Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.mft
File:                     DD6B559C36EA68FC1C6505F2424BA4086A7AD662.mft (raw, json)
Hash identifier:          bF9W1LxfQKLRT59+JqawE63aHSNmopaq7f4BwMT8ykU=
Subject key identifier:   52:0D:32:00:D6:BD:28:B2:C1:B3:62:D3:CF:16:9B:9F:AC:8D:70:60
Authority key identifier: DD:6B:55:9C:36:EA:68:FC:1C:65:05:F2:42:4B:A4:08:6A:7A:D6:62
Certificate issuer:       /CN=DD6B559C36EA68FC1C6505F2424BA4086A7AD662
Certificate serial:       3EB3FD57D7993AF06EE92E3D22EF73A9174E6554
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.mft
Manifest number:          3A
Signing time:             Thu 31 Oct 2024 17:50:00 +0000
Manifest this update:     Thu 31 Oct 2024 17:45:00 +0000
Manifest next update:     Fri 01 Nov 2024 21:24:00 +0000
Files and hashes:         1: DD6B559C36EA68FC1C6505F2424BA4086A7AD662.crl (hash: CCwp0OnsdjxHAS+jYS/L0Xz+EXQ+eICceKMH/SuGghg=)
                          2: 3136302e32302e3136302e302f32322d3332203d3e20323636313937.roa (hash: C0ZTGo2Nq3rLNzlmJDyxgevjQy03dRDpCMx9+Piz+y8=)
                          3: 323830343a336333383a3a2f33322d313238203d3e20323636313937.roa (hash: o7Jvd9oxpKyH+OnNrk1YDxCT2dMvPs6+oAUNt1PW3mA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b3:fd:57:d7:99:3a:f0:6e:e9:2e:3d:22:ef:73:a9:17:4e:65:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD6B559C36EA68FC1C6505F2424BA4086A7AD662
        Validity
            Not Before: Oct 31 17:45:00 2024 GMT
            Not After : Nov  1 21:24:00 2024 GMT
        Subject: CN=520D3200D6BD28B2C1B362D3CF169B9FAC8D7060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:36:3b:99:06:27:44:85:4e:ef:57:09:50:
                    fa:a9:da:1e:11:58:38:dd:ef:4d:62:f9:45:1d:3f:
                    b7:ee:cc:60:a4:70:85:1e:b9:6f:4f:14:0e:3d:b9:
                    c5:bc:db:c4:bb:98:47:a8:8a:cd:7d:b7:23:2e:22:
                    cc:a0:47:99:88:85:2f:41:1e:94:f3:44:3e:96:87:
                    47:47:ba:56:22:45:38:5a:36:d6:b9:32:4e:43:47:
                    72:03:15:54:68:e1:34:d1:39:74:93:39:cf:6c:9f:
                    7e:73:fa:da:7c:6c:43:9a:ca:14:e8:db:7a:dd:4b:
                    ca:d2:f1:d8:0c:68:64:d8:f1:dc:eb:e7:4c:4a:62:
                    fe:d8:04:d1:1d:2d:e6:7c:e8:1a:8d:49:ab:3f:aa:
                    80:dd:89:19:e6:cb:86:1f:a7:d7:58:08:10:19:59:
                    6d:03:66:70:40:ce:7f:60:8e:06:82:dd:b6:9e:82:
                    32:5b:ff:98:3e:ff:64:dd:64:c6:86:03:e1:13:8c:
                    32:8e:6d:6d:5b:f8:3c:b3:87:6e:5c:62:49:e1:f5:
                    b5:f6:eb:86:db:1f:95:65:03:fd:61:b6:de:9a:10:
                    e0:f2:8e:f2:5c:b6:39:cb:49:0f:84:a6:d8:49:ea:
                    f0:d0:27:4c:ea:e3:e6:ea:87:cc:c9:7e:f5:51:0b:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0D:32:00:D6:BD:28:B2:C1:B3:62:D3:CF:16:9B:9F:AC:8D:70:60
            X509v3 Authority Key Identifier:
                keyid:DD:6B:55:9C:36:EA:68:FC:1C:65:05:F2:42:4B:A4:08:6A:7A:D6:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a8:cb:40:14:2f:26:c8:1e:43:9c:38:2d:2e:62:70:31:d4:
         82:c3:bb:a3:6d:4e:b4:0f:bb:8a:22:18:02:df:9a:4c:60:e9:
         59:30:ce:bc:d0:ec:69:8d:4a:79:54:b0:c6:18:d9:2c:4b:99:
         67:5e:27:02:0f:dc:2a:18:5a:5e:63:30:4a:71:98:0e:f9:29:
         d3:af:02:ef:93:f4:e8:f0:82:66:4e:dc:47:29:07:fd:18:42:
         e3:20:ab:a8:42:4f:14:b4:3a:cd:73:8a:8b:d2:b0:b4:68:9b:
         4b:a3:0c:84:bc:bc:52:2a:34:9a:ee:33:fe:dd:4e:8e:08:5f:
         ca:19:11:9b:2e:80:df:f6:60:03:16:99:58:16:fc:b7:e5:1d:
         52:ee:cd:f1:87:d8:e4:12:1c:bf:62:58:2f:2e:59:ac:e7:6c:
         e4:fd:d5:6e:e6:6d:7d:57:ef:71:c4:56:8c:d5:9d:d1:b8:ef:
         af:e0:a7:fd:c5:15:0b:f9:87:04:04:5e:3c:a0:6a:0b:ee:95:
         3e:83:fa:87:2f:86:cf:69:f0:2e:70:bd:ea:ef:b0:cf:bb:0c:
         da:e3:30:3f:7d:40:2c:e1:c2:be:4d:6c:63:e3:eb:62:34:8e:
         00:9c:b4:a7:90:a9:98:5a:f9:ff:e8:42:f0:d9:64:f5:4c:84:
         61:9b:67:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPrP9V9eZOvBu6S49Iu9zqRdOZVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ2QjU1OUMzNkVBNjhGQzFDNjUwNUYyNDI0QkE0MDg2
QTdBRDY2MjAeFw0yNDEwMzExNzQ1MDBaFw0yNDExMDEyMTI0MDBaMDMxMTAvBgNV
BAMTKDUyMEQzMjAwRDZCRDI4QjJDMUIzNjJEM0NGMTY5QjlGQUM4RDcwNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjjY7mQYnRIVO71cJUPqp2h4R
WDjd701i+UUdP7fuzGCkcIUeuW9PFA49ucW828S7mEeois19tyMuIsygR5mIhS9B
HpTzRD6Wh0dHulYiRThaNta5Mk5DR3IDFVRo4TTROXSTOc9sn35z+tp8bEOayhTo
23rdS8rS8dgMaGTY8dzr50xKYv7YBNEdLeZ86BqNSas/qoDdiRnmy4Yfp9dYCBAZ
WW0DZnBAzn9gjgaC3baegjJb/5g+/2TdZMaGA+ETjDKObW1b+Dyzh25cYknh9bX2
64bbH5VlA/1htt6aEODyjvJctjnLSQ+EpthJ6vDQJ0zq4+bqh8zJfvVRC2CtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUg0yANa9KLLBs2LTzxabn6yNcGAwHwYDVR0j
BBgwFoAU3WtVnDbqaPwcZQXyQkukCGp61mIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVhb2prTlM1TGJabnduelhSOU1zNVhBUmJIN2hVRnYxMWpEMkRKRzk3
aE4vMC9ERDZCNTU5QzM2RUE2OEZDMUM2NTA1RjI0MjRCQTQwODZBN0FENjYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RENkI1NTlDMzZFQTY4RkMx
QzY1MDVGMjQyNEJBNDA4NkE3QUQ2NjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnVhb2prTlM1TGJabnduelhSOU1zNVhBUmJIN2hVRnYxMWpEMkRKRzk3aE4vMC9E
RDZCNTU5QzM2RUE2OEZDMUM2NTA1RjI0MjRCQTQwODZBN0FENjYyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsajLQBQvJsgeQ5w4LS5icDHUgsO7o21OtA+7iiIYAt+aTGDpWTDOvNDsaY1K
eVSwxhjZLEuZZ14nAg/cKhhaXmMwSnGYDvkp068C75P06PCCZk7cRykH/RhC4yCr
qEJPFLQ6zXOKi9KwtGibS6MMhLy8Uio0mu4z/t1OjghfyhkRmy6A3/ZgAxaZWBb8
t+UdUu7N8YfY5BIcv2JYLy5ZrOds5P3VbuZtfVfvccRWjNWd0bjvr+Cn/cUVC/mH
BARePKBqC+6VPoP6hy+Gz2nwLnC96u+wz7sM2uMwP31ALOHCvk1sY+PrYjSOAJy0
p5CpmFr5/+hC8Nlk9UyEYZtnMA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 12:14:43 2025 by rpki-client