Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
File:                     06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft (raw, json)
Hash identifier:          dFQo8eEbGszedht2MwpKrRcA4ONt+b9gJUlR92jFyn4=
Subject key identifier:   D5:13:27:4A:53:9C:CA:5C:64:44:FC:80:0F:4E:19:7F:B8:10:83:95
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       6B19965C546F9C7187FAEB7F55254F72003BC226
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
Manifest number:          01E0
Signing time:             Fri 28 Mar 2025 21:10:00 +0000
Manifest this update:     Fri 28 Mar 2025 21:05:00 +0000
Manifest next update:     Sat 29 Mar 2025 23:02:00 +0000
Files and hashes:         1: 323830343a323530343a3a2f33322d3332203d3e203532373038.roa (hash: bdoIk1Ag9RA6dAVTEOU+HWP/8MI8aK3J9BHrjAzueqg=)
                          2: 06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl (hash: /Cgf3Og/uDGJQQNjh/4A8az7AAR6uILM5nWNronU6jE=)
                          3: 3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa (hash: VJikl/3nm/8I6Y6J82gL5vQrKAHsyoQCf/eCIkwxPJ0=)
                          4: 3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (hash: b6iIVydTh43XokrS/1WVUXDbFQjVZ4DainVRRNA3Ucs=)
                          5: 3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa (hash: 6SMyLXYm7o+6nD4HiC1sx57AD5tgiDGsqISt31nmv/M=)
                          6: 3137372e38342e34302e302f32332d3233203d3e203532373038.roa (hash: txbtQ4+KsBmDnzeVugvTddlXwMd2CaM4d5jfa1CwLzo=)
                          7: 3137372e38342e34322e302f32332d3233203d3e203532373038.roa (hash: YvwgD6fKowYuzWRPQe0uYtKEhEj2PboBzIToCJOMGKo=)
                          8: 3137372e38342e34302e302f32322d3232203d3e203532373038.roa (hash: 8lAxpoHN0cPLmBISxaokeboqnT1u07//nilPkj7iMjg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:19:96:5c:54:6f:9c:71:87:fa:eb:7f:55:25:4f:72:00:3b:c2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Mar 28 21:05:00 2025 GMT
            Not After : Mar 29 23:02:00 2025 GMT
        Subject: CN=D513274A539CCA5C6444FC800F4E197FB8108395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:ce:06:30:f6:66:eb:23:78:60:cd:b5:30:
                    2c:10:0d:96:16:e0:77:78:e6:56:e5:b1:20:92:4f:
                    b6:40:68:8c:7d:5f:fc:4b:3a:2d:8e:c2:26:df:23:
                    07:b3:d4:c4:af:5f:d4:99:11:51:86:0d:d9:19:0d:
                    11:96:14:66:c4:c7:da:d9:27:f2:97:ca:a1:7b:09:
                    8b:3c:84:fd:34:1b:48:57:c4:7f:4d:d7:65:74:95:
                    18:c2:47:c4:e2:b4:d6:24:3b:b8:2d:67:89:f3:59:
                    50:28:6a:83:b0:0e:f4:f6:48:24:3b:b7:f6:29:06:
                    a0:fe:08:30:42:a3:c9:8e:98:84:a6:02:cd:2e:31:
                    b6:c3:8f:12:ec:8d:6e:60:20:6a:bc:0b:28:03:97:
                    ef:66:96:8b:da:06:32:c2:21:f3:b7:3f:be:8d:dd:
                    a2:89:19:be:66:22:e5:2b:2a:08:1c:bc:34:82:d8:
                    24:a9:80:0f:c0:7b:d6:1d:76:44:82:64:b9:ff:f3:
                    5a:38:1c:b0:c3:9d:89:b9:6b:c4:45:9e:9e:d0:61:
                    80:0d:62:11:0e:9e:32:1e:25:b8:0b:a3:33:11:31:
                    ec:8b:08:df:a6:49:f2:19:37:67:40:37:ad:54:3c:
                    41:90:13:01:9e:c7:9c:ba:96:17:30:82:84:ea:eb:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:13:27:4A:53:9C:CA:5C:64:44:FC:80:0F:4E:19:7F:B8:10:83:95
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:2a:29:4b:ac:70:c0:dc:c5:c3:52:f4:de:e3:25:36:c3:22:
         c7:ba:46:f9:b2:9e:9b:fd:da:70:2a:19:6b:a1:e1:59:6c:f4:
         bd:b4:a4:f6:41:4b:e4:0f:f9:04:ed:b0:5d:25:df:fe:16:76:
         02:8e:f7:9e:f0:c9:f3:8a:33:35:19:88:b1:aa:96:72:49:42:
         6d:93:68:5d:ae:35:0c:bc:8b:67:03:17:d8:9d:e1:54:b5:a8:
         9c:d6:e9:c8:f9:ea:44:cd:74:42:d9:25:fb:5e:87:0a:24:9a:
         6b:85:8c:2e:93:ff:1d:42:4c:72:40:ef:6b:0b:c4:02:4b:d9:
         59:0d:11:d8:13:49:ef:1a:f7:fa:a7:2f:38:20:a3:26:bd:08:
         a3:1b:8f:a3:a2:5e:c1:cf:83:8b:30:f2:8c:72:ad:ae:ba:e7:
         5d:e5:c7:ea:68:ed:69:31:35:29:97:ff:e5:b3:e1:00:b5:ce:
         80:14:1e:17:23:50:34:ff:9c:c4:b2:2a:1c:c9:bd:7a:10:c0:
         34:30:f0:35:97:1b:2b:ca:86:2a:50:c8:58:9e:cd:30:c8:cf:
         12:0a:5c:7f:f3:fa:b4:c3:eb:ac:55:68:cd:15:ff:d5:db:0f:
         6d:14:8f:cc:46:6a:a4:69:e3:d4:86:28:f9:a1:42:73:a1:60:
         41:7e:2e:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaxmWXFRvnHGH+ut/VSVPcgA7wiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxODVFMUFBQUJERUFFNDJFNTgxMjlCREVBNENGRUNG
MEM4RjdDQjAeFw0yNTAzMjgyMTA1MDBaFw0yNTAzMjkyMzAyMDBaMDMxMTAvBgNV
BAMTKEQ1MTMyNzRBNTM5Q0NBNUM2NDQ0RkM4MDBGNEUxOTdGQjgxMDgzOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kM4GMPZm6yN4YM21MCwQDZYW
4Hd45lblsSCST7ZAaIx9X/xLOi2OwibfIwez1MSvX9SZEVGGDdkZDRGWFGbEx9rZ
J/KXyqF7CYs8hP00G0hXxH9N12V0lRjCR8TitNYkO7gtZ4nzWVAoaoOwDvT2SCQ7
t/YpBqD+CDBCo8mOmISmAs0uMbbDjxLsjW5gIGq8CygDl+9mlovaBjLCIfO3P76N
3aKJGb5mIuUrKggcvDSC2CSpgA/Ae9YddkSCZLn/81o4HLDDnYm5a8RFnp7QYYAN
YhEOnjIeJbgLozMRMeyLCN+mSfIZN2dAN61UPEGQEwGex5y6lhcwgoTq67UXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1RMnSlOcylxkRPyAD04Zf7gQg5UwHwYDVR0j
BBgwFoAUBhheGqq96uQuWBKb3qTP7PDI98swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMS8wNjE4NUUxQUFBQkRFQUU0MkU1ODEyOUJERUE0Q0ZFQ0YwQzhGN0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MTg1RTFBQUFCREVBRTQy
RTU4MTI5QkRFQTRDRkVDRjBDOEY3Q0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhVZ00vMS8w
NjE4NUUxQUFBQkRFQUU0MkU1ODEyOUJERUE0Q0ZFQ0YwQzhGN0NCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0CopS6xwwNzFw1L03uMlNsMix7pG+bKem/3acCoZa6HhWWz0vbSk9kFL5A/5
BO2wXSXf/hZ2Ao73nvDJ84ozNRmIsaqWcklCbZNoXa41DLyLZwMX2J3hVLWonNbp
yPnqRM10Qtkl+16HCiSaa4WMLpP/HUJMckDvawvEAkvZWQ0R2BNJ7xr3+qcvOCCj
Jr0IoxuPo6Jewc+DizDyjHKtrrrnXeXH6mjtaTE1KZf/5bPhALXOgBQeFyNQNP+c
xLIqHMm9ehDANDDwNZcbK8qGKlDIWJ7NMMjPEgpcf/P6tMPrrFVozRX/1dsPbRSP
zEZqpGnj1IYo+aFCc6FgQX4u/g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:15:21 2025 by rpki-client