Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.mft
File:                     60BB83C02533E0ADF12AE7C3B183EA76020CECF2.mft (raw, json)
Hash identifier:          cd9xMmAHXMui4hKYr0XTuE1mz8XtgSj787FW40Ozu74=
Subject key identifier:   E8:77:FB:32:E1:7D:46:E6:5D:56:09:DA:A6:CE:F2:A8:63:FD:2B:96
Authority key identifier: 60:BB:83:C0:25:33:E0:AD:F1:2A:E7:C3:B1:83:EA:76:02:0C:EC:F2
Certificate issuer:       /CN=60BB83C02533E0ADF12AE7C3B183EA76020CECF2
Certificate serial:       11CC7CCF0E35CF3B6C7B1F0276B5A8CDFC0EDCFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.mft
Manifest number:          03
Signing time:             Wed 04 Dec 2024 21:07:20 +0000
Manifest this update:     Wed 04 Dec 2024 21:02:20 +0000
Manifest next update:     Thu 05 Dec 2024 23:17:20 +0000
Files and hashes:         1: 323830343a333635633a3a2f33322d3334203d3e20323636333433.roa (hash: C4jG4OqlykQ+2RocubXXEl1HjtvbfHt3aXSvGtxLprg=)
                          2: 3137302e3233392e342e302f32322d3234203d3e20323636333433.roa (hash: a2D+2qst5nU8h5W/cB9p/pqoEFeWcAhrYwqRwWu4H5k=)
                          3: 60BB83C02533E0ADF12AE7C3B183EA76020CECF2.crl (hash: lTyi4aVt000vLJ07BipEgmCImU/PnUGmPgG8iQy7zXA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cc:7c:cf:0e:35:cf:3b:6c:7b:1f:02:76:b5:a8:cd:fc:0e:dc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BB83C02533E0ADF12AE7C3B183EA76020CECF2
        Validity
            Not Before: Dec  4 21:02:20 2024 GMT
            Not After : Dec  5 23:17:20 2024 GMT
        Subject: CN=E877FB32E17D46E65D5609DAA6CEF2A863FD2B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:cf:ef:a9:9b:3e:ad:46:4c:7d:bf:95:4b:
                    87:34:41:5d:ca:80:da:33:29:85:91:43:2d:24:0b:
                    ff:9b:1b:a0:f7:27:97:fb:47:6b:8e:72:c5:62:aa:
                    e0:6e:78:de:06:43:3a:7d:29:be:ee:32:55:c4:51:
                    29:b6:bf:f2:fd:a5:19:9a:3e:69:be:7f:ec:a0:36:
                    5c:60:fc:9b:f8:7b:ae:2a:ed:d5:75:60:8e:5f:4f:
                    8d:24:68:f8:0d:92:84:f2:61:35:d0:49:e6:e2:b2:
                    b6:65:ef:78:a0:36:4d:7e:d8:9b:18:09:ff:00:1c:
                    8d:f8:eb:2b:e4:b2:da:ff:8d:24:44:4f:01:48:ac:
                    4e:dc:10:56:ff:0f:ef:9b:48:aa:39:49:f1:98:53:
                    8d:68:8d:48:2d:e4:53:1b:b0:01:1c:50:78:66:a3:
                    7f:3b:56:8a:b7:d3:e7:39:d0:da:9b:c7:73:b4:c4:
                    09:77:0a:ba:97:5f:a2:de:7a:65:ec:68:7d:ee:4b:
                    bb:8e:88:e7:25:a2:d8:c6:d0:b4:05:1c:30:b0:32:
                    04:23:80:bc:18:89:03:a2:74:4b:43:ff:92:ab:59:
                    81:1b:fc:6b:7e:b5:cf:78:1b:1e:9d:4a:e1:93:64:
                    9e:a9:09:f1:59:1f:42:65:55:81:4e:1e:5d:da:1b:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:77:FB:32:E1:7D:46:E6:5D:56:09:DA:A6:CE:F2:A8:63:FD:2B:96
            X509v3 Authority Key Identifier:
                keyid:60:BB:83:C0:25:33:E0:AD:F1:2A:E7:C3:B1:83:EA:76:02:0C:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:00:28:fe:55:51:ec:40:c0:9a:45:48:ba:e2:9d:4d:62:c6:
         8e:9c:81:0f:6a:dd:c1:1c:a5:0a:a4:bc:8e:30:10:6e:32:bf:
         60:ab:86:a4:9a:17:3e:89:60:b6:a9:2c:f3:4d:bd:f7:74:ee:
         30:24:08:1d:28:ef:80:74:af:33:5d:28:e1:40:ec:0f:17:b9:
         4a:e1:da:73:7b:57:d2:c9:50:35:80:c3:95:b2:54:a1:ad:b5:
         2c:5d:ec:cf:87:93:06:21:a0:57:fd:16:60:2d:03:b0:37:13:
         31:41:07:30:82:d7:27:47:c1:ee:13:6d:83:92:58:9c:33:07:
         d8:f5:60:52:be:5b:e1:32:6c:7e:84:45:dd:80:d3:d1:1d:ae:
         f9:aa:3b:1f:7d:3f:3c:7b:9f:4c:cc:69:57:bb:70:c8:00:38:
         5a:eb:bf:78:fc:3f:79:d1:77:56:ee:de:b2:c0:c7:02:77:c0:
         4d:63:7e:f3:ea:8f:10:e2:d4:55:18:df:a3:64:55:0f:5e:18:
         83:ea:b0:dc:e3:9c:67:67:0e:aa:af:d2:ad:0f:97:42:ca:e5:
         f9:10:3e:6f:f8:8f:26:2d:90:06:da:d6:17:5d:b0:66:a3:26:
         d7:5a:72:00:83:a7:62:9d:6f:98:e4:a4:03:f4:2e:90:9e:40:
         b9:28:27:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEcx8zw41zztsex8CdrWozfwO3PwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBCQjgzQzAyNTMzRTBBREYxMkFFN0MzQjE4M0VBNzYw
MjBDRUNGMjAeFw0yNDEyMDQyMTAyMjBaFw0yNDEyMDUyMzE3MjBaMDMxMTAvBgNV
BAMTKEU4NzdGQjMyRTE3RDQ2RTY1RDU2MDlEQUE2Q0VGMkE4NjNGRDJCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvs/vqZs+rUZMfb+VS4c0QV3K
gNozKYWRQy0kC/+bG6D3J5f7R2uOcsViquBueN4GQzp9Kb7uMlXEUSm2v/L9pRma
Pmm+f+ygNlxg/Jv4e64q7dV1YI5fT40kaPgNkoTyYTXQSebisrZl73igNk1+2JsY
Cf8AHI346yvkstr/jSRETwFIrE7cEFb/D++bSKo5SfGYU41ojUgt5FMbsAEcUHhm
o387Voq30+c50Nqbx3O0xAl3CrqXX6LeemXsaH3uS7uOiOclotjG0LQFHDCwMgQj
gLwYiQOidEtD/5KrWYEb/Gt+tc94Gx6dSuGTZJ6pCfFZH0JlVYFOHl3aG307AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6Hf7MuF9RuZdVgnaps7yqGP9K5YwHwYDVR0j
BBgwFoAUYLuDwCUz4K3xKufDsYPqdgIM7PIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl
U2UvMC82MEJCODNDMDI1MzNFMEFERjEyQUU3QzNCMTgzRUE3NjAyMENFQ0YyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQkI4M0MwMjUzM0UwQURG
MTJBRTdDM0IxODNFQTc2MDIwQ0VDRjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3BlU2UvMC82
MEJCODNDMDI1MzNFMEFERjEyQUU3QzNCMTgzRUE3NjAyMENFQ0YyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFgAo/lVR7EDAmkVIuuKdTWLGjpyBD2rdwRylCqS8jjAQbjK/YKuGpJoXPolg
tqks802993TuMCQIHSjvgHSvM10o4UDsDxe5SuHac3tX0slQNYDDlbJUoa21LF3s
z4eTBiGgV/0WYC0DsDcTMUEHMILXJ0fB7hNtg5JYnDMH2PVgUr5b4TJsfoRF3YDT
0R2u+ao7H30/PHufTMxpV7twyAA4Wuu/ePw/edF3Vu7essDHAnfATWN+8+qPEOLU
VRjfo2RVD14Yg+qw3OOcZ2cOqq/SrQ+XQsrl+RA+b/iPJi2QBtrWF12wZqMm11py
AIOnYp1vmOSkA/QukJ5AuSgnvw==
-----END CERTIFICATE-----