Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft
File:                     B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft (raw, json)
Hash identifier:          cDNSvei3CV6xMldUwE8bL7pDp4Cw9xVlcJkzK10VpRs=
Subject key identifier:   63:02:2F:D8:8E:AC:FD:23:D5:08:1D:AB:DA:82:45:BB:F2:69:31:24
Authority key identifier: B5:EE:B5:96:E7:AF:02:EF:B1:72:E4:8B:35:7B:39:6D:97:92:EB:2A
Certificate issuer:       /CN=B5EEB596E7AF02EFB172E48B357B396D9792EB2A
Certificate serial:       0FA8D6E23A67909C1D64DA6BA540FD06D2ECCBE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft
Manifest number:          19
Signing time:             Mon 17 Feb 2025 18:28:17 +0000
Manifest this update:     Mon 17 Feb 2025 18:23:17 +0000
Manifest next update:     Tue 18 Feb 2025 19:19:17 +0000
Files and hashes:         1: 34352e3137382e32382e302f32322d3332203d3e20323639303034.roa (hash: QFqR5IQGj5SGcKKmo5CeFf/nqJQtNMbujXQgd+yD1YE=)
                          2: 323830343a356466383a3a2f33322d313238203d3e20323639303034.roa (hash: a7uxKBKxZePdnsXDYrOskVd4/j5VTyR/302asIwumpg=)
                          3: B5EEB596E7AF02EFB172E48B357B396D9792EB2A.crl (hash: aC7/Mp9eNdn7UIOzEtCuHv5SUbn/Fddda4+dsDfgwFc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a8:d6:e2:3a:67:90:9c:1d:64:da:6b:a5:40:fd:06:d2:ec:cb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EEB596E7AF02EFB172E48B357B396D9792EB2A
        Validity
            Not Before: Feb 17 18:23:17 2025 GMT
            Not After : Feb 18 19:19:17 2025 GMT
        Subject: CN=63022FD88EACFD23D5081DABDA8245BBF2693124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:be:48:bc:86:e0:23:d1:96:aa:95:53:96:05:
                    75:a7:56:d1:ed:2d:24:f8:57:40:9f:88:d8:1f:d9:
                    a8:1c:66:72:40:ae:c2:fa:f4:d4:71:a4:85:eb:e9:
                    df:09:db:34:3f:87:f1:e6:c0:12:d9:6a:e8:c0:3b:
                    5f:a5:42:f8:ad:b7:58:62:a5:af:dc:ad:1e:b6:cf:
                    ea:c8:44:48:91:d1:10:6e:6e:d4:60:d9:e4:0f:b7:
                    eb:24:51:61:42:ad:12:0f:85:95:3c:d3:dc:94:49:
                    1d:89:01:7e:72:9b:db:3f:20:f6:96:09:b4:62:6b:
                    63:a0:b4:de:57:34:1e:a1:d5:7b:c2:39:66:3f:58:
                    73:e9:94:bc:37:87:87:93:5c:f5:e5:6b:d0:d7:40:
                    39:1e:3f:af:c7:38:ae:90:a9:e8:6e:cd:af:55:c2:
                    78:97:06:85:69:b4:8a:8a:93:53:e6:aa:c7:6b:da:
                    92:b9:77:fd:6e:3e:a4:14:48:43:39:a2:38:60:91:
                    a8:5b:31:b7:e4:df:4a:24:a5:b8:6f:83:08:db:2d:
                    ee:04:cf:a0:ef:20:37:fe:0d:5a:d9:b6:54:61:e4:
                    27:86:ec:ae:11:d0:8b:b8:aa:cf:e7:b7:88:43:4f:
                    e3:24:93:02:b1:13:92:dd:6c:21:72:0e:6d:eb:20:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:2F:D8:8E:AC:FD:23:D5:08:1D:AB:DA:82:45:BB:F2:69:31:24
            X509v3 Authority Key Identifier:
                keyid:B5:EE:B5:96:E7:AF:02:EF:B1:72:E4:8B:35:7B:39:6D:97:92:EB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:79:9e:f6:4d:cf:4a:50:cf:64:38:0b:91:fc:a0:b4:a6:d8:
         07:a7:6f:4c:96:3c:a8:d6:87:e3:fc:1d:aa:0f:b4:d5:ba:46:
         e4:c0:3a:5a:e7:ce:2a:af:ad:1a:a1:31:7a:60:9b:6b:b8:d4:
         fc:92:57:19:2b:60:a8:19:fd:00:53:fb:c8:f3:ea:d1:ea:26:
         d4:d0:26:00:39:03:cb:5f:4d:19:6f:c1:28:b9:df:ae:f4:cc:
         37:88:fd:3c:54:32:a0:a7:75:42:9d:10:c2:44:ab:92:d9:c3:
         66:ed:29:cb:bd:3c:77:fc:51:03:cf:2e:aa:fe:54:fc:3b:b1:
         27:6e:09:b6:1d:8e:66:09:b7:89:d5:20:c5:a5:45:51:fc:25:
         30:8f:42:01:40:9f:0d:26:c7:6b:44:e2:78:f6:e3:9d:17:d4:
         ab:91:3a:c5:ff:85:17:76:cd:cb:cc:0c:8d:fa:0a:09:46:10:
         96:e5:30:d2:ea:3a:fc:13:bd:51:40:af:97:88:d2:59:98:cf:
         38:15:8a:86:92:50:f2:a5:e1:52:a2:54:bc:cc:1b:cd:ce:b0:
         11:1a:5f:d5:65:ff:9b:0a:5a:05:4f:4f:cf:0a:32:44:23:70:
         d4:ca:c4:16:28:3d:9e:d3:18:98:24:6a:46:0b:c6:03:8a:da:
         e8:b8:f3:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD6jW4jpnkJwdZNprpUD9BtLsy+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRUI1OTZFN0FGMDJFRkIxNzJFNDhCMzU3QjM5NkQ5
NzkyRUIyQTAeFw0yNTAyMTcxODIzMTdaFw0yNTAyMTgxOTE5MTdaMDMxMTAvBgNV
BAMTKDYzMDIyRkQ4OEVBQ0ZEMjNENTA4MURBQkRBODI0NUJCRjI2OTMxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmvki8huAj0ZaqlVOWBXWnVtHt
LST4V0CfiNgf2agcZnJArsL69NRxpIXr6d8J2zQ/h/HmwBLZaujAO1+lQvitt1hi
pa/crR62z+rIREiR0RBubtRg2eQPt+skUWFCrRIPhZU809yUSR2JAX5ym9s/IPaW
CbRia2OgtN5XNB6h1XvCOWY/WHPplLw3h4eTXPXla9DXQDkeP6/HOK6Qqehuza9V
wniXBoVptIqKk1Pmqsdr2pK5d/1uPqQUSEM5ojhgkahbMbfk30okpbhvgwjbLe4E
z6DvIDf+DVrZtlRh5CeG7K4R0Iu4qs/nt4hDT+MkkwKxE5LdbCFyDm3rIPinAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYwIv2I6s/SPVCB2r2oJFu/JpMSQwHwYDVR0j
BBgwFoAUte61luevAu+xcuSLNXs5bZeS6yowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG5VZk5yNmt4M05XN0dFelNyVEtBWEFmM2pDQVhqTGFNb2V0Q0VYTUd5
RVEvMC9CNUVFQjU5NkU3QUYwMkVGQjE3MkU0OEIzNTdCMzk2RDk3OTJFQjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RUVCNTk2RTdBRjAyRUZC
MTcyRTQ4QjM1N0IzOTZEOTc5MkVCMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SG5VZk5yNmt4M05XN0dFelNyVEtBWEFmM2pDQVhqTGFNb2V0Q0VYTUd5RVEvMC9C
NUVFQjU5NkU3QUYwMkVGQjE3MkU0OEIzNTdCMzk2RDk3OTJFQjJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPHme9k3PSlDPZDgLkfygtKbYB6dvTJY8qNaH4/wdqg+01bpG5MA6WufOKq+t
GqExemCba7jU/JJXGStgqBn9AFP7yPPq0eom1NAmADkDy19NGW/BKLnfrvTMN4j9
PFQyoKd1Qp0QwkSrktnDZu0py708d/xRA88uqv5U/DuxJ24Jth2OZgm3idUgxaVF
UfwlMI9CAUCfDSbHa0TiePbjnRfUq5E6xf+FF3bNy8wMjfoKCUYQluUw0uo6/BO9
UUCvl4jSWZjPOBWKhpJQ8qXhUqJUvMwbzc6wERpf1WX/mwpaBU9PzwoyRCNw1MrE
Fig9ntMYmCRqRgvGA4ra6LjziA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:36:33 2025 by rpki-client