Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft
File:                     0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft (raw, json)
Hash identifier:          ibpdAGVHQqsz1wmc9iAchZ/fxTD0Do0zzf8zqdznPA0=
Subject key identifier:   1F:00:0A:69:94:4D:52:ED:17:AC:F4:90:71:56:96:A4:D4:01:B6:3D
Authority key identifier: 0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9
Certificate issuer:       /CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
Certificate serial:       1836778260B3EF7463E0EF16F461C24AE1FE9FD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft
Manifest number:          01E5
Signing time:             Sat 29 Mar 2025 09:42:46 +0000
Manifest this update:     Sat 29 Mar 2025 09:37:46 +0000
Manifest next update:     Sun 30 Mar 2025 12:06:46 +0000
Files and hashes:         1: 34352e3233362e35362e302f32322d3332203d3e20323638323332.roa (hash: V5XXSX/KwSyBmNO6mCWDMAGaDqyEPab+pUPBbm+V4Jw=)
                          2: 323830343a346466633a3a2f33322d313238203d3e20323638323332.roa (hash: yxV8A9hnk4WCQ63vSOxa+Dvic8VMCDdI+VQ1ynn4oTE=)
                          3: 0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl (hash: Rq0cnPhHXxi8NAz4y48t0r2725UsYl/GQB8hoNCwS+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:36:77:82:60:b3:ef:74:63:e0:ef:16:f4:61:c2:4a:e1:fe:9f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
        Validity
            Not Before: Mar 29 09:37:46 2025 GMT
            Not After : Mar 30 12:06:46 2025 GMT
        Subject: CN=1F000A69944D52ED17ACF490715696A4D401B63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:58:07:a8:09:cb:43:25:27:e8:d6:5e:76:
                    81:83:cb:29:00:3a:f4:e3:6b:fa:12:1f:18:2d:d9:
                    f8:f5:4e:f2:2f:99:4d:2d:f4:38:51:7d:b1:46:24:
                    ab:72:85:39:f0:19:6a:01:70:da:8e:34:95:0a:3d:
                    80:de:92:4c:ea:ba:bb:bb:c5:3d:1f:52:aa:f9:69:
                    c2:3d:98:fc:fb:b8:76:ff:23:e2:d0:c4:85:48:81:
                    77:4d:cf:50:d4:8f:1c:71:b6:2a:78:80:eb:c5:21:
                    30:30:70:00:d1:9c:6f:fd:dc:c1:d3:2b:94:f4:f0:
                    b5:3d:5a:55:a8:ec:a2:a2:15:38:3e:91:3f:08:39:
                    1b:17:8f:e4:99:19:fc:6c:51:e9:bf:07:90:6a:6b:
                    11:81:f3:24:71:84:d1:ba:a1:fa:b8:9b:9c:7f:49:
                    ac:81:6f:9d:18:8c:57:b8:f5:a5:6c:db:45:9e:3c:
                    63:7c:b9:c8:21:9d:c1:14:2f:b7:3c:f8:ef:72:16:
                    ac:88:0f:46:86:1e:9b:ea:23:b1:12:5c:96:46:aa:
                    21:52:3e:95:ed:cd:b9:ac:6a:bb:50:4b:d3:fb:d3:
                    15:e6:55:63:9a:73:73:d9:5e:b4:ae:bb:87:40:81:
                    64:8d:f8:52:3f:ad:38:80:4f:07:e4:69:64:7e:de:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:0A:69:94:4D:52:ED:17:AC:F4:90:71:56:96:A4:D4:01:B6:3D
            X509v3 Authority Key Identifier:
                keyid:0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:13:b2:33:1c:76:66:13:13:4a:c5:4d:d3:43:32:40:7a:
         a4:52:8b:41:1f:40:0e:0c:8d:06:dc:db:eb:bb:cb:18:f8:c2:
         1f:df:88:b5:7a:26:15:5f:0a:c2:d3:70:f5:4e:2d:bf:d6:2e:
         c2:d2:a6:91:40:76:5d:fd:62:fe:37:62:3a:a1:cf:89:ea:93:
         0d:48:d9:40:1e:d3:bb:3e:93:14:28:fb:a6:d7:27:04:e1:f7:
         d4:f8:9e:39:b2:09:5e:28:ba:0c:44:4d:d5:93:45:cd:62:99:
         5a:a0:8f:e2:25:50:29:09:53:2f:0f:fa:a6:21:e4:58:a8:3c:
         35:34:eb:df:6d:db:23:57:72:84:bb:42:9f:6b:e6:21:4f:1e:
         32:75:87:81:cb:ac:a0:cf:4d:39:6c:4b:74:72:69:cd:dd:95:
         b2:e5:bd:f6:f4:3c:01:1c:c9:b3:b5:42:97:2b:f3:0b:2b:01:
         02:46:a5:16:da:f1:1b:ef:7c:45:d3:42:06:61:7f:8a:5d:f2:
         da:ff:f4:3c:a6:70:2a:f6:ac:28:e5:51:7c:3e:00:3c:f4:9f:
         41:a9:bc:46:54:9f:66:93:5a:bd:80:33:e4:05:29:79:d6:cb:
         1e:1d:fc:2b:16:24:1f:c7:d4:79:8a:ba:a3:36:ed:cd:55:d3:
         20:84:84:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGDZ3gmCz73Rj4O8W9GHCSuH+n9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJDNUVENTlCOEFBREYxNDgxMEQ1MUNEMUMyRDZCQUMw
QThEQUNBOTAeFw0yNTAzMjkwOTM3NDZaFw0yNTAzMzAxMjA2NDZaMDMxMTAvBgNV
BAMTKDFGMDAwQTY5OTQ0RDUyRUQxN0FDRjQ5MDcxNTY5NkE0RDQwMUI2M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtj1gHqAnLQyUn6NZedoGDyykA
OvTja/oSHxgt2fj1TvIvmU0t9DhRfbFGJKtyhTnwGWoBcNqONJUKPYDekkzquru7
xT0fUqr5acI9mPz7uHb/I+LQxIVIgXdNz1DUjxxxtip4gOvFITAwcADRnG/93MHT
K5T08LU9WlWo7KKiFTg+kT8IORsXj+SZGfxsUem/B5BqaxGB8yRxhNG6ofq4m5x/
SayBb50YjFe49aVs20WePGN8ucghncEUL7c8+O9yFqyID0aGHpvqI7ESXJZGqiFS
PpXtzbmsartQS9P70xXmVWOac3PZXrSuu4dAgWSN+FI/rTiATwfkaWR+3qF/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHwAKaZRNUu0XrPSQcVaWpNQBtj0wHwYDVR0j
BBgwFoAUC8XtWbiq3xSBDVHNHC1rrAqNrKkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnAxdmFQMVNpV0hFQWFwV2hkSmYxZGZkbVR0WTltZGJWalVTdjhDdm5z
emIvMS8wQkM1RUQ1OUI4QUFERjE0ODEwRDUxQ0QxQzJENkJBQzBBOERBQ0E5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQzVFRDU5QjhBQURGMTQ4
MTBENTFDRDFDMkQ2QkFDMEE4REFDQTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnAxdmFQMVNpV0hFQWFwV2hkSmYxZGZkbVR0WTltZGJWalVTdjhDdm5zemIvMS8w
QkM1RUQ1OUI4QUFERjE0ODEwRDUxQ0QxQzJENkJBQzBBOERBQ0E5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABKcTsjMcdmYTE0rFTdNDMkB6pFKLQR9ADgyNBtzb67vLGPjCH9+ItXomFV8K
wtNw9U4tv9YuwtKmkUB2Xf1i/jdiOqHPieqTDUjZQB7Tuz6TFCj7ptcnBOH31Pie
ObIJXii6DERN1ZNFzWKZWqCP4iVQKQlTLw/6piHkWKg8NTTr323bI1dyhLtCn2vm
IU8eMnWHgcusoM9NOWxLdHJpzd2VsuW99vQ8ARzJs7VClyvzCysBAkalFtrxG+98
RdNCBmF/il3y2v/0PKZwKvasKOVRfD4APPSfQam8RlSfZpNavYAz5AUpedbLHh38
KxYkH8fUeYq6ozbtzVXTIISEOw==
-----END CERTIFICATE-----