Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.mft
File:                     1CFFFE670163E5C26A8BC8CE9181519C22190820.mft (raw, json)
Hash identifier:          JrsiByShlqlFVIAdNBlrLQNjgBLIHRfPSneRQShhBgg=
Subject key identifier:   E9:DD:9D:A1:6D:D5:C8:5B:B2:DD:F8:21:66:2A:EF:89:50:B0:89:C9
Authority key identifier: 1C:FF:FE:67:01:63:E5:C2:6A:8B:C8:CE:91:81:51:9C:22:19:08:20
Certificate issuer:       /CN=1CFFFE670163E5C26A8BC8CE9181519C22190820
Certificate serial:       60E089E271EB524038CA46A34190EFFEA42547DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.mft
Manifest number:          40
Signing time:             Mon 08 Apr 2024 22:33:04 +0000
Manifest this update:     Mon 08 Apr 2024 22:28:04 +0000
Manifest next update:     Wed 10 Apr 2024 02:09:04 +0000
Files and hashes:         1: 323830343a373837303a3a2f33322d3438203d3e20323731323432.roa (hash: XH5D5f9MHjdwe3TsbwmWqoTu1ptxYoKQqs2+uUXuW7I=)
                          2: 3137392e35312e3231362e302f32322d3234203d3e20323731323432.roa (hash: /itjZeozsvgqbgHKL3r6b4fDe608arC0UbH4Tb36Zdc=)
                          3: 1CFFFE670163E5C26A8BC8CE9181519C22190820.crl (hash: ejesC+gceZLoyhugwvAvsk/PH+Kqobl41geqEZY1yhg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:89:e2:71:eb:52:40:38:ca:46:a3:41:90:ef:fe:a4:25:47:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CFFFE670163E5C26A8BC8CE9181519C22190820
        Validity
            Not Before: Apr  8 22:28:04 2024 GMT
            Not After : Apr 10 02:09:04 2024 GMT
        Subject: CN=E9DD9DA16DD5C85BB2DDF821662AEF8950B089C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0f:20:bd:42:38:bb:0b:c0:7f:4d:47:a2:fb:
                    1a:0b:fa:cb:63:21:61:23:c4:42:5b:71:bc:a8:a8:
                    aa:36:15:e1:fa:f8:9c:88:3f:b4:a8:a0:d5:f7:14:
                    c9:25:a2:03:32:cd:fd:99:19:53:7d:7f:52:37:6d:
                    29:3c:90:e1:22:cf:a8:b7:1a:43:7a:2e:6c:e0:0a:
                    4a:74:e4:89:b6:9e:65:3f:2c:c3:61:bb:db:28:16:
                    70:b6:36:4a:cd:8f:1b:2e:1b:4e:bb:f6:6b:10:53:
                    81:33:cc:a5:2b:44:5c:57:bb:43:1c:59:b6:a8:67:
                    6d:c2:c2:3b:28:24:21:b3:1a:14:ae:dc:ef:ce:8e:
                    48:59:8c:40:2a:a5:f7:e4:cf:ac:3f:2d:5c:3d:3f:
                    2c:2b:54:27:0d:05:dd:fc:d1:eb:2c:77:e7:ae:37:
                    a2:54:86:b4:fb:4d:c5:ab:72:ec:60:d2:0c:4e:07:
                    4d:75:b2:63:c9:a3:cd:f3:23:f4:ef:1f:c0:1e:7c:
                    90:c0:ca:c6:b7:1b:6e:cd:59:8f:a9:31:a7:4e:2a:
                    2f:62:42:54:c7:d9:53:32:49:19:98:88:03:8e:9d:
                    76:89:c3:cf:a3:ec:66:3a:20:69:0e:c7:1a:4c:1c:
                    23:fc:9a:87:78:8e:a2:15:1d:15:86:29:c5:9d:88:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DD:9D:A1:6D:D5:C8:5B:B2:DD:F8:21:66:2A:EF:89:50:B0:89:C9
            X509v3 Authority Key Identifier:
                keyid:1C:FF:FE:67:01:63:E5:C2:6A:8B:C8:CE:91:81:51:9C:22:19:08:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:61:c6:92:2d:8c:ba:93:ab:f7:0b:0f:59:d0:c7:e5:8a:c4:
         86:f3:67:3c:ce:8d:06:8f:3a:e5:6a:2d:95:e0:2f:64:f3:74:
         65:67:08:a6:ec:b7:f5:70:84:2d:c0:aa:f1:12:20:d9:7c:7b:
         f9:18:b9:df:fd:3f:75:d4:73:99:7a:3f:da:be:d1:c3:7b:86:
         00:ac:4d:c3:49:fd:2f:0e:07:44:88:65:1a:9f:37:1a:3a:51:
         f6:f2:a8:cf:e0:ac:e0:71:74:3e:2a:f6:03:ba:25:62:63:2d:
         57:3c:00:14:d4:ce:43:86:99:d5:3b:05:bb:12:c0:f2:05:ef:
         4b:b3:7c:e5:dd:13:ba:d2:31:c4:cf:d2:e0:be:ad:27:ce:59:
         df:7e:bb:cf:af:42:f8:a7:ff:b5:6b:89:cc:09:f6:d6:b6:8d:
         7d:55:6c:e8:87:7b:27:e9:2f:3b:99:ce:31:ec:05:39:6e:a2:
         9b:6d:c2:b8:70:cc:c5:df:29:81:da:c8:15:54:f9:e7:2c:92:
         96:a4:b1:2f:29:2e:c2:aa:c0:02:c8:a8:1e:b7:5f:b1:ec:32:
         a1:ff:48:d0:1b:3c:06:4a:f7:65:7f:f6:4a:90:cd:af:c1:92:
         95:5a:de:5b:07:2e:10:45:cc:eb:1f:48:43:f5:df:b0:da:f4:
         94:65:92:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYOCJ4nHrUkA4ykajQZDv/qQlR9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNGRkZFNjcwMTYzRTVDMjZBOEJDOENFOTE4MTUxOUMy
MjE5MDgyMDAeFw0yNDA0MDgyMjI4MDRaFw0yNDA0MTAwMjA5MDRaMDMxMTAvBgNV
BAMTKEU5REQ5REExNkRENUM4NUJCMkRERjgyMTY2MkFFRjg5NTBCMDg5QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDyC9Qji7C8B/TUei+xoL+stj
IWEjxEJbcbyoqKo2FeH6+JyIP7SooNX3FMklogMyzf2ZGVN9f1I3bSk8kOEiz6i3
GkN6LmzgCkp05Im2nmU/LMNhu9soFnC2NkrNjxsuG0679msQU4EzzKUrRFxXu0Mc
WbaoZ23CwjsoJCGzGhSu3O/OjkhZjEAqpffkz6w/LVw9PywrVCcNBd380essd+eu
N6JUhrT7TcWrcuxg0gxOB011smPJo83zI/TvH8AefJDAysa3G27NWY+pMadOKi9i
QlTH2VMySRmYiAOOnXaJw8+j7GY6IGkOxxpMHCP8mod4jqIVHRWGKcWdiAefAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6d2doW3VyFuy3fghZirviVCwickwHwYDVR0j
BBgwFoAUHP/+ZwFj5cJqi8jOkYFRnCIZCCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2lhUG1FWmlwdlBOZTY4NUI1UWF1UXIzS1ZldkE3dWtYTHNHblRaNzdj
YkovMC8xQ0ZGRkU2NzAxNjNFNUMyNkE4QkM4Q0U5MTgxNTE5QzIyMTkwODIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDRkZGRTY3MDE2M0U1QzI2
QThCQzhDRTkxODE1MTlDMjIxOTA4MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2lhUG1FWmlwdlBOZTY4NUI1UWF1UXIzS1ZldkE3dWtYTHNHblRaNzdjYkovMC8x
Q0ZGRkU2NzAxNjNFNUMyNkE4QkM4Q0U5MTgxNTE5QzIyMTkwODIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoWHGki2MupOr9wsPWdDH5YrEhvNnPM6NBo865WotleAvZPN0ZWcIpuy39XCE
LcCq8RIg2Xx7+Ri53/0/ddRzmXo/2r7Rw3uGAKxNw0n9Lw4HRIhlGp83GjpR9vKo
z+Cs4HF0Pir2A7olYmMtVzwAFNTOQ4aZ1TsFuxLA8gXvS7N85d0TutIxxM/S4L6t
J85Z3367z69C+Kf/tWuJzAn21raNfVVs6Id7J+kvO5nOMewFOW6im23CuHDMxd8p
gdrIFVT55yySlqSxLykuwqrAAsioHrdfsewyof9I0Bs8Bkr3ZX/2SpDNr8GSlVre
WwcuEEXM6x9IQ/XfsNr0lGWSPg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:47 2025 by rpki-client