Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft
File:                     B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft (raw, json)
Hash identifier:          6bLjiO3Senadmu2y+h3tm4JpoUbcCSnaVJo/2chSBZA=
Subject key identifier:   F0:58:00:69:69:B8:14:B7:76:4C:FC:84:5D:B9:98:58:B3:11:18:BA
Authority key identifier: B5:9D:C3:0C:A9:79:60:CC:89:71:DA:40:E4:0E:AB:97:1B:C5:4F:BA
Certificate issuer:       /CN=B59DC30CA97960CC8971DA40E40EAB971BC54FBA
Certificate serial:       0CD3380806DE35448A4D92D9974C3A2A171354FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft
Manifest number:          08
Signing time:             Fri 15 Dec 2023 14:02:37 +0000
Manifest this update:     Fri 15 Dec 2023 13:57:37 +0000
Manifest next update:     Sat 16 Dec 2023 16:52:37 +0000
Files and hashes:         1: 3133382e3131372e3231362e302f32342d3332203d3e20323634323534.roa (hash: JiGtF+tHYbkugUFGPzh9uk4kIUt22Jz3jVA4EPm+s5Q=)
                          2: 323830343a323530383a3a2f33322d313238203d3e20323634323534.roa (hash: WPKt1BE87bkBBovLqoV6l17gU3nc7+thaqTE3ionE7E=)
                          3: B59DC30CA97960CC8971DA40E40EAB971BC54FBA.crl (hash: U7MEqpGC7EtMgIlenKCvSwpkoNIUxF1Vw8bWLbLHlNc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d3:38:08:06:de:35:44:8a:4d:92:d9:97:4c:3a:2a:17:13:54:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59DC30CA97960CC8971DA40E40EAB971BC54FBA
        Validity
            Not Before: Dec 15 13:57:37 2023 GMT
            Not After : Dec 16 16:52:37 2023 GMT
        Subject: CN=F058006969B814B7764CFC845DB99858B31118BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:e6:33:c8:20:7e:2d:49:f9:27:96:8e:fc:
                    33:88:ee:e8:c4:f7:05:98:4b:65:1a:85:6f:af:be:
                    7b:ea:3e:59:af:b1:ab:0d:80:17:4c:84:92:b9:21:
                    14:f3:a3:08:2e:9b:da:9e:30:a5:ae:69:3c:02:c8:
                    10:21:55:e9:57:55:9d:25:91:77:cd:fd:14:31:b3:
                    2d:a2:86:35:ee:e1:90:f1:cd:01:09:16:14:01:f4:
                    20:7b:ec:f8:65:2d:fa:f8:27:fd:37:8a:66:7f:80:
                    d8:cf:93:d1:d3:fe:e2:66:47:e0:22:62:6b:c7:76:
                    eb:3c:51:68:24:ee:dd:f7:38:a8:2b:7b:6b:65:fe:
                    be:91:97:87:ba:db:ff:a4:ae:60:91:d3:ec:54:ba:
                    42:3a:26:eb:55:4a:f4:b7:31:67:c8:44:98:3a:41:
                    55:cf:83:11:a6:59:b9:00:7c:c0:d7:e1:01:ea:1e:
                    f6:2b:e7:b1:77:71:a1:ad:40:d5:4d:f9:d2:b8:8e:
                    92:fa:c1:d6:6a:4a:00:47:2d:4e:0d:46:5c:60:d9:
                    18:d9:2a:bf:3c:ec:f5:25:c2:79:66:7f:40:7f:f1:
                    7f:ec:a7:ce:ec:e1:ce:72:71:f2:8f:67:21:12:82:
                    7b:3c:cd:2f:15:35:07:d6:06:9c:82:6a:4c:d5:97:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:58:00:69:69:B8:14:B7:76:4C:FC:84:5D:B9:98:58:B3:11:18:BA
            X509v3 Authority Key Identifier:
                keyid:B5:9D:C3:0C:A9:79:60:CC:89:71:DA:40:E4:0E:AB:97:1B:C5:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:08:8a:1c:40:bd:87:e9:ac:c1:a5:c1:d4:98:be:80:87:
         36:4a:0a:e9:7f:29:c4:55:39:f4:d5:b7:38:d1:c8:6e:2e:97:
         ad:c3:f9:a6:16:d7:af:e6:4d:43:3c:be:32:68:fe:6d:0f:36:
         c7:2a:c9:2c:c6:ac:87:40:91:50:bc:4f:6a:de:74:2d:7a:4a:
         33:ce:2a:44:b5:d0:01:8f:2a:eb:8f:98:22:d4:e0:f8:b7:a4:
         b3:1e:03:f2:52:c2:f0:1b:de:51:63:fd:af:5d:3e:cd:b0:f8:
         13:3e:22:a1:75:5c:5b:93:91:89:37:a0:95:2b:f7:8f:d0:45:
         a7:1a:66:33:e0:87:31:01:c8:36:45:2a:11:b9:0f:71:47:a7:
         84:08:7f:90:55:2f:b3:88:f3:b9:a1:2f:c1:c9:b0:ab:c1:55:
         6a:2b:90:c9:6e:76:9a:02:60:f8:e3:c1:7a:5f:1d:8f:59:e8:
         a5:1b:18:ed:52:8d:f6:ea:ce:12:a9:18:d0:dd:a6:cf:6c:bd:
         ad:e5:b3:23:ec:75:2a:68:c2:20:54:05:ba:bf:2d:d9:ab:78:
         8c:dc:7e:23:b9:0b:e7:d7:bb:5c:7b:82:92:3a:36:83:43:f5:
         06:84:34:de:ab:dc:24:e9:14:65:0e:a6:8d:72:5b:18:bf:90:
         81:27:c2:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDNM4CAbeNUSKTZLZl0w6KhcTVP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU5REMzMENBOTc5NjBDQzg5NzFEQTQwRTQwRUFCOTcx
QkM1NEZCQTAeFw0yMzEyMTUxMzU3MzdaFw0yMzEyMTYxNjUyMzdaMDMxMTAvBgNV
BAMTKEYwNTgwMDY5NjlCODE0Qjc3NjRDRkM4NDVEQjk5ODU4QjMxMTE4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kOYzyCB+LUn5J5aO/DOI7ujE
9wWYS2UahW+vvnvqPlmvsasNgBdMhJK5IRTzowgum9qeMKWuaTwCyBAhVelXVZ0l
kXfN/RQxsy2ihjXu4ZDxzQEJFhQB9CB77PhlLfr4J/03imZ/gNjPk9HT/uJmR+Ai
YmvHdus8UWgk7t33OKgre2tl/r6Rl4e62/+krmCR0+xUukI6JutVSvS3MWfIRJg6
QVXPgxGmWbkAfMDX4QHqHvYr57F3caGtQNVN+dK4jpL6wdZqSgBHLU4NRlxg2RjZ
Kr887PUlwnlmf0B/8X/sp87s4c5ycfKPZyESgns8zS8VNQfWBpyCakzVlzVBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8FgAaWm4FLd2TPyEXbmYWLMRGLowHwYDVR0j
BBgwFoAUtZ3DDKl5YMyJcdpA5A6rlxvFT7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW5xeTdyd2RVMVFuMzZHdDZ4YUZyc2g4TTY0WXNUM3oxOUFScGYxdThj
b1kvMC9CNTlEQzMwQ0E5Nzk2MENDODk3MURBNDBFNDBFQUI5NzFCQzU0RkJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I1OURDMzBDQTk3OTYwQ0M4
OTcxREE0MEU0MEVBQjk3MUJDNTRGQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RW5xeTdyd2RVMVFuMzZHdDZ4YUZyc2g4TTY0WXNUM3oxOUFScGYxdThjb1kvMC9C
NTlEQzMwQ0E5Nzk2MENDODk3MURBNDBFNDBFQUI5NzFCQzU0RkJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYacIihxAvYfprMGlwdSYvoCHNkoK6X8pxFU59NW3ONHIbi6XrcP5phbXr+ZN
Qzy+Mmj+bQ82xyrJLMash0CRULxPat50LXpKM84qRLXQAY8q64+YItTg+Leksx4D
8lLC8BveUWP9r10+zbD4Ez4ioXVcW5ORiTeglSv3j9BFpxpmM+CHMQHINkUqEbkP
cUenhAh/kFUvs4jzuaEvwcmwq8FVaiuQyW52mgJg+OPBel8dj1nopRsY7VKN9urO
EqkY0N2mz2y9reWzI+x1KmjCIFQFur8t2at4jNx+I7kL59e7XHuCkjo2g0P1BoQ0
3qvcJOkUZQ6mjXJbGL+QgSfCsA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:13:48 2025 by rpki-client