Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft
File:                     D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft (raw, json)
Hash identifier:          a3ErvF73JZXGFRJD3PQduKrhIJ6IMM9c2liAc0qZPd8=
Subject key identifier:   47:5F:99:AF:8F:44:F2:94:6E:BF:1B:67:50:6B:1B:62:95:9F:3F:78
Authority key identifier: D2:1C:3B:9B:01:00:AC:1E:3A:1B:7E:6A:2C:C3:0E:6A:52:DB:F6:90
Certificate issuer:       /CN=D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690
Certificate serial:       0917B5E106F97BF307AF58548AE5F6979FB74C3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft
Manifest number:          07
Signing time:             Sat 10 Aug 2024 17:41:44 +0000
Manifest this update:     Sat 10 Aug 2024 17:36:44 +0000
Manifest next update:     Sun 11 Aug 2024 19:04:44 +0000
Files and hashes:         1: 3133382e3131382e3137362e302f32322d3332203d3e20323634323638.roa (hash: TCmDutChysNtmEpTuvOozhmYSHTjEPy+KYRLKZAqj84=)
                          2: D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.crl (hash: zaHWov+VVO+QAoHmBn0RQqVD+K1vji9AUebigpQ6qhA=)
                          3: 323830343a323534303a3a2f33322d313238203d3e20323634323638.roa (hash: lje7ReTMSmHA7XyVFgOvXEjOfYk7XrbNb71FMG4E9K0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:17:b5:e1:06:f9:7b:f3:07:af:58:54:8a:e5:f6:97:9f:b7:4c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690
        Validity
            Not Before: Aug 10 17:36:44 2024 GMT
            Not After : Aug 11 19:04:44 2024 GMT
        Subject: CN=475F99AF8F44F2946EBF1B67506B1B62959F3F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:7f:47:ac:3a:5f:66:80:1f:63:1b:e9:9a:
                    0b:41:48:07:c5:70:8a:bd:de:a4:78:50:ee:8d:a2:
                    43:60:15:2c:a4:12:8a:b7:34:d1:91:44:d0:23:ff:
                    62:99:6c:b5:c8:9a:39:b6:ea:17:05:0d:96:4f:69:
                    0c:ee:b7:99:0b:c3:dd:88:2f:c2:41:a9:40:e0:cd:
                    98:0c:8f:b1:09:69:16:be:52:6a:f7:88:63:8f:de:
                    2b:4d:73:5b:b8:b1:62:3a:1e:cc:c4:d4:e0:a9:25:
                    5a:33:7d:89:96:65:d3:22:d9:1e:08:89:6e:6d:ce:
                    ed:c2:31:51:26:23:42:0b:2b:91:1d:ab:bc:0e:c3:
                    b7:07:0c:dd:f5:f5:b4:ed:e8:d7:d4:69:94:71:41:
                    60:1b:a5:a2:d6:a0:79:51:25:15:bd:d9:3a:23:12:
                    87:51:ae:33:80:ad:4e:45:bb:d3:bc:04:75:bf:5b:
                    f6:c9:01:60:db:16:ab:ee:7b:e2:8c:40:2b:47:9d:
                    85:8c:c5:66:3a:24:d0:06:ef:c7:c5:ea:61:42:55:
                    a3:78:90:b1:15:2f:4a:5e:06:60:b7:54:56:6c:b4:
                    e8:1a:7a:5d:5b:95:d8:79:ba:27:d8:ee:e8:5a:ca:
                    72:9d:3f:63:61:5d:d1:7a:5d:70:88:eb:f1:0d:70:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5F:99:AF:8F:44:F2:94:6E:BF:1B:67:50:6B:1B:62:95:9F:3F:78
            X509v3 Authority Key Identifier:
                keyid:D2:1C:3B:9B:01:00:AC:1E:3A:1B:7E:6A:2C:C3:0E:6A:52:DB:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:a4:f1:1e:b7:6c:bb:52:22:e0:6f:1e:c1:bb:d1:6a:98:
         e4:df:88:16:53:5f:55:b0:a4:79:2e:a7:58:35:dd:4f:7a:3c:
         1e:aa:cb:4e:31:28:e4:67:2c:95:ea:82:bb:38:df:89:96:08:
         c1:92:ec:77:ff:af:91:75:fa:16:1f:31:60:ad:e6:71:92:90:
         35:3f:08:73:54:e5:60:46:fa:71:39:0b:71:0f:d4:48:1d:72:
         9c:2d:b3:dd:61:86:51:a2:a6:92:32:a3:c2:61:f4:7a:e8:10:
         bf:75:78:05:06:2d:ff:a5:25:b3:ac:24:30:5d:82:d3:b5:1f:
         54:c5:05:14:a1:52:d0:37:be:c7:56:39:71:ad:04:f5:6e:a1:
         6d:94:b1:79:58:84:48:24:fe:61:63:5b:8a:92:b3:21:77:88:
         a5:24:dd:2b:7c:e5:50:ae:c6:fc:86:d7:a4:65:37:a1:a9:5c:
         49:a7:2d:f9:b6:ca:8d:08:8b:de:56:ca:b6:cc:d6:a0:90:19:
         9f:eb:67:b6:29:27:4f:57:ce:47:e3:2a:1e:f3:cd:d4:ed:26:
         98:0e:bc:da:16:65:4c:3d:99:62:17:7c:27:ef:46:78:2b:fa:
         73:f2:e7:cc:2d:14:51:00:06:1c:50:16:e0:b9:69:8b:c2:a0:
         84:60:bc:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCRe14Qb5e/MHr1hUiuX2l5+3TD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIxQzNCOUIwMTAwQUMxRTNBMUI3RTZBMkNDMzBFNkE1
MkRCRjY5MDAeFw0yNDA4MTAxNzM2NDRaFw0yNDA4MTExOTA0NDRaMDMxMTAvBgNV
BAMTKDQ3NUY5OUFGOEY0NEYyOTQ2RUJGMUI2NzUwNkIxQjYyOTU5RjNGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TH9HrDpfZoAfYxvpmgtBSAfF
cIq93qR4UO6NokNgFSykEoq3NNGRRNAj/2KZbLXImjm26hcFDZZPaQzut5kLw92I
L8JBqUDgzZgMj7EJaRa+Umr3iGOP3itNc1u4sWI6HszE1OCpJVozfYmWZdMi2R4I
iW5tzu3CMVEmI0ILK5Edq7wOw7cHDN319bTt6NfUaZRxQWAbpaLWoHlRJRW92Toj
EodRrjOArU5Fu9O8BHW/W/bJAWDbFqvue+KMQCtHnYWMxWY6JNAG78fF6mFCVaN4
kLEVL0peBmC3VFZstOgael1bldh5uifY7uhaynKdP2NhXdF6XXCI6/ENcPntAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUR1+Zr49E8pRuvxtnUGsbYpWfP3gwHwYDVR0j
BBgwFoAU0hw7mwEArB46G35qLMMOalLb9pAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDd5aFVEZnVuNFhMRUFlcnk3MW51M2o4eVNjTG1FM2p3MmtKbXZSTnpi
OGsvMC9EMjFDM0I5QjAxMDBBQzFFM0ExQjdFNkEyQ0MzMEU2QTUyREJGNjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMUMzQjlCMDEwMEFDMUUz
QTFCN0U2QTJDQzMwRTZBNTJEQkY2OTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDd5aFVEZnVuNFhMRUFlcnk3MW51M2o4eVNjTG1FM2p3MmtKbXZSTnpiOGsvMC9E
MjFDM0I5QjAxMDBBQzFFM0ExQjdFNkEyQ0MzMEU2QTUyREJGNjkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjHak8R63bLtSIuBvHsG70WqY5N+IFlNfVbCkeS6nWDXdT3o8HqrLTjEo5Gcs
leqCuzjfiZYIwZLsd/+vkXX6Fh8xYK3mcZKQNT8Ic1TlYEb6cTkLcQ/USB1ynC2z
3WGGUaKmkjKjwmH0eugQv3V4BQYt/6Uls6wkMF2C07UfVMUFFKFS0De+x1Y5ca0E
9W6hbZSxeViESCT+YWNbipKzIXeIpSTdK3zlUK7G/IbXpGU3oalcSact+bbKjQiL
3lbKtszWoJAZn+tntiknT1fOR+MqHvPN1O0mmA682hZlTD2ZYhd8J+9GeCv6c/Ln
zC0UUQAGHFAW4Llpi8KghGC8Gw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:57 2025 by rpki-client