Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.mft
File:                     4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.mft (raw, json)
Hash identifier:          jL83vfhslrD/06YhMPzK8rSazbR0YZyEpkoFrHkyH1I=
Subject key identifier:   49:A0:B1:D3:DB:58:38:26:AD:A6:07:B2:2E:D8:05:B6:D7:FB:B8:72
Authority key identifier: 4B:E2:C3:E4:D0:A7:5D:7C:40:37:97:C7:60:DD:F7:2F:52:44:2B:3E
Certificate issuer:       /CN=4BE2C3E4D0A75D7C403797C760DDF72F52442B3E
Certificate serial:       7AF2DAE34EE133D3A95BB499B8DE501E8BBC50C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.mft
Manifest number:          20
Signing time:             Fri 26 Apr 2024 12:19:46 +0000
Manifest this update:     Fri 26 Apr 2024 12:14:46 +0000
Manifest next update:     Sat 27 Apr 2024 15:20:46 +0000
Files and hashes:         1: 34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa (hash: eQ0ovjpWk4E8gUS1QcmXh3sk4RjKbJ9rTT20o0P3Wpc=)
                          2: 323830343a353538383a3a2f33322d3332203d3e20323637393430.roa (hash: rXqZT7QCM9Y3M8VN3pk5AfJZj/XZ3PfJfdIz5zm2tME=)
                          3: 34352e3136352e3231372e302f32342d3234203d3e20323637393430.roa (hash: VCRfGYQJDlnUYgyH7MITVJcjboQvTUpmgfHV/Cb0EBk=)
                          4: 34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa (hash: md5VK2WUet73hFnLM5cNKh95apmKcxR2bcCGNqLYSPo=)
                          5: 4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.crl (hash: ENPBq32NDMnObBIt2461VUqYntyyL/5l9f8Y9Q/q8ow=)
                          6: 34352e3136352e3231362e302f32342d3234203d3e20323637393430.roa (hash: Dazx6zzR3bzbQ02ZsdBfb9+D0uBDGwslhKT0ixQ3AHw=)
                          7: 34352e3136352e3231362e302f32332d3233203d3e20323637393430.roa (hash: g4Fn+XSBZj/wYIzV2LKcxxNsu3qKx23i7lrIN70yLWI=)
                          8: 34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa (hash: O2OyZdcWJrmvCgRchQw68XFzmd4JfQATogJm4IWw9Fk=)
                          9: 34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa (hash: eihJYC1Jdq9wV8xTvqbxSAG9obVIUlBw7UPPd9jqK+U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f2:da:e3:4e:e1:33:d3:a9:5b:b4:99:b8:de:50:1e:8b:bc:50:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE2C3E4D0A75D7C403797C760DDF72F52442B3E
        Validity
            Not Before: Apr 26 12:14:46 2024 GMT
            Not After : Apr 27 15:20:46 2024 GMT
        Subject: CN=49A0B1D3DB583826ADA607B22ED805B6D7FBB872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:62:73:f7:84:e8:73:b8:f3:83:d5:50:4d:
                    a7:ca:8d:6d:34:b0:20:88:60:2c:4e:55:ee:ef:15:
                    dc:e5:1f:ab:d7:02:98:d4:dd:84:aa:1d:23:75:21:
                    50:18:ce:f4:e5:56:3e:02:3e:e5:ae:80:db:5c:74:
                    70:53:2c:86:20:1b:f7:ca:d3:08:81:f6:d1:8a:fb:
                    39:2e:0f:f1:0a:6e:33:35:32:20:8b:45:bd:c9:a4:
                    96:32:a5:ec:52:ad:45:6d:2c:79:3f:81:98:0f:27:
                    f6:74:a2:b2:ff:7e:41:e2:05:b4:6e:0f:0d:6b:cd:
                    af:48:03:bc:ff:09:84:12:21:52:62:99:01:10:c8:
                    f4:d7:77:19:8b:7f:64:c7:54:ff:36:85:14:22:f1:
                    f5:35:40:bc:87:8e:5b:84:0c:22:4c:82:70:a7:8f:
                    7c:d7:00:af:a3:40:fd:4c:e3:16:df:ef:bb:6f:bd:
                    1b:21:04:17:e5:dd:5d:d0:2a:95:c5:b2:6e:95:0b:
                    20:b6:c2:77:7f:a8:3d:5c:4e:be:7b:3b:94:23:8d:
                    1b:ed:36:d0:b3:63:fc:89:75:07:22:ff:63:d5:0c:
                    a3:76:6e:2b:1f:12:d0:dc:41:80:49:7a:d7:54:82:
                    0a:1a:f4:14:ff:7a:bf:1c:90:70:ca:79:c6:59:b4:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:B1:D3:DB:58:38:26:AD:A6:07:B2:2E:D8:05:B6:D7:FB:B8:72
            X509v3 Authority Key Identifier:
                keyid:4B:E2:C3:E4:D0:A7:5D:7C:40:37:97:C7:60:DD:F7:2F:52:44:2B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:b3:a1:91:92:fa:55:13:b9:73:a0:34:6a:d7:e2:ba:50:4e:
         66:ca:3f:bc:00:98:eb:a1:46:7e:05:a0:46:d7:f2:a0:9d:3c:
         80:3f:e1:2a:57:f0:46:3f:69:1f:ad:a9:25:80:3f:c1:b6:8c:
         8b:a7:41:42:df:68:43:9a:1e:1f:b0:ac:8e:d7:b2:e1:ff:ba:
         01:ee:df:44:4c:7d:cf:c5:97:a5:5d:a4:38:6b:db:e8:85:7b:
         ce:bc:9d:30:32:d6:58:4b:84:a6:37:4f:aa:63:d5:bc:f5:9a:
         e9:ae:98:c8:2f:f8:7c:82:44:73:52:09:ab:fb:cb:e9:11:ed:
         6f:33:4b:2b:04:05:05:ed:51:30:f1:98:40:55:3f:da:5b:33:
         c7:b4:7a:af:17:20:6b:e6:59:a0:4b:8f:69:7f:33:5f:37:6f:
         a5:29:0c:12:1c:8e:11:d0:de:de:82:2f:9e:b7:f1:1e:b4:0c:
         45:ff:33:58:ce:a0:ba:57:38:da:f3:4f:ee:f5:58:f7:78:e2:
         9a:54:a0:63:e4:96:a7:f8:af:3b:dc:9c:90:77:b5:2b:b6:88:
         df:e7:d8:11:98:de:0e:6f:d5:7a:c2:85:23:43:1b:6e:5a:ab:
         58:af:b4:29:09:7c:14:54:05:f8:39:36:b3:8d:0d:64:ad:0e:
         5f:92:ad:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUevLa407hM9OpW7SZuN5QHou8UMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJFMkMzRTREMEE3NUQ3QzQwMzc5N0M3NjBEREY3MkY1
MjQ0MkIzRTAeFw0yNDA0MjYxMjE0NDZaFw0yNDA0MjcxNTIwNDZaMDMxMTAvBgNV
BAMTKDQ5QTBCMUQzREI1ODM4MjZBREE2MDdCMjJFRDgwNUI2RDdGQkI4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjWJz94Toc7jzg9VQTafKjW00
sCCIYCxOVe7vFdzlH6vXApjU3YSqHSN1IVAYzvTlVj4CPuWugNtcdHBTLIYgG/fK
0wiB9tGK+zkuD/EKbjM1MiCLRb3JpJYypexSrUVtLHk/gZgPJ/Z0orL/fkHiBbRu
Dw1rza9IA7z/CYQSIVJimQEQyPTXdxmLf2THVP82hRQi8fU1QLyHjluEDCJMgnCn
j3zXAK+jQP1M4xbf77tvvRshBBfl3V3QKpXFsm6VCyC2wnd/qD1cTr57O5QjjRvt
NtCzY/yJdQci/2PVDKN2bisfEtDcQYBJetdUggoa9BT/er8ckHDKecZZtC2bAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSaCx09tYOCatpgeyLtgFttf7uHIwHwYDVR0j
BBgwFoAUS+LD5NCnXXxAN5fHYN33L1JEKz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldjNk5IeWtnd0d6NmtyQU5LSkxoNGNOUmY1MWExc2NGUkFkTXVHanQ3
a3cvMS80QkUyQzNFNEQwQTc1RDdDNDAzNzk3Qzc2MERERjcyRjUyNDQyQjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRTJDM0U0RDBBNzVEN0M0
MDM3OTdDNzYwRERGNzJGNTI0NDJCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NldjNk5IeWtnd0d6NmtyQU5LSkxoNGNOUmY1MWExc2NGUkFkTXVHanQ3a3cvMS80
QkUyQzNFNEQwQTc1RDdDNDAzNzk3Qzc2MERERjcyRjUyNDQyQjNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzrOhkZL6VRO5c6A0atfiulBOZso/vACY66FGfgWgRtfyoJ08gD/hKlfwRj9p
H62pJYA/wbaMi6dBQt9oQ5oeH7Csjtey4f+6Ae7fREx9z8WXpV2kOGvb6IV7zryd
MDLWWEuEpjdPqmPVvPWa6a6YyC/4fIJEc1IJq/vL6RHtbzNLKwQFBe1RMPGYQFU/
2lszx7R6rxcga+ZZoEuPaX8zXzdvpSkMEhyOEdDe3oIvnrfxHrQMRf8zWM6gulc4
2vNP7vVY93jimlSgY+SWp/ivO9yckHe1K7aI3+fYEZjeDm/VesKFI0MbblqrWK+0
KQl8FFQF+Dk2s40NZK0OX5Ktfg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:05:01 2025 by rpki-client