Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.mft
File:                     A58717AA812972E28B6CC3B85ADD1610222992E2.mft (raw, json)
Hash identifier:          vXObmyXVq0WNNZSawtOCP52L+5wd+Ip40zHKdd4V78k=
Subject key identifier:   7D:66:3D:41:C9:B9:E7:15:40:7C:3A:20:A2:FA:3B:29:3B:6B:18:B5
Authority key identifier: A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
Certificate issuer:       /CN=A58717AA812972E28B6CC3B85ADD1610222992E2
Certificate serial:       4290E94DF5D8236E249B93EA3A70F982F68A951D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A58717AA812972E28B6CC3B85ADD1610222992E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.mft
Manifest number:          01C1
Signing time:             Mon 10 Mar 2025 12:50:30 +0000
Manifest this update:     Mon 10 Mar 2025 12:45:30 +0000
Manifest next update:     Tue 11 Mar 2025 15:28:30 +0000
Files and hashes:         1: 34352e3137362e34302e302f32322d3234203d3e20323638393239.roa (hash: xkWRGOZIzBRCjOwH00hhXT8DlnCo71wst0kT0gmlTiM=)
                          2: A58717AA812972E28B6CC3B85ADD1610222992E2.crl (hash: mp8xyw3QWNRZL6GH13NG89T2zWZ28fxzwop5I+/ydkw=)
                          3: 323830343a356363343a3a2f33322d3336203d3e20323638393239.roa (hash: hxaKBvqS15pSALQ85E/o6ucRUevnZzjJQUrWI+8VP9g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:90:e9:4d:f5:d8:23:6e:24:9b:93:ea:3a:70:f9:82:f6:8a:95:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A58717AA812972E28B6CC3B85ADD1610222992E2
        Validity
            Not Before: Mar 10 12:45:30 2025 GMT
            Not After : Mar 11 15:28:30 2025 GMT
        Subject: CN=7D663D41C9B9E715407C3A20A2FA3B293B6B18B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:cf:78:5a:71:09:b4:f6:18:3d:6f:08:bb:
                    a2:01:fa:83:8b:73:4f:22:0c:04:c7:c7:3d:84:c3:
                    b4:99:69:51:33:3d:54:1a:06:06:5b:99:bb:52:bd:
                    6d:9d:e9:e0:73:c2:cd:74:42:01:ff:01:9c:06:ee:
                    2c:40:7b:82:92:ff:dd:cf:af:7c:ca:24:41:63:68:
                    98:2f:74:a9:49:6d:0a:75:1e:37:89:d5:3e:47:0b:
                    c0:01:9d:61:88:93:15:6f:e1:e7:b5:94:2c:84:ed:
                    bb:f5:d0:d2:ce:ee:45:6a:4d:39:7f:db:1a:c8:2d:
                    7f:84:b2:c2:32:78:95:8a:9f:ac:6b:8c:1d:ef:46:
                    b2:d3:59:14:31:4a:30:68:85:de:8b:c6:73:07:ed:
                    4f:90:0a:f3:c9:ec:00:7e:2a:b1:5c:30:96:8a:bd:
                    cc:a8:db:9f:a1:bb:13:3e:47:d8:9a:80:98:ee:b8:
                    77:b7:d2:e2:4f:07:11:df:96:8d:7e:92:de:a8:3f:
                    8a:25:51:69:4b:b5:51:fb:42:56:77:aa:60:73:fe:
                    df:5a:bc:39:92:5a:50:fa:72:40:20:38:fb:6e:c8:
                    44:9c:6a:65:c3:26:cf:d0:18:ed:16:85:b4:ce:44:
                    22:77:7f:72:36:0e:57:27:86:fb:84:c4:df:cd:26:
                    53:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:66:3D:41:C9:B9:E7:15:40:7C:3A:20:A2:FA:3B:29:3B:6B:18:B5
            X509v3 Authority Key Identifier:
                keyid:A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A58717AA812972E28B6CC3B85ADD1610222992E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:36:ed:f7:54:ff:dc:90:8c:30:9a:76:e8:2a:ea:67:48:
         81:cb:32:79:64:05:8a:ed:c6:d8:e9:78:ed:86:03:f4:44:0b:
         cc:0d:a6:d6:fe:b9:0f:9a:e9:c7:ae:4b:e1:fb:aa:02:3b:ce:
         7d:f6:7f:29:d7:a3:98:91:a0:06:de:62:75:e7:64:e7:46:9f:
         bb:b8:42:4a:b0:7e:cd:4d:dc:11:a3:95:43:5c:a7:95:fd:e3:
         0b:34:b2:b3:04:df:ac:29:2c:22:4b:37:2c:10:02:56:20:5b:
         53:4b:f5:04:23:9f:52:07:53:8a:85:71:99:b8:f5:de:05:aa:
         78:e5:9f:7f:8a:cb:09:02:bb:21:97:e7:45:d6:45:ec:87:5e:
         7d:52:4f:1f:c3:7f:95:16:7e:aa:4b:ad:9b:fe:f3:a0:a6:c4:
         01:e7:46:9f:07:2c:b4:af:fb:79:c7:f4:8b:e6:00:3d:54:bc:
         da:3a:73:ed:7c:cd:70:5e:37:1b:6b:5a:02:24:24:72:72:fe:
         ea:fe:b2:94:41:92:ec:f1:6d:9d:59:19:16:c6:dd:61:3a:bc:
         13:95:eb:00:81:46:c7:c3:18:13:63:ff:88:00:f8:3d:f4:3f:
         5a:89:19:cf:a7:b1:ee:da:e4:e2:fa:85:b3:b3:7c:26:65:b2:
         5b:00:13:a5
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUQpDpTfXYI24km5PqOnD5gvaKlR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU4NzE3QUE4MTI5NzJFMjhCNkNDM0I4NUFERDE2MTAy
MjI5OTJFMjAeFw0yNTAzMTAxMjQ1MzBaFw0yNTAzMTExNTI4MzBaMDMxMTAvBgNV
BAMTKDdENjYzRDQxQzlCOUU3MTU0MDdDM0EyMEEyRkEzQjI5M0I2QjE4QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXc94WnEJtPYYPW8Iu6IB+oOL
c08iDATHxz2Ew7SZaVEzPVQaBgZbmbtSvW2d6eBzws10QgH/AZwG7ixAe4KS/93P
r3zKJEFjaJgvdKlJbQp1HjeJ1T5HC8ABnWGIkxVv4ee1lCyE7bv10NLO7kVqTTl/
2xrILX+EssIyeJWKn6xrjB3vRrLTWRQxSjBohd6LxnMH7U+QCvPJ7AB+KrFcMJaK
vcyo25+huxM+R9iagJjuuHe30uJPBxHflo1+kt6oP4olUWlLtVH7QlZ3qmBz/t9a
vDmSWlD6ckAgOPtuyEScamXDJs/QGO0WhbTORCJ3f3I2DlcnhvuExN/NJlPTAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUfWY9Qcm55xVAfDogovo7KTtrGLUwHwYDVR0j
BBgwFoAUpYcXqoEpcuKLbMO4Wt0WECIpkuIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LSzVYa25Xb1dzZHJWZWl3Q1pHemluRnE2Qk5XMXZLTkZrb1M5bm9aTWRo
LzEvQTU4NzE3QUE4MTI5NzJFMjhCNkNDM0I4NUFERDE2MTAyMjI5OTJFMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTg3MTdBQTgxMjk3MkUyOEI2
Q0MzQjg1QUREMTYxMDIyMjk5MkUyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tL
NVhrbldvV3NkclZlaXdDWkd6aW5GcTZCTlcxdktORmtvUzlub1pNZGgvMS9BNTg3
MTdBQTgxMjk3MkUyOEI2Q0MzQjg1QUREMTYxMDIyMjk5MkUyLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
p6c27fdU/9yQjDCadugq6mdIgcsyeWQFiu3G2Ol47YYD9EQLzA2m1v65D5rpx65L
4fuqAjvOffZ/KdejmJGgBt5idedk50afu7hCSrB+zU3cEaOVQ1ynlf3jCzSyswTf
rCksIks3LBACViBbU0v1BCOfUgdTioVxmbj13gWqeOWff4rLCQK7IZfnRdZF7Ide
fVJPH8N/lRZ+qkutm/7zoKbEAedGnwcstK/7ecf0i+YAPVS82jpz7XzNcF43G2ta
AiQkcnL+6v6ylEGS7PFtnVkZFsbdYTq8E5XrAIFGx8MYE2P/iAD4PfQ/WokZz6ex
7trk4vqFs7N8JmWyWwATpQ==
-----END CERTIFICATE-----