Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft
File:                     7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft (raw, json)
Hash identifier:          kfJRLrR2FHAb5OVEVp9ob+qNZmAKJgiV0lSP8lJ//IQ=
Subject key identifier:   E8:C5:72:DF:73:C9:E4:C3:93:E9:B9:31:08:F5:B7:11:D5:76:13:2C
Authority key identifier: 7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
Certificate issuer:       /CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
Certificate serial:       1EA4A3839DF078F9FA6B68745A36AB68F7C05C7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft
Manifest number:          E5
Signing time:             Mon 15 Apr 2024 11:39:55 +0000
Manifest this update:     Mon 15 Apr 2024 11:34:55 +0000
Manifest next update:     Tue 16 Apr 2024 15:27:55 +0000
Files and hashes:         1: 323830343a373464633a3a2f33322d3332203d3e20323731303038.roa (hash: 63w5q8HIXlFZpgACF0mvG2vkakUKbQRCkN7kPhCokq0=)
                          2: 3137302e3235342e3132302e302f32342d3234203d3e20323731303038.roa (hash: gmHkmrI2d3vJFcd6aLX1/4hcobQuETh4oVmE17huMKk=)
                          3: 3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa (hash: T7lvMGBBNK2yTGi2K2oIwVHltIjmYtXqFjfbo7cYnRY=)
                          4: 7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl (hash: PxdOjO+xGmCrlbQgqhb7Ng7hAmaI1SfrZQpmEwnBYf8=)
                          5: 3137302e3235342e3132332e302f32342d3234203d3e20323731303038.roa (hash: SHOWfmieIz7kFDxk+mHaWdwNeiEFre0z0oTHkADLgcg=)
                          6: 3137302e3235342e3132312e302f32342d3234203d3e20323731303038.roa (hash: UbMe9W1xWYZoIpJWg+YGUJl9Mdqp4mYjoa0Q6eNquSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a4:a3:83:9d:f0:78:f9:fa:6b:68:74:5a:36:ab:68:f7:c0:5c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
        Validity
            Not Before: Apr 15 11:34:55 2024 GMT
            Not After : Apr 16 15:27:55 2024 GMT
        Subject: CN=E8C572DF73C9E4C393E9B93108F5B711D576132C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:b1:07:e2:41:7b:f3:3d:d7:02:cd:d1:e0:
                    36:a3:ff:0f:dc:b2:6b:5c:38:81:15:7b:c8:68:42:
                    eb:19:92:67:e2:73:74:41:d3:17:54:6c:d2:6a:75:
                    51:2a:2c:2c:7d:7d:28:aa:fb:6e:e3:0c:db:28:f4:
                    37:aa:34:00:da:10:8e:3c:0a:b3:20:3d:bd:eb:fa:
                    e0:66:94:b9:d2:ab:dd:28:f4:de:e1:22:c6:f6:06:
                    ac:e7:bb:66:bb:33:96:ff:0f:0e:0f:e3:c2:bb:eb:
                    34:8f:31:ae:b9:32:7e:4f:f1:c9:10:c8:ab:77:f4:
                    52:bc:ee:60:75:71:ff:2f:d9:1a:90:72:fe:fe:04:
                    3e:47:7a:17:b6:a0:a6:f0:d6:78:37:ee:bd:bd:a3:
                    96:cb:3e:b9:6b:16:7e:2c:55:09:e1:78:e7:c1:f0:
                    49:b5:40:aa:3b:6b:0e:6d:09:d8:6c:e1:37:93:c2:
                    2e:38:8e:63:0c:05:94:2b:4b:b1:99:0b:12:b7:e0:
                    c3:f5:80:98:96:76:7a:8b:35:02:d4:23:95:55:a2:
                    ab:5e:d9:bb:84:5c:5f:4f:61:63:3c:03:e6:2d:e9:
                    41:bc:c6:75:71:03:a2:73:b5:09:af:69:c4:8c:83:
                    36:b0:6a:74:90:18:a4:cd:5b:b1:33:0c:7a:a0:16:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C5:72:DF:73:C9:E4:C3:93:E9:B9:31:08:F5:B7:11:D5:76:13:2C
            X509v3 Authority Key Identifier:
                keyid:7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:ab:65:67:1f:aa:a2:f4:ae:62:9e:13:0b:37:de:13:d3:
         a7:53:c4:4e:96:87:14:6f:15:59:6d:19:4e:83:d7:9d:11:43:
         46:97:a6:27:dd:25:fa:19:e2:bd:ac:fd:77:c0:96:09:97:64:
         b1:66:e9:2d:2b:09:3e:cc:77:2f:27:be:07:05:e0:41:00:c1:
         c2:1a:46:6b:8c:d7:44:7f:b2:2f:48:f7:cf:de:a9:8f:0c:68:
         31:d7:6c:43:cf:4c:92:42:38:b8:21:16:bc:5c:b2:7e:af:20:
         c9:d3:06:ec:97:43:32:56:04:5e:30:a4:c9:93:af:b9:6e:95:
         76:87:bc:bc:c1:35:af:aa:e7:06:5d:42:22:d1:39:65:6f:08:
         f7:18:f7:bf:20:d9:f9:8c:de:32:ba:d7:c6:15:3b:ff:8d:fc:
         e9:68:32:59:f3:e8:3a:b0:f2:e7:b5:61:82:8d:fe:4c:50:55:
         6d:92:a9:a7:33:8e:6b:4b:77:d1:49:d6:2f:84:e8:a6:3b:25:
         66:ce:1a:48:60:13:57:50:72:25:f5:bb:41:22:c8:58:eb:e1:
         a5:0e:2b:71:60:ba:5d:47:bb:a1:b0:3d:47:77:44:16:96:be:
         82:bd:61:8c:e7:09:23:23:f0:eb:1c:6c:c4:10:f0:0f:61:aa:
         c7:15:89:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHqSjg53wePn6a2h0WjaraPfAXHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FGRTQ2OUZGRjBGQzYwQzBFNUU4ODI0RTA5NURFMzU5
ODVDN0NEMDAeFw0yNDA0MTUxMTM0NTVaFw0yNDA0MTYxNTI3NTVaMDMxMTAvBgNV
BAMTKEU4QzU3MkRGNzNDOUU0QzM5M0U5QjkzMTA4RjVCNzExRDU3NjEzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmLEH4kF78z3XAs3R4Daj/w/c
smtcOIEVe8hoQusZkmfic3RB0xdUbNJqdVEqLCx9fSiq+27jDNso9DeqNADaEI48
CrMgPb3r+uBmlLnSq90o9N7hIsb2Bqznu2a7M5b/Dw4P48K76zSPMa65Mn5P8ckQ
yKt39FK87mB1cf8v2RqQcv7+BD5Hehe2oKbw1ng37r29o5bLPrlrFn4sVQnheOfB
8Em1QKo7aw5tCdhs4TeTwi44jmMMBZQrS7GZCxK34MP1gJiWdnqLNQLUI5VVoqte
2buEXF9PYWM8A+Yt6UG8xnVxA6JztQmvacSMgzawanSQGKTNW7EzDHqgFlfrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6MVy33PJ5MOT6bkxCPW3EdV2EywwHwYDVR0j
BBgwFoAUev5Gn/8PxgwOXogk4JXeNZhcfNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzlyRVFoVmppc0s4UTI3cjEzelpKSzMyc1hRNENSRkJQVlM4S05oWkJp
V0IvMC83QUZFNDY5RkZGMEZDNjBDMEU1RTg4MjRFMDk1REUzNTk4NUM3Q0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBRkU0NjlGRkYwRkM2MEMw
RTVFODgyNEUwOTVERTM1OTg1QzdDRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzlyRVFoVmppc0s4UTI3cjEzelpKSzMyc1hRNENSRkJQVlM4S05oWkJpV0IvMC83
QUZFNDY5RkZGMEZDNjBDMEU1RTg4MjRFMDk1REUzNTk4NUM3Q0QwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfgarZWcfqqL0rmKeEws33hPTp1PETpaHFG8VWW0ZToPXnRFDRpemJ90l+hni
vaz9d8CWCZdksWbpLSsJPsx3Lye+BwXgQQDBwhpGa4zXRH+yL0j3z96pjwxoMdds
Q89MkkI4uCEWvFyyfq8gydMG7JdDMlYEXjCkyZOvuW6Vdoe8vME1r6rnBl1CItE5
ZW8I9xj3vyDZ+YzeMrrXxhU7/4386WgyWfPoOrDy57Vhgo3+TFBVbZKppzOOa0t3
0UnWL4TopjslZs4aSGATV1ByJfW7QSLIWOvhpQ4rcWC6XUe7obA9R3dEFpa+gr1h
jOcJIyPw6xxsxBDwD2GqxxWJuw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:04:09 2025 by rpki-client