3 Authority Key Identifier:
                keyid:45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/45E77B80E717DC2AF79EA5C03072487CF2DFF790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/45E77B80E717DC2AF79EA5C03072487CF2DFF790.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:5d:ac:db:12:7f:7a:99:70:02:d3:fc:a5:60:35:41:49:
         a7:a8:33:8b:b2:cd:2c:6d:4d:cd:a6:05:e6:f1:de:55:bd:f6:
         ec:d8:35:ca:e3:83:c6:46:4a:f4:4f:5a:41:67:6f:e6:d3:a4:
         7a:04:d8:4a:c0:25:a7:fc:e2:91:f3:fa:72:e7:0e:a3:cf:4d:
         ea:94:dd:b4:1c:df:9b:ad:f2:ee:bf:b3:83:73:a5:61:45:49:
         6f:b9:4e:c7:96:ef:4b:8d:39:32:bf:d6:71:a6:c4:da:3c:47:
         8c:93:ca:bc:d7:2d:4a:2d:6a:4c:4c:66:00:af:3c:78:38:26:
         01:ca:48:29:ba:37:c2:b3:48:73:3f:ca:15:ff:15:4f:b8:e2:
         04:b1:90:6b:db:e3:85:66:6c:df:f8:a8:3c:d7:b8:01:08:ee:
         99:e5:f8:c9:74:43:04:fa:22:70:6c:87:0b:9f:07:50:28:32:
         bd:80:75:9c:08:e1:a8:ce:8b:25:db:98:80:12:fb:b3:6b:ad:
         5d:36:58:46:8c:ac:83:58:b7:81:66:e3:62:70:1e:6a:d0:b5:
         8d:be:d0:8f:dd:fc:40:df:b3:30:7c:6d:8a:13:54:55:2d:d9:
         6b:0b:1c:83:be:9f:39:a3:b5:9e:cd:82:01:e2:a1:67:52:63:
         68:91:fe:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURxUKrVFiDl25GDQ2cWJ+Wg6HvG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFNzdCODBFNzE3REMyQUY3OUVBNUMwMzA3MjQ4N0NG
MkRGRjc5MDAeFw0yNDExMjAxNzA2MDlaFw0yNDExMjExODIyMDlaMDMxMTAvBgNV
BAMTKEU0MUM5NzZERTYzNzNCQjAxQjNDNjFENDM5OUU5QzEyMkZDODI4NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGh7Mn3oSQhRhdgbl58/8yV7jW
TnpSGAbDdgRcKv26Eu0wNUJtM3VV78KBObPZiKZZm1bS8/rFYJs8yXFAVRWp+BG3
XQ0e40XAd4k0xFWBQJNM48MFd4IeagOiLFJ1TsX/mwSK9Q5Skk1rpFSNUzAs53Dr
8ySRPYkUSyhXyIv+a7RTzIZAszQ4LRQVOo8dAiR+7+QQ3E58GEbeKHk+P3QSSHeu
nTGBn/wCGG6hkgh4cPkKWQH41ML9VPClIiP32pR19h7rSeg45WoKG1smb49fGZhZ
iXVcfH9bP0KxxEAPtki1lkEdezvcF6Zzy4m8OFVEK5Sgrb3oyyQ75TYw48uxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5ByXbeY3O7AbPGHUOZ6cEi/IKG8wHwYDVR0j
BBgwFoAURed7gOcX3Cr3nqXAMHJIfPLf95AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5
SEEvMC80NUU3N0I4MEU3MTdEQzJBRjc5RUE1QzAzMDcyNDg3Q0YyREZGNzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RTc3QjgwRTcxN0RDMkFG
NzlFQTVDMDMwNzI0ODdDRjJERkY3OTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5SEEvMC80
NUU3N0I4MEU3MTdEQzJBRjc5RUE1QzAzMDcyNDg3Q0YyREZGNzkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZaFdrNsSf3qZcALT/KVgNUFJp6gzi7LNLG1NzaYF5vHeVb327Ng1yuODxkZK
9E9aQWdv5tOkegTYSsAlp/zikfP6cucOo89N6pTdtBzfm63y7r+zg3OlYUVJb7lO
x5bvS405Mr/WcabE2jxHjJPKvNctSi1qTExmAK88eDgmAcpIKbo3wrNIcz/KFf8V
T7jiBLGQa9vjhWZs3/ioPNe4AQjumeX4yXRDBPoicGyHC58HUCgyvYB1nAjhqM6L
JduYgBL7s2utXTZYRoysg1i3gWbjYnAeatC1jb7Qj938QN+zMHxtihNUVS3Zawsc
g76fOaO1ns2CAeKhZ1JjaJH+mw==
-----END CERTIFICATE-----