Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.mft
File:                     2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.mft (raw, json)
Hash identifier:          NKdR2cuLnwQVXz78yl/AV2cvMhsoOfmCPHN7iVuFC+M=
Subject key identifier:   0C:36:BD:98:D0:16:3F:44:A1:E3:21:6B:C3:80:89:42:8C:0D:F1:3F
Authority key identifier: 2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
Certificate issuer:       /CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Certificate serial:       2B28102A9BAF2AEB06250BDF94E1AA7479291D65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.mft
Manifest number:          E8
Signing time:             Fri 17 Jan 2025 11:59:54 +0000
Manifest this update:     Fri 17 Jan 2025 11:54:54 +0000
Manifest next update:     Sat 18 Jan 2025 12:39:54 +0000
Files and hashes:         1: 3230312e3138322e3130342e302f32322d3234203d3e20323637353038.roa (hash: Iy5x8kXJ5ua6x8e0UXye60e17G19fR7wgA0omMuwMBs=)
                          2: 323830343a343239303a3a2f33322d3333203d3e20323637353038.roa (hash: YW8PHkBEhi3yKPr8yFTx9l1LTMPEJdoDpv2tGB9k5BU=)
                          3: 2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.crl (hash: E1NJyCXpDott/7Na+BAjck//43no5kU3UKbsOJ+pSY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:28:10:2a:9b:af:2a:eb:06:25:0b:df:94:e1:aa:74:79:29:1d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
        Validity
            Not Before: Jan 17 11:54:54 2025 GMT
            Not After : Jan 18 12:39:54 2025 GMT
        Subject: CN=0C36BD98D0163F44A1E3216BC38089428C0DF13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:94:58:c3:e8:a4:f1:6b:11:a8:c6:c0:81:60:
                    e0:c0:3f:2c:af:51:2d:df:1d:61:60:6f:87:1d:34:
                    6c:8f:5e:9b:ef:47:84:3a:04:b9:91:d9:45:04:10:
                    e6:e9:8c:16:c2:9e:ac:2e:df:d2:17:55:18:68:40:
                    79:12:7f:5c:34:3b:fe:f5:84:f6:ec:1e:1d:dc:84:
                    82:4a:c7:cb:73:1c:38:89:a2:4e:a9:6c:fa:e9:7e:
                    ed:e7:27:c2:b9:cc:8a:f3:c7:b4:33:7b:a5:76:c8:
                    df:fe:a8:1a:63:89:3e:53:c0:76:02:bd:e0:25:d5:
                    c5:42:78:39:d9:05:c4:bd:cd:1c:0b:9e:7b:90:e5:
                    18:b6:8e:3e:fc:d1:dd:bb:e8:43:66:94:49:94:8d:
                    60:fb:0c:d6:19:51:56:ba:18:d8:de:86:a7:66:ae:
                    28:7e:ec:f4:7b:ac:d7:36:0f:b2:bf:04:66:7d:25:
                    3d:aa:fe:5d:b0:47:8f:3c:0a:50:f9:21:11:18:de:
                    ef:60:ca:80:07:18:c6:c7:35:53:69:b2:9c:bf:df:
                    42:10:a8:e1:e1:88:ab:30:f2:1d:25:52:c0:02:c0:
                    15:b7:ea:71:8f:b6:09:c3:a8:08:2d:d7:7c:30:35:
                    7b:62:62:12:b8:f7:78:a9:c3:1e:48:01:b2:1e:32:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:36:BD:98:D0:16:3F:44:A1:E3:21:6B:C3:80:89:42:8C:0D:F1:3F
            X509v3 Authority Key Identifier:
                keyid:2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:58:d1:04:fd:fe:39:41:7c:de:d6:07:20:3f:b9:de:65:
         1b:e2:dd:13:33:fd:51:d6:4d:95:1b:ef:67:e6:26:25:52:e3:
         37:f3:a5:0c:ad:4d:44:25:b1:75:cd:0a:47:d0:fe:fd:d4:b3:
         9f:84:92:59:c0:02:71:d2:45:98:b3:86:e7:ef:90:35:9b:50:
         f2:fa:31:37:85:bb:45:73:04:10:5e:29:fb:ab:5b:2e:97:d5:
         ac:ad:b8:f7:fa:f1:d9:c0:25:34:dc:7e:86:e7:03:75:7b:91:
         fa:32:fc:95:35:6c:01:29:ec:c1:fc:cd:48:d0:90:e3:18:69:
         86:26:92:9a:07:e0:d7:69:1b:a6:8d:71:c4:41:fd:0a:40:98:
         36:7c:69:06:27:c6:79:f4:dd:97:ec:6a:56:4c:6f:db:dd:52:
         ff:1e:84:66:4d:5f:0c:9b:94:da:be:7a:35:17:b7:29:62:41:
         33:7b:5d:4c:fa:e9:a6:6a:51:a9:0d:e1:e9:39:e1:db:d4:be:
         fc:46:e8:41:79:8a:df:c7:b5:97:b8:00:ec:2a:9b:7c:c8:35:
         a0:27:6d:02:1c:56:48:52:24:04:bb:ee:08:90:4f:96:c4:1d:
         c4:2b:69:e2:0c:68:70:56:c6:04:a0:b7:35:79:0c:05:a3:35:
         2d:cb:e4:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKygQKpuvKusGJQvflOGqdHkpHWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkREMEJGQUFGMEU5OTY4NTdCN0Y0QjA4OTJDNkYzNzhB
NkFGOUNFMzAeFw0yNTAxMTcxMTU0NTRaFw0yNTAxMTgxMjM5NTRaMDMxMTAvBgNV
BAMTKDBDMzZCRDk4RDAxNjNGNDRBMUUzMjE2QkMzODA4OTQyOEMwREYxM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDulFjD6KTxaxGoxsCBYODAPyyv
US3fHWFgb4cdNGyPXpvvR4Q6BLmR2UUEEObpjBbCnqwu39IXVRhoQHkSf1w0O/71
hPbsHh3chIJKx8tzHDiJok6pbPrpfu3nJ8K5zIrzx7Qze6V2yN/+qBpjiT5TwHYC
veAl1cVCeDnZBcS9zRwLnnuQ5Ri2jj780d276ENmlEmUjWD7DNYZUVa6GNjehqdm
rih+7PR7rNc2D7K/BGZ9JT2q/l2wR488ClD5IREY3u9gyoAHGMbHNVNpspy/30IQ
qOHhiKsw8h0lUsACwBW36nGPtgnDqAgt13wwNXtiYhK493ipwx5IAbIeMjlnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDDa9mNAWP0Sh4yFrw4CJQowN8T8wHwYDVR0j
BBgwFoAULdC/qvDploV7f0sIksbzeKavnOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkNyVjhMNzluQ2dzdDJ6YXY2cmNiQmZ0QVJwMnRnZG8zb3NxZEFOODJE
N24vMC8yREQwQkZBQUYwRTk5Njg1N0I3RjRCMDg5MkM2RjM3OEE2QUY5Q0UzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDBCRkFBRjBFOTk2ODU3
QjdGNEIwODkyQzZGMzc4QTZBRjlDRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkNyVjhMNzluQ2dzdDJ6YXY2cmNiQmZ0QVJwMnRnZG8zb3NxZEFOODJEN24vMC8y
REQwQkZBQUYwRTk5Njg1N0I3RjRCMDg5MkM2RjM3OEE2QUY5Q0UzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXfdY0QT9/jlBfN7WByA/ud5lG+LdEzP9UdZNlRvvZ+YmJVLjN/OlDK1NRCWx
dc0KR9D+/dSzn4SSWcACcdJFmLOG5++QNZtQ8voxN4W7RXMEEF4p+6tbLpfVrK24
9/rx2cAlNNx+hucDdXuR+jL8lTVsASnswfzNSNCQ4xhphiaSmgfg12kbpo1xxEH9
CkCYNnxpBifGefTdl+xqVkxv291S/x6EZk1fDJuU2r56NRe3KWJBM3tdTPrppmpR
qQ3h6Tnh29S+/EboQXmK38e1l7gA7CqbfMg1oCdtAhxWSFIkBLvuCJBPlsQdxCtp
4gxocFbGBKC3NXkMBaM1LcvkFw==
-----END CERTIFICATE-----