Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/B899D2E821098690DCD506E5A2EA4DA9C4948DF1.mft
File:                     B899D2E821098690DCD506E5A2EA4DA9C4948DF1.mft (raw, json)
Hash identifier:          I/v3H67PAGIgCVxr8JtU76h0Fqg1F9MOAqAEB9bB6tk=
Subject key identifier:   53:49:42:F0:4E:6F:ED:6A:1D:82:46:92:AF:69:4F:0C:C6:D5:3A:E2
Authority key identifier: B8:99:D2:E8:21:09:86:90:DC:D5:06:E5:A2:EA:4D:A9:C4:94:8D:F1
Certificate issuer:       /CN=B899D2E821098690DCD506E5A2EA4DA9C4948DF1
Certificate serial:       55C6C1936A1710698E239EEBFCE2062866F83089
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B899D2E821098690DCD506E5A2EA4DA9C4948DF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/B899D2E821098690DCD506E5A2EA4DA9C4948DF1.mft
Manifest number:          010B
Signing time:             Sat 29 Mar 2025 09:35:18 +0000
Manifest this update:     Sat 29 Mar 2025 09:30:18 +0000
Manifest next update:     Sun 30 Mar 2025 12:54:18 +0000
Files and hashes:         1: 323830343a313138343a3a2f33322d3438203d3e203631383935.roa (hash: Q02fs67C1yKl0J9YhVTgo6WKnoCBCfcpm4Xbx9YnspA=)
                          2: 3137372e39312e31362e302f32302d3234203d3e203631383935.roa (hash: UzMdeoYFTbfahvX7jHLRACWOnUcQLr7sbLlDlQkrSNY=)
                          3: B899D2E821098690DCD506E5A2EA4DA9C4948DF1.crl (hash: J9DSawv5op8xTXlluJXlE2ypLTcAteObW8FTHBY+DQ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c6:c1:93:6a:17:10:69:8e:23:9e:eb:fc:e2:06:28:66:f8:30:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B899D2E821098690DCD506E5A2EA4DA9C4948DF1
        Validity
            Not Before: Mar 29 09:30:18 2025 GMT
            Not After : Mar 30 12:54:18 2025 GMT
        Subject: CN=534942F04E6FED6A1D824692AF694F0CC6D53AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:24:37:0b:e2:36:74:3d:f0:dc:aa:b3:76:
                    ed:02:81:a4:bc:72:ac:8e:df:30:f3:32:24:54:6e:
                    68:55:3e:9f:f6:18:b6:40:6f:cf:11:e8:48:b8:98:
                    71:7f:9a:1c:d6:dd:07:78:40:ee:45:3e:67:cc:8b:
                    cc:8a:1e:77:6f:6e:74:b7:0f:3d:a2:f1:e6:53:fd:
                    fa:e4:49:ba:17:02:b1:f8:dd:d3:b9:8d:44:4f:32:
                    bc:05:ea:4f:30:67:24:dd:98:50:2a:1f:dd:33:bf:
                    9e:4b:ce:d5:28:72:f3:d3:84:8e:ed:9e:c6:4f:aa:
                    ad:cb:b4:43:fd:0d:8c:e5:af:c0:9b:ff:2f:53:9b:
                    2e:aa:60:f1:e1:97:79:32:83:a2:4b:85:f5:cf:1a:
                    0f:d8:ef:d0:77:35:08:48:c2:02:4c:40:8d:d9:29:
                    56:92:39:d1:49:70:0f:69:79:6b:7d:bf:46:d1:82:
                    32:65:b0:31:dc:72:2e:40:b6:6c:0c:f5:df:19:69:
                    48:ae:83:67:a6:a7:03:89:ff:0a:a8:c3:35:af:1a:
                    14:17:e2:47:b5:a4:d1:36:aa:6c:5a:dd:b3:e1:89:
                    d0:84:82:37:4a:aa:e4:b3:22:40:e6:fb:09:ad:1d:
                    fd:f8:4d:28:50:d4:61:51:1c:76:4d:3a:58:86:8e:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:49:42:F0:4E:6F:ED:6A:1D:82:46:92:AF:69:4F:0C:C6:D5:3A:E2
            X509v3 Authority Key Identifier:
                keyid:B8:99:D2:E8:21:09:86:90:DC:D5:06:E5:A2:EA:4D:A9:C4:94:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/B899D2E821098690DCD506E5A2EA4DA9C4948DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B899D2E821098690DCD506E5A2EA4DA9C4948DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/B899D2E821098690DCD506E5A2EA4DA9C4948DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c7:d1:3a:40:ce:55:fe:dd:47:96:3b:f5:0c:14:da:ca:65:
         08:8d:de:34:f1:81:90:20:2d:e4:f2:e5:04:bd:fb:ee:a5:22:
         5a:62:0f:47:3f:8a:df:0b:5e:b5:50:b9:7f:f5:ce:68:15:62:
         2b:81:d3:2a:32:60:f5:ab:ac:14:bc:2b:b5:c2:17:44:c3:0e:
         e1:25:d8:0c:4a:88:c8:9d:10:54:fc:ef:29:76:c2:86:da:58:
         47:64:98:e1:ce:29:34:68:24:02:4c:ab:5e:81:9f:ff:ad:e9:
         f0:25:14:88:18:1c:4c:38:f3:24:e2:f9:ef:3e:19:ba:c0:60:
         17:f2:63:b7:fa:d1:0a:cc:0d:e0:7f:94:85:fc:1a:68:ac:cc:
         11:8c:2e:54:57:b5:7a:8f:c7:dc:9d:c3:fa:f9:0f:e1:84:df:
         49:5a:e9:21:e1:e8:c8:74:33:b0:75:a4:55:01:66:15:b6:b9:
         bb:23:bd:cf:c3:bc:61:e6:c5:12:33:64:61:bf:11:a2:9f:71:
         74:54:0d:10:4b:72:60:08:87:37:f0:f7:b7:9d:23:e8:3a:8c:
         cd:a9:c3:bf:7e:ca:8e:d3:42:c4:4a:cc:6e:a2:dc:56:55:44:
         6a:4b:04:d9:fd:1a:aa:17:2b:3d:c5:88:5b:fc:f8:83:b3:59:
         9c:13:8b:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVcbBk2oXEGmOI57r/OIGKGb4MIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5OUQyRTgyMTA5ODY5MERDRDUwNkU1QTJFQTREQTlD
NDk0OERGMTAeFw0yNTAzMjkwOTMwMThaFw0yNTAzMzAxMjU0MThaMDMxMTAvBgNV
BAMTKDUzNDk0MkYwNEU2RkVENkExRDgyNDY5MkFGNjk0RjBDQzZENTNBRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguSQ3C+I2dD3w3Kqzdu0CgaS8
cqyO3zDzMiRUbmhVPp/2GLZAb88R6Ei4mHF/mhzW3Qd4QO5FPmfMi8yKHndvbnS3
Dz2i8eZT/frkSboXArH43dO5jURPMrwF6k8wZyTdmFAqH90zv55LztUocvPThI7t
nsZPqq3LtEP9DYzlr8Cb/y9Tmy6qYPHhl3kyg6JLhfXPGg/Y79B3NQhIwgJMQI3Z
KVaSOdFJcA9peWt9v0bRgjJlsDHcci5AtmwM9d8ZaUiug2empwOJ/wqowzWvGhQX
4ke1pNE2qmxa3bPhidCEgjdKquSzIkDm+wmtHf34TShQ1GFRHHZNOliGjmYLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU0lC8E5v7WodgkaSr2lPDMbVOuIwHwYDVR0j
BBgwFoAUuJnS6CEJhpDc1QbloupNqcSUjfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhzVldKazZnejV0bTNVRW1DQ0JSS2U2N1hpMndXZUszaVp5eWpKckN5
eVYvMC9CODk5RDJFODIxMDk4NjkwRENENTA2RTVBMkVBNERBOUM0OTQ4REYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4OTlEMkU4MjEwOTg2OTBE
Q0Q1MDZFNUEyRUE0REE5QzQ5NDhERjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnhzVldKazZnejV0bTNVRW1DQ0JSS2U2N1hpMndXZUszaVp5eWpKckN5eVYvMC9C
ODk5RDJFODIxMDk4NjkwRENENTA2RTVBMkVBNERBOUM0OTQ4REYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf8fROkDOVf7dR5Y79QwU2splCI3eNPGBkCAt5PLlBL377qUiWmIPRz+K3wte
tVC5f/XOaBViK4HTKjJg9ausFLwrtcIXRMMO4SXYDEqIyJ0QVPzvKXbChtpYR2SY
4c4pNGgkAkyrXoGf/63p8CUUiBgcTDjzJOL57z4ZusBgF/Jjt/rRCswN4H+Uhfwa
aKzMEYwuVFe1eo/H3J3D+vkP4YTfSVrpIeHoyHQzsHWkVQFmFba5uyO9z8O8YebF
EjNkYb8Rop9xdFQNEEtyYAiHN/D3t50j6DqMzanDv37KjtNCxErMbqLcVlVEaksE
2f0aqhcrPcWIW/z4g7NZnBOLWg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:33:51 2025 by rpki-client