Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.mft
File:                     9DD5B61267C5C551A1025D2574BA75FA319577B7.mft (raw, json)
Hash identifier:          Ks2Vak2PxVB5bI0ph0gazCS+0A91TtjSHwZRGp3/E8Q=
Subject key identifier:   6A:AC:BF:F8:AD:0C:FB:D7:FA:33:B9:83:15:48:58:7D:15:1E:46:3D
Authority key identifier: 9D:D5:B6:12:67:C5:C5:51:A1:02:5D:25:74:BA:75:FA:31:95:77:B7
Certificate issuer:       /CN=9DD5B61267C5C551A1025D2574BA75FA319577B7
Certificate serial:       77D53E6341ACEA51258D6A4D7FF765565A3BE5F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.mft
Manifest number:          02
Signing time:             Tue 09 Aug 2022 00:40:11 +0000
Manifest this update:     Tue 09 Aug 2022 00:35:11 +0000
Manifest next update:     Wed 10 Aug 2022 04:12:11 +0000
Files and hashes:         1: 9DD5B61267C5C551A1025D2574BA75FA319577B7.crl (hash: IEmvCrEmAPPh+Fj+ScHkdMUXuWOpl35QCKfonYdMnPE=)
                          2: 34352e3137332e32312e302f32342d3234203d3e20323732353738.roa (hash: CwNHBMf3keOuczP5pB+BI5vn3TYc7nDO47tu5YcdT2M=)
                          3: 323830343a383536633a3a2f33342d3334203d3e20323732353738.roa (hash: AWxkKujDkqrD/DGvD8jSobZuIpcsavjGdR3BnffYzGg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d5:3e:63:41:ac:ea:51:25:8d:6a:4d:7f:f7:65:56:5a:3b:e5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DD5B61267C5C551A1025D2574BA75FA319577B7
        Validity
            Not Before: Aug  9 00:35:11 2022 GMT
            Not After : Aug 10 04:12:11 2022 GMT
        Subject: CN=6AACBFF8AD0CFBD7FA33B9831548587D151E463D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:12:1f:2e:5b:5a:28:d8:06:7d:f2:a2:6e:
                    88:ad:05:07:1a:af:9f:f9:f4:a0:76:52:af:a1:21:
                    c0:8c:f9:3f:96:f6:8a:66:c7:14:0d:a3:9e:b6:d5:
                    16:a1:45:41:7b:54:d8:59:56:c1:30:e4:13:b4:be:
                    c4:24:67:bb:9f:9e:e3:8f:62:58:1e:70:f2:e3:14:
                    75:6f:ef:d7:02:86:67:3d:f4:e5:9a:97:e8:b2:2f:
                    3c:80:a3:96:04:1b:a9:11:5b:1c:cf:0a:0e:f0:be:
                    22:0e:92:ea:89:cc:70:43:9a:bb:60:fa:d9:4d:36:
                    0a:61:04:46:8b:34:df:5a:22:9e:83:a4:25:52:4d:
                    63:d6:c1:fb:8b:7e:01:e8:45:e7:7e:b4:83:72:60:
                    9e:07:8b:3a:d2:af:71:f7:1e:84:51:e1:d6:17:63:
                    87:db:80:71:3a:1f:33:e0:fc:2a:ce:da:e6:fb:de:
                    66:54:a3:ed:5c:bf:12:73:f6:09:7d:90:2a:5d:07:
                    4f:f8:4b:bd:06:62:0d:f5:84:c8:89:09:66:c2:29:
                    47:31:ab:e5:20:37:a1:e8:cc:bc:a1:0d:56:6e:e6:
                    3b:02:27:2c:db:d8:33:0f:33:b0:c6:bd:d9:60:8b:
                    6d:42:c5:fb:6b:ab:1a:38:4b:07:6e:71:30:bb:4e:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AC:BF:F8:AD:0C:FB:D7:FA:33:B9:83:15:48:58:7D:15:1E:46:3D
            X509v3 Authority Key Identifier:
                keyid:9D:D5:B6:12:67:C5:C5:51:A1:02:5D:25:74:BA:75:FA:31:95:77:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ea:09:a7:48:5f:3a:6e:3d:aa:f0:a5:21:48:8b:96:b1:e3:
         16:3c:6a:cb:9a:b3:15:e7:68:e1:d5:fe:58:7b:a7:2a:d4:d6:
         71:bb:f0:28:59:7e:d4:97:7a:fc:f6:87:98:e9:5f:e2:28:a4:
         48:23:4a:54:69:ea:59:ae:e6:6e:38:c5:50:c6:07:87:4a:e0:
         af:ce:5c:82:35:5d:c4:58:2d:97:f1:2d:7e:1b:44:cc:21:85:
         09:04:2e:77:cc:47:09:dc:2d:b3:6a:4c:7a:b5:06:ba:5b:6e:
         2a:de:cf:30:bf:4b:ee:93:b1:9b:f1:91:d6:2c:ee:d8:d2:46:
         ba:32:16:58:d2:f6:62:2d:56:b6:c4:7a:38:d7:44:52:55:73:
         f3:05:a1:61:e0:73:63:af:77:5b:80:98:38:f0:b0:0b:e9:ce:
         22:44:34:a7:db:72:a0:8a:7b:48:73:fa:a4:f1:82:02:d7:5b:
         77:53:25:06:e9:da:22:b9:c7:c9:e9:28:ef:51:e9:72:82:be:
         33:7c:77:b7:b7:b8:a2:9f:73:6c:41:95:97:c8:1d:13:0c:81:
         47:56:3b:4e:3b:e9:c9:a5:f9:05:66:ad:55:67:21:10:a0:e5:
         22:ab:91:6e:55:8a:61:1d:cb:a8:6b:bc:c8:1d:9b:ef:32:0e:
         17:e3:1b:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd9U+Y0Gs6lEljWpNf/dlVlo75fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURENUI2MTI2N0M1QzU1MUExMDI1RDI1NzRCQTc1RkEz
MTk1NzdCNzAeFw0yMjA4MDkwMDM1MTFaFw0yMjA4MTAwNDEyMTFaMDMxMTAvBgNV
BAMTKDZBQUNCRkY4QUQwQ0ZCRDdGQTMzQjk4MzE1NDg1ODdEMTUxRTQ2M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WRIfLltaKNgGffKiboitBQca
r5/59KB2Uq+hIcCM+T+W9opmxxQNo5621RahRUF7VNhZVsEw5BO0vsQkZ7ufnuOP
YlgecPLjFHVv79cChmc99OWal+iyLzyAo5YEG6kRWxzPCg7wviIOkuqJzHBDmrtg
+tlNNgphBEaLNN9aIp6DpCVSTWPWwfuLfgHoRed+tINyYJ4HizrSr3H3HoRR4dYX
Y4fbgHE6HzPg/CrO2ub73mZUo+1cvxJz9gl9kCpdB0/4S70GYg31hMiJCWbCKUcx
q+UgN6HozLyhDVZu5jsCJyzb2DMPM7DGvdlgi21Cxftrqxo4SwducTC7TsjrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaqy/+K0M+9f6M7mDFUhYfRUeRj0wHwYDVR0j
BBgwFoAUndW2EmfFxVGhAl0ldLp1+jGVd7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRKZ0FjOWpyV3V5QXExQjRrQlZVcVpLcDQycTlldm9BYUtvenRMM2lk
VHYvMC85REQ1QjYxMjY3QzVDNTUxQTEwMjVEMjU3NEJBNzVGQTMxOTU3N0I3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlERDVCNjEyNjdDNUM1NTFB
MTAyNUQyNTc0QkE3NUZBMzE5NTc3QjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGRKZ0FjOWpyV3V5QXExQjRrQlZVcVpLcDQycTlldm9BYUtvenRMM2lkVHYvMC85
REQ1QjYxMjY3QzVDNTUxQTEwMjVEMjU3NEJBNzVGQTMxOTU3N0I3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF+oJp0hfOm49qvClIUiLlrHjFjxqy5qzFedo4dX+WHunKtTWcbvwKFl+1Jd6
/PaHmOlf4iikSCNKVGnqWa7mbjjFUMYHh0rgr85cgjVdxFgtl/EtfhtEzCGFCQQu
d8xHCdwts2pMerUGultuKt7PML9L7pOxm/GR1izu2NJGujIWWNL2Yi1WtsR6ONdE
UlVz8wWhYeBzY693W4CYOPCwC+nOIkQ0p9tyoIp7SHP6pPGCAtdbd1MlBunaIrnH
yeko71HpcoK+M3x3t7e4op9zbEGVl8gdEwyBR1Y7TjvpyaX5BWatVWchEKDlIquR
blWKYR3LqGu8yB2b7zIOF+Mbiw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:43:07 2025 by rpki-client