Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
File:                     54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft (raw, json)
Hash identifier:          8vk9sS8wHjXBn57sW4HHeeOmocT7Tq50ZUPoc11bbQU=
Subject key identifier:   45:01:5E:C2:7E:17:34:04:34:80:2D:AF:70:AD:AE:39:51:08:6F:0C
Authority key identifier: 54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A
Certificate issuer:       /CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
Certificate serial:       068A03A340C38FCA1BF4084D12EE5ED00FA479D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
Manifest number:          01BB
Signing time:             Sat 29 Mar 2025 06:05:18 +0000
Manifest this update:     Sat 29 Mar 2025 06:00:18 +0000
Manifest next update:     Sun 30 Mar 2025 08:41:18 +0000
Files and hashes:         1: 3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa (hash: 7W9R7eUvhkBdu4XRDPO72CBqEgO4hFTf2BkYR3VJzt0=)
                          2: 54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl (hash: iAdfqFgD25tUqQkOTPHaP98uHrYeM0fBk1SuptUnaGQ=)
                          3: 323830343a333932383a3a2f33322d313238203d3e20323636303135.roa (hash: cVdd8iheHo2+VF1/h/+bsnvVWWZ+pq004ZLroK7EFvA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8a:03:a3:40:c3:8f:ca:1b:f4:08:4d:12:ee:5e:d0:0f:a4:79:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
        Validity
            Not Before: Mar 29 06:00:18 2025 GMT
            Not After : Mar 30 08:41:18 2025 GMT
        Subject: CN=45015EC27E17340434802DAF70ADAE3951086F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:00:2d:19:d4:0a:dc:eb:d9:5a:76:0f:63:
                    3c:55:d4:db:f0:17:67:47:e3:86:2a:10:83:f1:62:
                    1d:02:8e:7c:9a:05:5d:e2:c5:98:7e:2e:83:d4:31:
                    43:00:41:43:cc:25:b0:8e:2f:dc:a8:bd:7e:e5:15:
                    95:bd:7e:54:f0:67:99:f2:d4:b6:af:01:fa:0e:94:
                    e5:db:93:29:c4:28:2f:7a:56:15:66:fe:f9:71:68:
                    03:1a:c7:5f:e5:61:25:f4:2b:46:89:7c:af:16:ed:
                    cf:32:da:e3:d4:cf:b3:55:2a:96:40:0b:76:54:26:
                    f8:1c:c1:52:87:8b:d2:dc:1b:67:a0:cd:74:0b:d4:
                    ba:bc:f5:b4:22:c7:6a:5d:a1:0d:ba:aa:4c:05:87:
                    f6:9d:4e:e4:05:f4:e9:a2:93:46:6f:a6:a9:59:29:
                    c5:77:bd:16:ec:09:ca:62:ba:cc:c7:60:16:b4:e8:
                    37:47:7f:10:4f:44:d0:30:15:22:44:21:e2:58:94:
                    2e:17:13:cb:27:4e:e5:48:cc:13:73:fb:c5:61:e4:
                    74:92:9d:af:7c:8d:10:b7:84:12:81:1b:ea:c0:e7:
                    f1:21:d6:df:68:d3:ba:a1:07:6f:18:11:c6:4e:2d:
                    e3:85:3a:84:f3:e0:a3:a1:f4:2a:5c:49:1e:a4:e1:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:01:5E:C2:7E:17:34:04:34:80:2D:AF:70:AD:AE:39:51:08:6F:0C
            X509v3 Authority Key Identifier:
                keyid:54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:a7:7d:38:d2:36:08:13:11:61:4f:08:1b:97:2e:67:11:
         54:5a:64:59:a3:bd:ae:3d:dd:9d:b3:68:33:6d:c9:02:79:e2:
         c6:52:19:34:ed:8d:f6:c8:18:ab:db:be:97:4f:8c:9d:9b:86:
         10:84:5a:1c:e2:c6:e6:24:c9:12:d2:89:92:9c:4d:01:a7:72:
         79:6e:1c:e4:35:3a:a6:84:2f:5c:0d:d3:26:64:ac:5f:99:24:
         b2:0c:c7:2a:06:7f:96:d4:a9:7d:2e:5f:df:e8:68:29:14:49:
         3a:44:8b:eb:73:50:23:4c:3c:62:a5:46:10:1d:8e:ad:61:12:
         7a:26:4d:05:11:47:99:e5:ce:18:78:a3:9e:c5:49:07:f8:82:
         36:8a:df:12:58:ba:d0:19:19:23:15:ee:e0:27:0d:c3:f9:ae:
         f4:fc:ad:dd:39:c6:98:e1:1b:1c:f7:69:b5:b6:f9:9b:63:ca:
         8b:a0:71:7a:dc:71:d6:59:b6:b7:d6:76:86:0b:a5:62:1b:5e:
         06:d3:b9:6d:34:4f:ad:ef:47:33:db:4a:1d:3e:ce:f4:8a:52:
         01:7d:74:eb:06:44:1c:12:ea:97:37:ac:4a:ba:7e:db:62:10:
         be:2f:62:e2:80:2f:73:b1:4b:5c:9d:50:5e:34:b3:45:65:78:
         ff:0d:d7:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBooDo0DDj8ob9AhNEu5e0A+kedAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ2NTQ4NTVBRjdBNDdGQTNFRTVFN0FGRDQyMkZGRDNE
QkJGRUM0QTAeFw0yNTAzMjkwNjAwMThaFw0yNTAzMzAwODQxMThaMDMxMTAvBgNV
BAMTKDQ1MDE1RUMyN0UxNzM0MDQzNDgwMkRBRjcwQURBRTM5NTEwODZGMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeQAtGdQK3OvZWnYPYzxV1Nvw
F2dH44YqEIPxYh0CjnyaBV3ixZh+LoPUMUMAQUPMJbCOL9yovX7lFZW9flTwZ5ny
1LavAfoOlOXbkynEKC96VhVm/vlxaAMax1/lYSX0K0aJfK8W7c8y2uPUz7NVKpZA
C3ZUJvgcwVKHi9LcG2egzXQL1Lq89bQix2pdoQ26qkwFh/adTuQF9Omik0ZvpqlZ
KcV3vRbsCcpiuszHYBa06DdHfxBPRNAwFSJEIeJYlC4XE8snTuVIzBNz+8Vh5HSS
na98jRC3hBKBG+rA5/Eh1t9o07qhB28YEcZOLeOFOoTz4KOh9CpcSR6k4XxnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURQFewn4XNAQ0gC2vcK2uOVEIbwwwHwYDVR0j
BBgwFoAUVGVIVa96R/o+5eev1CL/09u/7EowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJy
ZU4vMC81NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NjU0ODU1QUY3QTQ3RkEz
RUU1RTdBRkQ0MjJGRkQzREJCRkVDNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJyZU4vMC81
NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMaunfTjSNggTEWFPCBuXLmcRVFpkWaO9rj3dnbNoM23JAnnixlIZNO2N9sgY
q9u+l0+MnZuGEIRaHOLG5iTJEtKJkpxNAadyeW4c5DU6poQvXA3TJmSsX5kksgzH
KgZ/ltSpfS5f3+hoKRRJOkSL63NQI0w8YqVGEB2OrWESeiZNBRFHmeXOGHijnsVJ
B/iCNorfEli60BkZIxXu4CcNw/mu9Pyt3TnGmOEbHPdptbb5m2PKi6Bxetxx1lm2
t9Z2hgulYhteBtO5bTRPre9HM9tKHT7O9IpSAX106wZEHBLqlzesSrp+22IQvi9i
4oAvc7FLXJ1QXjSzRWV4/w3Xvg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:44:44 2025 by rpki-client