Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft
File:                     AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft (raw, json)
Hash identifier:          WVD8TjOf4K/e56hs7zjMpFnrFAX7c3bKTmFvFJ5SH44=
Subject key identifier:   78:99:3F:81:5C:B2:13:5C:EE:79:1D:AC:BE:F3:F4:4A:E2:9B:73:4E
Authority key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
Certificate issuer:       /CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Certificate serial:       6F606D6F5C1EA65A784EEF9A829D1B91E14C098B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft
Manifest number:          1A
Signing time:             Mon 17 Feb 2025 18:11:53 +0000
Manifest this update:     Mon 17 Feb 2025 18:06:53 +0000
Manifest next update:     Tue 18 Feb 2025 20:24:53 +0000
Files and hashes:         1: AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl (hash: l3jcLqUKwqaB593q5B438867sKwIZHsWMWMXSaWhwkE=)
                          2: 323830343a383237303a3a2f33342d3334203d3e203631363038.roa (hash: WFBp1V/bkcQBnfHePovHA34gex/+Mw4hMniC46k5NXs=)
                          3: 323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa (hash: vztNO4B0ZMFPd5mJDO7VPSkCSecIyyueuDmJFRB0pAQ=)
                          4: 323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa (hash: KG3OhV4qQx3JBnzNgwBKDcyuvC79RsRsxfjSupwP/x0=)
                          5: 323830343a383237303a3a2f33322d3332203d3e203631363038.roa (hash: ywWFGv4FrHR7EOcQP1+8fMFn8twSkZPAcE0qpm2Fb38=)
                          6: 323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa (hash: 8M55ueYEU9gD0wgP6cFlMxQg3ob6dzf7yhsdWbb13X8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:60:6d:6f:5c:1e:a6:5a:78:4e:ef:9a:82:9d:1b:91:e1:4c:09:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
        Validity
            Not Before: Feb 17 18:06:53 2025 GMT
            Not After : Feb 18 20:24:53 2025 GMT
        Subject: CN=78993F815CB2135CEE791DACBEF3F44AE29B734E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:95:4b:b6:53:41:ad:6a:1f:4e:31:7d:c3:
                    9e:45:ad:99:da:83:68:5a:ed:9a:26:3d:57:2e:0c:
                    15:d1:c9:54:bd:52:2c:a6:96:33:06:2e:15:da:9b:
                    1b:75:4b:0e:62:d8:40:57:fa:29:26:08:d8:51:91:
                    24:c7:87:b6:99:8d:95:6b:31:9c:10:e1:02:81:c0:
                    d2:f7:9c:a2:b8:54:17:76:a6:c3:79:49:38:55:2a:
                    66:e7:6a:9a:b4:5c:08:4b:ce:43:9c:11:62:24:a4:
                    97:c9:94:55:c4:71:43:b0:e8:34:1b:d1:4e:3a:bc:
                    c7:43:36:60:78:1f:73:1f:be:b2:3b:0c:a5:84:2f:
                    d4:2e:07:79:9d:d1:3e:df:ca:ea:41:0f:ef:87:9c:
                    57:64:f0:de:b9:eb:72:50:65:5e:21:36:d7:5a:3b:
                    4c:41:a4:2e:41:70:6e:ee:64:14:35:56:c7:e5:04:
                    b1:ef:a6:29:b4:62:0e:5d:50:b1:88:7f:9c:9a:f2:
                    21:db:1b:c4:67:fd:86:53:42:2a:f4:b9:de:4f:c4:
                    3a:06:72:01:3f:db:51:ec:73:e0:62:ef:e9:32:1e:
                    9e:6a:ea:e8:a4:d4:84:84:6d:19:d9:d4:3b:93:39:
                    49:f9:41:10:9e:0d:8c:a5:c0:85:a1:cf:23:a5:87:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:3F:81:5C:B2:13:5C:EE:79:1D:AC:BE:F3:F4:4A:E2:9B:73:4E
            X509v3 Authority Key Identifier:
                keyid:AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:93:20:95:f4:88:04:ae:a0:01:f3:19:fd:52:1b:fc:f8:1c:
         da:a0:b1:22:60:cb:dd:48:b5:23:57:e1:7f:91:f6:28:06:65:
         25:e3:74:d2:3a:80:2e:f5:f8:64:d9:26:d9:71:0f:5b:66:9f:
         b8:08:46:85:46:43:08:b2:e8:a0:5f:94:85:25:9c:f3:22:9e:
         b6:cc:b7:56:85:39:7d:d6:ae:4c:82:c4:35:81:45:89:2c:4d:
         9b:2e:b1:08:a3:dc:a6:ee:95:1d:9f:a5:84:33:ca:f4:82:aa:
         ff:c1:f6:46:ef:e3:e0:4d:02:68:4f:b0:a4:64:26:46:51:6a:
         07:b9:25:cc:91:12:df:bd:16:38:cc:4d:09:99:1c:60:a4:7e:
         16:fe:77:7f:c5:83:68:de:21:19:6b:c5:75:89:9d:22:40:83:
         d9:6b:54:28:3b:78:45:9c:ff:df:da:75:aa:e9:21:22:b0:ef:
         b6:c4:d8:76:2b:9a:57:47:36:1a:09:60:ff:fa:ec:81:30:ef:
         27:c4:1d:02:c9:37:62:f0:ed:c1:a8:f7:5b:cb:07:8d:63:e0:
         7a:f9:53:9c:09:81:45:3e:8f:7b:7a:7b:ef:0c:f3:7f:8a:d5:
         bc:b2:fd:4d:7d:86:a9:d6:18:2f:61:d9:c9:f5:55:a2:f2:36:
         71:a1:e7:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUb2Btb1weplp4Tu+agp0bkeFMCYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkFCNDRBMzUzMUNGRDY5MzJEM0MwQThEQTQwRjEz
N0NBQUMwMTAeFw0yNTAyMTcxODA2NTNaFw0yNTAyMTgyMDI0NTNaMDMxMTAvBgNV
BAMTKDc4OTkzRjgxNUNCMjEzNUNFRTc5MURBQ0JFRjNGNDRBRTI5QjczNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdZVLtlNBrWofTjF9w55FrZna
g2ha7ZomPVcuDBXRyVS9UiymljMGLhXamxt1Sw5i2EBX+ikmCNhRkSTHh7aZjZVr
MZwQ4QKBwNL3nKK4VBd2psN5SThVKmbnapq0XAhLzkOcEWIkpJfJlFXEcUOw6DQb
0U46vMdDNmB4H3MfvrI7DKWEL9QuB3md0T7fyupBD++HnFdk8N6563JQZV4hNtda
O0xBpC5BcG7uZBQ1VsflBLHvpim0Yg5dULGIf5ya8iHbG8Rn/YZTQir0ud5PxDoG
cgE/21Hsc+Bi7+kyHp5q6uik1ISEbRnZ1DuTOUn5QRCeDYylwIWhzyOlhz+BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeJk/gVyyE1zueR2svvP0SuKbc04wHwYDVR0j
BBgwFoAUrXKrRKNTHP1pMtPAqNpA8TfKrAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H
Yk0vMC9BRDcyQUI0NEEzNTMxQ0ZENjkzMkQzQzBBOERBNDBGMTM3Q0FBQzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENzJBQjQ0QTM1MzFDRkQ2
OTMyRDNDMEE4REE0MEYxMzdDQUFDMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5HYk0vMC9B
RDcyQUI0NEEzNTMxQ0ZENjkzMkQzQzBBOERBNDBGMTM3Q0FBQzAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEZMglfSIBK6gAfMZ/VIb/Pgc2qCxImDL3Ui1I1fhf5H2KAZlJeN00jqALvX4
ZNkm2XEPW2afuAhGhUZDCLLooF+UhSWc8yKetsy3VoU5fdauTILENYFFiSxNmy6x
CKPcpu6VHZ+lhDPK9IKq/8H2Ru/j4E0CaE+wpGQmRlFqB7klzJES370WOMxNCZkc
YKR+Fv53f8WDaN4hGWvFdYmdIkCD2WtUKDt4RZz/39p1qukhIrDvtsTYdiuaV0c2
Gglg//rsgTDvJ8QdAsk3YvDtwaj3W8sHjWPgevlTnAmBRT6Pe3p77wzzf4rVvLL9
TX2GqdYYL2HZyfVVovI2caHn9Q==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:33 2025 by rpki-client