Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/870E7946630644D65D049C7FD54C33D6324E7B0A.mft
File:                     870E7946630644D65D049C7FD54C33D6324E7B0A.mft (raw, json)
Hash identifier:          JgfsBGT2iC7dEmwboSbRpB6to3n0vtaRPdOHpPLD9Js=
Subject key identifier:   C3:F6:5C:2E:D1:C1:C2:C9:E8:33:26:8F:1C:AA:99:9A:6A:4F:7F:5A
Authority key identifier: 87:0E:79:46:63:06:44:D6:5D:04:9C:7F:D5:4C:33:D6:32:4E:7B:0A
Certificate issuer:       /CN=870E7946630644D65D049C7FD54C33D6324E7B0A
Certificate serial:       22B72FF81207E83074A568A3C7A95993897DA32F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/870E7946630644D65D049C7FD54C33D6324E7B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/870E7946630644D65D049C7FD54C33D6324E7B0A.mft
Manifest number:          20
Signing time:             Wed 20 Sep 2023 13:48:50 +0000
Manifest this update:     Wed 20 Sep 2023 13:43:50 +0000
Manifest next update:     Thu 21 Sep 2023 13:51:50 +0000
Files and hashes:         1: 34352e3137322e3138302e302f32322d3234203d3e20323638373732.roa (hash: cW3nd3ihZtCBPo241Mnw55ISicc25Ta04JRCa5l9CZc=)
                          2: 323830343a356136633a3a2f33322d3334203d3e20323638373732.roa (hash: xQPlKK8r6v7nvidZafL2QIZQdPXlexzG4NviJf8MDpo=)
                          3: 870E7946630644D65D049C7FD54C33D6324E7B0A.crl (hash: wGqMu9oorlZjX468s4yNOHOcO7EU+4qTBlaxAkL0GsA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b7:2f:f8:12:07:e8:30:74:a5:68:a3:c7:a9:59:93:89:7d:a3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870E7946630644D65D049C7FD54C33D6324E7B0A
        Validity
            Not Before: Sep 20 13:43:50 2023 GMT
            Not After : Sep 21 13:51:50 2023 GMT
        Subject: CN=C3F65C2ED1C1C2C9E833268F1CAA999A6A4F7F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:6b:23:8b:ae:35:0a:fc:60:83:8e:2d:9e:
                    a3:fd:92:bc:c0:d9:50:3e:0f:5d:c0:c9:55:1e:81:
                    01:50:f1:01:24:03:59:6b:1b:52:23:a4:0a:fd:c5:
                    db:4c:03:a3:62:9d:65:b2:bd:17:8c:5a:61:b3:b4:
                    64:8d:23:0f:0d:f8:bf:bb:bc:be:b8:30:20:ad:0f:
                    f4:17:52:f0:93:50:d3:35:26:eb:d7:c8:0d:6c:42:
                    15:9b:67:d8:c5:6a:26:94:7b:7e:1b:13:db:a4:3b:
                    3e:13:fe:0f:a8:fe:13:13:e1:aa:92:bf:c2:e8:fb:
                    2f:59:3a:3a:b0:b6:bb:ff:c9:3b:a4:c6:41:71:4b:
                    43:41:f1:b7:7c:fd:21:f9:e7:0a:88:b1:90:7c:0e:
                    7e:e2:98:10:29:d0:22:58:a6:23:19:a2:58:1a:38:
                    e4:7d:14:d1:85:aa:13:ca:31:13:7c:7a:5e:be:38:
                    8c:2f:87:b4:a0:ac:40:47:ad:00:d3:ba:3f:e2:9d:
                    f7:01:20:42:cb:0e:1b:46:17:eb:1c:c7:a6:8c:bb:
                    65:c7:11:d0:ad:4c:b4:59:fb:5d:2e:91:6e:b0:3f:
                    d5:d3:fe:f6:5c:b2:30:ac:34:01:62:2c:8a:2d:53:
                    4d:9c:41:e4:94:74:8a:18:f7:4e:ea:99:21:5f:5e:
                    c6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F6:5C:2E:D1:C1:C2:C9:E8:33:26:8F:1C:AA:99:9A:6A:4F:7F:5A
            X509v3 Authority Key Identifier:
                keyid:87:0E:79:46:63:06:44:D6:5D:04:9C:7F:D5:4C:33:D6:32:4E:7B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/870E7946630644D65D049C7FD54C33D6324E7B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/870E7946630644D65D049C7FD54C33D6324E7B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/870E7946630644D65D049C7FD54C33D6324E7B0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:9d:94:eb:22:86:ac:c1:6c:85:d8:f0:96:f6:c0:1e:8f:d4:
         de:70:1e:8f:bc:13:b8:97:9d:0b:47:fd:67:54:97:a6:5e:94:
         18:9b:88:73:aa:4b:a3:c7:ee:69:5a:8f:b9:87:b6:a1:ec:89:
         84:cc:80:51:83:38:e0:53:e7:fb:d8:ba:19:84:ce:0e:a4:41:
         0b:70:b8:6d:be:3d:33:65:2e:1b:a9:fd:e9:00:7a:ed:02:4e:
         d6:29:9d:1a:14:df:d9:d0:b0:a2:ad:93:0f:57:61:4a:1e:c8:
         ba:c3:9a:04:7c:70:9e:d2:56:c6:c5:b5:74:f2:56:9e:08:3c:
         ac:c8:90:ff:01:2d:04:5a:00:40:15:3f:8d:5d:b3:25:a9:e7:
         64:d3:29:e3:83:82:a4:82:02:cb:a0:66:6b:04:90:af:41:22:
         9b:57:0e:21:31:41:02:b6:33:f8:ba:42:f8:b4:dc:8a:de:4e:
         52:f3:47:56:38:3b:b7:fa:3a:4a:c1:d2:b2:83:c6:6c:44:ae:
         e0:83:86:22:ca:4d:28:01:98:dc:07:f8:f4:78:f7:57:43:eb:
         41:71:db:99:d9:c6:eb:e6:df:cd:e4:32:13:2a:9b:82:88:a9:
         47:c4:3a:cc:8d:6e:47:03:04:a7:3b:3f:04:f5:d4:1f:96:d1:
         89:0c:3c:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIrcv+BIH6DB0pWijx6lZk4l9oy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwRTc5NDY2MzA2NDRENjVEMDQ5QzdGRDU0QzMzRDYz
MjRFN0IwQTAeFw0yMzA5MjAxMzQzNTBaFw0yMzA5MjExMzUxNTBaMDMxMTAvBgNV
BAMTKEMzRjY1QzJFRDFDMUMyQzlFODMzMjY4RjFDQUE5OTlBNkE0RjdGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaGsji641Cvxgg44tnqP9krzA
2VA+D13AyVUegQFQ8QEkA1lrG1IjpAr9xdtMA6NinWWyvReMWmGztGSNIw8N+L+7
vL64MCCtD/QXUvCTUNM1JuvXyA1sQhWbZ9jFaiaUe34bE9ukOz4T/g+o/hMT4aqS
v8Lo+y9ZOjqwtrv/yTukxkFxS0NB8bd8/SH55wqIsZB8Dn7imBAp0CJYpiMZolga
OOR9FNGFqhPKMRN8el6+OIwvh7SgrEBHrQDTuj/infcBIELLDhtGF+scx6aMu2XH
EdCtTLRZ+10ukW6wP9XT/vZcsjCsNAFiLIotU02cQeSUdIoY907qmSFfXsaDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUw/ZcLtHBwsnoMyaPHKqZmmpPf1owHwYDVR0j
BBgwFoAUhw55RmMGRNZdBJx/1Uwz1jJOewowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0aXpqUUVOMVY1cmhoOUFNcjNnSENqUWFBRUZ5RVNTMVdmYm9mZnpX
Q04vMC84NzBFNzk0NjYzMDY0NEQ2NUQwNDlDN0ZENTRDMzNENjMyNEU3QjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3MEU3OTQ2NjMwNjQ0RDY1
RDA0OUM3RkQ1NEMzM0Q2MzI0RTdCMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXB0aXpqUUVOMVY1cmhoOUFNcjNnSENqUWFBRUZ5RVNTMVdmYm9mZnpXQ04vMC84
NzBFNzk0NjYzMDY0NEQ2NUQwNDlDN0ZENTRDMzNENjMyNEU3QjBBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvp2U6yKGrMFshdjwlvbAHo/U3nAej7wTuJedC0f9Z1SXpl6UGJuIc6pLo8fu
aVqPuYe2oeyJhMyAUYM44FPn+9i6GYTODqRBC3C4bb49M2UuG6n96QB67QJO1imd
GhTf2dCwoq2TD1dhSh7IusOaBHxwntJWxsW1dPJWngg8rMiQ/wEtBFoAQBU/jV2z
JannZNMp44OCpIICy6BmawSQr0Eim1cOITFBArYz+LpC+LTcit5OUvNHVjg7t/o6
SsHSsoPGbESu4IOGIspNKAGY3Af49Hj3V0PrQXHbmdnG6+bfzeQyEyqbgoipR8Q6
zI1uRwMEpzs/BPXUH5bRiQw89g==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:37 2025 by rpki-client