Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
File:                     B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft (raw, json)
Hash identifier:          g2uldPkIkWs2kfImm9CDZmLS2iesKa4B65p650fQ5fs=
Subject key identifier:   D3:63:B3:1A:C1:AF:17:4A:D2:0A:78:1F:00:AE:7F:A4:16:99:1D:04
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Certificate issuer:       /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial:       40FCF7913408046523077CB94D5CF4C0DB52DF1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
Manifest number:          01DF
Signing time:             Sat 29 Mar 2025 00:03:39 +0000
Manifest this update:     Fri 28 Mar 2025 23:58:39 +0000
Manifest next update:     Sun 30 Mar 2025 01:28:39 +0000
Files and hashes:         1: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (hash: zqNX3MuIEatAVLDb0k49Nn2HHolj4rw/rTdQTMaWqfw=)
                          2: 323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (hash: 89H6sqhwLq+OwyjFapd3XLt468pjg8feq8CkL0sljBs=)
                          3: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl (hash: bFsaU/i4ym1Y5pPB1253BmIW7De5RFWosC3nq7sdpVY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fc:f7:91:34:08:04:65:23:07:7c:b9:4d:5c:f4:c0:db:52:df:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
        Validity
            Not Before: Mar 28 23:58:39 2025 GMT
            Not After : Mar 30 01:28:39 2025 GMT
        Subject: CN=D363B31AC1AF174AD20A781F00AE7FA416991D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:2e:43:28:20:16:3d:a3:bb:cb:91:fa:51:
                    03:9e:a7:14:ef:97:40:24:30:c6:58:6a:84:b7:f9:
                    b3:3d:d7:d9:6e:4c:82:19:23:d7:df:41:c2:93:c3:
                    40:ce:69:5d:2a:67:f3:27:88:9f:af:1d:f1:07:a5:
                    55:3e:28:aa:db:a3:21:75:1a:c6:8d:47:f0:78:98:
                    84:21:ec:67:0c:8c:7f:e7:97:86:e7:6d:6a:49:10:
                    25:b9:dd:79:fb:6a:44:0f:17:34:38:ae:b1:ee:6e:
                    12:86:7b:ba:32:70:8c:5f:97:27:ed:4e:42:8a:a0:
                    c0:37:bc:f9:46:d2:fe:02:37:60:20:51:ea:ed:3b:
                    4e:26:b5:a6:6e:97:8a:c9:88:ba:5a:b4:7f:13:70:
                    37:e6:40:58:79:35:c8:65:a2:eb:ef:2c:4a:25:96:
                    b2:de:5b:58:b6:90:d4:85:51:7b:21:00:c1:66:b7:
                    2c:96:45:8d:aa:c8:e0:a3:8c:9a:50:c9:1e:dd:8b:
                    c3:d3:3a:94:5a:09:a4:ac:14:7b:03:26:d3:15:62:
                    7d:9c:99:6b:29:83:12:47:ee:ba:d6:30:cb:57:f6:
                    9b:d5:f1:f3:9a:5c:1e:31:4d:d2:4a:4a:22:2b:18:
                    e9:17:a5:f1:0e:8e:48:82:63:ed:b8:34:1c:06:31:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:B3:1A:C1:AF:17:4A:D2:0A:78:1F:00:AE:7F:A4:16:99:1D:04
            X509v3 Authority Key Identifier:
                keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e3:39:5b:86:f6:25:e9:c0:4e:95:a1:2d:6e:9e:b3:b6:31:
         06:1d:6f:cb:80:05:8f:ae:bd:41:b7:63:cf:c6:af:f4:ed:89:
         e9:82:49:4f:77:2f:5a:8c:62:6c:40:dd:68:b6:c0:81:35:d9:
         61:31:b3:28:df:7c:4e:52:88:4a:37:e8:8e:4c:0a:51:ec:a4:
         30:23:5d:db:ba:b9:8f:d5:a4:4c:96:3f:aa:80:de:d3:97:e7:
         c0:2e:2b:e0:d3:bc:50:b4:42:a4:9d:09:af:72:e3:64:29:be:
         33:e9:c6:af:d2:be:57:5d:73:8d:8f:20:fb:6d:f0:83:6a:80:
         f0:cf:09:b5:37:2f:93:25:12:0b:46:33:83:5f:fc:82:91:5c:
         e2:25:66:ba:97:98:25:02:38:75:63:0a:e3:4f:94:cf:ba:27:
         83:3d:dd:02:ff:95:03:b1:de:a7:63:61:09:ff:f9:9e:18:e7:
         c8:39:ce:d2:3d:a5:c9:69:d8:61:f2:25:fb:37:98:17:30:5f:
         9d:56:08:4c:75:cc:74:0a:bd:a3:c4:b0:d4:a4:2c:31:c0:eb:
         0f:0d:13:f2:fe:0f:45:1f:58:1f:dc:de:b2:92:b1:cb:7a:ff:
         43:8c:f9:47:3e:9e:0a:c4:23:cc:03:5c:79:85:88:b4:8a:82:
         9f:12:d1:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQPz3kTQIBGUjB3y5TVz0wNtS3x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU5NzM4MUYyQTdGREUwOEIzNjM5OEFGQjBGQ0U3RTdC
NkJEMzFGMDAeFw0yNTAzMjgyMzU4MzlaFw0yNTAzMzAwMTI4MzlaMDMxMTAvBgNV
BAMTKEQzNjNCMzFBQzFBRjE3NEFEMjBBNzgxRjAwQUU3RkE0MTY5OTFEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7S5DKCAWPaO7y5H6UQOepxTv
l0AkMMZYaoS3+bM919luTIIZI9ffQcKTw0DOaV0qZ/MniJ+vHfEHpVU+KKrboyF1
GsaNR/B4mIQh7GcMjH/nl4bnbWpJECW53Xn7akQPFzQ4rrHubhKGe7oycIxflyft
TkKKoMA3vPlG0v4CN2AgUertO04mtaZul4rJiLpatH8TcDfmQFh5NchlouvvLEol
lrLeW1i2kNSFUXshAMFmtyyWRY2qyOCjjJpQyR7di8PTOpRaCaSsFHsDJtMVYn2c
mWspgxJH7rrWMMtX9pvV8fOaXB4xTdJKSiIrGOkXpfEOjkiCY+24NBwGMYPbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU02OzGsGvF0rSCngfAK5/pBaZHQQwHwYDVR0j
BBgwFoAUtZc4Hyp/3gizY5ivsPzn57a9MfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1lzcXNzemE3Z3NzOTZNZGY1V3ZMR25wSFBNQ0p1REVGN0E0dEc3Sm9o
WFQvMS9CNTk3MzgxRjJBN0ZERTA4QjM2Mzk4QUZCMEZDRTdFN0I2QkQzMUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1OTczODFGMkE3RkRFMDhC
MzYzOThBRkIwRkNFN0U3QjZCRDMxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1lzcXNzemE3Z3NzOTZNZGY1V3ZMR25wSFBNQ0p1REVGN0E0dEc3Sm9oWFQvMS9C
NTk3MzgxRjJBN0ZERTA4QjM2Mzk4QUZCMEZDRTdFN0I2QkQzMUYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAy+M5W4b2JenATpWhLW6es7YxBh1vy4AFj669Qbdjz8av9O2J6YJJT3cvWoxi
bEDdaLbAgTXZYTGzKN98TlKISjfojkwKUeykMCNd27q5j9WkTJY/qoDe05fnwC4r
4NO8ULRCpJ0Jr3LjZCm+M+nGr9K+V11zjY8g+23wg2qA8M8JtTcvkyUSC0Yzg1/8
gpFc4iVmupeYJQI4dWMK40+Uz7ongz3dAv+VA7Hep2NhCf/5nhjnyDnO0j2lyWnY
YfIl+zeYFzBfnVYITHXMdAq9o8Sw1KQsMcDrDw0T8v4PRR9YH9zespKxy3r/Q4z5
Rz6eCsQjzANceYWItIqCnxLRfA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:58 2025 by rpki-client