Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft
File:                     0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft (raw, json)
Hash identifier:          ORpjTZnlAkMoER7GlUh0SMT/oTd9Ysx14tKBrfuXWPw=
Subject key identifier:   02:3B:F9:6F:DD:7D:A4:8E:65:13:EE:17:CC:20:4F:30:C7:08:50:CF
Authority key identifier: 02:96:E8:53:4D:3A:E2:75:B3:F0:59:BE:9E:E6:0D:DB:30:CC:34:A1
Certificate issuer:       /CN=0296E8534D3AE275B3F059BE9EE60DDB30CC34A1
Certificate serial:       1FBB2749C5B1D9948CA6B6A848664115789E0EB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft
Manifest number:          01FF
Signing time:             Wed 17 Jan 2024 20:45:22 +0000
Manifest this update:     Wed 17 Jan 2024 20:40:22 +0000
Manifest next update:     Thu 18 Jan 2024 22:44:22 +0000
Files and hashes:         1: 323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa (hash: RgDXxGrqfNHZIglUPLH1AaMs1iFSz55A6uJASstUbsY=)
                          2: 3137372e37322e3132382e302f32312d3234203d3e203533303138.roa (hash: J/+YlvRtMa3SgIpAH2aXrUPzF/zylQKDDhdhizcD+AI=)
                          3: 3137372e37322e3133362e302f32312d3236203d3e203533303138.roa (hash: Rn7mLAtx8Vh6w7MOEwqkqtOFQkjIFz/PikKQ1Rgv4cM=)
                          4: 0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.crl (hash: quO4e/zaZ0PGnU9vOSW9GeBW9+a9RZWt2a4ex5MeW4o=)
                          5: 323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa (hash: khcI/YUhIcacyrFqjcsUDdTqHfA4Jq3QXoLGtdhKVjI=)
                          6: 323830343a333534633a3a2f33322d3335203d3e203533303138.roa (hash: hXZL8uARsebn7s8OP+J0MbQTTZWuTmzKHHpB3+w3dls=)
                          7: 323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa (hash: 5K3uMScEi2HZ6tI87jpQ6heGc+iYMy2t3uFH1ynJ/CQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bb:27:49:c5:b1:d9:94:8c:a6:b6:a8:48:66:41:15:78:9e:0e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0296E8534D3AE275B3F059BE9EE60DDB30CC34A1
        Validity
            Not Before: Jan 17 20:40:22 2024 GMT
            Not After : Jan 18 22:44:22 2024 GMT
        Subject: CN=023BF96FDD7DA48E6513EE17CC204F30C70850CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:b5:1e:a2:58:9b:d0:b5:5b:33:01:7c:9f:
                    bf:43:e6:38:91:0f:b5:39:c3:0b:63:9c:be:e6:bd:
                    9f:d3:79:c9:ce:b0:1a:0b:52:c4:bd:70:51:f8:98:
                    13:3c:5e:7a:b3:c3:d4:ec:5c:02:00:ea:64:d5:b1:
                    52:30:70:38:4b:13:69:21:e8:c6:12:a7:89:c3:26:
                    2a:5a:12:15:8b:a5:00:ce:42:6c:fb:a2:84:a2:68:
                    de:27:b6:99:91:ab:a7:61:b1:52:f9:58:b0:61:79:
                    7b:2d:d6:e3:18:36:ba:67:1e:f0:d4:1e:24:5a:5d:
                    a0:03:a4:f1:31:de:92:fe:2e:40:68:be:0c:aa:3c:
                    c5:5e:98:2d:5d:d9:1b:4a:e8:10:ba:be:75:87:7d:
                    b3:f6:b8:1d:91:c1:92:01:a4:41:a6:29:bf:16:8f:
                    ab:a8:71:72:90:79:4c:ab:27:68:1c:2a:8b:c2:9e:
                    49:72:07:07:b3:7f:28:f2:d3:a4:65:97:9a:6a:0d:
                    92:0f:83:03:4b:de:b5:88:fc:aa:b3:99:c7:ef:eb:
                    64:43:cd:78:31:69:02:bd:61:d5:2c:f5:be:b3:e1:
                    42:2e:44:12:2d:50:e3:c8:36:f4:d2:c4:8f:4e:b6:
                    49:17:a7:92:20:57:ae:c8:15:ce:02:54:5d:c2:12:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3B:F9:6F:DD:7D:A4:8E:65:13:EE:17:CC:20:4F:30:C7:08:50:CF
            X509v3 Authority Key Identifier:
                keyid:02:96:E8:53:4D:3A:E2:75:B3:F0:59:BE:9E:E6:0D:DB:30:CC:34:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:8e:d5:15:6b:df:93:70:f8:78:a4:56:d4:a5:35:fa:fd:ac:
         5b:f7:e6:59:68:20:e9:15:38:ef:d1:a1:07:b1:db:f8:08:a6:
         be:9a:44:0b:a7:62:62:ab:41:5c:f7:56:a7:36:e1:20:23:ba:
         ff:07:04:ef:69:e7:67:f4:c2:e6:61:da:3a:34:3b:d8:06:0e:
         78:4d:df:35:ae:bb:1c:61:f8:e3:de:1a:28:ae:39:20:b5:53:
         88:09:7d:48:fb:3e:07:d6:0d:dd:5a:67:7d:b8:b5:87:11:23:
         d3:2c:5a:22:03:2f:cd:13:e3:69:b6:c4:02:df:2e:ac:93:d8:
         92:1a:64:5a:62:c4:13:2b:98:05:00:95:4a:fb:3c:03:bc:d0:
         19:e1:75:d7:a2:7a:e7:c3:36:5e:e6:dd:93:2b:38:15:fa:cb:
         c1:e1:a9:c5:b2:fd:d2:d6:dc:5d:ec:2c:1c:b6:89:0d:c7:7d:
         76:b8:5e:b2:81:53:fa:2b:70:9b:3b:44:90:1b:89:29:d9:ac:
         ac:38:18:68:df:f6:8a:eb:f0:0f:96:d6:b9:e8:60:21:e6:b8:
         d9:68:f5:95:2c:17:28:e2:21:1b:c6:d3:2b:20:fa:ab:0c:3a:
         d3:ac:7a:8a:22:e3:d1:2b:a9:d6:50:92:e3:df:bf:9c:ae:7e:
         84:9a:46:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH7snScWx2ZSMpraoSGZBFXieDrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI5NkU4NTM0RDNBRTI3NUIzRjA1OUJFOUVFNjBEREIz
MENDMzRBMTAeFw0yNDAxMTcyMDQwMjJaFw0yNDAxMTgyMjQ0MjJaMDMxMTAvBgNV
BAMTKDAyM0JGOTZGREQ3REE0OEU2NTEzRUUxN0NDMjA0RjMwQzcwODUwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fbUeolib0LVbMwF8n79D5jiR
D7U5wwtjnL7mvZ/TecnOsBoLUsS9cFH4mBM8Xnqzw9TsXAIA6mTVsVIwcDhLE2kh
6MYSp4nDJipaEhWLpQDOQmz7ooSiaN4ntpmRq6dhsVL5WLBheXst1uMYNrpnHvDU
HiRaXaADpPEx3pL+LkBovgyqPMVemC1d2RtK6BC6vnWHfbP2uB2RwZIBpEGmKb8W
j6uocXKQeUyrJ2gcKovCnklyBwezfyjy06Rll5pqDZIPgwNL3rWI/Kqzmcfv62RD
zXgxaQK9YdUs9b6z4UIuRBItUOPINvTSxI9OtkkXp5IgV67IFc4CVF3CEvS7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAjv5b919pI5lE+4XzCBPMMcIUM8wHwYDVR0j
BBgwFoAUApboU0064nWz8Fm+nuYN2zDMNKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMC8wMjk2RTg1MzREM0FFMjc1QjNGMDU5QkU5RUU2MEREQjMwQ0MzNEExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyOTZFODUzNEQzQUUyNzVC
M0YwNTlCRTlFRTYwRERCMzBDQzM0QTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011SmYvMC8w
Mjk2RTg1MzREM0FFMjc1QjNGMDU5QkU5RUU2MEREQjMwQ0MzNEExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzY7VFWvfk3D4eKRW1KU1+v2sW/fmWWgg6RU479GhB7Hb+AimvppEC6diYqtB
XPdWpzbhICO6/wcE72nnZ/TC5mHaOjQ72AYOeE3fNa67HGH4494aKK45ILVTiAl9
SPs+B9YN3Vpnfbi1hxEj0yxaIgMvzRPjabbEAt8urJPYkhpkWmLEEyuYBQCVSvs8
A7zQGeF116J658M2Xubdkys4FfrLweGpxbL90tbcXewsHLaJDcd9drhesoFT+itw
mztEkBuJKdmsrDgYaN/2iuvwD5bWuehgIea42Wj1lSwXKOIhG8bTKyD6qww606x6
iiLj0Sup1lCS49+/nK5+hJpGFg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:35 2025 by rpki-client