Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft
File:                     BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft (raw, json)
Hash identifier:          oFWrkKWpnoSk5PrWSE6BbDxBJ3RgyzgHi+A7YHhcarw=
Subject key identifier:   CC:70:8A:A4:51:61:55:99:1C:00:77:D8:91:E4:33:46:4F:75:9C:1C
Authority key identifier: BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA
Certificate issuer:       /CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
Certificate serial:       5A8FB4C9624F46A4D580DAE7248C617F00A50070
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft
Manifest number:          1E
Signing time:             Thu 25 Apr 2024 11:58:28 +0000
Manifest this update:     Thu 25 Apr 2024 11:53:28 +0000
Manifest next update:     Fri 26 Apr 2024 13:12:28 +0000
Files and hashes:         1: BDED1ED39E25BB8119504E29E3014EC3968ECCEA.crl (hash: n0wNKx5jJ8waTUsuXpe/ABXoiUJXUprB98SXByN8xnU=)
                          2: 34352e352e3139362e302f32322d3332203d3e20323636313035.roa (hash: 5lA2PbnhrMvRnNmIwXQrYnoSNdca+jB/7p+eqefGtHI=)
                          3: 323830343a336162383a3a2f33322d313238203d3e20323636313035.roa (hash: PcX3B2uW/HYH1pZVVsjsZYlGBWAeNw/nwiaBIJ0l9y0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8f:b4:c9:62:4f:46:a4:d5:80:da:e7:24:8c:61:7f:00:a5:00:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
        Validity
            Not Before: Apr 25 11:53:28 2024 GMT
            Not After : Apr 26 13:12:28 2024 GMT
        Subject: CN=CC708AA4516155991C0077D891E433464F759C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:18:d0:15:84:f8:15:a5:13:cc:9a:d1:c5:
                    a0:05:89:ea:4a:36:74:a2:b9:d3:01:44:9b:5d:57:
                    d1:c0:af:6b:2e:95:00:cb:19:81:ad:25:6b:4d:9d:
                    4f:21:f4:32:b7:ed:64:60:f4:a6:1a:7c:f6:b2:fd:
                    66:fc:e4:24:7a:ac:60:26:b4:07:d0:b5:5e:94:70:
                    34:43:fa:bf:ce:71:e6:8e:d5:5c:0e:7c:30:e1:51:
                    7f:6b:ca:81:c4:36:8e:4e:c2:3a:4a:40:e2:5d:47:
                    30:3f:c8:51:0c:cb:f0:6f:b3:59:6f:9a:84:90:16:
                    ad:16:23:b9:a8:98:86:f4:b1:22:21:cf:a4:47:e7:
                    41:b8:c2:60:02:95:7b:6e:79:6e:e9:aa:77:64:f9:
                    34:9c:a0:a0:9c:2c:00:d8:1a:f8:ea:d1:00:0a:31:
                    0e:96:9e:03:bf:47:91:c1:cd:4c:10:c0:a0:bd:9d:
                    ad:3d:5e:0b:f2:92:b6:5c:3a:21:9b:7e:a9:14:a3:
                    ef:c7:53:0f:d0:b7:07:b2:05:04:d1:d3:7a:fa:2c:
                    e2:5c:e7:89:8c:bf:9f:7a:39:b7:f2:d7:ca:83:47:
                    a1:33:b3:6d:8a:d3:32:b2:d3:2c:f5:22:49:6c:b2:
                    c1:ed:19:d6:94:00:e5:d2:d7:4f:1f:97:e3:5e:5a:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:70:8A:A4:51:61:55:99:1C:00:77:D8:91:E4:33:46:4F:75:9C:1C
            X509v3 Authority Key Identifier:
                keyid:BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:94:2e:2a:74:32:8d:a4:8c:1a:19:c3:bf:16:53:3a:cf:45:
         ec:ca:2c:75:2d:35:46:94:6a:38:c4:e1:12:11:65:5b:7d:ef:
         74:15:1e:24:96:9a:14:6c:76:1b:a0:5b:09:03:02:08:0c:b7:
         36:79:95:0c:63:ab:0a:df:2b:e8:f3:54:31:ad:4a:b0:fc:11:
         24:69:80:c4:86:eb:54:87:9b:58:98:60:a6:9b:3b:0f:08:cf:
         f3:0a:ea:e9:49:b6:58:6c:99:b4:97:cc:27:5d:b6:3f:9e:67:
         ab:89:70:05:d0:42:9c:d2:6e:32:06:f2:08:65:b6:4f:0e:92:
         6c:37:7e:6e:76:3f:d2:ef:9c:d3:b9:6f:8d:39:7d:d3:ac:92:
         91:50:09:1e:34:ca:d9:f5:c3:27:db:49:3a:cf:9a:5d:40:e7:
         f4:a1:18:7c:cc:8e:73:ec:d7:00:74:c5:c0:ee:d4:02:7d:e8:
         dc:36:00:f3:b5:fc:b0:5f:94:61:63:75:58:e8:b5:5b:37:bb:
         04:86:e3:3e:c2:e1:3d:87:a0:9d:6c:80:47:d9:08:67:f1:6c:
         55:6c:ba:9d:10:75:55:06:fb:99:36:8a:b1:e2:78:e7:2c:6b:
         2f:44:4e:e0:97:d6:c1:5d:71:42:87:52:9c:29:7a:da:52:2c:
         af:b6:40:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWo+0yWJPRqTVgNrnJIxhfwClAHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRFRDFFRDM5RTI1QkI4MTE5NTA0RTI5RTMwMTRFQzM5
NjhFQ0NFQTAeFw0yNDA0MjUxMTUzMjhaFw0yNDA0MjYxMzEyMjhaMDMxMTAvBgNV
BAMTKENDNzA4QUE0NTE2MTU1OTkxQzAwNzdEODkxRTQzMzQ2NEY3NTlDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxBjQFYT4FaUTzJrRxaAFiepK
NnSiudMBRJtdV9HAr2sulQDLGYGtJWtNnU8h9DK37WRg9KYafPay/Wb85CR6rGAm
tAfQtV6UcDRD+r/OceaO1VwOfDDhUX9ryoHENo5OwjpKQOJdRzA/yFEMy/Bvs1lv
moSQFq0WI7momIb0sSIhz6RH50G4wmAClXtueW7pqndk+TScoKCcLADYGvjq0QAK
MQ6WngO/R5HBzUwQwKC9na09XgvykrZcOiGbfqkUo+/HUw/QtweyBQTR03r6LOJc
54mMv596Obfy18qDR6Ezs22K0zKy0yz1IklsssHtGdaUAOXS108fl+NeWvsNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzHCKpFFhVZkcAHfYkeQzRk91nBwwHwYDVR0j
BBgwFoAUve0e054lu4EZUE4p4wFOw5aOzOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJRclludDdMYlRvOWlqeE1RN2hWUUw2eGtDeTlkRDdxQXJRMUJKMU43
NmQvMS9CREVEMUVEMzlFMjVCQjgxMTk1MDRFMjlFMzAxNEVDMzk2OEVDQ0VBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUQxRUQzOUUyNUJCODEx
OTUwNEUyOUUzMDE0RUMzOTY4RUNDRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RlJRclludDdMYlRvOWlqeE1RN2hWUUw2eGtDeTlkRDdxQXJRMUJKMU43NmQvMS9C
REVEMUVEMzlFMjVCQjgxMTk1MDRFMjlFMzAxNEVDMzk2OEVDQ0VBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr5QuKnQyjaSMGhnDvxZTOs9F7MosdS01RpRqOMThEhFlW33vdBUeJJaaFGx2
G6BbCQMCCAy3NnmVDGOrCt8r6PNUMa1KsPwRJGmAxIbrVIebWJhgpps7DwjP8wrq
6Um2WGyZtJfMJ122P55nq4lwBdBCnNJuMgbyCGW2Tw6SbDd+bnY/0u+c07lvjTl9
06ySkVAJHjTK2fXDJ9tJOs+aXUDn9KEYfMyOc+zXAHTFwO7UAn3o3DYA87X8sF+U
YWN1WOi1Wze7BIbjPsLhPYegnWyAR9kIZ/FsVWy6nRB1VQb7mTaKseJ45yxrL0RO
4JfWwV1xQodSnCl62lIsr7ZAfQ==
-----END CERTIFICATE-----