Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.mft
File:                     6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.mft (raw, json)
Hash identifier:          dsUckaNBqGTMnWTBlHCtQNYklP30ajrRhLkzWx4tUOw=
Subject key identifier:   87:34:40:B6:D7:6D:E5:F4:54:A1:D0:70:58:74:37:DB:6A:7E:03:1E
Authority key identifier: 6A:C8:9C:99:B5:C4:5A:ED:F3:4E:75:74:3D:EA:3E:E0:68:9E:8D:80
Certificate issuer:       /CN=6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80
Certificate serial:       0DEDBF4E59C1C2505C9DDA82DC7EE75EC75A058D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.mft
Manifest number:          DB
Signing time:             Thu 05 Dec 2024 04:50:09 +0000
Manifest this update:     Thu 05 Dec 2024 04:45:09 +0000
Manifest next update:     Fri 06 Dec 2024 06:18:09 +0000
Files and hashes:         1: 323830343a333665633a3a2f33322d3332203d3e20323636333830.roa (hash: PZwuAyU8qIVG2MHDsntNNGGJpZM0s2FOA996nusiUfs=)
                          2: 6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.crl (hash: tPGiyndWT6dMbxgeN4ZEuwdnuG576yahwRI/E3WxeXY=)
                          3: 3137302e38302e34302e302f32322d3234203d3e20323636333830.roa (hash: QIP9MPr2RDPjYFiTrmFUX+qhM1nAHD7hqLJ+OK42QxI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ed:bf:4e:59:c1:c2:50:5c:9d:da:82:dc:7e:e7:5e:c7:5a:05:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80
        Validity
            Not Before: Dec  5 04:45:09 2024 GMT
            Not After : Dec  6 06:18:09 2024 GMT
        Subject: CN=873440B6D76DE5F454A1D070587437DB6A7E031E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:28:20:fd:28:cc:79:36:ea:af:e8:de:44:
                    ef:13:93:79:b8:0d:22:ba:bc:d0:50:61:bf:26:e2:
                    ae:c8:1d:87:d6:5f:eb:ec:8e:a1:71:59:4b:d5:5e:
                    2a:ab:c2:81:49:c3:8a:35:57:e8:34:be:b0:91:47:
                    a5:6b:09:a4:d4:91:4e:a6:98:75:c9:b4:ff:6a:11:
                    d5:fb:e5:38:d9:5d:9b:4a:e0:a4:68:21:87:77:8e:
                    be:19:94:31:18:df:66:63:7f:8d:37:7a:f6:f8:39:
                    db:97:5f:ea:30:10:88:09:63:3f:ff:00:3f:cc:20:
                    c5:ee:5e:14:ad:fa:84:30:1d:9c:3d:92:25:46:2d:
                    25:24:2b:5c:ba:4d:26:54:d3:ad:97:48:7a:79:a4:
                    58:71:d9:f2:bb:38:3b:3e:1b:3e:3a:76:10:64:b9:
                    fc:50:f3:eb:b8:6d:23:ba:72:0d:b3:52:32:91:d3:
                    65:4e:61:3e:4e:f7:2d:90:fb:82:10:f6:9c:77:06:
                    37:5b:f7:ce:91:fc:29:d2:20:c7:42:cb:fe:48:e9:
                    c2:8b:85:ad:77:4f:c6:b9:4d:34:ee:34:49:6f:a2:
                    87:a8:c1:38:1b:93:6e:6f:b9:5d:13:68:37:d9:68:
                    af:e8:e0:38:51:fa:8a:28:c3:02:80:4c:76:c8:25:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:34:40:B6:D7:6D:E5:F4:54:A1:D0:70:58:74:37:DB:6A:7E:03:1E
            X509v3 Authority Key Identifier:
                keyid:6A:C8:9C:99:B5:C4:5A:ED:F3:4E:75:74:3D:EA:3E:E0:68:9E:8D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:15:1c:ad:db:58:1c:3a:01:a0:c9:b3:3d:b1:99:83:79:6b:
         0a:5a:79:27:8a:9c:ce:7c:28:4e:26:83:ae:f8:fb:af:6e:a5:
         1c:dc:c1:62:10:91:41:e5:2b:a8:c5:10:4c:93:b7:0a:25:4e:
         67:1a:63:5c:b8:7c:58:19:b3:ec:99:a8:b7:40:72:13:52:20:
         d9:42:7f:bf:26:1f:78:ee:06:39:bf:e2:ee:02:01:fd:d7:75:
         f2:d4:6a:13:0d:8e:6d:f0:b8:29:60:ab:4c:5e:e6:06:0c:b7:
         82:a3:51:f9:c1:dc:5f:fc:81:03:00:34:c2:b4:47:c2:53:61:
         38:e2:e1:8f:ff:40:94:59:8c:a4:3a:4c:01:55:f2:d4:00:aa:
         45:f7:6d:30:df:d0:a8:b1:84:60:23:78:70:6e:8b:28:d3:e9:
         2c:99:16:4f:bd:f7:1d:6b:03:6f:d7:37:b4:fa:97:09:f0:63:
         a6:f2:bd:6e:06:6a:30:4a:bb:c2:02:96:2c:ab:99:f3:0d:c8:
         54:ce:be:40:3c:ae:a9:97:1c:2b:28:8c:8e:91:a8:d2:6d:9e:
         ae:11:b2:fa:bd:69:c5:73:6e:29:fe:ab:76:3f:f7:67:86:5b:
         81:29:65:61:33:24:10:49:ef:23:60:53:b5:e7:0b:4a:b0:8a:
         1b:44:dc:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDe2/TlnBwlBcndqC3H7nXsdaBY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFDODlDOTlCNUM0NUFFREYzNEU3NTc0M0RFQTNFRTA2
ODlFOEQ4MDAeFw0yNDEyMDUwNDQ1MDlaFw0yNDEyMDYwNjE4MDlaMDMxMTAvBgNV
BAMTKDg3MzQ0MEI2RDc2REU1RjQ1NEExRDA3MDU4NzQzN0RCNkE3RTAzMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjsCgg/SjMeTbqr+jeRO8Tk3m4
DSK6vNBQYb8m4q7IHYfWX+vsjqFxWUvVXiqrwoFJw4o1V+g0vrCRR6VrCaTUkU6m
mHXJtP9qEdX75TjZXZtK4KRoIYd3jr4ZlDEY32Zjf403evb4OduXX+owEIgJYz//
AD/MIMXuXhSt+oQwHZw9kiVGLSUkK1y6TSZU062XSHp5pFhx2fK7ODs+Gz46dhBk
ufxQ8+u4bSO6cg2zUjKR02VOYT5O9y2Q+4IQ9px3Bjdb986R/CnSIMdCy/5I6cKL
ha13T8a5TTTuNElvooeowTgbk25vuV0TaDfZaK/o4DhR+ooowwKATHbIJTi5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhzRAttdt5fRUodBwWHQ322p+Ax4wHwYDVR0j
BBgwFoAUasicmbXEWu3zTnV0Peo+4GiejYAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGlhN3NLVFdIOVcyNW84djRqVXpOQ0J6ZURkbWJZVG1nV0t0VDJjaENM
SHcvMC82QUM4OUM5OUI1QzQ1QUVERjM0RTc1NzQzREVBM0VFMDY4OUU4RDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBQzg5Qzk5QjVDNDVBRURG
MzRFNzU3NDNERUEzRUUwNjg5RThEODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGlhN3NLVFdIOVcyNW84djRqVXpOQ0J6ZURkbWJZVG1nV0t0VDJjaENMSHcvMC82
QUM4OUM5OUI1QzQ1QUVERjM0RTc1NzQzREVBM0VFMDY4OUU4RDgwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAahUcrdtYHDoBoMmzPbGZg3lrClp5J4qcznwoTiaDrvj7r26lHNzBYhCRQeUr
qMUQTJO3CiVOZxpjXLh8WBmz7Jmot0ByE1Ig2UJ/vyYfeO4GOb/i7gIB/dd18tRq
Ew2ObfC4KWCrTF7mBgy3gqNR+cHcX/yBAwA0wrRHwlNhOOLhj/9AlFmMpDpMAVXy
1ACqRfdtMN/QqLGEYCN4cG6LKNPpLJkWT733HWsDb9c3tPqXCfBjpvK9bgZqMEq7
wgKWLKuZ8w3IVM6+QDyuqZccKyiMjpGo0m2erhGy+r1pxXNuKf6rdj/3Z4ZbgSll
YTMkEEnvI2BTtecLSrCKG0TcJg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:08:42 2025 by rpki-client