Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.mft
File:                     EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.mft (raw, json)
Hash identifier:          mD0f2qmBbDml96Rb7ywrVt788ug75oucRVoczREXafo=
Subject key identifier:   06:59:AC:87:ED:AC:FB:EF:42:20:36:C9:E1:BC:F7:66:DA:47:CE:77
Authority key identifier: EA:C5:22:1F:CF:24:AF:9D:3D:00:43:0E:78:24:20:5E:5F:92:E2:BC
Certificate issuer:       /CN=EAC5221FCF24AF9D3D00430E7824205E5F92E2BC
Certificate serial:       252A9C2FB30AE1DE26B07DE0237ABC5DE77E4225
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.mft
Manifest number:          BF
Signing time:             Sat 01 Feb 2025 20:03:28 +0000
Manifest this update:     Sat 01 Feb 2025 19:58:28 +0000
Manifest next update:     Sun 02 Feb 2025 23:12:28 +0000
Files and hashes:         1: 3230302e3130372e3131362e302f32322d3332203d3e20323730323438.roa (hash: d65hiZJoUrZg4l177gqzZFgq9ZTC8jcY2JNuklPL9Yc=)
                          2: EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.crl (hash: /+nQ/VrNe9umVHWAOBiTtgARSJWvMG5q8y46udLeklY=)
                          3: 323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (hash: 4B2SUP0u30696QaJziz1KXCadg3k4SB6atjENxD89X4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2a:9c:2f:b3:0a:e1:de:26:b0:7d:e0:23:7a:bc:5d:e7:7e:42:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC5221FCF24AF9D3D00430E7824205E5F92E2BC
        Validity
            Not Before: Feb  1 19:58:28 2025 GMT
            Not After : Feb  2 23:12:28 2025 GMT
        Subject: CN=0659AC87EDACFBEF422036C9E1BCF766DA47CE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:29:a0:7d:3f:14:ad:56:cb:1e:9f:96:c4:
                    9d:ea:d2:18:60:4c:03:36:8b:50:5f:18:70:78:22:
                    db:69:d8:6b:47:94:0e:95:55:1a:80:16:f5:f7:65:
                    e1:21:f1:94:76:29:46:3b:9c:f6:f3:7b:8c:af:ee:
                    c5:43:63:b2:4b:cb:b6:a7:2c:01:06:4c:24:cc:ae:
                    4c:9c:61:02:d8:38:a5:56:53:56:43:04:24:cc:65:
                    88:d1:94:f3:79:76:22:47:60:4b:07:df:08:cb:38:
                    fa:c8:cb:a7:fc:86:7b:6f:12:27:ed:f0:07:00:e0:
                    ca:a2:e7:43:4e:f3:74:d8:e5:27:99:0d:c0:36:42:
                    92:17:06:19:25:e2:1d:b3:37:2b:91:24:20:b7:cd:
                    2b:2b:7f:c3:18:49:25:ce:44:b4:5a:a2:bb:ce:d1:
                    21:89:0a:85:54:39:63:1e:95:b4:55:b5:f0:27:90:
                    9e:94:71:8f:cb:9d:8a:cf:c4:e9:5a:90:3c:4b:41:
                    24:9c:c7:28:d3:6c:8b:b6:fd:5b:4f:d7:52:2b:ff:
                    c6:0d:3e:2a:1c:c1:1b:b3:7c:13:4d:f2:5c:6c:29:
                    ae:2b:7a:41:8a:70:e9:f7:83:fb:3a:23:94:ca:2c:
                    d8:4f:6d:1f:f3:ab:9a:ec:c3:b0:85:b8:66:f3:e3:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:59:AC:87:ED:AC:FB:EF:42:20:36:C9:E1:BC:F7:66:DA:47:CE:77
            X509v3 Authority Key Identifier:
                keyid:EA:C5:22:1F:CF:24:AF:9D:3D:00:43:0E:78:24:20:5E:5F:92:E2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:60:5b:3e:a4:b2:0f:f8:17:fc:5e:6b:10:1a:24:d0:f9:9e:
         38:0d:41:e1:68:ac:f6:d2:30:f1:dc:0b:18:21:3f:1c:5a:0d:
         ab:02:16:bc:11:d4:7b:f9:cb:a2:d0:75:d0:68:d2:bf:e7:87:
         69:3f:be:09:92:9b:35:ff:f2:e2:f4:06:b1:b6:52:7b:96:c3:
         5e:46:48:e1:18:09:f3:87:7f:01:93:f4:fa:91:8d:ee:40:11:
         f3:3e:fe:f0:b6:1a:fd:af:65:5a:b3:1a:ff:58:a0:65:eb:be:
         9a:36:c9:c8:d8:4f:ff:d3:16:55:ad:61:03:64:11:d0:00:4a:
         80:58:61:d8:83:22:ba:80:c2:a7:84:60:61:21:3c:d8:3f:94:
         e6:96:63:ae:7b:cf:42:72:19:5a:ff:e7:83:1e:a4:9b:79:02:
         fc:fb:6d:76:6b:8f:80:fb:ad:6c:0a:f7:e7:af:2d:b9:38:01:
         21:64:77:36:d5:b6:8d:fd:4f:b4:14:98:23:1b:3e:e9:ad:9f:
         b6:de:ec:ce:47:7f:fe:cb:c4:3b:9d:cb:e7:85:0d:48:c5:8f:
         45:be:a1:eb:dc:d6:67:41:47:b2:04:3b:19:7e:89:f4:5f:3f:
         ed:79:9f:83:1c:d5:3f:5b:11:60:cf:c4:1d:85:d8:f0:43:53:
         ea:4c:06:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJSqcL7MK4d4msH3gI3q8Xed+QiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFDNTIyMUZDRjI0QUY5RDNEMDA0MzBFNzgyNDIwNUU1
RjkyRTJCQzAeFw0yNTAyMDExOTU4MjhaFw0yNTAyMDIyMzEyMjhaMDMxMTAvBgNV
BAMTKDA2NTlBQzg3RURBQ0ZCRUY0MjIwMzZDOUUxQkNGNzY2REE0N0NFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NimgfT8UrVbLHp+WxJ3q0hhg
TAM2i1BfGHB4Ittp2GtHlA6VVRqAFvX3ZeEh8ZR2KUY7nPbze4yv7sVDY7JLy7an
LAEGTCTMrkycYQLYOKVWU1ZDBCTMZYjRlPN5diJHYEsH3wjLOPrIy6f8hntvEift
8AcA4Mqi50NO83TY5SeZDcA2QpIXBhkl4h2zNyuRJCC3zSsrf8MYSSXORLRaorvO
0SGJCoVUOWMelbRVtfAnkJ6UcY/LnYrPxOlakDxLQSScxyjTbIu2/VtP11Ir/8YN
PiocwRuzfBNN8lxsKa4rekGKcOn3g/s6I5TKLNhPbR/zq5rsw7CFuGbz48DXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBlmsh+2s++9CIDbJ4bz3ZtpHzncwHwYDVR0j
BBgwFoAU6sUiH88kr509AEMOeCQgXl+S4rwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUhFTmkzREJlaER0TVRtQk1TMXlSQTMzQWlWUlA1TWtpS3o5d01lNVFx
bjcvMC9FQUM1MjIxRkNGMjRBRjlEM0QwMDQzMEU3ODI0MjA1RTVGOTJFMkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQzUyMjFGQ0YyNEFGOUQz
RDAwNDMwRTc4MjQyMDVFNUY5MkUyQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUhFTmkzREJlaER0TVRtQk1TMXlSQTMzQWlWUlA1TWtpS3o5d01lNVFxbjcvMC9F
QUM1MjIxRkNGMjRBRjlEM0QwMDQzMEU3ODI0MjA1RTVGOTJFMkJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd2BbPqSyD/gX/F5rEBok0PmeOA1B4Wis9tIw8dwLGCE/HFoNqwIWvBHUe/nL
otB10GjSv+eHaT++CZKbNf/y4vQGsbZSe5bDXkZI4RgJ84d/AZP0+pGN7kAR8z7+
8LYa/a9lWrMa/1igZeu+mjbJyNhP/9MWVa1hA2QR0ABKgFhh2IMiuoDCp4RgYSE8
2D+U5pZjrnvPQnIZWv/ngx6km3kC/PttdmuPgPutbAr3568tuTgBIWR3NtW2jf1P
tBSYIxs+6a2ftt7szkd//svEO53L54UNSMWPRb6h69zWZ0FHsgQ7GX6J9F8/7Xmf
gxzVP1sRYM/EHYXY8ENT6kwGSA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:12 2025 by rpki-client