Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.mft
File:                     DB8BD219C29445B02790E754D58EDF10C636BDFE.mft (raw, json)
Hash identifier:          SHs5cUUhPBX3DxXrfAZh7kliuZ+GshapIVeRYdTfKSI=
Subject key identifier:   D2:4F:73:5D:90:BE:47:FB:AA:91:54:01:FF:06:AF:94:A1:45:69:D6
Authority key identifier: DB:8B:D2:19:C2:94:45:B0:27:90:E7:54:D5:8E:DF:10:C6:36:BD:FE
Certificate issuer:       /CN=DB8BD219C29445B02790E754D58EDF10C636BDFE
Certificate serial:       7CB549C86BF0BE0527954DEACED493959CDDF8EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8BD219C29445B02790E754D58EDF10C636BDFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.mft
Manifest number:          8F
Signing time:             Sat 29 Mar 2025 07:43:38 +0000
Manifest this update:     Sat 29 Mar 2025 07:38:38 +0000
Manifest next update:     Sun 30 Mar 2025 08:56:38 +0000
Files and hashes:         1: 3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa (hash: dbQvZLI6ion21v8Ai9M15C4QrwZcoFN4P2bF0EXp+nc=)
                          2: 323830343a373537303a3a2f33322d313238203d3e20323731303436.roa (hash: Z9dSqUiLwwXNzt0jcXpB/bCFYDWjRx8mC0tBvDoxHwA=)
                          3: DB8BD219C29445B02790E754D58EDF10C636BDFE.crl (hash: a95nmkquFBbm9HNaBCacFyjcsvIVbMva5SzcYssI/gA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b5:49:c8:6b:f0:be:05:27:95:4d:ea:ce:d4:93:95:9c:dd:f8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB8BD219C29445B02790E754D58EDF10C636BDFE
        Validity
            Not Before: Mar 29 07:38:38 2025 GMT
            Not After : Mar 30 08:56:38 2025 GMT
        Subject: CN=D24F735D90BE47FBAA915401FF06AF94A14569D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:00:f4:a6:12:0c:26:9f:0f:f5:86:4d:f7:
                    da:31:6b:ab:12:4a:cc:fe:49:f4:f9:03:a9:52:21:
                    71:7f:6a:41:64:20:5b:41:0e:4c:c9:54:68:2a:63:
                    0e:5a:bb:38:5b:25:e4:b3:97:1d:d3:30:5b:68:9d:
                    3e:4d:ef:d1:8a:a6:ca:4b:a0:82:d1:c6:60:b4:18:
                    ee:c8:eb:87:18:76:8c:7e:d3:e6:0a:bd:e4:43:cd:
                    a1:01:2b:25:b9:2d:8e:3a:75:34:83:92:54:cc:35:
                    3b:e0:11:ae:87:73:d3:41:18:2f:0a:5b:43:32:53:
                    b8:78:71:5f:99:95:19:26:e2:88:2a:de:9d:46:68:
                    4c:d0:f9:dc:37:d1:a9:5a:ba:07:66:75:dc:42:d5:
                    28:7e:52:7e:c3:e9:f6:8d:d8:26:ea:8e:39:69:dc:
                    0c:b3:69:75:91:4e:92:ca:04:2f:e1:03:41:67:45:
                    72:03:b2:b4:55:7b:27:03:73:94:aa:c4:30:d7:5d:
                    e4:b8:81:7e:bb:ae:f7:90:1f:20:aa:46:f7:65:a2:
                    76:db:7a:e4:24:58:ca:84:ce:80:7e:9d:1b:45:68:
                    61:41:3a:a8:bb:1f:dc:50:fb:52:15:e4:63:34:45:
                    bb:40:a1:4b:d2:a9:fd:14:1d:9d:d3:23:0d:ba:93:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4F:73:5D:90:BE:47:FB:AA:91:54:01:FF:06:AF:94:A1:45:69:D6
            X509v3 Authority Key Identifier:
                keyid:DB:8B:D2:19:C2:94:45:B0:27:90:E7:54:D5:8E:DF:10:C6:36:BD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8BD219C29445B02790E754D58EDF10C636BDFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:06:94:b4:12:e4:90:fb:8e:af:68:cf:d7:00:2d:39:81:
         cc:79:d8:74:a8:c6:d2:bd:4c:5a:83:ed:dd:48:6d:93:8c:f3:
         8e:b8:45:53:39:2c:90:c0:00:aa:b1:5b:16:64:2f:3b:32:b8:
         43:67:97:f2:54:3e:a9:74:8b:d2:41:2b:f9:b2:2a:33:cc:bc:
         46:89:3e:6b:e7:bf:64:03:c7:e3:1c:fe:51:05:a4:0b:34:a2:
         d1:42:d2:dd:c3:70:70:4c:83:7f:2a:0e:09:2d:76:b4:57:a9:
         8b:f8:ad:8a:80:fb:c3:21:a7:cf:d5:53:b9:f9:e4:f9:86:de:
         50:1f:51:d7:dd:f5:0a:d8:fb:8c:82:76:fe:a1:12:3e:38:d5:
         31:cd:b4:ac:a4:81:23:c9:cc:bb:b5:a4:b1:ff:a5:75:85:7a:
         e0:5e:35:51:69:c2:1f:06:05:88:3f:db:47:c0:ad:ee:1f:d8:
         c7:e0:fc:b4:ef:40:34:01:7e:00:ef:f5:5c:b7:2d:3c:5e:3f:
         eb:47:5e:df:09:21:b3:76:3e:a3:fd:c8:81:07:cc:04:a9:76:
         6f:bf:c3:99:cb:f3:84:80:2e:06:62:1e:be:c3:68:92:16:00:
         2e:fc:6e:6e:30:7e:57:66:be:2c:ea:a0:68:27:d5:5a:38:42:
         e9:ea:66:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfLVJyGvwvgUnlU3qztSTlZzd+O8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4QkQyMTlDMjk0NDVCMDI3OTBFNzU0RDU4RURGMTBD
NjM2QkRGRTAeFw0yNTAzMjkwNzM4MzhaFw0yNTAzMzAwODU2MzhaMDMxMTAvBgNV
BAMTKEQyNEY3MzVEOTBCRTQ3RkJBQTkxNTQwMUZGMDZBRjk0QTE0NTY5RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxAD0phIMJp8P9YZN99oxa6sS
Ssz+SfT5A6lSIXF/akFkIFtBDkzJVGgqYw5auzhbJeSzlx3TMFtonT5N79GKpspL
oILRxmC0GO7I64cYdox+0+YKveRDzaEBKyW5LY46dTSDklTMNTvgEa6Hc9NBGC8K
W0MyU7h4cV+ZlRkm4ogq3p1GaEzQ+dw30alaugdmddxC1Sh+Un7D6faN2Cbqjjlp
3AyzaXWRTpLKBC/hA0FnRXIDsrRVeycDc5SqxDDXXeS4gX67rveQHyCqRvdlonbb
euQkWMqEzoB+nRtFaGFBOqi7H9xQ+1IV5GM0RbtAoUvSqf0UHZ3TIw26k5BpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0k9zXZC+R/uqkVQB/wavlKFFadYwHwYDVR0j
BBgwFoAU24vSGcKURbAnkOdU1Y7fEMY2vf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tlVXhTOGVZTTR4NGlFaUxWTkJkaDhZVlVvaDJDcEtNMVZzaXZlWjFQ
ZGUvMC9EQjhCRDIxOUMyOTQ0NUIwMjc5MEU3NTRENThFREYxMEM2MzZCREZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCOEJEMjE5QzI5NDQ1QjAy
NzkwRTc1NEQ1OEVERjEwQzYzNkJERkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2tlVXhTOGVZTTR4NGlFaUxWTkJkaDhZVlVvaDJDcEtNMVZzaXZlWjFQZGUvMC9E
QjhCRDIxOUMyOTQ0NUIwMjc5MEU3NTRENThFREYxMEM2MzZCREZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcM4GlLQS5JD7jq9oz9cALTmBzHnYdKjG0r1MWoPt3Uhtk4zzjrhFUzkskMAA
qrFbFmQvOzK4Q2eX8lQ+qXSL0kEr+bIqM8y8Rok+a+e/ZAPH4xz+UQWkCzSi0ULS
3cNwcEyDfyoOCS12tFepi/itioD7wyGnz9VTufnk+YbeUB9R1931Ctj7jIJ2/qES
PjjVMc20rKSBI8nMu7Wksf+ldYV64F41UWnCHwYFiD/bR8Ct7h/Yx+D8tO9ANAF+
AO/1XLctPF4/60de3wkhs3Y+o/3IgQfMBKl2b7/DmcvzhIAuBmIevsNokhYALvxu
bjB+V2a+LOqgaCfVWjhC6epmBQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:14:22 2025 by rpki-client