Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft
File:                     6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft (raw, json)
Hash identifier:          9yiD84OV3hXyKZNoVXRqRnHV6K920C4OlcXDK7XPjsc=
Subject key identifier:   FB:E6:04:DB:E2:87:A4:49:74:CB:1D:4C:3C:5A:39:11:5C:A8:46:86
Authority key identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2
Certificate issuer:       /CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
Certificate serial:       46DB573CEC2E98878A3A596AB8FF3560D3E2E6D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft
Manifest number:          01D9
Signing time:             Sat 29 Mar 2025 09:34:08 +0000
Manifest this update:     Sat 29 Mar 2025 09:29:08 +0000
Manifest next update:     Sun 30 Mar 2025 11:03:08 +0000
Files and hashes:         1: 6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl (hash: FE0Mc3ATIlZa57emFLkbjWzD1Y199ofB9AcsA9eIaxk=)
                          2: 323830343a353836343a3a2f33322d3333203d3e20323638313236.roa (hash: sJDjg3v90oDmxBogDwc4XYt8NQH4xKEXHTR91axSuGY=)
                          3: 34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa (hash: F7/ozPUiAu1ckfZa+qHreWcvCrOKiMYktnT8pnpwbMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:db:57:3c:ec:2e:98:87:8a:3a:59:6a:b8:ff:35:60:d3:e2:e6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
        Validity
            Not Before: Mar 29 09:29:08 2025 GMT
            Not After : Mar 30 11:03:08 2025 GMT
        Subject: CN=FBE604DBE287A44974CB1D4C3C5A39115CA84686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:04:63:de:d0:7d:25:33:64:15:2f:eb:23:
                    09:9f:26:d5:65:f8:59:7e:0c:42:47:8a:26:1b:68:
                    10:02:cb:c5:90:57:0e:cc:ca:46:67:0f:65:b8:b9:
                    9f:a7:77:06:01:b9:e4:c7:ca:b0:e2:1a:55:80:57:
                    cd:cc:f6:f8:76:9c:0a:ad:fb:97:53:a2:c5:71:ac:
                    83:49:c8:e5:ef:51:86:a6:3c:c6:1d:58:59:50:a4:
                    ec:bc:b9:34:9d:60:10:02:26:b9:9b:07:e1:77:20:
                    ca:12:27:04:ce:32:9b:49:02:ec:e2:d5:71:4f:51:
                    a1:2a:cd:5d:2e:0a:78:cb:06:81:c5:06:42:87:90:
                    d4:ce:01:e8:de:39:55:39:ff:2e:3b:e9:3d:ab:0b:
                    24:35:2a:c4:26:e0:aa:ba:e6:6b:92:7e:95:33:3d:
                    d6:ea:79:63:20:e6:3c:70:00:fc:b7:9b:4f:57:f0:
                    12:8e:23:dd:c7:e8:42:01:f7:43:10:33:b6:1e:39:
                    0c:65:00:06:26:eb:84:06:bf:38:0e:92:30:15:99:
                    48:6f:68:9a:40:47:6f:b1:b2:4c:82:2e:3a:1d:d8:
                    49:8c:84:ea:3f:7e:4e:df:0e:42:d9:05:7b:e9:e7:
                    06:a7:b2:3c:09:09:80:4b:81:43:40:c8:b1:8c:ab:
                    01:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E6:04:DB:E2:87:A4:49:74:CB:1D:4C:3C:5A:39:11:5C:A8:46:86
            X509v3 Authority Key Identifier:
                keyid:68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d2:97:b7:a3:d1:18:b8:78:f6:7e:2b:d4:a8:75:4d:2e:5e:
         40:3e:81:b5:59:b6:8d:8c:b2:fa:3b:0e:fd:f6:12:01:15:a9:
         ff:a5:94:ba:81:64:10:1e:3c:de:3a:9c:d7:4f:35:a3:f9:e8:
         d4:66:93:45:12:9c:6f:33:29:45:ef:04:22:9c:2d:ed:43:db:
         17:f1:cd:6d:78:f0:9b:c3:0d:e4:b8:c6:15:6e:a8:87:2e:ab:
         e3:5b:e5:de:68:dd:6f:91:40:cd:31:31:94:47:f3:a8:99:06:
         84:3d:6b:f7:dc:33:04:de:e7:7e:bf:e9:19:b8:ce:81:56:97:
         ff:78:77:e0:41:d0:3f:a7:17:ce:fb:08:b2:4d:db:67:7b:b0:
         11:85:f3:d2:7c:1e:48:64:c0:6d:07:e5:e8:5f:f1:53:bd:96:
         d1:54:fc:90:90:08:6a:27:d8:be:f4:c4:73:a3:0c:9f:40:ef:
         d4:1f:31:4e:fc:e4:f4:38:d1:f5:59:91:ef:00:68:a0:d4:6f:
         21:0f:e0:b3:c0:70:d0:a6:e8:48:01:52:b8:20:9e:42:d2:26:
         c9:21:ca:9d:7a:3e:d9:b5:0e:b5:69:72:35:76:49:2b:3e:6f:
         fe:78:c4:9a:33:a9:66:67:53:91:f8:aa:ef:31:82:ac:36:50:
         9d:3b:ee:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURttXPOwumIeKOllquP81YNPi5tIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg5N0U4NjdDRTYxNTAwMzlEMEZBRDRGNjEyMkY3QUUz
MTU2RDVBMjAeFw0yNTAzMjkwOTI5MDhaFw0yNTAzMzAxMTAzMDhaMDMxMTAvBgNV
BAMTKEZCRTYwNERCRTI4N0E0NDk3NENCMUQ0QzNDNUEzOTExNUNBODQ2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3gRj3tB9JTNkFS/rIwmfJtVl
+Fl+DEJHiiYbaBACy8WQVw7MykZnD2W4uZ+ndwYBueTHyrDiGlWAV83M9vh2nAqt
+5dTosVxrINJyOXvUYamPMYdWFlQpOy8uTSdYBACJrmbB+F3IMoSJwTOMptJAuzi
1XFPUaEqzV0uCnjLBoHFBkKHkNTOAejeOVU5/y476T2rCyQ1KsQm4Kq65muSfpUz
PdbqeWMg5jxwAPy3m09X8BKOI93H6EIB90MQM7YeOQxlAAYm64QGvzgOkjAVmUhv
aJpAR2+xskyCLjod2EmMhOo/fk7fDkLZBXvp5wansjwJCYBLgUNAyLGMqwHnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU++YE2+KHpEl0yx1MPFo5EVyoRoYwHwYDVR0j
BBgwFoAUaJfoZ85hUAOdD61PYSL3rjFW1aIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1Vh
akEvMi82ODk3RTg2N0NFNjE1MDAzOUQwRkFENEY2MTIyRjdBRTMxNTZENUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OTdFODY3Q0U2MTUwMDM5
RDBGQUQ0RjYxMjJGN0FFMzE1NkQ1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1VhakEvMi82
ODk3RTg2N0NFNjE1MDAzOUQwRkFENEY2MTIyRjdBRTMxNTZENUEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdNKXt6PRGLh49n4r1Kh1TS5eQD6BtVm2jYyy+jsO/fYSARWp/6WUuoFkEB48
3jqc1081o/no1GaTRRKcbzMpRe8EIpwt7UPbF/HNbXjwm8MN5LjGFW6ohy6r41vl
3mjdb5FAzTExlEfzqJkGhD1r99wzBN7nfr/pGbjOgVaX/3h34EHQP6cXzvsIsk3b
Z3uwEYXz0nweSGTAbQfl6F/xU72W0VT8kJAIaifYvvTEc6MMn0Dv1B8xTvzk9DjR
9VmR7wBooNRvIQ/gs8Bw0KboSAFSuCCeQtImySHKnXo+2bUOtWlyNXZJKz5v/njE
mjOpZmdTkfiq7zGCrDZQnTvumQ==
-----END CERTIFICATE-----