Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft
File:                     09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft (raw, json)
Hash identifier:          0q3ACxJ018ZTCR628JUXmR9tnJ/6K69PG8000Zk/m+A=
Subject key identifier:   78:30:C7:3B:77:D2:37:AA:87:C8:87:57:68:83:AE:83:20:24:56:AC
Authority key identifier: 09:D2:BD:A1:1F:5F:30:E7:2C:A0:2E:1F:43:CC:EB:58:3E:00:71:A3
Certificate issuer:       /CN=09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3
Certificate serial:       0DC07CB2812961CDEBF605445AEED53C1C138B44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft
Manifest number:          01B1
Signing time:             Fri 21 Feb 2025 12:06:11 +0000
Manifest this update:     Fri 21 Feb 2025 12:01:11 +0000
Manifest next update:     Sat 22 Feb 2025 15:41:11 +0000
Files and hashes:         1: 3137302e38322e3136342e302f32322d3234203d3e203532363730.roa (hash: Lcr6WgrPYpmxY4afXWgfP+7OOQAa+Z34RvH72vfxh0s=)
                          2: 3137372e36372e3138342e302f32312d3234203d3e203532363730.roa (hash: eN6l4W1aibNbdKMLULpBJiMfbRnSbGbysLtr4ND0OqE=)
                          3: 323830343a313132303a3a2f33322d3334203d3e203532363730.roa (hash: 4/hUPCejGXEr3H6ud3OZea74hY+DXNudHVxfiJEvBVo=)
                          4: 09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.crl (hash: lzRQWGS5Qtm7gC9sukHR5YKGnmnngQ/hBM/Z/WldvXc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c0:7c:b2:81:29:61:cd:eb:f6:05:44:5a:ee:d5:3c:1c:13:8b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3
        Validity
            Not Before: Feb 21 12:01:11 2025 GMT
            Not After : Feb 22 15:41:11 2025 GMT
        Subject: CN=7830C73B77D237AA87C887576883AE83202456AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:b3:78:b4:16:86:ca:8b:61:7f:5c:3f:a9:
                    28:60:99:c6:9e:cb:c2:16:ed:fe:e1:ba:b1:cc:c0:
                    02:6f:b5:3f:8e:48:45:a9:51:f6:29:45:c9:3c:91:
                    e5:e2:8d:52:98:88:2b:88:b1:2d:df:0d:ed:ce:c7:
                    af:49:3a:cd:71:0e:22:90:83:64:4e:9c:b1:9d:62:
                    71:01:56:2c:11:80:49:3f:ea:18:02:ce:db:84:dc:
                    b4:2d:6d:09:fc:1f:90:21:72:c6:e4:c7:3e:43:65:
                    9f:c3:a5:75:a0:d4:01:8f:77:5f:8e:fb:38:fc:f8:
                    91:ab:63:1c:f4:30:0a:df:55:df:a2:51:e8:e2:9b:
                    9d:d1:ba:4d:19:af:e8:a0:81:98:0f:69:90:5c:e5:
                    57:d5:70:37:6f:54:d0:ea:7a:fd:56:8f:a8:d7:69:
                    82:2e:c8:44:ba:fa:14:38:2c:9c:7b:56:c6:6b:ad:
                    27:24:9b:e9:24:61:5b:02:f2:43:41:13:75:99:26:
                    0a:5c:df:a7:91:2f:dd:5f:c4:80:54:12:28:21:1d:
                    8e:40:7c:76:45:b1:ba:81:08:1f:68:4c:8c:82:11:
                    59:6f:de:2f:4e:6d:a9:3a:d1:4f:a9:cf:e6:f5:34:
                    f0:41:16:a2:df:b4:c7:e1:fb:a9:c3:52:2c:1e:a6:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:C7:3B:77:D2:37:AA:87:C8:87:57:68:83:AE:83:20:24:56:AC
            X509v3 Authority Key Identifier:
                keyid:09:D2:BD:A1:1F:5F:30:E7:2C:A0:2E:1F:43:CC:EB:58:3E:00:71:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:61:37:ba:fd:52:38:4d:77:11:41:d7:9e:2f:78:8b:fe:a5:
         6c:cd:99:6e:d4:0f:62:47:b6:77:b5:4d:e9:28:7e:f2:8c:c0:
         01:46:f4:bd:a4:20:e4:b7:6c:4b:a0:78:19:f3:f6:ae:8d:2c:
         d8:8b:f6:de:70:67:6e:fc:a8:fe:b4:ba:be:f7:d4:62:25:5d:
         04:47:1a:82:ba:ea:35:b7:34:e5:2d:95:8d:71:63:23:63:56:
         5c:c6:75:9e:08:fc:ac:77:3d:b7:38:a0:64:2d:be:fe:8b:03:
         9a:7d:63:18:cb:b2:c5:75:ee:b7:6f:f1:7d:eb:62:26:c6:42:
         36:71:78:46:e6:26:a0:8b:54:f9:72:79:77:13:e4:6a:7a:69:
         fb:de:0e:ac:24:c9:76:f1:6d:a2:4c:36:33:15:e8:59:a0:6b:
         89:1f:94:e2:32:ef:75:37:4b:e9:7c:df:32:0c:40:5b:0c:e6:
         ac:1a:94:ee:0f:64:0b:17:d3:79:c0:ca:ee:db:bf:f7:48:7c:
         43:66:6a:4d:40:21:95:c0:6c:59:c0:97:1f:25:ce:01:60:e5:
         14:4f:9b:b6:2b:8d:f3:0b:3c:c6:c5:ac:f4:7e:74:ef:82:3a:
         69:c2:ee:f8:c6:bd:ab:af:34:f7:e4:22:fe:36:0a:a8:0e:57:
         9d:ee:7f:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDcB8soEpYc3r9gVEWu7VPBwTi0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlEMkJEQTExRjVGMzBFNzJDQTAyRTFGNDNDQ0VCNTgz
RTAwNzFBMzAeFw0yNTAyMjExMjAxMTFaFw0yNTAyMjIxNTQxMTFaMDMxMTAvBgNV
BAMTKDc4MzBDNzNCNzdEMjM3QUE4N0M4ODc1NzY4ODNBRTgzMjAyNDU2QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwrN4tBaGyothf1w/qShgmcae
y8IW7f7hurHMwAJvtT+OSEWpUfYpRck8keXijVKYiCuIsS3fDe3Ox69JOs1xDiKQ
g2ROnLGdYnEBViwRgEk/6hgCztuE3LQtbQn8H5Ahcsbkxz5DZZ/DpXWg1AGPd1+O
+zj8+JGrYxz0MArfVd+iUejim53Ruk0Zr+iggZgPaZBc5VfVcDdvVNDqev1Wj6jX
aYIuyES6+hQ4LJx7VsZrrSckm+kkYVsC8kNBE3WZJgpc36eRL91fxIBUEighHY5A
fHZFsbqBCB9oTIyCEVlv3i9Obak60U+pz+b1NPBBFqLftMfh+6nDUiwepirDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeDDHO3fSN6qHyIdXaIOugyAkVqwwHwYDVR0j
BBgwFoAUCdK9oR9fMOcsoC4fQ8zrWD4AcaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVBXdVRFRmtzU054ZHJBWTlDN2dFNzRrdE1NdmhvZVNhYXMzQ2V2akFF
RmEvMS8wOUQyQkRBMTFGNUYzMEU3MkNBMDJFMUY0M0NDRUI1ODNFMDA3MUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDJCREExMUY1RjMwRTcy
Q0EwMkUxRjQzQ0NFQjU4M0UwMDcxQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVBXdVRFRmtzU054ZHJBWTlDN2dFNzRrdE1NdmhvZVNhYXMzQ2V2akFFRmEvMS8w
OUQyQkRBMTFGNUYzMEU3MkNBMDJFMUY0M0NDRUI1ODNFMDA3MUEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjWE3uv1SOE13EUHXni94i/6lbM2ZbtQPYke2d7VN6Sh+8ozAAUb0vaQg5Lds
S6B4GfP2ro0s2Iv23nBnbvyo/rS6vvfUYiVdBEcagrrqNbc05S2VjXFjI2NWXMZ1
ngj8rHc9tzigZC2+/osDmn1jGMuyxXXut2/xfetiJsZCNnF4RuYmoItU+XJ5dxPk
anpp+94OrCTJdvFtokw2MxXoWaBriR+U4jLvdTdL6XzfMgxAWwzmrBqU7g9kCxfT
ecDK7tu/90h8Q2ZqTUAhlcBsWcCXHyXOAWDlFE+btiuN8ws8xsWs9H5074I6acLu
+Ma9q6809+Qi/jYKqA5Xne5/PQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:07:53 2025 by rpki-client