Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft
File:                     D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft (raw, json)
Hash identifier:          cu9vFFFvA1Yn9uoCT3g9Ww1r5c+s0CoBm6GGTQsPUHc=
Subject key identifier:   69:02:AC:E8:20:9E:F3:85:65:46:03:B1:2A:54:E2:37:34:E4:AE:A0
Authority key identifier: D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF
Certificate issuer:       /CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
Certificate serial:       0A6797DE89CD4872E53CE79D8B8ABF328F4554CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft
Manifest number:          3C
Signing time:             Wed 11 Dec 2024 21:23:05 +0000
Manifest this update:     Wed 11 Dec 2024 21:18:05 +0000
Manifest next update:     Thu 12 Dec 2024 22:55:05 +0000
Files and hashes:         1: 3139302e3130392e39302e302f32332d3233203d3e20323634323330.roa (hash: /YKIL1PbfEaLi41zk5mTqS4B/RQR+R0ErtKAhTJik/0=)
                          2: D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl (hash: trBNGwnuVeZnrT91x1pxm5UO/6DS4EasjCekDPadtTA=)
                          3: 3139302e3130392e38392e302f32342d3234203d3e20323634323330.roa (hash: HS77A7zk6y4VFGL19e0OMZH57mO3MY1QZP+9ObXhjwQ=)
                          4: 3139302e3130392e39312e302f32342d3234203d3e20323634323330.roa (hash: NEAVNKLgLPTw2l8fmjWOLn5PaADBCtoI95H5XpZHRQE=)
                          5: 3139302e3130392e38382e302f32342d3234203d3e20323634323330.roa (hash: GrPWihe/QGDgPuEPwllTMxcE+aXREzXNU7tE9HqFEWs=)
                          6: 3139302e3130392e39302e302f32342d3234203d3e20323634323330.roa (hash: TUDC7EHndOnW9lrOm3BiDCTQCbUqryDJMMODACp2IA8=)
                          7: 3139302e3130392e38382e302f32322d3232203d3e20323634323330.roa (hash: RyrFXWEQlYF+5KJMKqaP9B3wdDkE9dOEKhi4WsV3lC0=)
                          8: 3139302e3130392e38382e302f32332d3233203d3e20323634323330.roa (hash: ZLKb4AG+g5DzCdFkezlkywyGRCABGYW2GreR29i0eTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:67:97:de:89:cd:48:72:e5:3c:e7:9d:8b:8a:bf:32:8f:45:54:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
        Validity
            Not Before: Dec 11 21:18:05 2024 GMT
            Not After : Dec 12 22:55:05 2024 GMT
        Subject: CN=6902ACE8209EF385654603B12A54E23734E4AEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:5b:89:82:ec:9c:85:5d:27:84:aa:04:7b:
                    e7:4f:86:4c:7a:aa:ed:aa:a6:07:f7:21:f7:b9:0e:
                    2f:a0:3c:4d:45:f0:75:82:fe:05:ec:42:ac:c7:29:
                    65:fc:7c:76:34:83:ab:b0:ad:dd:12:ad:b9:6c:98:
                    f4:f2:b5:78:67:9d:75:44:7b:c0:db:a5:55:d5:f7:
                    f5:84:49:72:1c:05:37:22:1d:ee:bc:0d:64:e1:e0:
                    7e:28:f4:29:cb:1a:52:19:92:e8:96:b5:23:cd:fc:
                    ff:51:62:64:74:55:d4:04:91:da:10:2e:50:be:c4:
                    ec:8c:b7:13:ed:bb:2a:54:ad:c8:4a:26:71:b8:76:
                    e6:b1:75:e2:0c:58:49:83:ce:e9:09:9f:34:f8:16:
                    ea:ab:13:50:7a:80:df:c0:2c:26:ff:ec:b5:38:3d:
                    78:99:2d:ab:d4:bd:e4:16:01:d4:da:80:46:3b:59:
                    93:e8:95:39:85:5c:89:92:e3:a2:34:cb:98:42:27:
                    26:2e:2b:a9:1c:fe:6a:4e:78:ec:f6:36:98:95:66:
                    1f:47:13:5c:c0:bf:54:a1:84:cc:81:bf:28:3c:07:
                    c5:08:38:5e:ea:53:1f:f0:37:be:06:73:c1:21:31:
                    62:9a:f5:1b:86:a5:76:44:01:a2:36:fa:52:83:54:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:AC:E8:20:9E:F3:85:65:46:03:B1:2A:54:E2:37:34:E4:AE:A0
            X509v3 Authority Key Identifier:
                keyid:D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:11:0c:c7:78:a1:8d:38:fd:31:bd:f8:ea:4c:b1:63:13:c8:
         49:b7:5d:e1:14:c4:85:1e:b5:13:9a:7f:d8:26:bc:02:34:63:
         61:d3:ae:94:d4:7f:48:4e:11:c9:c1:3d:03:d2:a0:1c:6c:e3:
         cf:3f:db:b0:0c:ca:15:8e:c9:5f:5f:11:1c:b3:82:71:08:47:
         4e:81:b9:91:a0:9b:e4:7f:c1:d0:37:ab:5a:4e:7b:56:d3:d7:
         2c:7e:ba:c7:91:f1:ca:53:7a:08:a7:b5:0a:57:93:23:6c:66:
         f6:da:c3:f3:34:df:f7:79:d1:4a:b0:c0:db:39:0e:02:ca:77:
         ab:8e:d6:31:64:c5:fc:fb:d4:18:e3:42:f2:0c:c2:ae:7d:ad:
         3f:78:78:1c:14:b6:c7:70:33:3f:ef:f5:08:a3:69:99:51:1b:
         78:6c:19:56:e6:f4:a6:83:78:51:2b:22:3b:f6:80:5b:d8:f8:
         26:3d:da:6a:7c:61:57:34:9c:60:d8:03:f7:ea:79:57:70:3c:
         f3:09:f2:e2:60:a2:0b:c7:82:db:d3:94:9e:41:75:de:16:a8:
         87:53:df:29:83:09:b9:ed:f7:18:9e:7c:e1:05:f6:98:29:d3:
         ea:6c:39:d5:19:80:e2:f7:71:95:5e:48:dc:bd:74:ba:93:05:
         3c:55:ea:b3
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUCmeX3onNSHLlPOedi4q/Mo9FVMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU5QzJCMDNDRjBGQ0Q0QjBEMzAwNUIzMjEyMDQzMzRE
MDg2NjlBRjAeFw0yNDEyMTEyMTE4MDVaFw0yNDEyMTIyMjU1MDVaMDMxMTAvBgNV
BAMTKDY5MDJBQ0U4MjA5RUYzODU2NTQ2MDNCMTJBNTRFMjM3MzRFNEFFQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSFuJguychV0nhKoEe+dPhkx6
qu2qpgf3Ife5Di+gPE1F8HWC/gXsQqzHKWX8fHY0g6uwrd0SrblsmPTytXhnnXVE
e8DbpVXV9/WESXIcBTciHe68DWTh4H4o9CnLGlIZkuiWtSPN/P9RYmR0VdQEkdoQ
LlC+xOyMtxPtuypUrchKJnG4duaxdeIMWEmDzukJnzT4FuqrE1B6gN/ALCb/7LU4
PXiZLavUveQWAdTagEY7WZPolTmFXImS46I0y5hCJyYuK6kc/mpOeOz2NpiVZh9H
E1zAv1ShhMyBvyg8B8UIOF7qUx/wN74Gc8EhMWKa9RuGpXZEAaI2+lKDVHIxAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUaQKs6CCe84VlRgOxKlTiNzTkrqAwHwYDVR0j
BBgwFoAU1ZwrA88PzUsNMAWzISBDNNCGaa8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9TdnRvcGVrUVVSN2dHcnhBQ3lWUTVadVVGcjZZN3NISkJybzh6WlllNVVk
LzAvRDU5QzJCMDNDRjBGQ0Q0QjBEMzAwNUIzMjEyMDQzMzREMDg2NjlBRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENTlDMkIwM0NGMEZDRDRCMEQz
MDA1QjMyMTIwNDMzNEQwODY2OUFGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1N2
dG9wZWtRVVI3Z0dyeEFDeVZRNVp1VUZyNlk3c0hKQnJvOHpaWWU1VWQvMC9ENTlD
MkIwM0NGMEZDRDRCMEQzMDA1QjMyMTIwNDMzNEQwODY2OUFGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
DREMx3ihjTj9Mb346kyxYxPISbdd4RTEhR61E5p/2Ca8AjRjYdOulNR/SE4RycE9
A9KgHGzjzz/bsAzKFY7JX18RHLOCcQhHToG5kaCb5H/B0DerWk57VtPXLH66x5Hx
ylN6CKe1CleTI2xm9trD8zTf93nRSrDA2zkOAsp3q47WMWTF/PvUGONC8gzCrn2t
P3h4HBS2x3AzP+/1CKNpmVEbeGwZVub0poN4USsiO/aAW9j4Jj3aanxhVzScYNgD
9+p5V3A88wny4mCiC8eC29OUnkF13haoh1PfKYMJue33GJ584QX2mCnT6mw51RmA
4vdxlV5I3L10upMFPFXqsw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:20:03 2025 by rpki-client