Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.mft
File:                     960B59E054F187A995D7F6038A0BA2336525F190.mft (raw, json)
Hash identifier:          ox0D1HGlVSC1x2LVAJ73hz92XnDgkDuRiPgGVB2vhpU=
Subject key identifier:   C1:B5:6B:AD:E0:82:92:29:25:CF:CE:C8:A5:7F:AF:9D:67:6B:77:97
Authority key identifier: 96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90
Certificate issuer:       /CN=960B59E054F187A995D7F6038A0BA2336525F190
Certificate serial:       41B31CF2F48C22F82CC412EDD07A32CEF72A4401
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.mft
Manifest number:          67
Signing time:             Mon 17 Feb 2025 08:47:54 +0000
Manifest this update:     Mon 17 Feb 2025 08:42:54 +0000
Manifest next update:     Tue 18 Feb 2025 11:04:54 +0000
Files and hashes:         1: 3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa (hash: jGlanV1STMG/Oej0R2lWzWlGqA/cXJ7fD5UHhw7TmPo=)
                          2: 960B59E054F187A995D7F6038A0BA2336525F190.crl (hash: GLrZfyglTTXKMpU2iKhDav//Rc64Xcqg+6BK9b4pIxM=)
                          3: 323830343a336230303a3a2f33322d313238203d3e203532393733.roa (hash: hITTFz3G17ADsu5OJVwvXliaVHtQqb++7Rz27gQCkco=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b3:1c:f2:f4:8c:22:f8:2c:c4:12:ed:d0:7a:32:ce:f7:2a:44:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960B59E054F187A995D7F6038A0BA2336525F190
        Validity
            Not Before: Feb 17 08:42:54 2025 GMT
            Not After : Feb 18 11:04:54 2025 GMT
        Subject: CN=C1B56BADE082922925CFCEC8A57FAF9D676B7797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:61:f6:a6:f1:fc:fe:58:56:b5:91:72:3a:
                    c3:ba:53:53:2f:e0:2f:f1:1d:00:5c:34:03:f0:5e:
                    1a:40:9f:2f:2c:c0:19:07:40:6a:c9:73:65:2f:90:
                    a7:ba:1c:71:57:74:ce:07:a2:b0:db:b6:c0:74:f5:
                    e3:91:83:56:27:b0:7a:ad:72:8b:e1:70:6c:14:c3:
                    96:1c:8b:fb:ee:9e:41:1c:d7:83:4c:bf:fe:3e:4f:
                    dd:7a:88:66:9c:74:95:cc:41:a4:93:1e:0d:74:00:
                    f8:5f:5a:76:70:75:1e:fa:37:52:f8:2f:1e:9b:c7:
                    44:d0:a0:4c:dc:ef:d9:9d:03:e8:1f:6c:71:35:98:
                    06:13:da:bb:57:6c:6a:9e:29:51:47:64:ae:6f:82:
                    19:dc:d0:2e:39:d1:b5:3f:d0:e7:28:32:2b:31:35:
                    03:b4:72:bc:8e:80:a4:92:2e:1f:c3:37:b4:e4:d9:
                    5f:0f:2a:60:b1:79:f5:78:79:00:b5:70:8c:e1:57:
                    1f:d4:2f:a6:be:25:b3:fc:dc:5c:5e:93:18:9c:5a:
                    08:87:e7:d6:45:f4:2b:48:b4:2f:db:5e:55:ca:fb:
                    a5:51:51:fa:f3:6d:29:95:92:c0:35:1c:23:2f:dc:
                    92:b5:25:8b:33:89:27:fa:05:e4:f4:93:49:4d:79:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B5:6B:AD:E0:82:92:29:25:CF:CE:C8:A5:7F:AF:9D:67:6B:77:97
            X509v3 Authority Key Identifier:
                keyid:96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:3b:59:43:ed:9a:c4:d1:2f:7f:89:da:aa:cf:25:9c:35:
         94:7d:ed:eb:22:e8:df:8a:a7:d1:eb:94:35:7a:6d:65:47:a2:
         d6:96:30:70:34:91:39:ea:bd:bf:58:66:75:44:57:98:a1:0d:
         99:79:d2:8f:f4:ac:19:7a:a5:af:4a:fa:c6:5a:56:50:3e:fe:
         5f:8e:ec:82:5a:55:46:d4:6f:7a:ad:d0:b4:26:c4:e0:45:52:
         c9:85:bf:a3:b8:61:38:b1:31:f0:20:be:5f:68:e2:de:89:d8:
         5d:0a:f9:fe:4c:00:c4:b4:67:46:98:96:6f:bd:a2:d2:33:0a:
         47:f1:12:1c:4b:c2:e2:40:8a:26:c4:31:0b:8c:0a:26:fb:3b:
         88:54:8d:97:37:44:f6:f7:c1:bb:df:92:d5:ed:61:6a:10:25:
         99:67:e4:11:fc:db:39:04:20:00:1a:ae:5b:b4:e5:62:22:b9:
         7c:8e:e9:f2:1c:d9:c4:c4:de:d1:91:90:5c:8d:49:c4:c4:79:
         77:94:f8:b4:91:32:4d:df:2a:7f:8e:da:e1:d3:7e:8a:b1:e3:
         34:07:f1:6d:a9:07:79:86:36:d3:08:9e:a1:f8:c0:82:65:95:
         f2:d6:d6:fa:1a:7a:64:ab:df:db:39:02:18:9a:f8:a9:57:bf:
         93:8c:ea:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQbMc8vSMIvgsxBLt0HoyzvcqRAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYwQjU5RTA1NEYxODdBOTk1RDdGNjAzOEEwQkEyMzM2
NTI1RjE5MDAeFw0yNTAyMTcwODQyNTRaFw0yNTAyMTgxMTA0NTRaMDMxMTAvBgNV
BAMTKEMxQjU2QkFERTA4MjkyMjkyNUNGQ0VDOEE1N0ZBRjlENjc2Qjc3OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gWH2pvH8/lhWtZFyOsO6U1Mv
4C/xHQBcNAPwXhpAny8swBkHQGrJc2UvkKe6HHFXdM4HorDbtsB09eORg1YnsHqt
covhcGwUw5Yci/vunkEc14NMv/4+T916iGacdJXMQaSTHg10APhfWnZwdR76N1L4
Lx6bx0TQoEzc79mdA+gfbHE1mAYT2rtXbGqeKVFHZK5vghnc0C450bU/0OcoMisx
NQO0cryOgKSSLh/DN7Tk2V8PKmCxefV4eQC1cIzhVx/UL6a+JbP83FxekxicWgiH
59ZF9CtItC/bXlXK+6VRUfrzbSmVksA1HCMv3JK1JYsziSf6BeT0k0lNeWMHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwbVrreCCkiklz87IpX+vnWdrd5cwHwYDVR0j
BBgwFoAUlgtZ4FTxh6mV1/YDiguiM2Ul8ZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXVZSkpLWjdnQThNZXJTTVlvZjdNYlFON1kzaDloWllrNWJaU0JhYnRL
WHEvMC85NjBCNTlFMDU0RjE4N0E5OTVEN0Y2MDM4QTBCQTIzMzY1MjVGMTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MEI1OUUwNTRGMTg3QTk5
NUQ3RjYwMzhBMEJBMjMzNjUyNUYxOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXVZSkpLWjdnQThNZXJTTVlvZjdNYlFON1kzaDloWllrNWJaU0JhYnRLWHEvMC85
NjBCNTlFMDU0RjE4N0E5OTVEN0Y2MDM4QTBCQTIzMzY1MjVGMTkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOyc7WUPtmsTRL3+J2qrPJZw1lH3t6yLo34qn0euUNXptZUei1pYwcDSROeq9
v1hmdURXmKENmXnSj/SsGXqlr0r6xlpWUD7+X47sglpVRtRveq3QtCbE4EVSyYW/
o7hhOLEx8CC+X2ji3onYXQr5/kwAxLRnRpiWb72i0jMKR/ESHEvC4kCKJsQxC4wK
Jvs7iFSNlzdE9vfBu9+S1e1hahAlmWfkEfzbOQQgABquW7TlYiK5fI7p8hzZxMTe
0ZGQXI1JxMR5d5T4tJEyTd8qf47a4dN+irHjNAfxbakHeYY20wieofjAgmWV8tbW
+hp6ZKvf2zkCGJr4qVe/k4zqCQ==
-----END CERTIFICATE-----