Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
File:                     C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft (raw, json)
Hash identifier:          GJa2MszLzheUCWgAPPerpFjqe38NpolSc6xkiNJ8Adc=
Subject key identifier:   DB:B6:8C:8C:D3:82:4F:19:2E:D0:6D:B4:08:6B:50:C7:16:8B:F0:03
Authority key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE
Certificate issuer:       /CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
Certificate serial:       16E9801B02B95C4C4F97969D0BFB4CB5F4996163
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
Manifest number:          017B
Signing time:             Sat 11 Jan 2025 03:19:32 +0000
Manifest this update:     Sat 11 Jan 2025 03:14:32 +0000
Manifest next update:     Sun 12 Jan 2025 03:58:32 +0000
Files and hashes:         1: 3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa (hash: oSOvGA5YX+CrL/GmZjMItaqC6NTwbg7v+iMaBpZam9E=)
                          2: 323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (hash: ybqYOXe3mHfas8Cw0HR3EJKO526GOcMXKYzh77Vj8Ag=)
                          3: 3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa (hash: k5QX6DWYx9WAK9GFDHi5tdDrHl6xT9LWsbiNlzDlrl4=)
                          4: C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl (hash: jOkFhdpKzKufG3klRp7lnH2wjo+8mbFFia9txhlyuvg=)
                          5: 3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa (hash: Wa1qW6219LSRLXu9Kw9litlFtJHu7LdrBjBnEuXtrks=)
                          6: 3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa (hash: OpeL2GQv0HKVrEkGi/2UrEc2Cmmm5sMlArAaAs+4dmc=)
                          7: 3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa (hash: sSaKzehdpZz8CGE1pMVZ1RiRR8jB3WYkc6vyEk/vsPE=)
                          8: 3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa (hash: MPrE6PXN7wbF7toXPeNtW97/WKrojEInNu412TUVOIU=)
                          9: 3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa (hash: 2US2QNMqwzd9WyHh6sueY7vWffviqYSeG8l05bKvQ48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:80:1b:02:b9:5c:4c:4f:97:96:9d:0b:fb:4c:b5:f4:99:61:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
        Validity
            Not Before: Jan 11 03:14:32 2025 GMT
            Not After : Jan 12 03:58:32 2025 GMT
        Subject: CN=DBB68C8CD3824F192ED06DB4086B50C7168BF003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:42:c3:d0:b0:2c:a1:4f:ca:fa:85:6f:31:
                    ac:bc:51:9d:60:0d:c8:6f:cf:a0:3d:06:ea:bf:37:
                    2c:c9:19:ee:23:41:d5:15:be:c9:dc:33:c2:c7:5a:
                    d4:45:85:7f:14:82:d0:e2:4e:d1:2c:8e:ce:5d:c2:
                    30:1c:40:e9:e7:51:46:f0:a0:74:49:96:cc:79:20:
                    e2:07:25:7d:71:ac:90:9e:31:e5:7e:4c:3a:46:35:
                    25:33:ae:29:38:88:77:9a:e5:5a:6c:a2:51:09:2d:
                    df:f6:2b:43:26:db:60:09:0c:02:8d:b8:c5:5b:be:
                    b8:99:d6:d9:3a:c3:e4:88:09:9f:ab:4a:43:c3:df:
                    bb:7d:a6:d0:be:00:e6:77:00:51:3c:f3:33:d0:87:
                    b5:8a:90:94:ff:9a:6d:fe:d8:aa:fe:01:48:68:38:
                    94:7b:d2:60:01:42:e5:74:64:da:d8:3d:2c:db:99:
                    c2:4d:3e:c1:50:c6:ad:6f:4b:40:29:78:81:b3:b5:
                    42:a3:7c:51:65:d7:bb:a6:49:3f:67:64:ab:80:ff:
                    16:b4:09:e5:fd:fb:8c:6b:2f:1e:dd:54:a2:57:34:
                    05:10:bb:fa:4f:47:21:cf:66:75:05:81:7d:0c:7f:
                    9b:9e:ca:03:36:07:28:7b:3d:09:c6:2b:b5:9f:6a:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B6:8C:8C:D3:82:4F:19:2E:D0:6D:B4:08:6B:50:C7:16:8B:F0:03
            X509v3 Authority Key Identifier:
                keyid:C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:0a:c8:02:bc:a7:4e:c0:01:77:c0:56:89:28:29:d1:f0:
         59:cb:31:8a:fe:d5:36:5f:83:50:2d:89:0d:93:a8:b2:59:c3:
         bb:49:78:f9:de:d8:de:39:93:c1:d4:0d:ad:3b:b4:44:e3:d5:
         33:8b:bc:be:52:33:c0:3a:cd:40:ab:e9:32:16:5c:de:4a:25:
         d8:87:90:02:43:62:9d:a7:25:9f:26:e2:4a:0f:7a:aa:3f:07:
         17:c8:5c:0d:0c:7d:25:00:e0:31:fb:7f:95:e3:d7:03:cb:03:
         1e:69:4f:6d:90:6e:2e:ae:83:52:b8:1f:76:99:ae:b1:79:73:
         65:b8:dd:2c:46:ee:0c:a3:af:38:b5:8a:b7:ff:bc:37:8c:4e:
         34:46:01:41:c9:69:12:e2:56:44:03:7a:72:84:b7:1a:37:ac:
         eb:4f:8f:f8:cc:3c:76:08:b8:26:fd:77:17:75:69:ef:c9:81:
         c4:31:be:cc:e7:4c:cb:81:a8:63:f4:83:93:2f:0f:fd:4a:4b:
         90:b7:52:b0:4b:1d:2a:5e:e0:a4:6b:d2:cf:07:05:12:17:3a:
         50:6b:49:79:f5:db:c6:99:90:fc:6a:73:ba:75:39:bd:f0:5e:
         56:58:fb:c0:60:8a:0b:68:cd:70:66:7a:d8:cc:90:37:30:6f:
         97:7b:2c:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFumAGwK5XExPl5adC/tMtfSZYWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhFRTdFNTEyNjFEREY0NzA5MTQ3ODRFRTcwQ0VGRjNC
M0JFNzFCRTAeFw0yNTAxMTEwMzE0MzJaFw0yNTAxMTIwMzU4MzJaMDMxMTAvBgNV
BAMTKERCQjY4QzhDRDM4MjRGMTkyRUQwNkRCNDA4NkI1MEM3MTY4QkYwMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9ELD0LAsoU/K+oVvMay8UZ1g
Dchvz6A9Buq/NyzJGe4jQdUVvsncM8LHWtRFhX8UgtDiTtEsjs5dwjAcQOnnUUbw
oHRJlsx5IOIHJX1xrJCeMeV+TDpGNSUzrik4iHea5VpsolEJLd/2K0Mm22AJDAKN
uMVbvriZ1tk6w+SICZ+rSkPD37t9ptC+AOZ3AFE88zPQh7WKkJT/mm3+2Kr+AUho
OJR70mABQuV0ZNrYPSzbmcJNPsFQxq1vS0ApeIGztUKjfFFl17umST9nZKuA/xa0
CeX9+4xrLx7dVKJXNAUQu/pPRyHPZnUFgX0Mf5ueygM2Byh7PQnGK7WfahZxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU27aMjNOCTxku0G20CGtQxxaL8AMwHwYDVR0j
BBgwFoAUyO5+USYd30cJFHhO5wzv87O+cb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMi9DOEVFN0U1MTI2MURERjQ3MDkxNDc4NEVFNzBDRUZGM0IzQkU3MUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4RUU3RTUxMjYxRERGNDcw
OTE0Nzg0RUU3MENFRkYzQjNCRTcxQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNnbWUvMi9D
OEVFN0U1MTI2MURERjQ3MDkxNDc4NEVFNzBDRUZGM0IzQkU3MUJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApUkKyAK8p07AAXfAVokoKdHwWcsxiv7VNl+DUC2JDZOoslnDu0l4+d7Y3jmT
wdQNrTu0ROPVM4u8vlIzwDrNQKvpMhZc3kol2IeQAkNinaclnybiSg96qj8HF8hc
DQx9JQDgMft/lePXA8sDHmlPbZBuLq6DUrgfdpmusXlzZbjdLEbuDKOvOLWKt/+8
N4xONEYBQclpEuJWRAN6coS3Gjes60+P+Mw8dgi4Jv13F3Vp78mBxDG+zOdMy4Go
Y/SDky8P/UpLkLdSsEsdKl7gpGvSzwcFEhc6UGtJefXbxpmQ/GpzunU5vfBeVlj7
wGCKC2jNcGZ62MyQNzBvl3ssNA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 17:17:01 2025 by rpki-client