Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.mft
File:                     4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.mft (raw, json)
Hash identifier:          f8+jByZlAxayntOe9gjD4iWZdPmzhe34b2MN09MkxOc=
Subject key identifier:   46:9B:6F:7D:91:CA:75:5E:F7:B4:C9:61:DA:BB:F3:AF:88:98:7B:71
Authority key identifier: 4F:B4:FF:F1:F5:39:1A:17:BF:21:8A:7E:6F:C1:4F:8E:E7:F4:02:BE
Certificate issuer:       /CN=4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE
Certificate serial:       6348D86263A96ED43BBBB427F0A4407E159A5545
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.mft
Manifest number:          2C
Signing time:             Mon 17 Feb 2025 21:30:12 +0000
Manifest this update:     Mon 17 Feb 2025 21:25:12 +0000
Manifest next update:     Wed 19 Feb 2025 00:55:12 +0000
Files and hashes:         1: 4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.crl (hash: bl3R3s8e0PTT9ikU4ra/iNivc7z6bT9i+uVXzdUBDOU=)
                          2: 323830343a356665343a3a2f33322d313238203d3e20323639313330.roa (hash: hj/akagMiO2MtXsyJBqH9zbI5RnO8m/WVYmD6QJeOPY=)
                          3: 34352e3138302e34302e302f32322d3234203d3e20323639313330.roa (hash: VZ2cMI6S9LYeAGtBJh97GMD8JWinrFonrHDbQX8iwCM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:48:d8:62:63:a9:6e:d4:3b:bb:b4:27:f0:a4:40:7e:15:9a:55:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE
        Validity
            Not Before: Feb 17 21:25:12 2025 GMT
            Not After : Feb 19 00:55:12 2025 GMT
        Subject: CN=469B6F7D91CA755EF7B4C961DABBF3AF88987B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:ab:f8:c8:ca:df:6a:95:36:17:1c:cb:6a:
                    70:b1:56:dc:8e:a6:2e:bf:1d:c7:d1:b3:ac:e5:73:
                    47:f0:75:da:eb:cd:3b:76:d0:55:a8:31:f1:6a:64:
                    93:cd:43:0c:8e:cd:82:9a:2d:e2:a4:17:3a:b1:9c:
                    ab:90:91:5c:73:2b:f6:ea:3a:d4:77:19:2e:17:93:
                    13:8d:a0:8d:cf:94:f4:e2:b4:52:d1:bc:d1:80:0c:
                    02:93:ac:95:84:61:6c:c3:ec:70:68:6e:54:e8:79:
                    51:11:07:ad:6d:af:c9:4b:89:18:29:46:69:de:01:
                    ef:23:4a:2f:07:0e:c3:1b:c5:ac:c7:cd:ef:8c:cb:
                    e4:fc:16:76:a0:67:03:ee:d4:be:60:f0:da:68:ca:
                    c8:85:06:63:0c:87:c3:5d:aa:49:dc:db:e4:da:40:
                    95:fa:50:1e:19:2b:10:8c:3d:29:fa:d9:24:0c:dc:
                    85:1f:b1:c2:90:b9:c3:b8:08:a4:46:8e:d2:28:f1:
                    b2:bb:cc:05:4c:88:08:68:b5:8c:96:f3:65:85:a7:
                    82:37:56:d8:5e:3a:73:57:9f:a4:1f:b7:af:83:02:
                    af:a7:9a:9e:e6:d0:a6:62:bf:9b:5f:a1:05:02:72:
                    a2:3b:b6:7a:56:42:a3:4a:e9:97:24:05:37:49:95:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9B:6F:7D:91:CA:75:5E:F7:B4:C9:61:DA:BB:F3:AF:88:98:7B:71
            X509v3 Authority Key Identifier:
                keyid:4F:B4:FF:F1:F5:39:1A:17:BF:21:8A:7E:6F:C1:4F:8E:E7:F4:02:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:05:9b:18:5f:40:dc:46:ca:86:bf:16:a5:35:76:6b:78:5c:
         b0:bd:52:81:17:4e:96:87:af:c4:fc:08:65:d0:ed:9b:0e:20:
         74:aa:cc:e7:0f:2b:79:f9:0d:db:9c:f1:ac:42:33:ce:4c:77:
         e5:70:31:95:6d:9f:b2:fe:2f:7e:d9:97:d2:07:eb:07:1b:07:
         53:37:70:9a:79:0a:9a:9f:da:50:76:ba:7e:12:34:47:fe:10:
         69:c8:67:76:ce:68:b7:cf:57:ab:be:0e:93:93:12:7c:07:3f:
         e9:0e:de:21:09:06:0e:48:bb:35:01:67:fc:a4:62:f5:5e:15:
         de:96:cd:27:52:12:3d:93:8b:b4:fe:6e:42:4c:94:c7:41:b1:
         c8:b5:53:ee:16:86:17:d6:46:8e:a5:43:b0:ad:ea:05:9c:9c:
         bb:c0:ca:ac:2e:9e:28:09:24:25:f4:02:01:22:e1:f1:6e:f6:
         58:5e:98:50:ad:7a:f0:45:99:55:f0:ae:9a:b3:98:99:2a:d1:
         ad:5d:49:ac:10:64:33:9b:af:1e:1d:c3:b1:50:f1:c3:82:0f:
         f0:6f:cb:48:56:df:dd:b1:fb:b7:18:ea:84:f1:e2:8f:03:63:
         85:5b:03:0f:9c:a9:6a:43:df:67:39:10:8f:28:62:cc:70:29:
         c3:b3:66:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUY0jYYmOpbtQ7u7Qn8KRAfhWaVUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZCNEZGRjFGNTM5MUExN0JGMjE4QTdFNkZDMTRGOEVF
N0Y0MDJCRTAeFw0yNTAyMTcyMTI1MTJaFw0yNTAyMTkwMDU1MTJaMDMxMTAvBgNV
BAMTKDQ2OUI2RjdEOTFDQTc1NUVGN0I0Qzk2MURBQkJGM0FGODg5ODdCNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqqv4yMrfapU2FxzLanCxVtyO
pi6/HcfRs6zlc0fwddrrzTt20FWoMfFqZJPNQwyOzYKaLeKkFzqxnKuQkVxzK/bq
OtR3GS4XkxONoI3PlPTitFLRvNGADAKTrJWEYWzD7HBoblToeVERB61tr8lLiRgp
RmneAe8jSi8HDsMbxazHze+My+T8FnagZwPu1L5g8NpoysiFBmMMh8Ndqknc2+Ta
QJX6UB4ZKxCMPSn62SQM3IUfscKQucO4CKRGjtIo8bK7zAVMiAhotYyW82WFp4I3
VtheOnNXn6Qft6+DAq+nmp7m0KZiv5tfoQUCcqI7tnpWQqNK6ZckBTdJlXUtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURptvfZHKdV73tMlh2rvzr4iYe3EwHwYDVR0j
BBgwFoAUT7T/8fU5Ghe/IYp+b8FPjuf0Ar4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2Qzclh0Q1Nnc3ljYVVNYkFWN3lUdHcxY01OSDN0YWlHelZXaVlSaHdQ
RnYvMC80RkI0RkZGMUY1MzkxQTE3QkYyMThBN0U2RkMxNEY4RUU3RjQwMkJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGQjRGRkYxRjUzOTFBMTdC
RjIxOEE3RTZGQzE0RjhFRTdGNDAyQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2Qzclh0Q1Nnc3ljYVVNYkFWN3lUdHcxY01OSDN0YWlHelZXaVlSaHdQRnYvMC80
RkI0RkZGMUY1MzkxQTE3QkYyMThBN0U2RkMxNEY4RUU3RjQwMkJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATQWbGF9A3EbKhr8WpTV2a3hcsL1SgRdOloevxPwIZdDtmw4gdKrM5w8refkN
25zxrEIzzkx35XAxlW2fsv4vftmX0gfrBxsHUzdwmnkKmp/aUHa6fhI0R/4Qachn
ds5ot89Xq74Ok5MSfAc/6Q7eIQkGDki7NQFn/KRi9V4V3pbNJ1ISPZOLtP5uQkyU
x0GxyLVT7haGF9ZGjqVDsK3qBZycu8DKrC6eKAkkJfQCASLh8W72WF6YUK168EWZ
VfCumrOYmSrRrV1JrBBkM5uvHh3DsVDxw4IP8G/LSFbf3bH7txjqhPHijwNjhVsD
D5ypakPfZzkQjyhizHApw7NmaQ==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:44 2025 by rpki-client