Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.mft
File:                     68230C14403321CC6C2237C576CF7E50D2BAC9B4.mft (raw, json)
Hash identifier:          JXiPhwiFxItf5URXnaZR9+rC2sPGQrfA7sCPHzeqZgs=
Subject key identifier:   F5:6C:0A:AB:AA:67:67:28:39:93:34:FC:01:0A:AB:2E:E4:E7:87:45
Authority key identifier: 68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
Certificate issuer:       /CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
Certificate serial:       01DC570E59DC60A65E2B4FD3A5788CF0799B9DE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.mft
Manifest number:          26
Signing time:             Mon 17 Feb 2025 14:53:58 +0000
Manifest this update:     Mon 17 Feb 2025 14:48:58 +0000
Manifest next update:     Tue 18 Feb 2025 15:12:58 +0000
Files and hashes:         1: 323830343a333635633a3a2f33322d3332203d3e20323636333433.roa (hash: o9LcFJU76n14XJ1DNB5AU0EkxbkZxFoRsVSJ5naa4r0=)
                          2: 68230C14403321CC6C2237C576CF7E50D2BAC9B4.crl (hash: /wVurWgad1EmBJgBLt5ZgrsurFNST5563ABku5MXobs=)
                          3: 3137302e3233392e342e302f32322d3234203d3e20323636333433.roa (hash: jLhmR65Qb91FkxRKkS2DNkZ9zgC0UieATnKlJXaiICg=)
                          4: 323830343a333635633a383030303a3a2f33332d3438203d3e20323636333433.roa (hash: 9EE6ELWvqq8Q8d9j3ZdHZrHgCEQtLT23lwxsLW9aLgs=)
                          5: 323830343a333635633a3a2f33332d3438203d3e20323636333433.roa (hash: +6tbD5bAaebF3t9bVINWT+D+2UKJvUg3c3dyTxk9fXc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:dc:57:0e:59:dc:60:a6:5e:2b:4f:d3:a5:78:8c:f0:79:9b:9d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
        Validity
            Not Before: Feb 17 14:48:58 2025 GMT
            Not After : Feb 18 15:12:58 2025 GMT
        Subject: CN=F56C0AABAA676728399334FC010AAB2EE4E78745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:65:d0:21:42:9b:65:c4:f9:cb:13:8c:32:
                    cd:a7:f3:df:45:e0:cb:85:f8:58:51:f2:a5:a1:a0:
                    15:0a:66:81:41:0f:1c:92:c7:c4:29:01:4c:08:1e:
                    7c:5a:e4:1b:7f:2c:d4:fd:d0:b1:1c:7c:2c:0b:f7:
                    3b:fb:59:c8:e7:57:f4:9f:97:95:70:ae:fb:51:10:
                    11:97:7a:88:bd:b4:07:46:25:4d:14:71:d7:59:25:
                    e6:ae:a8:59:fc:13:52:d3:26:8b:9c:bf:1b:89:db:
                    6e:09:0f:e5:45:24:d6:9e:7f:66:bd:f0:9c:97:c0:
                    87:8a:59:38:bf:69:bf:2e:ec:70:22:73:d1:75:de:
                    99:d0:47:84:e7:2c:58:cf:f4:3e:cd:1f:22:41:51:
                    9b:45:5a:f3:a7:59:62:e5:c7:98:16:e5:70:06:2d:
                    7a:73:80:af:4a:99:9d:9d:84:2b:87:cc:82:b1:92:
                    f0:03:92:34:0f:b1:e0:86:4a:ef:b4:4a:28:19:f4:
                    4e:17:8c:1b:c5:72:60:d6:6d:d3:82:41:4a:af:8d:
                    f6:d0:03:e7:32:5e:c1:2b:6d:df:9b:81:c8:ce:96:
                    2e:4d:53:c6:a8:b9:f3:3c:ff:e8:ab:65:44:72:0b:
                    73:d8:88:2b:4a:e8:f5:bc:58:35:e2:93:82:60:f8:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6C:0A:AB:AA:67:67:28:39:93:34:FC:01:0A:AB:2E:E4:E7:87:45
            X509v3 Authority Key Identifier:
                keyid:68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3e:72:a0:7e:71:ba:6e:47:17:bd:e4:a7:21:fa:c0:8e:f2:
         b1:87:d7:95:bf:8b:42:27:71:cd:d9:84:2b:08:37:2f:31:79:
         af:df:e9:29:c4:89:85:6a:e7:ac:a0:53:43:fa:a9:24:e4:ba:
         c3:5d:e0:c4:e2:52:4e:98:d6:38:c0:03:bd:65:0a:3b:86:53:
         26:71:af:fe:17:7e:b9:21:53:38:f8:7f:73:2a:c2:70:da:cc:
         c5:34:a3:c4:8c:72:2c:98:3f:73:d2:ff:eb:5a:b3:9b:6c:d3:
         0f:98:fb:c9:3c:81:b5:4e:f1:cb:f3:66:27:25:0c:06:e0:b9:
         dc:8b:f2:9e:90:88:cd:ee:73:b0:a1:83:38:6e:20:8e:82:c8:
         ad:23:65:40:47:5d:86:b0:37:e0:60:17:f2:6f:cc:99:39:08:
         db:93:47:d9:0e:e2:36:51:b8:90:bd:02:08:74:1b:79:21:12:
         06:5b:39:29:af:53:24:3b:6d:c9:4a:3a:12:4c:40:d9:fb:3f:
         72:8c:40:61:9e:42:fb:f9:10:55:06:bb:16:e0:2d:d7:17:6e:
         ef:96:30:67:a5:62:3f:7a:30:24:e3:3d:c0:bf:12:45:fe:3f:
         5a:f0:91:ca:ba:e6:f8:18:d7:0f:dc:0d:ef:f9:a1:52:f7:06:
         b3:6b:0f:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAdxXDlncYKZeK0/TpXiM8HmbneMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgyMzBDMTQ0MDMzMjFDQzZDMjIzN0M1NzZDRjdFNTBE
MkJBQzlCNDAeFw0yNTAyMTcxNDQ4NThaFw0yNTAyMTgxNTEyNThaMDMxMTAvBgNV
BAMTKEY1NkMwQUFCQUE2NzY3MjgzOTkzMzRGQzAxMEFBQjJFRTRFNzg3NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4umXQIUKbZcT5yxOMMs2n899F
4MuF+FhR8qWhoBUKZoFBDxySx8QpAUwIHnxa5Bt/LNT90LEcfCwL9zv7WcjnV/Sf
l5VwrvtREBGXeoi9tAdGJU0UcddZJeauqFn8E1LTJoucvxuJ224JD+VFJNaef2a9
8JyXwIeKWTi/ab8u7HAic9F13pnQR4TnLFjP9D7NHyJBUZtFWvOnWWLlx5gW5XAG
LXpzgK9KmZ2dhCuHzIKxkvADkjQPseCGSu+0SigZ9E4XjBvFcmDWbdOCQUqvjfbQ
A+cyXsErbd+bgcjOli5NU8aoufM8/+irZURyC3PYiCtK6PW8WDXik4Jg+Ks7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9WwKq6pnZyg5kzT8AQqrLuTnh0UwHwYDVR0j
BBgwFoAUaCMMFEAzIcxsIjfFds9+UNK6ybQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl
U2UvMC82ODIzMEMxNDQwMzMyMUNDNkMyMjM3QzU3NkNGN0U1MEQyQkFDOUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MjMwQzE0NDAzMzIxQ0M2
QzIyMzdDNTc2Q0Y3RTUwRDJCQUM5QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3BlU2UvMC82
ODIzMEMxNDQwMzMyMUNDNkMyMjM3QzU3NkNGN0U1MEQyQkFDOUI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOD5yoH5xum5HF73kpyH6wI7ysYfXlb+LQidxzdmEKwg3LzF5r9/pKcSJhWrn
rKBTQ/qpJOS6w13gxOJSTpjWOMADvWUKO4ZTJnGv/hd+uSFTOPh/cyrCcNrMxTSj
xIxyLJg/c9L/61qzm2zTD5j7yTyBtU7xy/NmJyUMBuC53IvynpCIze5zsKGDOG4g
joLIrSNlQEddhrA34GAX8m/MmTkI25NH2Q7iNlG4kL0CCHQbeSESBls5Ka9TJDtt
yUo6EkxA2fs/coxAYZ5C+/kQVQa7FuAt1xdu75YwZ6ViP3owJOM9wL8SRf4/WvCR
yrrm+BjXD9wN7/mhUvcGs2sPgg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:36 2025 by rpki-client