Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
File:                     0817DBC592F999355596EFF8ED1D632370D2A2D0.mft (raw, json)
Hash identifier:          Iy/Z1Ic9ncoEnlhb6Gh3SeQe91CLoCmoZKqq0UlM/I8=
Subject key identifier:   8F:D6:B0:39:4B:97:01:70:82:BC:0B:06:B2:6C:C1:D8:81:15:F1:BA
Authority key identifier: 08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0
Certificate issuer:       /CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
Certificate serial:       43B11E342328AA7E827EC197F3D5D3561121E201
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
Manifest number:          0E
Signing time:             Sat 29 Mar 2025 10:59:32 +0000
Manifest this update:     Sat 29 Mar 2025 10:54:32 +0000
Manifest next update:     Sun 30 Mar 2025 13:57:32 +0000
Files and hashes:         1: 34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa (hash: OjXuAtBkVcOvvx4OoAgrp0COCxFiOXAhBYC2rEcQJao=)
                          2: 323830343a343838633a3a2f33322d3332203d3e20323637313238.roa (hash: 1s2O60lHgDIQpC8FZVx7268kNuAwgJjkP2rHqfWjny8=)
                          3: 0817DBC592F999355596EFF8ED1D632370D2A2D0.crl (hash: /VI4lI3KaWQxg+/LHMdHVRF8DJUg7doLN5vUmu6gE6M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b1:1e:34:23:28:aa:7e:82:7e:c1:97:f3:d5:d3:56:11:21:e2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
        Validity
            Not Before: Mar 29 10:54:32 2025 GMT
            Not After : Mar 30 13:57:32 2025 GMT
        Subject: CN=8FD6B0394B97017082BC0B06B26CC1D88115F1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:05:b3:cd:98:95:30:dc:f2:ba:85:f5:16:
                    cc:a6:df:ba:6d:0a:1c:24:f6:d1:2f:b4:22:79:c5:
                    d2:37:bf:29:ea:b0:0e:8e:06:af:e7:79:a8:7c:c5:
                    bc:4c:e1:4c:86:e0:b3:f2:e5:66:f2:44:e0:01:5f:
                    54:e1:23:8a:fa:26:08:1f:e8:c2:26:85:62:53:cd:
                    28:76:c0:db:be:45:85:33:9a:33:44:e1:6c:92:24:
                    ae:6a:5d:34:32:0c:fc:f8:f0:45:2f:ad:ee:ec:d5:
                    fb:18:31:24:8b:d2:91:97:19:31:17:37:8c:d0:b5:
                    b7:34:14:82:69:48:ff:d6:5b:b3:bd:b7:9b:98:cd:
                    40:eb:18:9e:57:bf:7b:01:01:69:93:8e:ab:44:24:
                    14:27:48:b7:09:f3:f2:8a:0b:0d:f0:c4:55:36:b5:
                    ab:d1:17:aa:89:40:84:14:8c:bc:a3:91:e3:38:49:
                    5a:38:fe:74:37:c9:17:84:c4:c5:ea:e5:a3:bd:c6:
                    43:f3:1f:3a:7f:7d:07:be:8b:b0:56:88:1f:29:09:
                    51:1c:ea:cc:f8:7f:d9:27:6d:eb:10:4d:75:7d:56:
                    4e:5b:7a:e9:88:13:60:f7:df:d4:69:45:ef:61:b3:
                    26:e2:45:1a:37:f9:8d:db:21:c6:13:f7:2c:24:65:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D6:B0:39:4B:97:01:70:82:BC:0B:06:B2:6C:C1:D8:81:15:F1:BA
            X509v3 Authority Key Identifier:
                keyid:08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:42:31:d6:c9:74:e7:16:6b:0c:72:b1:ed:c4:7e:b1:93:5c:
         a7:16:67:fc:3d:9b:0a:87:f5:d6:ff:7f:7f:43:34:c7:9b:85:
         55:ef:93:6d:d0:cf:7e:2d:31:18:c0:22:7a:f3:68:32:d1:9a:
         75:64:fe:32:8d:3e:c9:95:a2:6c:6d:20:11:86:fc:35:5c:bd:
         d4:f2:22:93:ef:07:fc:30:40:8d:c7:62:9e:fe:18:64:fe:5c:
         ee:32:04:0d:27:e8:ef:e1:51:2d:0f:0f:ce:da:50:f1:32:98:
         ed:c9:eb:ca:56:1e:27:68:0b:57:7a:06:d6:49:8d:a3:be:8a:
         2a:f7:38:c6:f8:87:d0:28:a7:17:38:ea:47:56:af:be:76:30:
         a5:42:c0:62:d1:96:92:8e:57:87:9d:57:2b:4a:97:f0:0e:7c:
         7b:4e:f1:94:ba:a9:79:e7:36:c3:bd:64:9e:72:f0:bb:ad:4a:
         5b:e2:e9:ac:bd:6d:2a:ba:bc:f4:cf:de:c9:05:c8:ce:5d:90:
         b0:c9:2f:0f:3a:0b:37:71:21:e7:e3:69:70:2c:8e:67:67:43:
         e5:9a:42:80:f5:ee:b7:33:af:ea:20:8a:3e:5b:b8:ba:b3:71:
         e3:98:5d:51:c1:73:82:f0:a0:88:0d:ef:e5:15:3c:bc:f5:f9:
         bd:c0:09:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ7EeNCMoqn6CfsGX89XTVhEh4gEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgxN0RCQzU5MkY5OTkzNTU1OTZFRkY4RUQxRDYzMjM3
MEQyQTJEMDAeFw0yNTAzMjkxMDU0MzJaFw0yNTAzMzAxMzU3MzJaMDMxMTAvBgNV
BAMTKDhGRDZCMDM5NEI5NzAxNzA4MkJDMEIwNkIyNkNDMUQ4ODExNUYxQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cQWzzZiVMNzyuoX1Fsym37pt
Chwk9tEvtCJ5xdI3vynqsA6OBq/neah8xbxM4UyG4LPy5WbyROABX1ThI4r6Jggf
6MImhWJTzSh2wNu+RYUzmjNE4WySJK5qXTQyDPz48EUvre7s1fsYMSSL0pGXGTEX
N4zQtbc0FIJpSP/WW7O9t5uYzUDrGJ5Xv3sBAWmTjqtEJBQnSLcJ8/KKCw3wxFU2
tavRF6qJQIQUjLyjkeM4SVo4/nQ3yReExMXq5aO9xkPzHzp/fQe+i7BWiB8pCVEc
6sz4f9knbesQTXV9Vk5beumIE2D339RpRe9hsybiRRo3+Y3bIcYT9ywkZblfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUj9awOUuXAXCCvAsGsmzB2IEV8bowHwYDVR0j
BBgwFoAUCBfbxZL5mTVVlu/47R1jI3DSotAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3pGbWdZSzJaVnRzV2g0d05ZUDVkSkt2b1hCeHpEOU5ybk52eEgyb1Ra
ZmsvMC8wODE3REJDNTkyRjk5OTM1NTU5NkVGRjhFRDFENjMyMzcwRDJBMkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4MTdEQkM1OTJGOTk5MzU1
NTk2RUZGOEVEMUQ2MzIzNzBEMkEyRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3pGbWdZSzJaVnRzV2g0d05ZUDVkSkt2b1hCeHpEOU5ybk52eEgyb1RaZmsvMC8w
ODE3REJDNTkyRjk5OTM1NTU5NkVGRjhFRDFENjMyMzcwRDJBMkQwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGUIx1sl05xZrDHKx7cR+sZNcpxZn/D2bCof11v9/f0M0x5uFVe+TbdDPfi0x
GMAievNoMtGadWT+Mo0+yZWibG0gEYb8NVy91PIik+8H/DBAjcdinv4YZP5c7jIE
DSfo7+FRLQ8PztpQ8TKY7cnrylYeJ2gLV3oG1kmNo76KKvc4xviH0CinFzjqR1av
vnYwpULAYtGWko5Xh51XK0qX8A58e07xlLqpeec2w71knnLwu61KW+LprL1tKrq8
9M/eyQXIzl2QsMkvDzoLN3Eh5+NpcCyOZ2dD5ZpCgPXutzOv6iCKPlu4urNx45hd
UcFzgvCgiA3v5RU8vPX5vcAJiA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:33 2025 by rpki-client