Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft
File:                     3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft (raw, json)
Hash identifier:          GonrAlsQql6gjOilhWSyhPaSJ5CMCqCGIcNh0fIVGrU=
Subject key identifier:   B7:3E:AC:96:6F:68:32:FF:73:14:04:F0:7B:AE:17:5F:CB:2B:AF:99
Authority key identifier: 3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28
Certificate issuer:       /CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
Certificate serial:       2C1E8F0CB3C9FAB150876C88F034993F9A5E7B3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft
Manifest number:          017D
Signing time:             Mon 13 Jan 2025 15:20:49 +0000
Manifest this update:     Mon 13 Jan 2025 15:15:49 +0000
Manifest next update:     Tue 14 Jan 2025 19:01:49 +0000
Files and hashes:         1: 3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl (hash: 488/3jJHkRGEt1SQf5+6VPHtnfox8rgX+0H3ZFJCiBk=)
                          2: 3134332e302e32342e302f32322d3234203d3e20323634303735.roa (hash: uaTbDMk2w9OvuCf/RDM4f7J8dRiaKe/cXYXcR80KrUE=)
                          3: 3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa (hash: HoHGf5xjpu1MfdI5TRo6GUOKT0jG1YBo+S6C8kqXFdY=)
                          4: 323830343a326137633a3a2f33322d3438203d3e20323634303735.roa (hash: miIiUQbbjvdYiFGSuZLi8HtSQ9JjA7JxGAbm/fO2WS0=)
                          5: 34352e3136362e3136342e302f32322d3234203d3e20323634303735.roa (hash: vitjXL0afT6/YcXJ3LCetoGAC8vqqphwMp+KDl/lIzY=)
                          6: 3136382e3232372e35322e302f32322d3234203d3e20323634303735.roa (hash: ya0Am1OCppe/fWAnJxg1/Qe812zzv+lUS0miANrGRaU=)
                          7: 3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa (hash: 3fjsSW3SPxIQYWK8rPR66xpLB3M4MIH22zS3moBeV4g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1e:8f:0c:b3:c9:fa:b1:50:87:6c:88:f0:34:99:3f:9a:5e:7b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
        Validity
            Not Before: Jan 13 15:15:49 2025 GMT
            Not After : Jan 14 19:01:49 2025 GMT
        Subject: CN=B73EAC966F6832FF731404F07BAE175FCB2BAF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:78:78:3d:68:eb:82:a6:4a:32:50:69:48:
                    a9:5b:52:26:32:9a:4e:0b:00:b2:05:9b:0c:9d:ed:
                    33:42:e9:70:d9:93:9e:05:24:21:0c:37:0b:14:89:
                    02:c9:e0:56:6f:40:57:92:16:26:e1:82:d5:a7:7a:
                    23:9e:c0:f4:62:bb:e8:e3:f2:58:f5:22:6f:d1:36:
                    cf:d6:4a:6f:4f:8f:06:9f:14:ca:8c:62:e4:8a:67:
                    29:16:39:0d:3b:3a:3c:24:26:f4:f3:7b:13:13:22:
                    3a:1e:d6:58:2b:19:5a:0d:83:bc:de:f4:47:24:fc:
                    8d:32:fb:b1:b0:db:c2:95:26:58:ae:67:44:ee:85:
                    cd:ac:f7:bb:0c:22:aa:f7:b9:af:56:36:53:f5:79:
                    53:2b:0e:20:a4:80:a2:d5:ec:c2:b6:50:a5:c4:ad:
                    11:44:03:97:fe:94:c8:5d:9e:94:86:ce:7b:88:e4:
                    a4:40:d6:c4:27:db:83:34:0e:d9:bb:eb:9d:14:5c:
                    48:ec:e5:e0:6a:3f:db:d6:e0:8f:a6:d5:71:94:57:
                    d3:b9:7b:54:13:be:8b:12:45:5f:21:8c:11:95:bb:
                    8b:0d:36:53:bb:80:35:13:22:fb:4e:71:b7:64:be:
                    30:6c:fc:0b:c1:6b:15:97:54:52:ac:25:dc:a8:88:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3E:AC:96:6F:68:32:FF:73:14:04:F0:7B:AE:17:5F:CB:2B:AF:99
            X509v3 Authority Key Identifier:
                keyid:3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:d3:22:5b:6b:f9:67:06:a5:5a:6d:50:63:16:10:fa:a6:18:
         11:7a:f4:d8:88:1a:3e:12:29:dd:bf:d1:0d:98:d1:75:69:7f:
         f7:e4:a5:ad:63:b4:85:9f:91:d4:54:04:cc:fc:87:59:60:b0:
         8b:34:48:de:a9:bf:59:5a:39:69:0f:ea:4c:83:b9:ce:6f:72:
         13:f1:6a:07:aa:eb:e5:ee:83:6c:2b:02:63:32:0b:13:d8:8b:
         66:9d:0d:94:15:e8:2e:5f:f6:a5:a0:13:dc:4c:fc:f4:7f:7f:
         7b:d2:34:b2:6f:f7:21:6a:06:f3:55:05:87:8e:0b:7d:9b:c9:
         88:a5:0d:d2:c0:79:fb:61:1c:6f:7b:37:6d:b3:89:f4:88:51:
         02:d0:51:41:e6:f7:48:66:78:1a:2e:53:5f:db:66:cc:54:04:
         e2:d8:50:9e:e9:51:21:ae:a7:f0:7f:b5:f1:d6:63:e8:67:a2:
         d5:80:5b:26:9f:51:e1:8f:2e:1e:a2:df:96:8c:da:9e:24:fc:
         5d:07:6b:5a:53:28:c8:76:8c:f5:09:65:ed:f6:44:32:4b:a2:
         ac:0b:4a:f4:84:fb:7f:0c:d8:d4:18:aa:21:0c:18:44:7b:d9:
         e1:dc:de:0b:f6:14:d5:ef:d0:25:ee:cd:08:a9:74:89:b5:de:
         8f:70:d8:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULB6PDLPJ+rFQh2yI8DSZP5peez8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I1RDE0RkY5Q0MyQjZFNjFCQTVGNzM5QUE1QjRBN0E4
RUNDN0EyODAeFw0yNTAxMTMxNTE1NDlaFw0yNTAxMTQxOTAxNDlaMDMxMTAvBgNV
BAMTKEI3M0VBQzk2NkY2ODMyRkY3MzE0MDRGMDdCQUUxNzVGQ0IyQkFGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7nh4PWjrgqZKMlBpSKlbUiYy
mk4LALIFmwyd7TNC6XDZk54FJCEMNwsUiQLJ4FZvQFeSFibhgtWneiOewPRiu+jj
8lj1Im/RNs/WSm9PjwafFMqMYuSKZykWOQ07OjwkJvTzexMTIjoe1lgrGVoNg7ze
9Eck/I0y+7Gw28KVJliuZ0Tuhc2s97sMIqr3ua9WNlP1eVMrDiCkgKLV7MK2UKXE
rRFEA5f+lMhdnpSGznuI5KRA1sQn24M0Dtm7650UXEjs5eBqP9vW4I+m1XGUV9O5
e1QTvosSRV8hjBGVu4sNNlO7gDUTIvtOcbdkvjBs/AvBaxWXVFKsJdyoiDS5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtz6slm9oMv9zFATwe64XX8srr5kwHwYDVR0j
BBgwFoAUO10U/5zCtuYbpfc5qltKeo7MeigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNr
anQvMS8zQjVEMTRGRjlDQzJCNkU2MUJBNUY3MzlBQTVCNEE3QThFQ0M3QTI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCNUQxNEZGOUNDMkI2RTYx
QkE1RjczOUFBNUI0QTdBOEVDQzdBMjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNranQvMS8z
QjVEMTRGRjlDQzJCNkU2MUJBNUY3MzlBQTVCNEE3QThFQ0M3QTI4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyNMiW2v5ZwalWm1QYxYQ+qYYEXr02IgaPhIp3b/RDZjRdWl/9+SlrWO0hZ+R
1FQEzPyHWWCwizRI3qm/WVo5aQ/qTIO5zm9yE/FqB6rr5e6DbCsCYzILE9iLZp0N
lBXoLl/2paAT3Ez89H9/e9I0sm/3IWoG81UFh44LfZvJiKUN0sB5+2Ecb3s3bbOJ
9IhRAtBRQeb3SGZ4Gi5TX9tmzFQE4thQnulRIa6n8H+18dZj6Gei1YBbJp9R4Y8u
HqLflozaniT8XQdrWlMoyHaM9Qll7fZEMkuirAtK9IT7fwzY1BiqIQwYRHvZ4dze
C/YU1e/QJe7NCKl0ibXej3DYWA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:12 2025 by rpki-client