Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.mft
File:                     2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.mft (raw, json)
Hash identifier:          3qhzQ/aIek7JFHiGLOhxw6xWvwBNo7Ju93O5q3bXkGo=
Subject key identifier:   3A:56:13:48:F3:E6:A3:95:73:C9:03:9F:40:8A:23:0D:22:16:7A:AD
Authority key identifier: 2E:EE:5B:E5:B1:D7:2F:B8:B9:DF:F2:65:FC:5A:82:E8:D4:74:0A:A0
Certificate issuer:       /CN=2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0
Certificate serial:       2857501B8AD5C198DCF8715A2A802763ED0F7C7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.mft
Manifest number:          018F
Signing time:             Tue 28 Jan 2025 18:19:42 +0000
Manifest this update:     Tue 28 Jan 2025 18:14:42 +0000
Manifest next update:     Wed 29 Jan 2025 21:20:42 +0000
Files and hashes:         1: 2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.crl (hash: RH4T3Hvsb2So35fhV0R+rSc0xwnApXMe39kW2r+FP78=)
                          2: 323830343a323134343a3a2f33322d3438203d3e203532373935.roa (hash: qlDiWy5KR88GkRRNziG9p8oAQxt3Wmh8iJHelB126rU=)
                          3: 3137372e33392e3231362e302f32312d3234203d3e203532373935.roa (hash: M9dV5l+feJgH0vjy8sa4Vom+j2CLuKtZESOtspCTzrE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:57:50:1b:8a:d5:c1:98:dc:f8:71:5a:2a:80:27:63:ed:0f:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0
        Validity
            Not Before: Jan 28 18:14:42 2025 GMT
            Not After : Jan 29 21:20:42 2025 GMT
        Subject: CN=3A561348F3E6A39573C9039F408A230D22167AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:3c:e8:6a:28:db:46:2f:f1:1b:75:5b:6f:
                    06:cd:9a:0b:c0:42:65:91:43:af:04:f9:24:3b:e5:
                    a4:92:f4:cd:1e:c7:7f:ba:3d:30:e1:30:09:d6:55:
                    54:3a:a6:51:16:ac:74:48:55:05:d6:5b:31:8a:60:
                    d0:2b:e7:54:ff:33:4f:51:33:14:05:4b:22:94:69:
                    7b:a7:70:4c:ef:3a:b8:65:c9:66:c5:e1:36:fa:92:
                    b7:05:2c:a7:0b:dd:1b:da:d7:79:e3:99:0a:e6:6f:
                    2f:1d:8b:73:0e:05:68:46:6d:2b:63:3a:b8:13:9f:
                    d5:38:a7:f9:31:16:b7:75:3c:10:cd:6d:0f:f5:cd:
                    00:44:10:b2:c8:ff:d9:b9:51:53:b0:4f:19:63:70:
                    94:90:b8:75:19:02:75:09:74:8d:e3:8d:c2:60:3c:
                    3b:df:5d:7c:f5:80:6f:8b:64:09:5e:83:ba:11:d3:
                    7f:99:0f:66:84:ed:7e:79:7f:6d:41:96:da:a8:79:
                    44:bb:0d:a6:46:12:fb:fa:40:d8:6f:2d:0f:c5:1b:
                    46:da:ae:0e:12:32:ae:51:f7:f4:79:dd:73:07:cc:
                    99:3a:1d:0e:a8:b2:4a:7f:c0:56:08:56:4d:75:82:
                    90:64:4f:1b:21:ba:2b:ac:7d:30:69:9e:f4:ac:a7:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:56:13:48:F3:E6:A3:95:73:C9:03:9F:40:8A:23:0D:22:16:7A:AD
            X509v3 Authority Key Identifier:
                keyid:2E:EE:5B:E5:B1:D7:2F:B8:B9:DF:F2:65:FC:5A:82:E8:D4:74:0A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b8:5d:ce:1f:46:83:6e:9b:b0:eb:42:6c:57:83:ee:54:81:
         f8:93:99:90:75:73:7d:f8:47:1d:08:86:5f:22:e7:58:8c:9f:
         c2:23:71:63:16:59:f2:c4:65:da:8c:d8:ab:6c:b9:91:1e:9e:
         d4:6e:d2:ff:6e:b9:9f:38:68:ba:ab:0c:f6:f3:d0:11:32:c0:
         2c:ec:22:2a:a1:3c:6a:e9:35:20:8d:77:15:4f:19:2d:f2:ea:
         63:42:ea:e5:10:b0:83:53:5c:fa:94:d3:39:df:61:06:c8:03:
         2e:e3:e6:83:10:5a:3a:fa:7e:97:bc:f7:da:e6:b0:37:a0:42:
         1d:b9:48:15:28:d9:3b:2b:15:5e:7a:26:10:5e:03:72:d9:c3:
         6d:36:14:8a:f1:55:db:72:58:39:bf:0d:b7:f5:7d:5a:f4:fa:
         94:cc:e5:1d:42:6a:ae:fb:d3:62:69:7a:17:44:62:4e:f8:14:
         c9:99:f6:8d:10:41:1f:9f:f5:26:10:e4:ea:88:5b:8c:02:fa:
         d8:5f:96:ff:3d:f6:99:cd:7f:16:c3:78:39:2e:c3:c4:d5:aa:
         10:c6:52:b7:fd:46:d5:88:95:24:03:a0:d4:49:9b:3c:ca:52:
         e3:46:2f:ef:cd:a9:7a:d5:ae:18:a2:ac:71:12:04:08:56:09:
         bf:1a:30:83
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUKFdQG4rVwZjc+HFaKoAnY+0PfHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVFRTVCRTVCMUQ3MkZCOEI5REZGMjY1RkM1QTgyRThE
NDc0MEFBMDAeFw0yNTAxMjgxODE0NDJaFw0yNTAxMjkyMTIwNDJaMDMxMTAvBgNV
BAMTKDNBNTYxMzQ4RjNFNkEzOTU3M0M5MDM5RjQwOEEyMzBEMjIxNjdBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7jzoaijbRi/xG3VbbwbNmgvA
QmWRQ68E+SQ75aSS9M0ex3+6PTDhMAnWVVQ6plEWrHRIVQXWWzGKYNAr51T/M09R
MxQFSyKUaXuncEzvOrhlyWbF4Tb6krcFLKcL3Rva13njmQrmby8di3MOBWhGbStj
OrgTn9U4p/kxFrd1PBDNbQ/1zQBEELLI/9m5UVOwTxljcJSQuHUZAnUJdI3jjcJg
PDvfXXz1gG+LZAleg7oR03+ZD2aE7X55f21BltqoeUS7DaZGEvv6QNhvLQ/FG0ba
rg4SMq5R9/R53XMHzJk6HQ6oskp/wFYIVk11gpBkTxshuiusfTBpnvSspxKFAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUOlYTSPPmo5VzyQOfQIojDSIWeq0wHwYDVR0j
BBgwFoAULu5b5bHXL7i53/Jl/FqC6NR0CqAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9WdGJreDRLVEw5cU5YNm9GakdFN0Z4NVhXcGd3TWJwclByNThKQm5IUkdk
LzIvMkVFRTVCRTVCMUQ3MkZCOEI5REZGMjY1RkM1QTgyRThENDc0MEFBMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRUVFNUJFNUIxRDcyRkI4QjlE
RkYyNjVGQzVBODJFOEQ0NzQwQUEwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Z0
Ymt4NEtUTDlxTlg2b0ZqR0U3Rng1WFdwZ3dNYnByUHI1OEpCbkhSR2QvMi8yRUVF
NUJFNUIxRDcyRkI4QjlERkYyNjVGQzVBODJFOEQ0NzQwQUEwLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
hrhdzh9Gg26bsOtCbFeD7lSB+JOZkHVzffhHHQiGXyLnWIyfwiNxYxZZ8sRl2ozY
q2y5kR6e1G7S/265nzhouqsM9vPQETLALOwiKqE8auk1II13FU8ZLfLqY0Lq5RCw
g1Nc+pTTOd9hBsgDLuPmgxBaOvp+l7z32uawN6BCHblIFSjZOysVXnomEF4DctnD
bTYUivFV23JYOb8Nt/V9WvT6lMzlHUJqrvvTYml6F0RiTvgUyZn2jRBBH5/1JhDk
6ohbjAL62F+W/z32mc1/FsN4OS7DxNWqEMZSt/1G1YiVJAOg1EmbPMpS40Yv782p
etWuGKKscRIECFYJvxowgw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:11:46 2025 by rpki-client