Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.mft
File:                     3A4D1E80E5B0893415C8E147E628E125139A1ADF.mft (raw, json)
Hash identifier:          RcbXf35Pvk3cQsileO2iUVuD7XMiBH2RgMXPraluS4c=
Subject key identifier:   33:78:58:FA:F3:22:63:6D:73:0C:94:23:CB:AB:00:9E:DE:2C:8E:86
Authority key identifier: 3A:4D:1E:80:E5:B0:89:34:15:C8:E1:47:E6:28:E1:25:13:9A:1A:DF
Certificate issuer:       /CN=3A4D1E80E5B0893415C8E147E628E125139A1ADF
Certificate serial:       19ED7D7628DD5852EB92435CFD58BBC9E4229A1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A4D1E80E5B0893415C8E147E628E125139A1ADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.mft
Manifest number:          23
Signing time:             Tue 22 Apr 2025 04:04:44 +0000
Manifest this update:     Tue 22 Apr 2025 03:59:44 +0000
Manifest next update:     Wed 23 Apr 2025 05:24:44 +0000
Files and hashes:         1: 323830343a386331383a3a2f33322d3438203d3e20323733373739.roa (hash: iFvroAGLuzeDnKcx4rHDR3zShr/DLq+A6T0ARZBNJ7o=)
                          2: 3A4D1E80E5B0893415C8E147E628E125139A1ADF.crl (hash: 1QYNApPqOvo4C5UcSX6SwObCHBfxB5txiXS+9gjKtVw=)
                          3: 3137372e382e36392e302f32342d3234203d3e20323733373739.roa (hash: aUEqXod2EwWVWMbCduYFxxfcgLT4y6ntI5xJACs/O9w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ed:7d:76:28:dd:58:52:eb:92:43:5c:fd:58:bb:c9:e4:22:9a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4D1E80E5B0893415C8E147E628E125139A1ADF
        Validity
            Not Before: Apr 22 03:59:44 2025 GMT
            Not After : Apr 23 05:24:44 2025 GMT
        Subject: CN=337858FAF322636D730C9423CBAB009EDE2C8E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:0a:58:40:e8:ff:8d:0d:06:23:79:5d:94:
                    a3:57:28:6c:87:aa:84:70:d4:03:03:cd:1f:fe:58:
                    c9:33:53:68:d3:bb:a8:4b:09:11:ae:db:37:b1:26:
                    ed:a9:86:63:9a:d4:67:a1:e4:5c:e8:cb:92:fb:7f:
                    63:64:b8:d4:4d:6a:43:e2:7b:95:b5:5f:15:2e:23:
                    c2:af:44:c7:65:7b:55:85:d6:13:51:b2:9a:1c:dc:
                    55:fe:a7:b6:c4:b2:53:1f:c0:db:be:17:da:08:a0:
                    bf:43:7b:40:34:a2:56:05:6c:0f:23:c3:11:a1:b8:
                    97:ef:2f:06:6c:fa:16:f9:66:d1:76:28:fe:ba:31:
                    3a:08:36:07:d6:3b:f0:2d:79:ff:6f:c6:76:0c:b3:
                    34:be:2d:e8:3e:56:c9:da:a2:4f:af:96:d2:89:59:
                    2b:68:40:0b:8c:c6:83:17:69:83:d8:ac:ca:86:74:
                    88:98:5d:53:89:da:97:7e:0d:18:7a:8d:00:5f:49:
                    e5:96:25:d2:06:1b:a6:ff:71:dd:45:f9:e6:ed:23:
                    50:1e:df:fb:3d:08:af:2e:6b:b9:b8:3f:15:11:f0:
                    7f:46:21:62:94:36:9b:d8:d2:84:76:94:ca:d4:69:
                    61:9c:5e:a9:f2:4d:bb:e5:c5:e9:b2:c1:fd:68:28:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:78:58:FA:F3:22:63:6D:73:0C:94:23:CB:AB:00:9E:DE:2C:8E:86
            X509v3 Authority Key Identifier:
                keyid:3A:4D:1E:80:E5:B0:89:34:15:C8:E1:47:E6:28:E1:25:13:9A:1A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A4D1E80E5B0893415C8E147E628E125139A1ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:77:59:17:3f:d9:c6:0d:2d:63:ea:12:15:93:59:27:61:dc:
         97:d1:9a:7e:52:04:63:43:16:79:61:14:d4:9b:c6:50:bc:a7:
         71:cd:4f:8c:1e:9e:56:ee:0e:97:86:df:b5:fd:bd:80:63:db:
         58:b1:23:25:c7:e8:ba:60:1f:f9:38:35:e0:d2:7d:fc:20:d2:
         87:f1:2b:87:81:f2:1d:09:71:22:38:ed:ab:75:87:8c:27:d7:
         01:31:e6:b7:40:8a:76:08:5b:5f:af:93:2e:7e:f4:ea:5d:c8:
         cd:4f:09:36:53:3e:aa:ed:80:a8:cc:79:ab:4b:a1:7c:fb:ab:
         bd:78:0d:1c:bb:3a:c7:73:e7:78:1b:dd:a2:5d:ce:4f:31:e9:
         dc:e8:2a:f4:3b:27:78:59:fa:5c:6b:d6:d6:19:6f:e6:66:a9:
         69:78:37:e0:25:12:7e:86:9a:0f:bf:67:cb:cb:c8:4d:c7:f5:
         d2:f9:3d:a6:af:fe:62:0f:9b:29:be:bc:ae:b4:b8:11:fd:7b:
         52:be:0c:7c:bd:21:e4:c2:01:2d:86:43:16:9d:e9:d2:8b:9e:
         20:b8:90:91:29:9b:23:da:53:0b:fe:3e:62:7b:e8:6b:d4:95:
         9a:a4:10:76:cb:7a:54:bd:c5:51:8c:b4:71:7f:b0:41:ce:16:
         4c:a7:b3:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGe19dijdWFLrkkNc/Vi7yeQimhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0RDFFODBFNUIwODkzNDE1QzhFMTQ3RTYyOEUxMjUx
MzlBMUFERjAeFw0yNTA0MjIwMzU5NDRaFw0yNTA0MjMwNTI0NDRaMDMxMTAvBgNV
BAMTKDMzNzg1OEZBRjMyMjYzNkQ3MzBDOTQyM0NCQUIwMDlFREUyQzhFODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJQpYQOj/jQ0GI3ldlKNXKGyH
qoRw1AMDzR/+WMkzU2jTu6hLCRGu2zexJu2phmOa1Geh5Fzoy5L7f2NkuNRNakPi
e5W1XxUuI8KvRMdle1WF1hNRspoc3FX+p7bEslMfwNu+F9oIoL9De0A0olYFbA8j
wxGhuJfvLwZs+hb5ZtF2KP66MToINgfWO/Atef9vxnYMszS+Leg+Vsnaok+vltKJ
WStoQAuMxoMXaYPYrMqGdIiYXVOJ2pd+DRh6jQBfSeWWJdIGG6b/cd1F+ebtI1Ae
3/s9CK8ua7m4PxUR8H9GIWKUNpvY0oR2lMrUaWGcXqnyTbvlxemywf1oKIBJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUM3hY+vMiY21zDJQjy6sAnt4sjoYwHwYDVR0j
BBgwFoAUOk0egOWwiTQVyOFH5ijhJROaGt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlZwRk10ejhMMWRIQ2VSNTh5WnFWdVVCeEhjSjh2MWtaWHhRb2tITXR0
U0wvMC8zQTREMUU4MEU1QjA4OTM0MTVDOEUxNDdFNjI4RTEyNTEzOUExQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNEQxRTgwRTVCMDg5MzQx
NUM4RTE0N0U2MjhFMTI1MTM5QTFBREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RlZwRk10ejhMMWRIQ2VSNTh5WnFWdVVCeEhjSjh2MWtaWHhRb2tITXR0U0wvMC8z
QTREMUU4MEU1QjA4OTM0MTVDOEUxNDdFNjI4RTEyNTEzOUExQURGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWXdZFz/Zxg0tY+oSFZNZJ2Hcl9GaflIEY0MWeWEU1JvGULyncc1PjB6eVu4O
l4bftf29gGPbWLEjJcfoumAf+Tg14NJ9/CDSh/Erh4HyHQlxIjjtq3WHjCfXATHm
t0CKdghbX6+TLn706l3IzU8JNlM+qu2AqMx5q0uhfPurvXgNHLs6x3PneBvdol3O
TzHp3Ogq9DsneFn6XGvW1hlv5mapaXg34CUSfoaaD79ny8vITcf10vk9pq/+Yg+b
Kb68rrS4Ef17Ur4MfL0h5MIBLYZDFp3p0oueILiQkSmbI9pTC/4+Ynvoa9SVmqQQ
dst6VL3FUYy0cX+wQc4WTKez4w==
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:29 2025 by rpki-client