Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.mft
File:                     4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.mft (raw, json)
Hash identifier:          fRMnA2jHo0qlKuR+v2ooCnKhSdoxy09Ig2YoUWQSOe4=
Subject key identifier:   84:BB:E3:BC:A4:EA:44:6C:20:5A:BA:DF:6E:0D:74:0F:FC:BF:68:71
Authority key identifier: 4A:A5:13:FD:94:60:D1:05:08:ED:BC:EB:9D:14:D3:E4:8D:75:E4:7B
Certificate issuer:       /CN=4AA513FD9460D10508EDBCEB9D14D3E48D75E47B
Certificate serial:       0C8BC0336F7BCDC27159C48B35C966955D576F89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.mft
Manifest number:          03
Signing time:             Tue 21 Jan 2025 00:52:51 +0000
Manifest this update:     Tue 21 Jan 2025 00:47:51 +0000
Manifest next update:     Wed 22 Jan 2025 04:30:51 +0000
Files and hashes:         1: 323830343a37633a3a2f33322d3438203d3e203238353835.roa (hash: wArAfvDSK7jEIcL7270u8pmTHxH/s0cI63V+tend78Q=)
                          2: 4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.crl (hash: GJK9i4DM64uGq+iwNM5FEEJk8/9kH2o3V4vs7OUD5Is=)
                          3: 3138372e38372e3132382e302f32302d3234203d3e203238353835.roa (hash: zBlVFT81Kj9RRYrCGK6F9490Sp7khiw5xH89nvdzst4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8b:c0:33:6f:7b:cd:c2:71:59:c4:8b:35:c9:66:95:5d:57:6f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA513FD9460D10508EDBCEB9D14D3E48D75E47B
        Validity
            Not Before: Jan 21 00:47:51 2025 GMT
            Not After : Jan 22 04:30:51 2025 GMT
        Subject: CN=84BBE3BCA4EA446C205ABADF6E0D740FFCBF6871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:7e:5d:32:d8:f3:7c:b4:1f:aa:28:d4:ca:
                    0b:4e:59:77:ec:4e:c7:6f:72:8c:2b:a3:91:87:99:
                    66:b4:b2:fc:fb:ab:d4:4b:bf:81:23:bd:eb:e8:a7:
                    35:0a:4d:5d:03:48:49:a1:72:27:8d:5f:aa:16:b2:
                    2c:aa:ca:89:d2:a2:55:4a:ce:42:d6:d5:41:7e:4d:
                    e2:0c:84:84:d0:56:b2:2e:1d:32:3d:65:48:fb:63:
                    32:ad:b6:2d:cf:28:27:36:2c:9f:43:17:3a:da:aa:
                    dd:e5:9a:31:90:5d:40:f2:62:9e:05:35:d2:0a:d9:
                    4c:02:db:cf:b9:65:55:d5:98:08:7a:12:3a:c4:c8:
                    da:8c:5b:46:54:cc:a6:55:ea:e0:3f:b6:e1:ef:55:
                    39:dd:d7:b5:45:23:19:64:ac:9b:20:6f:14:6c:5d:
                    cd:5d:81:b7:2f:e0:a1:98:06:b2:2f:64:0b:2e:26:
                    55:c6:49:ea:29:7f:30:ae:95:7f:d1:e3:5b:a1:53:
                    2d:17:04:43:47:04:36:07:b3:6a:6e:1f:f7:a0:73:
                    d2:d4:52:2a:fe:ef:18:b8:30:c8:bd:44:58:b5:a7:
                    90:77:9d:74:28:c8:a5:f3:28:de:ba:eb:95:aa:14:
                    2d:33:70:cf:04:3c:bb:61:6a:cc:43:ff:27:02:a2:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BB:E3:BC:A4:EA:44:6C:20:5A:BA:DF:6E:0D:74:0F:FC:BF:68:71
            X509v3 Authority Key Identifier:
                keyid:4A:A5:13:FD:94:60:D1:05:08:ED:BC:EB:9D:14:D3:E4:8D:75:E4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/4AA513FD9460D10508EDBCEB9D14D3E48D75E47B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fb:01:07:69:98:fb:f7:7e:25:4d:e9:e3:61:c4:9d:ac:ca:
         c1:8a:a9:3e:35:f8:d5:10:32:0c:82:82:06:b4:86:62:f9:8b:
         f6:9d:26:49:43:d6:a8:cd:e0:a3:8c:51:ff:a0:ff:1b:93:d3:
         8f:39:ae:2b:fe:fa:b0:2e:24:9e:5d:e5:a2:02:e3:38:25:d3:
         4b:9f:11:10:db:f3:cb:27:d8:1f:ae:3f:1a:10:86:89:ca:79:
         58:f3:33:a2:68:ed:51:22:83:7c:d4:69:87:40:99:45:26:22:
         e3:b0:48:bd:2f:13:73:a7:28:2e:09:f2:e6:56:56:bc:d6:da:
         2b:23:0b:26:ef:44:67:85:f5:f9:07:57:67:6f:0b:65:01:fc:
         f0:e5:a8:ac:f1:88:c6:50:a8:65:fe:17:1f:56:a1:4e:e8:e5:
         45:36:0e:54:f9:2d:94:81:eb:ea:4a:a2:d3:88:a7:fb:d6:44:
         6a:ca:c9:34:a1:03:5e:03:16:ba:a9:d5:5d:cb:30:d5:8b:61:
         cd:61:8d:47:9c:c7:f2:36:8b:05:d5:09:bf:31:ee:b7:0e:46:
         fe:be:1c:5d:08:d7:10:f7:42:ba:c2:aa:92:e1:00:c2:c9:0f:
         5e:d3:75:1c:97:39:4f:ce:5d:25:cd:b7:4e:42:10:f2:f8:d6:
         1a:b8:8e:04
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUDIvAM297zcJxWcSLNclmlV1Xb4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBNTEzRkQ5NDYwRDEwNTA4RURCQ0VCOUQxNEQzRTQ4
RDc1RTQ3QjAeFw0yNTAxMjEwMDQ3NTFaFw0yNTAxMjIwNDMwNTFaMDMxMTAvBgNV
BAMTKDg0QkJFM0JDQTRFQTQ0NkMyMDVBQkFERjZFMEQ3NDBGRkNCRjY4NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGln5dMtjzfLQfqijUygtOWXfs
Tsdvcowro5GHmWa0svz7q9RLv4EjvevopzUKTV0DSEmhcieNX6oWsiyqyonSolVK
zkLW1UF+TeIMhITQVrIuHTI9ZUj7YzKtti3PKCc2LJ9DFzraqt3lmjGQXUDyYp4F
NdIK2UwC28+5ZVXVmAh6EjrEyNqMW0ZUzKZV6uA/tuHvVTnd17VFIxlkrJsgbxRs
Xc1dgbcv4KGYBrIvZAsuJlXGSeopfzCulX/R41uhUy0XBENHBDYHs2puH/egc9LU
Uir+7xi4MMi9RFi1p5B3nXQoyKXzKN6665WqFC0zcM8EPLthasxD/ycCotwvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUhLvjvKTqRGwgWrrfbg10D/y/aHEwHwYDVR0j
BBgwFoAUSqUT/ZRg0QUI7bzrnRTT5I115HswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9lcThoNlpYemZNa1E0Z3lVMTY0R242MWRCcnhnV3hjbnN0S0hLcTIzUEFC
LzAvNEFBNTEzRkQ5NDYwRDEwNTA4RURCQ0VCOUQxNEQzRTQ4RDc1RTQ3Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QUE1MTNGRDk0NjBEMTA1MDhF
REJDRUI5RDE0RDNFNDhENzVFNDdCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Vx
OGg2Wlh6Zk1rUTRneVUxNjRHbjYxZEJyeGdXeGNuc3RLSEtxMjNQQUIvMC80QUE1
MTNGRDk0NjBEMTA1MDhFREJDRUI5RDE0RDNFNDhENzVFNDdCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
R/sBB2mY+/d+JU3p42HEnazKwYqpPjX41RAyDIKCBrSGYvmL9p0mSUPWqM3go4xR
/6D/G5PTjzmuK/76sC4knl3logLjOCXTS58RENvzyyfYH64/GhCGicp5WPMzomjt
USKDfNRph0CZRSYi47BIvS8Tc6coLgny5lZWvNbaKyMLJu9EZ4X1+QdXZ28LZQH8
8OWorPGIxlCoZf4XH1ahTujlRTYOVPktlIHr6kqi04in+9ZEasrJNKEDXgMWuqnV
Xcsw1YthzWGNR5zH8jaLBdUJvzHutw5G/r4cXQjXEPdCusKqkuEAwskPXtN1HJc5
T85dJc23TkIQ8vjWGriOBA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 08:37:29 2025 by rpki-client