Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
File:                     B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft (raw, json)
Hash identifier:          yan53XsGLvLK3ku+AjPjHYFzc1InMigBUZrijrY5biY=
Subject key identifier:   FE:81:AB:18:23:94:29:6A:0F:29:85:94:F7:2E:06:5F:52:0A:F0:A0
Authority key identifier: B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
Certificate issuer:       /CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
Certificate serial:       4795A87211D4F78DD00FB7CD71EB3A45F886ACB4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
Manifest number:          01CA
Signing time:             Fri 28 Mar 2025 16:10:51 +0000
Manifest this update:     Fri 28 Mar 2025 16:05:51 +0000
Manifest next update:     Sat 29 Mar 2025 19:58:51 +0000
Files and hashes:         1: B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl (hash: K16qgdPN3tai1LZY/sL0OsfC1N2RQ4TR1Ohpuk0d9bA=)
                          2: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (hash: lNIOdL2aKxnS8NlOzIaP7/ySJO/apvdxQI14jcwE3/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:95:a8:72:11:d4:f7:8d:d0:0f:b7:cd:71:eb:3a:45:f8:86:ac:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
        Validity
            Not Before: Mar 28 16:05:51 2025 GMT
            Not After : Mar 29 19:58:51 2025 GMT
        Subject: CN=FE81AB182394296A0F298594F72E065F520AF0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:22:bf:4f:44:3a:82:68:1c:06:ba:84:93:
                    30:f4:0d:2f:33:e5:a7:4f:05:e7:a8:00:b5:d6:94:
                    c0:e9:3b:1e:6e:55:65:bb:26:0b:2d:e5:15:65:ea:
                    5a:34:bf:e6:96:15:56:07:a4:7b:f9:71:a5:a2:b6:
                    72:f7:2d:4d:74:1e:f9:eb:e3:98:4b:4f:f8:82:f9:
                    09:84:a0:48:45:31:2d:73:04:5a:e4:d9:f4:3a:e4:
                    8d:4c:9b:c9:aa:54:d6:45:b8:4e:5a:42:c3:8b:0a:
                    ba:d0:bb:3f:7d:fc:f0:ab:9b:fe:04:5c:f6:11:af:
                    e2:4d:5d:ae:e4:f6:b0:6c:a3:64:b4:1f:a2:79:21:
                    99:ac:a6:39:89:47:88:09:5b:dd:d9:24:77:3c:45:
                    14:1c:a5:ce:cc:32:e5:e4:dd:77:be:46:5a:72:09:
                    44:17:13:e2:c5:0e:d5:06:74:5b:1f:0e:c0:a3:bf:
                    9d:38:b2:53:80:ae:01:19:39:d4:24:81:2a:a0:4d:
                    79:21:1b:4e:a0:7a:0c:2f:32:1c:7c:77:7c:1d:b4:
                    9f:56:cb:cb:27:79:4d:bf:cc:a9:55:56:4f:75:4a:
                    8d:67:83:be:52:af:22:f6:73:ee:bb:37:04:c5:a3:
                    89:2e:31:ff:d1:01:ea:09:3b:8c:bc:66:e8:13:14:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:81:AB:18:23:94:29:6A:0F:29:85:94:F7:2E:06:5F:52:0A:F0:A0
            X509v3 Authority Key Identifier:
                keyid:B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:75:1c:81:a5:d6:09:28:d2:ed:c3:72:f7:59:c2:a1:a4:
         55:6a:95:83:d9:f3:87:8b:91:64:2b:45:a3:3a:ec:cf:e5:53:
         30:39:d4:20:c2:1b:45:02:e1:99:75:1f:d4:ca:bc:2c:01:90:
         3a:15:02:75:3a:31:77:81:fb:ab:da:7c:f9:8d:cc:e7:be:b4:
         b9:2c:5b:f6:24:6f:d3:9b:b5:d4:a6:f7:64:a6:c6:c4:ed:da:
         8f:8a:ea:02:d3:b9:1c:54:48:89:07:78:96:f3:86:13:a9:f1:
         5d:e9:e1:ba:bb:26:c6:71:10:a4:28:06:a4:5a:89:95:db:0b:
         ec:97:00:c8:6f:b4:5f:76:ec:6d:a6:5a:3f:40:8d:7d:b3:99:
         7d:4a:81:bc:d7:4b:f1:e4:26:7e:39:df:26:b6:77:db:f4:57:
         63:5c:fd:f0:83:fd:54:dc:d8:d8:87:51:14:2f:84:af:5c:a6:
         1c:47:f9:21:7a:80:6b:ea:95:ab:75:71:24:4f:75:a8:ef:4e:
         a4:63:f0:18:25:e0:c5:26:24:38:59:2a:4d:26:31:85:ca:cb:
         e5:db:0f:42:d6:aa:dd:84:e1:d3:d2:ac:43:7c:aa:fa:59:5d:
         9f:8b:b3:e3:5a:53:b3:f2:43:ce:73:78:89:6b:48:f6:bd:aa:
         7f:1f:fc:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUR5WochHU943QD7fNces6RfiGrLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMTMzQzRDN0NEQjI4NzY0NUU0QUEwMjdBNDlBRTIz
QTc3QjhGNDAeFw0yNTAzMjgxNjA1NTFaFw0yNTAzMjkxOTU4NTFaMDMxMTAvBgNV
BAMTKEZFODFBQjE4MjM5NDI5NkEwRjI5ODU5NEY3MkUwNjVGNTIwQUYwQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5SK/T0Q6gmgcBrqEkzD0DS8z
5adPBeeoALXWlMDpOx5uVWW7Jgst5RVl6lo0v+aWFVYHpHv5caWitnL3LU10Hvnr
45hLT/iC+QmEoEhFMS1zBFrk2fQ65I1Mm8mqVNZFuE5aQsOLCrrQuz99/PCrm/4E
XPYRr+JNXa7k9rBso2S0H6J5IZmspjmJR4gJW93ZJHc8RRQcpc7MMuXk3Xe+Rlpy
CUQXE+LFDtUGdFsfDsCjv504slOArgEZOdQkgSqgTXkhG06gegwvMhx8d3wdtJ9W
y8sneU2/zKlVVk91So1ng75SryL2c+67NwTFo4kuMf/RAeoJO4y8ZugTFM4VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/oGrGCOUKWoPKYWU9y4GX1IK8KAwHwYDVR0j
BBgwFoAUtdEzxMfNsodkXkqgJ6Sa4jp3uPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JD
NWMvMS9CNUQxMzNDNEM3Q0RCMjg3NjQ1RTRBQTAyN0E0OUFFMjNBNzdCOEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDEzM0M0QzdDREIyODc2
NDVFNEFBMDI3QTQ5QUUyM0E3N0I4RjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JDNWMvMS9C
NUQxMzNDNEM3Q0RCMjg3NjQ1RTRBQTAyN0E0OUFFMjNBNzdCOEY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYrZ1HIGl1gko0u3DcvdZwqGkVWqVg9nzh4uRZCtFozrsz+VTMDnUIMIbRQLh
mXUf1Mq8LAGQOhUCdToxd4H7q9p8+Y3M5760uSxb9iRv05u11Kb3ZKbGxO3aj4rq
AtO5HFRIiQd4lvOGE6nxXenhursmxnEQpCgGpFqJldsL7JcAyG+0X3bsbaZaP0CN
fbOZfUqBvNdL8eQmfjnfJrZ32/RXY1z98IP9VNzY2IdRFC+Er1ymHEf5IXqAa+qV
q3VxJE91qO9OpGPwGCXgxSYkOFkqTSYxhcrL5dsPQtaq3YTh09KsQ3yq+lldn4uz
41pTs/JDznN4iWtI9r2qfx/8Pw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:36 2025 by rpki-client