Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.mft
File:                     CCC1598968804633B2A44FA3F4900D700A0BCC47.mft (raw, json)
Hash identifier:          DiR+3tpALc7dtv9B9aPGRkEUny4DeucuPJZ++fqoEF4=
Subject key identifier:   42:B7:D8:55:4A:20:9E:85:83:12:62:1A:AE:A3:AA:1A:8E:35:B0:6F
Authority key identifier: CC:C1:59:89:68:80:46:33:B2:A4:4F:A3:F4:90:0D:70:0A:0B:CC:47
Certificate issuer:       /CN=CCC1598968804633B2A44FA3F4900D700A0BCC47
Certificate serial:       0517428F635ABA27D8CBC5F1502A7088E866874B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC1598968804633B2A44FA3F4900D700A0BCC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.mft
Manifest number:          AE
Signing time:             Sat 29 Mar 2025 01:45:09 +0000
Manifest this update:     Sat 29 Mar 2025 01:40:09 +0000
Manifest next update:     Sun 30 Mar 2025 03:33:09 +0000
Files and hashes:         1: CCC1598968804633B2A44FA3F4900D700A0BCC47.crl (hash: UYUotbj0gNkb6u8/WxF1h/gRxd99miFjR6FGR2U/lp0=)
                          2: 3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa (hash: icReVHwpARhwhkurbT+3R/iXpMUd0hVkmtmH1DxGJ3Y=)
                          3: 323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (hash: ajTvj7p1yBkhSFjFNlIPvv8fg8LenFwY3z1h/yZ/mRM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:17:42:8f:63:5a:ba:27:d8:cb:c5:f1:50:2a:70:88:e8:66:87:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC1598968804633B2A44FA3F4900D700A0BCC47
        Validity
            Not Before: Mar 29 01:40:09 2025 GMT
            Not After : Mar 30 03:33:09 2025 GMT
        Subject: CN=42B7D8554A209E858312621AAEA3AA1A8E35B06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9a:01:da:9e:4c:ec:0a:02:31:e2:9a:25:bd:
                    d5:88:6c:b7:89:88:82:12:85:3d:89:82:cd:80:29:
                    58:7c:a6:9a:ea:41:dd:d8:e5:b2:c9:31:35:27:89:
                    f7:41:34:c9:88:6b:4e:2b:78:b6:a1:ef:61:c5:27:
                    d4:56:36:a4:ee:af:62:1a:f4:77:1f:d2:cf:2f:13:
                    21:d4:b2:29:5f:83:e8:b1:12:f0:7b:fb:79:fc:cd:
                    b3:51:c1:a8:85:6e:3e:39:a1:6a:11:ea:d5:8f:4f:
                    d6:84:e6:cb:16:4c:c7:b4:77:00:d4:94:73:50:7c:
                    55:53:22:f7:c3:5c:16:54:69:d3:44:3b:30:cb:83:
                    96:2c:3f:85:a0:7b:8a:9e:15:ef:50:92:6f:f9:f1:
                    38:fc:04:b8:c0:b6:14:22:71:2f:2f:1b:a5:fd:24:
                    55:91:59:59:1c:1b:fd:6b:92:2c:42:3d:f9:0a:fd:
                    63:41:20:b2:66:d6:85:30:0e:4b:85:78:56:5b:32:
                    e4:55:03:0d:f7:2b:f7:e1:32:ed:b1:e7:a3:19:a3:
                    dd:07:c3:52:d5:15:ea:8f:f7:20:67:a0:d4:0a:2a:
                    b8:9a:64:cd:47:8a:5b:9f:f7:7d:7f:7b:dc:61:61:
                    85:eb:c5:08:9f:df:94:d3:6e:7d:95:7d:12:d5:ae:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B7:D8:55:4A:20:9E:85:83:12:62:1A:AE:A3:AA:1A:8E:35:B0:6F
            X509v3 Authority Key Identifier:
                keyid:CC:C1:59:89:68:80:46:33:B2:A4:4F:A3:F4:90:0D:70:0A:0B:CC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC1598968804633B2A44FA3F4900D700A0BCC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:48:be:71:b9:ad:54:79:ab:59:90:d9:f2:56:95:b7:75:
         bf:6c:3f:a9:e9:20:b4:79:97:30:2f:ab:25:5b:9f:9a:09:8f:
         75:30:a7:8c:6b:21:2c:bb:89:be:74:8a:68:c2:55:dd:7b:16:
         9a:e1:45:71:de:69:b4:ea:cc:49:21:71:ff:d1:94:83:ea:2b:
         d0:6a:70:b3:4c:9f:43:2f:66:65:0e:cd:4d:39:74:a2:cf:22:
         8f:cb:04:26:bb:bb:3d:c8:eb:d8:47:b5:e5:90:49:67:d7:69:
         c9:55:8c:21:a3:00:1b:7e:cc:2a:fb:51:07:ab:ec:be:34:71:
         2e:86:63:8b:32:5c:4e:2a:8e:62:2e:3e:30:8e:f3:8e:ff:72:
         59:37:cf:62:80:9e:09:49:bc:72:d2:d3:1b:df:72:78:14:f6:
         5b:f8:58:c8:2b:f1:8b:31:ad:31:2d:02:37:75:5e:d3:0a:1e:
         02:a9:54:6b:55:bf:5c:64:b6:d3:7f:fe:52:90:2d:a7:72:b0:
         fc:1f:fa:b5:30:c6:ac:d4:e9:7f:02:47:ec:8c:ef:7f:fb:be:
         19:ca:92:81:51:fb:32:17:40:7a:af:df:9d:40:20:1c:50:7e:
         09:8a:12:b1:e7:96:ac:4b:c8:e2:44:2c:77:ad:09:d1:cc:3a:
         94:8f:ec:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBRdCj2NauifYy8XxUCpwiOhmh0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NDMTU5ODk2ODgwNDYzM0IyQTQ0RkEzRjQ5MDBENzAw
QTBCQ0M0NzAeFw0yNTAzMjkwMTQwMDlaFw0yNTAzMzAwMzMzMDlaMDMxMTAvBgNV
BAMTKDQyQjdEODU1NEEyMDlFODU4MzEyNjIxQUFFQTNBQTFBOEUzNUIwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6mgHankzsCgIx4polvdWIbLeJ
iIIShT2Jgs2AKVh8pprqQd3Y5bLJMTUnifdBNMmIa04reLah72HFJ9RWNqTur2Ia
9Hcf0s8vEyHUsilfg+ixEvB7+3n8zbNRwaiFbj45oWoR6tWPT9aE5ssWTMe0dwDU
lHNQfFVTIvfDXBZUadNEOzDLg5YsP4Wge4qeFe9Qkm/58Tj8BLjAthQicS8vG6X9
JFWRWVkcG/1rkixCPfkK/WNBILJm1oUwDkuFeFZbMuRVAw33K/fhMu2x56MZo90H
w1LVFeqP9yBnoNQKKriaZM1Hiluf931/e9xhYYXrxQif35TTbn2VfRLVrsLBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQrfYVUognoWDEmIarqOqGo41sG8wHwYDVR0j
BBgwFoAUzMFZiWiARjOypE+j9JANcAoLzEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXF6SFoyRVMzbTN3R0RKTnZ4RExnSE15eHJTRHBTRVNiTGNuTFZRSnB5
Q2YvMC9DQ0MxNTk4OTY4ODA0NjMzQjJBNDRGQTNGNDkwMEQ3MDBBMEJDQzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDQzE1OTg5Njg4MDQ2MzNC
MkE0NEZBM0Y0OTAwRDcwMEEwQkNDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXF6SFoyRVMzbTN3R0RKTnZ4RExnSE15eHJTRHBTRVNiTGNuTFZRSnB5Q2YvMC9D
Q0MxNTk4OTY4ODA0NjMzQjJBNDRGQTNGNDkwMEQ3MDBBMEJDQzQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHOxIvnG5rVR5q1mQ2fJWlbd1v2w/qekgtHmXMC+rJVufmgmPdTCnjGshLLuJ
vnSKaMJV3XsWmuFFcd5ptOrMSSFx/9GUg+or0Gpws0yfQy9mZQ7NTTl0os8ij8sE
Jru7Pcjr2Ee15ZBJZ9dpyVWMIaMAG37MKvtRB6vsvjRxLoZjizJcTiqOYi4+MI7z
jv9yWTfPYoCeCUm8ctLTG99yeBT2W/hYyCvxizGtMS0CN3Ve0woeAqlUa1W/XGS2
03/+UpAtp3Kw/B/6tTDGrNTpfwJH7Izvf/u+GcqSgVH7MhdAeq/fnUAgHFB+CYoS
seeWrEvI4kQsd60J0cw6lI/sCQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:50 2025 by rpki-client