Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft
File:                     354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft (raw, json)
Hash identifier:          5DV76I7EYjVW740lEe2nZ+Eq3r4LcZc4laH09MFw+3Q=
Subject key identifier:   38:AC:65:62:E6:52:32:B4:A9:CD:68:23:C9:8D:8D:7A:9D:79:11:A2
Authority key identifier: 35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84
Certificate issuer:       /CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84
Certificate serial:       7069F10C2594E035F483E66275563E33A21ABB28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft
Manifest number:          1B
Signing time:             Fri 31 Jan 2025 10:44:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:39:22 +0000
Manifest next update:     Sat 01 Feb 2025 14:37:22 +0000
Files and hashes:         1: 323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (hash: qMXYhMp+LVYGti2NuSjxj10R7BA4s8v9jTtjkwNr9pg=)
                          2: 3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa (hash: OE04vF3otJ8I3Zw+nN0FQbaJuoDxiyn1dU57jIWzqqM=)
                          3: 354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl (hash: ujxnjRCO/AqGn+RZnGUn/jbRMAu4jSYHxdPgo9E02fY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:f1:0c:25:94:e0:35:f4:83:e6:62:75:56:3e:33:a2:1a:bb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84
        Validity
            Not Before: Jan 31 10:39:22 2025 GMT
            Not After : Feb  1 14:37:22 2025 GMT
        Subject: CN=38AC6562E65232B4A9CD6823C98D8D7A9D7911A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:b8:65:a2:16:40:c8:90:63:b6:7e:b6:32:
                    79:97:ea:16:91:e9:81:b9:da:27:09:11:69:92:73:
                    1d:3c:d7:c7:3b:4d:f9:be:50:ac:7e:59:5d:68:5c:
                    6e:94:67:8c:33:89:e1:d8:b8:78:79:b7:2c:0b:50:
                    74:f8:1e:d6:26:ea:29:e8:d7:98:30:73:df:63:23:
                    ff:8b:2e:c1:6c:b9:d4:ea:61:ca:34:cb:52:a1:e0:
                    10:68:4a:cf:41:6e:14:d7:50:c4:a5:f9:89:2f:9d:
                    4f:1e:4a:62:ae:9a:5f:b0:23:5e:fb:76:95:29:7d:
                    23:cc:46:af:52:85:0b:b5:ea:d8:5e:52:c8:ed:ff:
                    65:ef:42:ee:a0:80:77:34:9f:85:48:1d:f0:ee:85:
                    4d:4b:2b:70:37:83:fc:c4:1e:b1:b9:d4:81:2f:72:
                    fc:b2:d6:0c:6c:9c:b2:f9:c1:e3:7a:83:de:d1:a1:
                    4b:71:4a:ee:70:ac:0d:ea:d7:90:bb:a1:3b:ae:c6:
                    5f:46:fc:44:26:bf:70:0e:73:74:a8:42:ea:16:58:
                    20:a4:bf:d5:11:07:73:0c:fc:18:42:69:61:65:5c:
                    3c:1f:d4:84:6c:69:73:40:4d:4a:11:c0:0a:c9:b1:
                    72:cd:96:bf:73:5b:e0:37:63:11:cf:50:07:10:45:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:65:62:E6:52:32:B4:A9:CD:68:23:C9:8D:8D:7A:9D:79:11:A2
            X509v3 Authority Key Identifier:
                keyid:35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:34:08:40:05:43:cb:1f:f8:f7:2f:fc:c4:44:66:87:1b:b8:
         5c:ba:ba:6a:c4:71:1b:06:dc:17:4c:16:6b:00:d6:7b:61:26:
         b6:b7:19:54:00:05:5e:c0:0e:f8:66:0d:ae:b1:46:07:c2:aa:
         7e:6e:86:44:86:58:41:96:a3:37:8c:35:06:af:18:03:99:67:
         32:4c:3c:55:9e:ca:07:f2:88:8b:e6:61:71:35:fa:6d:19:fb:
         19:ef:80:8e:c4:1e:82:1f:83:55:8c:28:5d:1a:6f:ee:ed:f3:
         1e:fe:d1:94:41:07:81:3d:17:d7:45:08:66:96:31:06:a5:13:
         93:17:74:9c:0e:8f:b3:19:e5:b3:00:c3:0b:b2:6a:cb:e8:94:
         cb:1a:8a:0d:39:81:29:47:71:fe:4e:7d:bd:0d:ae:48:3d:f3:
         b6:53:69:db:3d:5c:e6:2f:45:92:c9:ac:38:19:3a:f5:6c:90:
         fb:5e:54:1f:bb:cb:d3:53:f4:97:ca:df:c0:26:b2:94:c7:dc:
         de:d4:9c:99:d9:10:0f:e7:db:a4:e9:ec:fd:cf:1c:38:61:c6:
         1d:69:df:3c:a0:c0:65:66:68:48:c3:c5:90:a8:b2:50:f1:ed:
         91:34:aa:01:9e:1c:bb:1c:05:e3:23:1d:1f:43:d9:56:a0:a8:
         68:a8:5d:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcGnxDCWU4DX0g+ZidVY+M6IauygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU0RUE0NEIwQkMwODAwQUYxRkM1NzVCMEExMDYxQkEw
QkUzNUQ4NDAeFw0yNTAxMzExMDM5MjJaFw0yNTAyMDExNDM3MjJaMDMxMTAvBgNV
BAMTKDM4QUM2NTYyRTY1MjMyQjRBOUNENjgyM0M5OEQ4RDdBOUQ3OTExQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8LhlohZAyJBjtn62MnmX6haR
6YG52icJEWmScx0818c7Tfm+UKx+WV1oXG6UZ4wzieHYuHh5tywLUHT4HtYm6ino
15gwc99jI/+LLsFsudTqYco0y1Kh4BBoSs9BbhTXUMSl+YkvnU8eSmKuml+wI177
dpUpfSPMRq9ShQu16theUsjt/2XvQu6ggHc0n4VIHfDuhU1LK3A3g/zEHrG51IEv
cvyy1gxsnLL5weN6g97RoUtxSu5wrA3q15C7oTuuxl9G/EQmv3AOc3SoQuoWWCCk
v9URB3MM/BhCaWFlXDwf1IRsaXNATUoRwArJsXLNlr9zW+A3YxHPUAcQRSVnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOKxlYuZSMrSpzWgjyY2Nep15EaIwHwYDVR0j
BBgwFoAUNU6kSwvAgArx/FdbChBhugvjXYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMldBNFE0RFFwOVl4REpucWQxQ1Z2QlJIVlFCaFZuRFBTbXBmalVDUDJF
Z0svMC8zNTRFQTQ0QjBCQzA4MDBBRjFGQzU3NUIwQTEwNjFCQTBCRTM1RDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NEVBNDRCMEJDMDgwMEFG
MUZDNTc1QjBBMTA2MUJBMEJFMzVEODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MldBNFE0RFFwOVl4REpucWQxQ1Z2QlJIVlFCaFZuRFBTbXBmalVDUDJFZ0svMC8z
NTRFQTQ0QjBCQzA4MDBBRjFGQzU3NUIwQTEwNjFCQTBCRTM1RDg0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQTQIQAVDyx/49y/8xERmhxu4XLq6asRxGwbcF0wWawDWe2EmtrcZVAAFXsAO
+GYNrrFGB8Kqfm6GRIZYQZajN4w1Bq8YA5lnMkw8VZ7KB/KIi+ZhcTX6bRn7Ge+A
jsQegh+DVYwoXRpv7u3zHv7RlEEHgT0X10UIZpYxBqUTkxd0nA6PsxnlswDDC7Jq
y+iUyxqKDTmBKUdx/k59vQ2uSD3ztlNp2z1c5i9FksmsOBk69WyQ+15UH7vL01P0
l8rfwCaylMfc3tScmdkQD+fbpOns/c8cOGHGHWnfPKDAZWZoSMPFkKiyUPHtkTSq
AZ4cuxwF4yMdH0PZVqCoaKhdTA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:16 2025 by rpki-client