Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.mft
File:                     B8D5055B9984E119C052DEDB3F3B11B9B657F291.mft (raw, json)
Hash identifier:          kRthTDAaF43PMqqwbgqkBVpajb25yRO/zjVUCJT1o7s=
Subject key identifier:   67:CF:81:2D:98:37:B8:17:4C:9C:52:1A:9C:9E:20:42:69:1F:3A:48
Authority key identifier: B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
Certificate issuer:       /CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Certificate serial:       06A1AB54254AFB6B7B86258731EBD2D1CE1CF84F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.mft
Manifest number:          1F
Signing time:             Fri 28 Mar 2025 22:14:01 +0000
Manifest this update:     Fri 28 Mar 2025 22:09:01 +0000
Manifest next update:     Sat 29 Mar 2025 22:15:01 +0000
Files and hashes:         1: 3230302e362e39322e302f32322d3234203d3e20323730343336.roa (hash: Rx54lEm9nY4E0AbWVp9pwISoWCgfNk1BkW7zTG+9G5c=)
                          2: 323830343a366266343a3a2f33322d3332203d3e20323730343336.roa (hash: 05/+BDVZkkrriffLGMQKXw7ANAFwco5t5OySwBpxsY0=)
                          3: B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl (hash: 54VytEtIQIFja2jKgdCJk6Qfm0eTIk35yskxypyAE0Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a1:ab:54:25:4a:fb:6b:7b:86:25:87:31:eb:d2:d1:ce:1c:f8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
        Validity
            Not Before: Mar 28 22:09:01 2025 GMT
            Not After : Mar 29 22:15:01 2025 GMT
        Subject: CN=67CF812D9837B8174C9C521A9C9E2042691F3A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:49:57:5d:3c:a8:9c:ab:99:20:d6:4a:a6:
                    01:32:12:b4:7f:a1:56:80:65:2f:f5:48:b4:e9:ab:
                    c4:2a:56:ec:1a:62:ce:0e:5f:67:84:cc:af:ac:ee:
                    4e:15:37:31:3c:b0:b3:75:03:fd:01:eb:b7:c0:a7:
                    2e:75:e3:32:e7:34:a3:27:43:50:92:43:96:80:73:
                    0e:31:36:32:66:b5:63:97:c4:79:9c:e1:53:4f:ea:
                    47:1d:e3:b3:25:5e:61:2e:cc:d8:19:45:6a:32:9c:
                    53:91:dc:d2:be:8e:15:c7:ac:78:56:cb:01:31:b3:
                    0d:82:ed:a6:fa:48:42:a8:9f:36:05:ae:03:21:42:
                    15:39:96:d9:70:e8:1a:8f:f6:fb:98:87:c0:14:d7:
                    a7:01:49:0c:c9:f9:55:55:b7:2f:55:07:56:21:42:
                    39:37:70:61:a6:ff:87:6b:74:70:9b:63:4a:f0:cb:
                    1d:fc:30:54:f2:02:31:40:f2:d6:69:ca:d4:3e:46:
                    a2:fe:e4:6d:fa:79:e3:f7:a7:3d:52:bd:95:ff:72:
                    77:8f:88:ab:99:cb:e6:c0:fd:f4:16:83:2b:f9:f9:
                    4c:3d:c9:7b:5a:e6:a1:36:3e:5e:f5:74:1e:c7:f9:
                    2e:b6:7f:10:c7:1f:25:90:00:d5:0e:80:fe:55:50:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CF:81:2D:98:37:B8:17:4C:9C:52:1A:9C:9E:20:42:69:1F:3A:48
            X509v3 Authority Key Identifier:
                keyid:B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:07:6b:49:05:66:5c:2a:81:c1:90:a8:94:cc:b3:93:48:
         db:5d:3c:91:4d:82:f8:84:9c:94:f6:2b:0b:67:46:42:c2:6c:
         e2:99:2c:6d:24:10:52:f3:cf:6f:99:89:4e:d0:14:35:d8:fd:
         fa:6a:d5:60:49:15:c9:1e:dc:31:f7:aa:7b:a1:85:81:62:44:
         b0:a8:b0:ec:a2:a8:1f:d8:68:eb:b3:a4:72:18:34:2e:c1:2d:
         77:55:f7:55:8c:8f:b1:86:35:72:f2:ec:5f:c0:fb:16:40:15:
         f8:dd:49:f8:07:e3:7c:54:42:b0:5c:e5:42:17:38:12:38:31:
         3e:1a:40:e4:ac:df:68:ea:ae:c7:ed:56:3c:a2:19:d6:38:26:
         30:bb:47:e9:1c:14:9c:20:7a:1d:70:f3:40:21:d4:f5:21:4d:
         98:ad:11:c7:c8:a9:71:42:13:d4:3f:a0:09:93:97:17:49:a3:
         0e:87:2c:9f:70:52:a6:23:4f:69:b9:af:ce:77:25:ff:33:6f:
         da:78:d0:45:e5:01:96:d3:9e:f8:d2:c2:2b:93:e9:13:90:03:
         ef:b0:e2:90:29:05:e4:44:3d:c9:2f:fc:4f:af:f8:31:3a:5b:
         bc:89:ee:2d:ee:89:ad:bf:34:cc:be:17:26:49:89:0e:61:14:
         0a:a1:56:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBqGrVCVK+2t7hiWHMevS0c4c+E8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhENTA1NUI5OTg0RTExOUMwNTJERURCM0YzQjExQjlC
NjU3RjI5MTAeFw0yNTAzMjgyMjA5MDFaFw0yNTAzMjkyMjE1MDFaMDMxMTAvBgNV
BAMTKDY3Q0Y4MTJEOTgzN0I4MTc0QzlDNTIxQTlDOUUyMDQyNjkxRjNBNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lklXXTyonKuZINZKpgEyErR/
oVaAZS/1SLTpq8QqVuwaYs4OX2eEzK+s7k4VNzE8sLN1A/0B67fApy514zLnNKMn
Q1CSQ5aAcw4xNjJmtWOXxHmc4VNP6kcd47MlXmEuzNgZRWoynFOR3NK+jhXHrHhW
ywExsw2C7ab6SEKonzYFrgMhQhU5ltlw6BqP9vuYh8AU16cBSQzJ+VVVty9VB1Yh
Qjk3cGGm/4drdHCbY0rwyx38MFTyAjFA8tZpytQ+RqL+5G36eeP3pz1SvZX/cneP
iKuZy+bA/fQWgyv5+Uw9yXta5qE2Pl71dB7H+S62fxDHHyWQANUOgP5VUEuJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZ8+BLZg3uBdMnFIanJ4gQmkfOkgwHwYDVR0j
BBgwFoAUuNUFW5mE4RnAUt7bPzsRubZX8pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGpkeXFrMmR5eXRLR2ZQNGVpMUprUnZBcnV6d1pXb2tLRFpTdkYzNTFQ
OFcvMC9COEQ1MDU1Qjk5ODRFMTE5QzA1MkRFREIzRjNCMTFCOUI2NTdGMjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDUwNTVCOTk4NEUxMTlD
MDUyREVEQjNGM0IxMUI5QjY1N0YyOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGpkeXFrMmR5eXRLR2ZQNGVpMUprUnZBcnV6d1pXb2tLRFpTdkYzNTFQOFcvMC9C
OEQ1MDU1Qjk5ODRFMTE5QzA1MkRFREIzRjNCMTFCOUI2NTdGMjkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ+wHa0kFZlwqgcGQqJTMs5NI2108kU2C+ISclPYrC2dGQsJs4pksbSQQUvPP
b5mJTtAUNdj9+mrVYEkVyR7cMfeqe6GFgWJEsKiw7KKoH9ho67Okchg0LsEtd1X3
VYyPsYY1cvLsX8D7FkAV+N1J+AfjfFRCsFzlQhc4EjgxPhpA5KzfaOqux+1WPKIZ
1jgmMLtH6RwUnCB6HXDzQCHU9SFNmK0Rx8ipcUIT1D+gCZOXF0mjDocsn3BSpiNP
abmvzncl/zNv2njQReUBltOe+NLCK5PpE5AD77DikCkF5EQ9yS/8T6/4MTpbvInu
Le6Jrb80zL4XJkmJDmEUCqFWYQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:35 2025 by rpki-client