Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/26C3F59037D2310A5185C2544D1A4363ADC6451D.mft
File:                     26C3F59037D2310A5185C2544D1A4363ADC6451D.mft (raw, json)
Hash identifier:          1xSLIhSfffjHb8HFqTbkU/T3tvxnrUcdv5ntmWsBvFg=
Subject key identifier:   B4:18:F7:49:73:B9:ED:E4:C2:B0:00:75:5F:23:35:29:4C:AE:48:F0
Authority key identifier: 26:C3:F5:90:37:D2:31:0A:51:85:C2:54:4D:1A:43:63:AD:C6:45:1D
Certificate issuer:       /CN=26C3F59037D2310A5185C2544D1A4363ADC6451D
Certificate serial:       26E4DF2840BE599FE98BE087BE04758FAC97C5F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26C3F59037D2310A5185C2544D1A4363ADC6451D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/26C3F59037D2310A5185C2544D1A4363ADC6451D.mft
Manifest number:          22
Signing time:             Thu 06 Feb 2025 20:33:38 +0000
Manifest this update:     Thu 06 Feb 2025 20:28:38 +0000
Manifest next update:     Fri 07 Feb 2025 20:49:38 +0000
Files and hashes:         1: 323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (hash: Hej1nGIkIiPWQU4JgubikiLSOxcICfSdNrwVNoattP8=)
                          2: 3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa (hash: c7ikm3Or+nRy8/hPU2dX6upLyM2fwYINgtGX2o0oQ18=)
                          3: 26C3F59037D2310A5185C2544D1A4363ADC6451D.crl (hash: spZHRtUR7+BTvsg9ikK68vzdU8J/ujHfR7V5nTQbJjw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e4:df:28:40:be:59:9f:e9:8b:e0:87:be:04:75:8f:ac:97:c5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C3F59037D2310A5185C2544D1A4363ADC6451D
        Validity
            Not Before: Feb  6 20:28:38 2025 GMT
            Not After : Feb  7 20:49:38 2025 GMT
        Subject: CN=B418F74973B9EDE4C2B000755F2335294CAE48F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:21:9c:5c:cc:63:39:24:a1:3d:4a:a9:93:
                    fd:d6:20:12:a0:e1:d7:09:42:e2:c7:89:a9:ca:61:
                    cc:f8:06:0b:75:02:43:cd:87:74:d6:f4:f7:ab:54:
                    da:2a:d2:5e:09:86:4a:d2:0d:d8:ef:ec:17:7c:1c:
                    a7:65:7d:82:a7:d6:9d:6f:1e:77:e8:b5:73:30:4d:
                    ea:95:2d:6a:cc:fc:c5:6e:67:ec:c2:38:2e:8e:4a:
                    5e:d0:29:c8:a1:66:ac:22:4c:9b:de:5f:c1:a8:a7:
                    7a:9b:85:9f:a5:19:a9:99:3a:03:3e:08:08:44:5e:
                    ef:ee:37:ef:79:cb:0d:29:21:5d:91:7a:72:9c:8f:
                    c8:5b:b7:90:1d:17:5b:70:06:5c:3c:f7:f7:f4:6c:
                    87:43:cf:e3:8e:2e:29:d7:bc:28:c7:e4:c2:0a:26:
                    9f:bb:ec:95:6a:98:2f:16:fa:b1:7c:fe:6d:3e:dc:
                    cc:e9:eb:ed:30:9e:61:1f:4d:bd:4d:db:ea:88:ee:
                    4c:91:62:dc:9b:34:5f:1b:64:ba:53:af:62:d3:02:
                    57:69:01:c6:ff:62:c0:09:81:ed:fe:ca:df:f1:3f:
                    8f:0a:4a:61:ac:b6:e2:e6:f8:c1:58:f6:49:63:5b:
                    d0:08:cf:14:cb:54:4b:ba:18:2a:ce:6c:4a:18:d0:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:18:F7:49:73:B9:ED:E4:C2:B0:00:75:5F:23:35:29:4C:AE:48:F0
            X509v3 Authority Key Identifier:
                keyid:26:C3:F5:90:37:D2:31:0A:51:85:C2:54:4D:1A:43:63:AD:C6:45:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/26C3F59037D2310A5185C2544D1A4363ADC6451D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26C3F59037D2310A5185C2544D1A4363ADC6451D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/26C3F59037D2310A5185C2544D1A4363ADC6451D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:2d:7e:98:31:da:33:2a:76:6a:48:cd:59:df:e9:ab:64:
         89:43:f4:f3:59:6d:fc:68:33:29:c9:c4:1f:f9:ed:d6:7a:72:
         78:59:72:4f:9c:8c:5a:21:dc:d5:22:5e:cd:42:8e:38:b4:b5:
         d6:f8:f8:f6:3b:6f:f5:29:eb:90:23:ca:c7:fb:b2:a5:9f:c8:
         b2:99:f1:78:5d:e9:17:18:8a:6e:d2:da:ce:8a:80:0b:16:1b:
         13:3d:40:40:fe:e3:9a:53:e9:87:67:e7:2c:b7:61:be:6c:cd:
         7d:87:cd:bf:ee:16:1f:b8:b3:e0:37:39:fb:8e:5b:f8:e3:8d:
         0f:33:98:71:23:70:c2:1f:76:b1:15:f5:2c:d5:74:52:1d:b5:
         25:e4:fb:cc:37:74:a6:d3:41:47:69:43:98:fc:c8:12:7d:95:
         0e:a2:c9:f6:56:94:a8:b4:9e:40:f0:0a:12:78:d6:0a:61:80:
         1a:94:a2:96:12:71:e7:3f:09:f9:e6:bf:90:db:a6:da:96:e0:
         b9:e2:eb:a8:4a:62:6b:34:8a:52:5a:a8:f9:1f:fe:2f:2e:b9:
         7e:b5:10:ae:a0:28:73:59:6c:85:7e:b8:81:b6:6f:69:7a:4e:
         8a:f0:9e:10:10:96:26:75:0d:5b:e1:fa:3c:80:c6:d3:6d:0b:
         c7:09:2e:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJuTfKEC+WZ/pi+CHvgR1j6yXxfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZDM0Y1OTAzN0QyMzEwQTUxODVDMjU0NEQxQTQzNjNB
REM2NDUxRDAeFw0yNTAyMDYyMDI4MzhaFw0yNTAyMDcyMDQ5MzhaMDMxMTAvBgNV
BAMTKEI0MThGNzQ5NzNCOUVERTRDMkIwMDA3NTVGMjMzNTI5NENBRTQ4RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3iGcXMxjOSShPUqpk/3WIBKg
4dcJQuLHianKYcz4Bgt1AkPNh3TW9PerVNoq0l4JhkrSDdjv7Bd8HKdlfYKn1p1v
HnfotXMwTeqVLWrM/MVuZ+zCOC6OSl7QKcihZqwiTJveX8Gop3qbhZ+lGamZOgM+
CAhEXu/uN+95yw0pIV2RenKcj8hbt5AdF1twBlw89/f0bIdDz+OOLinXvCjH5MIK
Jp+77JVqmC8W+rF8/m0+3Mzp6+0wnmEfTb1N2+qI7kyRYtybNF8bZLpTr2LTAldp
Acb/YsAJge3+yt/xP48KSmGstuLm+MFY9kljW9AIzxTLVEu6GCrObEoY0GY1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtBj3SXO57eTCsAB1XyM1KUyuSPAwHwYDVR0j
BBgwFoAUJsP1kDfSMQpRhcJUTRpDY63GRR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtRc1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdG
dzMvMC8yNkMzRjU5MDM3RDIzMTBBNTE4NUMyNTQ0RDFBNDM2M0FEQzY0NTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2QzNGNTkwMzdEMjMxMEE1
MTg1QzI1NDREMUE0MzYzQURDNjQ1MUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWtRc1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdGdzMvMC8y
NkMzRjU5MDM3RDIzMTBBNTE4NUMyNTQ0RDFBNDM2M0FEQzY0NTFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADb8tfpgx2jMqdmpIzVnf6atkiUP081lt/GgzKcnEH/nt1npyeFlyT5yMWiHc
1SJezUKOOLS11vj49jtv9SnrkCPKx/uypZ/IspnxeF3pFxiKbtLazoqACxYbEz1A
QP7jmlPph2fnLLdhvmzNfYfNv+4WH7iz4Dc5+45b+OONDzOYcSNwwh92sRX1LNV0
Uh21JeT7zDd0ptNBR2lDmPzIEn2VDqLJ9laUqLSeQPAKEnjWCmGAGpSilhJx5z8J
+ea/kNum2pbgueLrqEpiazSKUlqo+R/+Ly65frUQrqAoc1lshX64gbZvaXpOivCe
EBCWJnUNW+H6PIDG020LxwkuOw==
-----END CERTIFICATE-----