Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
File:                     9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft (raw, json)
Hash identifier:          n2kJdjJ3JfsXxn81qBu2dW06PAONjUKEE5LjR1MgprE=
Subject key identifier:   50:DA:AF:0E:EC:A4:A2:F5:67:8B:14:9A:1C:89:40:4F:E4:C8:2C:AD
Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
Certificate issuer:       /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Certificate serial:       14A8D20C7142FB7DA8BAA939C35BE832E8FBB6E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
Manifest number:          01CD
Signing time:             Sat 29 Mar 2025 08:26:15 +0000
Manifest this update:     Sat 29 Mar 2025 08:21:15 +0000
Manifest next update:     Sun 30 Mar 2025 09:07:15 +0000
Files and hashes:         1: 34352e3233372e342e302f32322d3234203d3e20323638323932.roa (hash: YOvdKqb793ktG+K4voH6fVWuWoEYneOJkNY8DmbE57k=)
                          2: 323830343a346566303a3a2f33322d3336203d3e20323638323932.roa (hash: JzJsy650SSsFhDpBxyHj9SfH3TNilDwlyqAwmdmbW/o=)
                          3: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl (hash: TcN+LCeOWGSfQa3s2FNThMQOJy+53HndoKnNyz+S7Pg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a8:d2:0c:71:42:fb:7d:a8:ba:a9:39:c3:5b:e8:32:e8:fb:b6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
        Validity
            Not Before: Mar 29 08:21:15 2025 GMT
            Not After : Mar 30 09:07:15 2025 GMT
        Subject: CN=50DAAF0EECA4A2F5678B149A1C89404FE4C82CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:9b:64:b8:e4:e3:0b:3b:13:d4:45:dc:fd:
                    fa:8e:0c:aa:c5:f0:92:20:bd:9d:93:75:72:e1:d5:
                    1b:48:83:aa:fc:8c:39:bb:e3:bc:fe:60:23:cf:ed:
                    7c:59:6f:51:d9:37:f6:ce:87:9f:1a:cc:6d:fa:30:
                    25:fd:a2:a5:9b:af:90:24:d8:a2:35:d5:9a:06:3c:
                    97:25:d3:7e:00:3d:d0:56:26:50:83:d3:6a:f7:07:
                    7a:2d:cc:6b:41:d0:f9:98:88:13:ef:fe:a7:f9:e0:
                    11:f2:fd:e9:ba:d8:15:eb:b1:a3:98:2c:79:18:09:
                    a3:d0:73:09:07:6d:df:59:99:71:21:18:67:35:40:
                    fb:93:09:ed:f4:82:4d:0c:cc:dc:40:7f:45:cc:1a:
                    7d:1e:cc:da:d4:2e:cc:c0:0f:25:f1:8c:6b:57:6c:
                    19:a4:e5:39:cd:c3:95:17:55:71:e3:1f:e7:dd:dd:
                    ff:74:de:9f:d2:9f:1a:95:ed:fe:7e:d7:1c:c0:48:
                    7d:7f:09:6d:fd:02:dd:f7:55:72:bf:a5:94:eb:4d:
                    de:41:5f:dd:dd:b1:b6:0b:2c:39:6d:a9:be:f5:16:
                    e0:e9:a9:a6:cc:68:95:97:26:35:82:39:07:05:68:
                    dc:00:e9:7f:ce:08:d3:bf:ff:6b:ce:b9:69:14:2e:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DA:AF:0E:EC:A4:A2:F5:67:8B:14:9A:1C:89:40:4F:E4:C8:2C:AD
            X509v3 Authority Key Identifier:
                keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:75:42:51:87:72:a5:08:a6:45:26:f9:dd:15:49:87:fd:47:
         4f:f3:13:b0:40:3c:a8:2e:86:f6:25:98:03:2a:d4:9e:2c:a5:
         a4:91:1f:6f:5b:27:bd:2a:b1:16:53:b3:f2:d2:62:39:58:e4:
         e2:f1:20:d8:69:ef:d2:01:59:99:94:0a:ff:23:2c:26:da:a2:
         05:7f:68:a8:24:25:44:ea:4e:4b:b5:58:25:e3:c0:e3:09:3a:
         72:45:bb:81:8b:56:73:ae:30:72:e4:21:5e:fc:f6:93:21:8f:
         27:2e:82:54:5e:57:ea:80:e8:e2:78:f3:72:3c:8e:bf:a5:ef:
         d1:5d:97:c5:36:8b:83:8a:42:b7:09:f6:09:7c:56:98:88:4a:
         98:ec:ef:20:74:75:f0:6d:a0:aa:44:76:26:f4:59:25:2a:e3:
         52:6c:a6:f7:63:93:bb:23:c1:4f:a1:06:b3:1e:bc:5f:b1:be:
         1a:59:21:f7:1f:d0:6f:fe:ea:30:cc:82:43:1e:36:e2:20:91:
         7d:67:ed:f1:cc:fb:a3:67:e3:94:7a:b3:14:4f:ca:06:03:13:
         e6:4b:94:75:52:b5:0d:93:8a:1f:da:6d:7f:35:d6:91:86:cb:
         5e:19:6f:58:76:e7:be:13:fd:10:c0:80:80:a9:30:9d:08:08:
         dd:e1:84:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFKjSDHFC+32ouqk5w1voMuj7tuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk2NUIxRTI5MzFDOTRDREEwM0NCNjNFRjNBNkNBRTMz
QkMxNUU4NzAeFw0yNTAzMjkwODIxMTVaFw0yNTAzMzAwOTA3MTVaMDMxMTAvBgNV
BAMTKDUwREFBRjBFRUNBNEEyRjU2NzhCMTQ5QTFDODk0MDRGRTRDODJDQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGJtkuOTjCzsT1EXc/fqODKrF
8JIgvZ2TdXLh1RtIg6r8jDm747z+YCPP7XxZb1HZN/bOh58azG36MCX9oqWbr5Ak
2KI11ZoGPJcl034APdBWJlCD02r3B3otzGtB0PmYiBPv/qf54BHy/em62BXrsaOY
LHkYCaPQcwkHbd9ZmXEhGGc1QPuTCe30gk0MzNxAf0XMGn0ezNrULszADyXxjGtX
bBmk5TnNw5UXVXHjH+fd3f903p/SnxqV7f5+1xzASH1/CW39At33VXK/pZTrTd5B
X93dsbYLLDltqb71FuDpqabMaJWXJjWCOQcFaNwA6X/OCNO//2vOuWkULh/nAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUNqvDuykovVnixSaHIlAT+TILK0wHwYDVR0j
BBgwFoAUmWWx4pMclM2gPLY+86bK4zvBXocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJi
aG4vMC85OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NjVCMUUyOTMxQzk0Q0RB
MDNDQjYzRUYzQTZDQUUzM0JDMTVFODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJiaG4vMC85
OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk3VCUYdypQimRSb53RVJh/1HT/MTsEA8qC6G9iWYAyrUniylpJEfb1snvSqx
FlOz8tJiOVjk4vEg2Gnv0gFZmZQK/yMsJtqiBX9oqCQlROpOS7VYJePA4wk6ckW7
gYtWc64wcuQhXvz2kyGPJy6CVF5X6oDo4njzcjyOv6Xv0V2XxTaLg4pCtwn2CXxW
mIhKmOzvIHR18G2gqkR2JvRZJSrjUmym92OTuyPBT6EGsx68X7G+Glkh9x/Qb/7q
MMyCQx424iCRfWft8cz7o2fjlHqzFE/KBgMT5kuUdVK1DZOKH9ptfzXWkYbLXhlv
WHbnvhP9EMCAgKkwnQgI3eGE9Q==
-----END CERTIFICATE-----
Generated at Thu Apr 10 18:35:09 2025 by rpki-client