Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.mft
File:                     2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.mft (raw, json)
Hash identifier:          dE5htFtbdYWYCaYdl+79bXjCaKKbvziAFZOAVcVp/Rc=
Subject key identifier:   88:95:C8:B8:2E:AB:4B:A5:F0:E6:D5:20:43:54:10:D4:BD:72:32:14
Authority key identifier: 2D:C0:0B:D8:E4:49:D5:C4:8C:9E:93:44:1D:48:BC:93:72:BC:9D:D2
Certificate issuer:       /CN=2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2
Certificate serial:       7DAC34BC0F600ED6974E0D451F99BF8BA0C14BC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.mft
Manifest number:          0D
Signing time:             Mon 14 Oct 2024 14:50:16 +0000
Manifest this update:     Mon 14 Oct 2024 14:45:16 +0000
Manifest next update:     Tue 15 Oct 2024 15:47:16 +0000
Files and hashes:         1: 3136382e3138312e36302e302f32322d3332203d3e20323635333330.roa (hash: dIHO0/X/Y5VnIKo+N6HPm3hBLzyt63dxdiQVKDWEOVY=)
                          2: 323830343a326533303a3a2f33322d313238203d3e20323635333330.roa (hash: fqI3+yjKoJVV8iqwV/6YJbeQ9oXNEOHzyGcYW/57Dzs=)
                          3: 2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.crl (hash: md1az/zwdaI9/sZRFZux5EQPT+fIzYtF7umaKbZeaZI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ac:34:bc:0f:60:0e:d6:97:4e:0d:45:1f:99:bf:8b:a0:c1:4b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2
        Validity
            Not Before: Oct 14 14:45:16 2024 GMT
            Not After : Oct 15 15:47:16 2024 GMT
        Subject: CN=8895C8B82EAB4BA5F0E6D520435410D4BD723214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:b6:d4:02:e6:61:94:ad:be:36:5c:14:31:
                    9b:3f:cf:65:23:20:48:65:8e:52:79:36:6c:a8:94:
                    31:48:ff:14:76:d8:53:e1:d4:91:b1:8a:57:85:70:
                    57:95:5b:8b:ef:fa:03:f8:65:3e:a3:3f:e2:eb:25:
                    fe:cf:40:2a:b9:cb:32:bb:3f:b6:a0:62:58:85:f7:
                    75:49:c1:82:7b:f7:c8:40:1c:a4:73:00:65:06:9d:
                    5a:10:4a:71:00:7a:0c:95:7d:e1:8f:7e:62:45:e4:
                    41:6c:c4:68:02:9f:7a:e3:2f:20:a2:ba:bf:e5:ff:
                    72:7e:da:e7:34:e8:e4:cc:44:7a:af:91:79:ca:93:
                    49:05:cd:7a:e5:4b:ef:2a:f4:6d:74:c4:2f:16:9a:
                    8d:8f:ec:4d:6d:3a:23:c4:7e:bb:33:b0:ea:b0:84:
                    44:de:b7:8f:fe:bd:93:8b:4f:86:04:37:23:af:a6:
                    d7:ce:d2:68:16:2c:6f:33:2d:e9:8d:a7:e8:a8:40:
                    8d:b5:46:0e:f6:f0:a6:1b:4b:58:25:db:c0:58:b9:
                    e9:73:74:29:a3:d5:47:ea:c3:f0:0d:f8:39:55:13:
                    e2:14:4a:8f:eb:ef:fd:31:c1:59:15:7b:1b:6f:74:
                    ac:24:8b:1e:0f:4d:c1:88:06:ef:56:1b:0b:d5:0b:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:95:C8:B8:2E:AB:4B:A5:F0:E6:D5:20:43:54:10:D4:BD:72:32:14
            X509v3 Authority Key Identifier:
                keyid:2D:C0:0B:D8:E4:49:D5:C4:8C:9E:93:44:1D:48:BC:93:72:BC:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2e:28:b4:cd:36:b7:45:ba:46:7f:f3:11:ae:83:00:60:0b:
         81:59:9c:5b:bd:8e:3f:c6:da:fd:ba:f0:7b:ec:9c:2e:1d:fe:
         1c:54:cd:51:73:c9:de:ef:f4:03:b4:cd:e0:ce:56:f8:eb:3b:
         b1:be:e6:43:4a:77:22:68:d6:28:95:4e:8a:be:41:ef:86:86:
         c9:84:95:2f:fb:0f:a3:cc:74:5f:26:38:c2:6e:9e:cd:93:24:
         a8:01:d3:91:e2:bc:83:a1:f6:ac:9d:db:7a:05:e0:ab:01:d4:
         11:2d:71:a3:da:50:31:92:f7:e1:d6:60:6f:be:d8:82:93:55:
         a4:c2:38:92:f6:d1:59:c2:50:db:62:55:20:97:88:a2:5a:68:
         59:a6:ac:ff:a1:e0:97:78:ec:c1:39:c3:82:93:48:1a:51:c6:
         3c:02:e7:43:fa:88:cb:1a:b6:8d:6e:99:28:8c:3f:d3:c1:6c:
         1e:89:4e:37:c4:d4:3f:f2:a9:9f:ae:ef:0e:9f:d9:f4:84:99:
         f7:cc:8d:a2:ea:f2:45:0b:a6:16:48:eb:d4:7c:7f:9b:e7:92:
         af:0a:f6:23:ab:31:1d:ce:92:9b:5a:36:5c:45:e7:8c:ae:78:
         22:57:db:b0:c9:2c:a0:3d:79:a8:dc:30:bf:65:2d:80:1a:31:
         8c:64:de:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfaw0vA9gDtaXTg1FH5m/i6DBS8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRDMDBCRDhFNDQ5RDVDNDhDOUU5MzQ0MUQ0OEJDOTM3
MkJDOUREMjAeFw0yNDEwMTQxNDQ1MTZaFw0yNDEwMTUxNTQ3MTZaMDMxMTAvBgNV
BAMTKDg4OTVDOEI4MkVBQjRCQTVGMEU2RDUyMDQzNTQxMEQ0QkQ3MjMyMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjubbUAuZhlK2+NlwUMZs/z2Uj
IEhljlJ5NmyolDFI/xR22FPh1JGxileFcFeVW4vv+gP4ZT6jP+LrJf7PQCq5yzK7
P7agYliF93VJwYJ798hAHKRzAGUGnVoQSnEAegyVfeGPfmJF5EFsxGgCn3rjLyCi
ur/l/3J+2uc06OTMRHqvkXnKk0kFzXrlS+8q9G10xC8Wmo2P7E1tOiPEfrszsOqw
hETet4/+vZOLT4YENyOvptfO0mgWLG8zLemNp+ioQI21Rg728KYbS1gl28BYuelz
dCmj1Ufqw/AN+DlVE+IUSo/r7/0xwVkVextvdKwkix4PTcGIBu9WGwvVC0mZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiJXIuC6rS6Xw5tUgQ1QQ1L1yMhQwHwYDVR0j
BBgwFoAULcAL2ORJ1cSMnpNEHUi8k3K8ndIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05zSjJxYlppVHplTDVHZExDQmZBWHlIcHNSQmFqYnlOOW9MUWFpRW5I
Q1ovMC8yREMwMEJEOEU0NDlENUM0OEM5RTkzNDQxRDQ4QkM5MzcyQkM5REQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEQzAwQkQ4RTQ0OUQ1QzQ4
QzlFOTM0NDFENDhCQzkzNzJCQzlERDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q05zSjJxYlppVHplTDVHZExDQmZBWHlIcHNSQmFqYnlOOW9MUWFpRW5IQ1ovMC8y
REMwMEJEOEU0NDlENUM0OEM5RTkzNDQxRDQ4QkM5MzcyQkM5REQyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoi4otM02t0W6Rn/zEa6DAGALgVmcW72OP8ba/brwe+ycLh3+HFTNUXPJ3u/0
A7TN4M5W+Os7sb7mQ0p3ImjWKJVOir5B74aGyYSVL/sPo8x0XyY4wm6ezZMkqAHT
keK8g6H2rJ3begXgqwHUES1xo9pQMZL34dZgb77YgpNVpMI4kvbRWcJQ22JVIJeI
olpoWaas/6Hgl3jswTnDgpNIGlHGPALnQ/qIyxq2jW6ZKIw/08FsHolON8TUP/Kp
n67vDp/Z9ISZ98yNouryRQumFkjr1Hx/m+eSrwr2I6sxHc6Sm1o2XEXnjK54Ilfb
sMksoD15qNwwv2UtgBoxjGTeqA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:53 2025 by rpki-client