Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.mft
File:                     84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.mft (raw, json)
Hash identifier:          KRNXxcPYVpnaGndNoNFZQu50H5DfiT48YkRizf/mTjQ=
Subject key identifier:   D7:E3:41:D1:EA:46:77:50:AD:14:F5:CD:23:5D:3D:A1:97:FB:E9:66
Authority key identifier: 84:A2:A8:3B:F4:A8:B6:A6:0A:56:12:FD:1A:3C:E8:80:AD:88:06:2B
Certificate issuer:       /CN=84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B
Certificate serial:       279AC914346B659971E6B946FCC4F3F67537C209
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.mft
Manifest number:          06
Signing time:             Mon 25 Mar 2024 18:08:22 +0000
Manifest this update:     Mon 25 Mar 2024 18:03:22 +0000
Manifest next update:     Tue 26 Mar 2024 20:49:22 +0000
Files and hashes:         1: 84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.crl (hash: Hj8AAaocF8Hm4rHn47REyq8BsSyytnP9YPMy+/rkDGk=)
                          2: 323830343a383135633a3a2f33332d3333203d3e20323732343439.roa (hash: H9/IxuoRIYW8a9ERvqs7rDg+NoOmgRW317BKW6PSvss=)
                          3: 323830343a383135633a3a2f33322d3332203d3e20323732343439.roa (hash: nodx1Gqv9yCzc32FSRH3hx0BJSvQ4lgZasQZYcw+nG0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9a:c9:14:34:6b:65:99:71:e6:b9:46:fc:c4:f3:f6:75:37:c2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B
        Validity
            Not Before: Mar 25 18:03:22 2024 GMT
            Not After : Mar 26 20:49:22 2024 GMT
        Subject: CN=D7E341D1EA467750AD14F5CD235D3DA197FBE966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:d7:6c:b3:d9:3a:4d:33:a0:d1:f5:51:ac:
                    51:5f:4d:32:b4:79:89:08:05:a1:e0:1d:47:3a:ca:
                    92:e0:15:3b:b4:66:36:44:d7:30:9d:68:c4:c0:71:
                    86:06:a2:b6:90:66:c6:4b:fc:c6:1a:10:c5:70:f1:
                    03:7a:47:d0:4a:d5:1c:24:9a:05:a4:89:06:39:4b:
                    76:ef:fa:cf:23:44:74:b6:33:14:5e:93:13:07:53:
                    94:18:31:01:bb:70:88:df:47:f3:13:84:61:b4:e1:
                    6e:87:05:61:b3:7d:8f:57:03:9f:a8:2e:11:48:a7:
                    ec:11:32:65:48:8e:11:a0:73:12:54:c7:b8:c5:02:
                    b6:c2:41:b8:a7:09:2e:3c:5c:98:45:3f:d8:66:31:
                    18:38:a9:f7:b2:94:ec:a7:1d:53:f4:a5:01:6f:1b:
                    cb:55:4f:e7:dd:dc:32:30:3f:43:71:44:3b:a2:c6:
                    15:c5:bb:38:2b:3e:2a:ed:bc:2d:40:35:f2:62:47:
                    5f:39:8c:b9:e2:4c:73:3c:e1:e2:e4:68:8f:8c:08:
                    79:2a:95:0c:2d:c9:db:72:db:7c:39:4b:7e:e3:d5:
                    1e:08:08:4d:3a:c4:c6:33:b5:e9:a4:80:83:1c:e7:
                    7c:ea:e6:07:1d:9b:22:85:05:7f:03:20:3d:25:d0:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E3:41:D1:EA:46:77:50:AD:14:F5:CD:23:5D:3D:A1:97:FB:E9:66
            X509v3 Authority Key Identifier:
                keyid:84:A2:A8:3B:F4:A8:B6:A6:0A:56:12:FD:1A:3C:E8:80:AD:88:06:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/84A2A83BF4A8B6A60A5612FD1A3CE880AD88062B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ad:96:18:7b:eb:14:2f:d0:73:13:53:82:e5:0d:e7:80:7c:
         91:3c:0c:fc:cf:55:69:bd:f8:a6:c7:ce:92:97:b1:b4:cb:e4:
         c9:b4:91:8c:a3:cb:fd:d0:d2:e8:63:0a:7c:60:e3:6e:f3:40:
         6d:5f:55:6b:d8:b0:a4:64:15:5a:d2:98:e7:1f:65:85:37:ae:
         2e:72:e2:22:ce:97:af:4f:cc:bd:d3:44:6b:38:a2:84:12:39:
         41:89:ca:22:e4:f8:12:40:01:ef:ae:cf:bb:10:01:12:aa:5d:
         8c:93:2d:d7:ce:3f:5e:05:17:e5:13:5f:b8:1a:fc:13:e5:b6:
         64:e9:c8:9f:a2:19:25:14:08:d6:c2:ff:ba:ca:5a:67:28:d1:
         30:5b:d4:cb:2e:d2:c5:6c:da:3b:ea:ae:0e:a1:7c:a1:81:0f:
         6f:b4:6e:8b:4f:92:e8:4f:f1:f8:2b:7b:34:b9:ea:55:87:78:
         27:59:58:b5:a0:b6:38:13:01:15:33:53:fb:00:1a:2f:82:eb:
         b1:f1:15:6b:56:84:f4:4e:d7:e6:ed:0a:c7:a8:9b:06:65:5d:
         e8:66:af:df:1a:b0:14:46:3b:70:ad:30:be:91:60:69:de:d4:
         77:58:43:cd:ac:d2:3b:cd:c8:52:ab:2b:70:c3:23:e8:88:18:
         b9:d6:e1:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJ5rJFDRrZZlx5rlG/MTz9nU3wgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRBMkE4M0JGNEE4QjZBNjBBNTYxMkZEMUEzQ0U4ODBB
RDg4MDYyQjAeFw0yNDAzMjUxODAzMjJaFw0yNDAzMjYyMDQ5MjJaMDMxMTAvBgNV
BAMTKEQ3RTM0MUQxRUE0Njc3NTBBRDE0RjVDRDIzNUQzREExOTdGQkU5NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Jddss9k6TTOg0fVRrFFfTTK0
eYkIBaHgHUc6ypLgFTu0ZjZE1zCdaMTAcYYGoraQZsZL/MYaEMVw8QN6R9BK1Rwk
mgWkiQY5S3bv+s8jRHS2MxRekxMHU5QYMQG7cIjfR/MThGG04W6HBWGzfY9XA5+o
LhFIp+wRMmVIjhGgcxJUx7jFArbCQbinCS48XJhFP9hmMRg4qfeylOynHVP0pQFv
G8tVT+fd3DIwP0NxRDuixhXFuzgrPirtvC1ANfJiR185jLniTHM84eLkaI+MCHkq
lQwtydty23w5S37j1R4ICE06xMYztemkgIMc53zq5gcdmyKFBX8DID0l0EXfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1+NB0epGd1CtFPXNI109oZf76WYwHwYDVR0j
BBgwFoAUhKKoO/SotqYKVhL9GjzogK2IBiswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXI1UmdnS2s1V3lZc1VrcXk5VHhiZGFCQ3lNWjU3d3loVnh6WVRkRWhF
UFMvMC84NEEyQTgzQkY0QThCNkE2MEE1NjEyRkQxQTNDRTg4MEFEODgwNjJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg0QTJBODNCRjRBOEI2QTYw
QTU2MTJGRDFBM0NFODgwQUQ4ODA2MkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXI1UmdnS2s1V3lZc1VrcXk5VHhiZGFCQ3lNWjU3d3loVnh6WVRkRWhFUFMvMC84
NEEyQTgzQkY0QThCNkE2MEE1NjEyRkQxQTNDRTg4MEFEODgwNjJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbK2WGHvrFC/QcxNTguUN54B8kTwM/M9Vab34psfOkpextMvkybSRjKPL/dDS
6GMKfGDjbvNAbV9Va9iwpGQVWtKY5x9lhTeuLnLiIs6Xr0/MvdNEaziihBI5QYnK
IuT4EkAB767PuxABEqpdjJMt184/XgUX5RNfuBr8E+W2ZOnIn6IZJRQI1sL/uspa
ZyjRMFvUyy7SxWzaO+quDqF8oYEPb7Rui0+S6E/x+Ct7NLnqVYd4J1lYtaC2OBMB
FTNT+wAaL4LrsfEVa1aE9E7X5u0Kx6ibBmVd6Gav3xqwFEY7cK0wvpFgad7Ud1hD
zazSO83IUqsrcMMj6IgYudbhgg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:30 2025 by rpki-client