Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.mft
File:                     860668C5CBAB1C59B308B18605B1B2A88FAB05F1.mft (raw, json)
Hash identifier:          4QgMSN/WZZW7/QzSYZ4Lok/pshz1wmlJhOCFq9NaS9o=
Subject key identifier:   74:3C:A8:A0:1B:3B:4E:9E:20:6E:06:CB:30:89:66:94:89:65:EA:85
Authority key identifier: 86:06:68:C5:CB:AB:1C:59:B3:08:B1:86:05:B1:B2:A8:8F:AB:05:F1
Certificate issuer:       /CN=860668C5CBAB1C59B308B18605B1B2A88FAB05F1
Certificate serial:       7C3AB774DCA5D4E6A4C7C62C4D2AB76875D3E4F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.mft
Manifest number:          06
Signing time:             Sat 25 Jan 2025 06:04:14 +0000
Manifest this update:     Sat 25 Jan 2025 05:59:14 +0000
Manifest next update:     Sun 26 Jan 2025 06:24:14 +0000
Files and hashes:         1: 323830343a343332383a3a2f33322d3438203d3e20323637353532.roa (hash: FnUPzivGE8Bn6iSkahAcsVeYPHdOGrLv2BXszbYTr4I=)
                          2: 34352e37302e36302e302f32322d3234203d3e20323637353532.roa (hash: 9+dxFBSBgOA9skyX9fynrwKJTCfM2j2ptnSEpqNE+QI=)
                          3: 860668C5CBAB1C59B308B18605B1B2A88FAB05F1.crl (hash: v9L7SM4BNHqwOkf+P4Rxj2Z09Ow29Y0sVH3DEm0AdV4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3a:b7:74:dc:a5:d4:e6:a4:c7:c6:2c:4d:2a:b7:68:75:d3:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860668C5CBAB1C59B308B18605B1B2A88FAB05F1
        Validity
            Not Before: Jan 25 05:59:14 2025 GMT
            Not After : Jan 26 06:24:14 2025 GMT
        Subject: CN=743CA8A01B3B4E9E206E06CB308966948965EA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:54:d0:37:62:c6:c3:1f:82:c2:25:e1:07:
                    1f:43:f1:52:bf:64:a6:c6:b5:2c:ba:5c:49:a0:4c:
                    f1:71:34:42:22:3a:9d:56:b2:c7:0f:8d:2b:48:9d:
                    86:67:3e:67:88:8f:82:10:61:9b:06:25:75:bd:05:
                    d0:78:23:e5:c1:11:be:9f:80:0b:d7:1a:b0:d2:7f:
                    40:b5:e6:68:de:f8:11:75:fe:6d:f1:c1:b4:54:1a:
                    e3:e1:46:ac:e2:8b:ae:3a:14:1c:db:48:e6:60:a4:
                    5e:6a:43:98:dd:39:09:1f:27:a8:3c:80:ea:2a:51:
                    73:38:d8:01:a5:3e:26:0b:98:be:a8:26:1d:cc:e1:
                    14:51:bb:02:28:6d:02:5a:67:03:f7:b7:01:fd:c0:
                    a5:be:01:82:dc:58:d7:18:c3:47:a9:7d:65:32:bc:
                    df:15:aa:f6:78:66:d9:73:29:fa:3d:3a:31:93:4c:
                    5a:ec:b6:8d:4f:17:15:6e:a1:53:9b:d7:50:68:0e:
                    2d:e0:21:17:14:2f:01:44:04:bb:13:24:66:3e:b6:
                    6f:ef:de:f2:ff:e5:1c:48:9c:fa:c9:5c:a1:4e:74:
                    19:c2:30:e2:4f:5b:2b:f7:68:a5:12:c9:0c:dd:d4:
                    3b:c7:40:72:37:cc:99:7c:65:b2:ed:d0:fe:ba:8c:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3C:A8:A0:1B:3B:4E:9E:20:6E:06:CB:30:89:66:94:89:65:EA:85
            X509v3 Authority Key Identifier:
                keyid:86:06:68:C5:CB:AB:1C:59:B3:08:B1:86:05:B1:B2:A8:8F:AB:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:6f:c1:b5:a8:61:f3:3a:8f:ec:5f:5b:e3:0f:d2:b9:e7:
         bb:78:4b:0d:0f:bb:53:05:e2:98:55:60:09:19:56:77:f8:ae:
         14:96:da:32:36:00:93:ae:22:19:6b:42:9f:2e:52:33:9e:f6:
         9a:e7:b8:8d:18:30:1a:e0:12:57:38:c5:db:51:45:61:10:9c:
         3d:69:24:8c:60:e6:66:a2:7c:73:26:be:65:23:35:0a:b1:d1:
         84:f1:82:b3:c3:83:ca:78:01:0a:c7:9a:ab:73:1c:8e:b1:c2:
         11:86:74:f8:1d:cf:0d:bc:85:e8:61:29:54:94:7f:66:fc:f5:
         fd:9b:81:2d:00:05:93:26:b9:c9:2e:15:57:95:87:24:9b:c4:
         31:41:24:5b:f7:05:4f:84:1e:52:0a:49:26:61:9d:7e:d4:cb:
         a0:e6:ce:bf:63:cd:0d:f9:3f:27:01:9b:d3:71:e5:16:70:cb:
         ee:af:97:44:b5:7d:cd:1a:a2:d5:75:ef:35:6c:9b:ad:d4:fe:
         c0:5a:f6:0f:62:56:5c:f7:77:43:ef:7f:0b:ca:57:24:f9:5e:
         e8:6a:ac:e9:0a:75:ac:28:80:c9:1e:fa:e2:13:b8:8f:d5:27:
         1c:2c:7e:1e:e3:1b:58:52:63:bc:19:29:29:74:26:d9:a7:78:
         a4:0e:eb:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfDq3dNyl1Oakx8YsTSq3aHXT5PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYwNjY4QzVDQkFCMUM1OUIzMDhCMTg2MDVCMUIyQTg4
RkFCMDVGMTAeFw0yNTAxMjUwNTU5MTRaFw0yNTAxMjYwNjI0MTRaMDMxMTAvBgNV
BAMTKDc0M0NBOEEwMUIzQjRFOUUyMDZFMDZDQjMwODk2Njk0ODk2NUVBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPJlTQN2LGwx+CwiXhBx9D8VK/
ZKbGtSy6XEmgTPFxNEIiOp1WsscPjStInYZnPmeIj4IQYZsGJXW9BdB4I+XBEb6f
gAvXGrDSf0C15mje+BF1/m3xwbRUGuPhRqzii646FBzbSOZgpF5qQ5jdOQkfJ6g8
gOoqUXM42AGlPiYLmL6oJh3M4RRRuwIobQJaZwP3twH9wKW+AYLcWNcYw0epfWUy
vN8VqvZ4ZtlzKfo9OjGTTFrsto1PFxVuoVOb11BoDi3gIRcULwFEBLsTJGY+tm/v
3vL/5RxInPrJXKFOdBnCMOJPWyv3aKUSyQzd1DvHQHI3zJl8ZbLt0P66jJV3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdDyooBs7Tp4gbgbLMIlmlIll6oUwHwYDVR0j
BBgwFoAUhgZoxcurHFmzCLGGBbGyqI+rBfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNzUnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5a
aHAvMC84NjA2NjhDNUNCQUIxQzU5QjMwOEIxODYwNUIxQjJBODhGQUIwNUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MDY2OEM1Q0JBQjFDNTlC
MzA4QjE4NjA1QjFCMkE4OEZBQjA1RjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmNzUnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5aaHAvMC84
NjA2NjhDNUNCQUIxQzU5QjMwOEIxODYwNUIxQjJBODhGQUIwNUYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL9xvwbWoYfM6j+xfW+MP0rnnu3hLDQ+7UwXimFVgCRlWd/iuFJbaMjYAk64i
GWtCny5SM572mue4jRgwGuASVzjF21FFYRCcPWkkjGDmZqJ8cya+ZSM1CrHRhPGC
s8ODyngBCseaq3McjrHCEYZ0+B3PDbyF6GEpVJR/Zvz1/ZuBLQAFkya5yS4VV5WH
JJvEMUEkW/cFT4QeUgpJJmGdftTLoObOv2PNDfk/JwGb03HlFnDL7q+XRLV9zRqi
1XXvNWybrdT+wFr2D2JWXPd3Q+9/C8pXJPle6Gqs6Qp1rCiAyR764hO4j9UnHCx+
HuMbWFJjvBkpKXQm2ad4pA7rcg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:01:02 2025 by rpki-client