Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.mft
File:                     52E3A728AE6CCA1CEB686AFD28166624B1529CF5.mft (raw, json)
Hash identifier:          TveRA2A+KezgmAfarJxPa1zHH6iwk8V8GzXBX8FofZw=
Subject key identifier:   B5:97:58:43:1E:F9:46:E4:AE:D1:AB:1B:9D:44:AA:3A:26:22:38:8A
Authority key identifier: 52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
Certificate issuer:       /CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Certificate serial:       16DEDF630BFB9385365BB7B4211ADC2E8E6DE0FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.mft
Manifest number:          0A
Signing time:             Mon 17 Feb 2025 18:19:38 +0000
Manifest this update:     Mon 17 Feb 2025 18:14:38 +0000
Manifest next update:     Tue 18 Feb 2025 20:09:38 +0000
Files and hashes:         1: 34352e3233352e37322e302f32322d3232203d3e20323637343039.roa (hash: +6yUgGsEvidpH2y0atP/Yxkwh9pcLe87M21MATZFUV8=)
                          2: 34352e3233352e37342e302f32342d3234203d3e20323637343039.roa (hash: aCFwq4FCFkApjwfTU+M1EoSZgbMY5D9GXL3mGcTeWTI=)
                          3: 34352e3136362e3130342e302f32322d3332203d3e20323637343039.roa (hash: Hol6yTjenap3Ca+GpOMwPXCwgjnE/BqdXAkXWxlW/cI=)
                          4: 323830343a346430633a3a2f33322d313238203d3e20323637343039.roa (hash: Z/cIOWJ5eBP7lpXjelyxj5JgvviuGIIsXOhO73dNghg=)
                          5: 34352e3233352e37322e302f32332d3233203d3e20323637343039.roa (hash: 415EsUb0rrjQOE3Fzl42O/BI592sTNBdzTHMHswregc=)
                          6: 34352e3233352e37342e302f32332d3233203d3e20323637343039.roa (hash: 3Fw+miy9x794pAsd6bg1VNJtZVS51gEs09kJ5uja93Q=)
                          7: 52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl (hash: HK3no18qniodR+jQ4Np+2TQLOWPt0ksg+g03KTrsxk4=)
                          8: 34352e3233352e37352e302f32342d3234203d3e20323637343039.roa (hash: vrRt8xhDLtQYNDhqrBDEzR/ICKrB/M5QAGyGi/EBf58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:de:df:63:0b:fb:93:85:36:5b:b7:b4:21:1a:dc:2e:8e:6d:e0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
        Validity
            Not Before: Feb 17 18:14:38 2025 GMT
            Not After : Feb 18 20:09:38 2025 GMT
        Subject: CN=B59758431EF946E4AED1AB1B9D44AA3A2622388A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:45:a5:96:35:ec:2a:2e:a0:51:ca:af:b5:
                    76:d7:f9:cb:39:58:5e:db:01:99:ac:1c:92:ef:7c:
                    96:d3:0e:1f:de:52:c7:32:34:44:86:49:ab:b9:ee:
                    83:05:07:53:96:0b:16:63:82:1c:8f:77:2a:bc:e7:
                    0e:1d:73:85:47:a0:6e:95:0a:7b:a4:17:c2:b3:fa:
                    2f:d3:d0:97:1e:71:5e:41:57:e8:7b:64:56:2b:af:
                    04:48:b2:26:2a:b4:b0:2c:c0:9a:08:e6:14:62:78:
                    8e:3a:c4:14:40:bf:47:b8:26:bf:8e:ad:20:85:b3:
                    c5:e6:36:ec:9a:6a:f8:31:53:34:ab:42:e6:0e:1c:
                    9e:49:76:39:7a:23:e6:04:89:18:0b:bd:ea:6e:0e:
                    58:0b:bd:93:b0:88:bf:29:97:ff:d8:2d:88:a3:10:
                    7f:cc:81:4d:38:42:f5:6c:42:47:6e:1b:59:93:7a:
                    39:6c:27:48:33:63:32:18:53:04:3c:fa:6b:d1:28:
                    4f:a5:a8:a9:32:2f:85:e5:35:76:65:2a:47:eb:99:
                    bc:31:a0:ca:b2:5b:79:32:ee:24:0d:a2:b1:a7:bb:
                    54:f4:3f:02:3b:72:66:10:f2:37:99:32:51:01:fa:
                    56:b4:70:09:1d:d9:68:d5:a3:38:5d:5c:00:39:b2:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:97:58:43:1E:F9:46:E4:AE:D1:AB:1B:9D:44:AA:3A:26:22:38:8A
            X509v3 Authority Key Identifier:
                keyid:52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:77:8b:eb:86:4e:a4:b1:e2:60:ef:f1:d2:87:63:63:d8:
         73:66:7c:ba:2a:7f:53:25:31:31:1f:12:2e:17:9f:57:ca:b0:
         13:8c:8f:55:41:6c:b9:af:74:6c:6a:53:37:b1:7f:e1:d5:d4:
         25:c6:90:4b:10:a7:32:1e:66:5e:99:0b:79:f4:c9:4c:15:48:
         ac:9f:c8:01:57:6d:92:81:e8:94:cf:c4:b3:a5:31:1b:bf:37:
         59:9d:0b:4f:bc:37:d0:9f:f3:19:33:96:a2:2f:12:67:30:91:
         a2:54:b6:5c:16:02:95:e1:3c:8f:4e:e7:e0:6a:46:29:3f:38:
         ab:6b:4a:c3:5a:b7:23:19:be:05:27:5c:41:39:3a:de:d4:c5:
         aa:74:39:1c:a9:72:68:50:2c:ae:64:ed:5c:51:bd:fb:0d:6f:
         55:99:e4:53:d4:fa:ab:8c:30:5b:1b:e0:23:66:be:57:25:36:
         a0:55:a3:65:c2:94:5e:b1:57:1a:f3:58:71:55:08:f7:d6:b8:
         7c:34:f8:d1:04:d6:ce:87:79:ba:36:89:8c:83:2c:55:ff:c5:
         8d:30:70:79:2b:38:9c:56:ef:9c:ab:53:40:78:4e:e0:1b:3f:
         ca:d2:39:4e:ca:e8:68:7b:c7:ad:90:ef:8e:fd:4f:0b:49:f2:
         3c:f0:f2:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFt7fYwv7k4U2W7e0IRrcLo5t4PwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJFM0E3MjhBRTZDQ0ExQ0VCNjg2QUZEMjgxNjY2MjRC
MTUyOUNGNTAeFw0yNTAyMTcxODE0MzhaFw0yNTAyMTgyMDA5MzhaMDMxMTAvBgNV
BAMTKEI1OTc1ODQzMUVGOTQ2RTRBRUQxQUIxQjlENDRBQTNBMjYyMjM4OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2kWlljXsKi6gUcqvtXbX+cs5
WF7bAZmsHJLvfJbTDh/eUscyNESGSau57oMFB1OWCxZjghyPdyq85w4dc4VHoG6V
CnukF8Kz+i/T0JcecV5BV+h7ZFYrrwRIsiYqtLAswJoI5hRieI46xBRAv0e4Jr+O
rSCFs8XmNuyaavgxUzSrQuYOHJ5Jdjl6I+YEiRgLvepuDlgLvZOwiL8pl//YLYij
EH/MgU04QvVsQkduG1mTejlsJ0gzYzIYUwQ8+mvRKE+lqKkyL4XlNXZlKkfrmbwx
oMqyW3ky7iQNorGnu1T0PwI7cmYQ8jeZMlEB+la0cAkd2WjVozhdXAA5svsnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtZdYQx75RuSu0asbnUSqOiYiOIowHwYDVR0j
BBgwFoAUUuOnKK5syhzraGr9KBZmJLFSnPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkpDNGRmaVNKVURoR0hWc2tYb2tWMXZ4U0toQ1V4Y1c1U25mSmhEaFZT
SFAvMC81MkUzQTcyOEFFNkNDQTFDRUI2ODZBRkQyODE2NjYyNEIxNTI5Q0Y1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRTNBNzI4QUU2Q0NBMUNF
QjY4NkFGRDI4MTY2NjI0QjE1MjlDRjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkpDNGRmaVNKVURoR0hWc2tYb2tWMXZ4U0toQ1V4Y1c1U25mSmhEaFZTSFAvMC81
MkUzQTcyOEFFNkNDQTFDRUI2ODZBRkQyODE2NjYyNEIxNTI5Q0Y1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB9B3i+uGTqSx4mDv8dKHY2PYc2Z8uip/UyUxMR8SLhefV8qwE4yPVUFsua90
bGpTN7F/4dXUJcaQSxCnMh5mXpkLefTJTBVIrJ/IAVdtkoHolM/Es6UxG783WZ0L
T7w30J/zGTOWoi8SZzCRolS2XBYCleE8j07n4GpGKT84q2tKw1q3Ixm+BSdcQTk6
3tTFqnQ5HKlyaFAsrmTtXFG9+w1vVZnkU9T6q4wwWxvgI2a+VyU2oFWjZcKUXrFX
GvNYcVUI99a4fDT40QTWzod5ujaJjIMsVf/FjTBweSs4nFbvnKtTQHhO4Bs/ytI5
TsroaHvHrZDvjv1PC0nyPPDycw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:23 2025 by rpki-client