Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
File:                     65E1DB5984802637A5800225A87C14E97A15601B.mft (raw, json)
Hash identifier:          Q4snZMFiNlEo2LKMkU/BsZ431MXYL8ep3KjPMeUwuOg=
Subject key identifier:   F4:EF:BF:65:84:84:E7:F7:1E:2C:8B:36:D5:4C:62:F4:97:33:7B:AC
Authority key identifier: 65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B
Certificate issuer:       /CN=65E1DB5984802637A5800225A87C14E97A15601B
Certificate serial:       37AA5A72E3DDFCC2A7C7E722F9F337E1E66D2EE8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
Manifest number:          0190
Signing time:             Fri 31 Jan 2025 11:35:36 +0000
Manifest this update:     Fri 31 Jan 2025 11:30:36 +0000
Manifest next update:     Sat 01 Feb 2025 12:56:36 +0000
Files and hashes:         1: 3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (hash: pXiJD/yodf7/Wt+F7Afz4t/nbZjTEAh4c5oTd4Ue0l4=)
                          2: 323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (hash: HZXxIF4i97WK+NxLmhVdMCjIzFkgSy9zE0XGNMfzrHU=)
                          3: 65E1DB5984802637A5800225A87C14E97A15601B.crl (hash: vdRtAB7x6LmXc318FjfjuvaltyT8ffPp+34vbmc+e4E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:aa:5a:72:e3:dd:fc:c2:a7:c7:e7:22:f9:f3:37:e1:e6:6d:2e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E1DB5984802637A5800225A87C14E97A15601B
        Validity
            Not Before: Jan 31 11:30:36 2025 GMT
            Not After : Feb  1 12:56:36 2025 GMT
        Subject: CN=F4EFBF658484E7F71E2C8B36D54C62F497337BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:1e:b9:10:66:8b:12:a8:1b:ec:de:e7:c6:
                    25:9f:20:25:20:9f:be:f7:c3:a7:cf:00:c8:39:bc:
                    09:3f:e3:20:4b:0a:9e:d0:77:49:17:84:db:00:77:
                    92:f0:9d:b3:c8:06:67:0d:c6:c6:00:4b:3b:ee:38:
                    55:7b:b7:81:9c:dd:d4:92:06:23:54:6b:f5:d8:6f:
                    ce:bd:82:96:45:b3:98:d4:d8:70:89:45:48:53:e3:
                    d5:42:98:4b:4c:4a:e7:2a:87:4b:4e:6c:34:8e:f7:
                    61:86:7f:5c:39:7d:1b:a8:21:b7:73:b2:ca:3d:74:
                    8c:18:f1:44:de:74:35:10:d3:c5:8b:67:ad:09:c3:
                    99:9b:63:36:43:34:bf:75:11:c6:66:e3:34:04:5b:
                    43:58:74:0b:b0:0e:31:bf:c1:9e:e5:e5:a9:56:92:
                    5e:c0:df:c3:db:92:ae:14:9e:1f:c8:e5:18:02:f3:
                    9b:c6:42:63:07:aa:40:f2:c6:a5:81:3d:0a:28:d5:
                    19:e1:c8:10:e5:50:d5:e5:e9:f7:8b:49:4c:1d:05:
                    20:7b:d1:16:9b:1b:4e:9d:ae:b0:56:43:31:b9:36:
                    37:a1:e2:a3:cb:cd:39:84:73:0f:7b:90:5b:3f:f2:
                    41:f2:c8:18:df:e3:61:17:04:86:60:21:dc:e9:2a:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EF:BF:65:84:84:E7:F7:1E:2C:8B:36:D5:4C:62:F4:97:33:7B:AC
            X509v3 Authority Key Identifier:
                keyid:65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5a:8d:70:1d:20:d3:9f:e0:3c:bc:ac:4a:da:21:1a:a0:1a:
         ff:b6:61:e3:1c:03:df:d5:84:bd:8d:89:c5:ea:1e:92:56:e3:
         dd:e6:b6:e7:9e:ff:f5:45:bb:7c:70:b0:14:61:e8:34:8f:ff:
         e6:1d:ca:11:30:5c:2a:e8:19:46:58:20:e0:1b:66:d7:2e:46:
         aa:d9:86:8c:d4:66:c1:24:39:e6:e1:89:f6:ec:56:db:af:30:
         3a:98:a0:20:3a:fe:97:39:19:27:55:b5:19:99:7f:71:24:4c:
         4c:8a:32:1e:ce:bc:28:55:14:e5:8c:71:93:6b:1e:2c:e6:cd:
         de:78:1d:d9:c6:5c:e5:12:cb:3d:a9:11:24:11:47:2b:96:ea:
         7c:7f:06:dd:85:73:72:42:2c:f9:4e:b9:53:44:e4:08:7f:fd:
         47:cd:d5:27:97:b6:6c:d2:ec:c1:ad:00:8a:b7:53:bb:13:82:
         17:1c:35:76:98:26:d1:e0:51:b7:4c:b3:97:c5:db:b4:51:b4:
         0f:0c:08:32:f8:aa:ab:c8:ce:6a:fd:4a:bc:55:54:4f:24:e2:
         f2:1f:06:85:11:7d:f9:04:b8:e7:f7:c7:d1:f5:d1:b3:a8:ef:
         02:4a:f8:d3:76:a5:a6:46:a6:b9:02:a2:5c:81:0c:f8:81:20:
         0c:cd:a3:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN6pacuPd/MKnx+ci+fM34eZtLugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVFMURCNTk4NDgwMjYzN0E1ODAwMjI1QTg3QzE0RTk3
QTE1NjAxQjAeFw0yNTAxMzExMTMwMzZaFw0yNTAyMDExMjU2MzZaMDMxMTAvBgNV
BAMTKEY0RUZCRjY1ODQ4NEU3RjcxRTJDOEIzNkQ1NEM2MkY0OTczMzdCQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KB65EGaLEqgb7N7nxiWfICUg
n773w6fPAMg5vAk/4yBLCp7Qd0kXhNsAd5LwnbPIBmcNxsYASzvuOFV7t4Gc3dSS
BiNUa/XYb869gpZFs5jU2HCJRUhT49VCmEtMSucqh0tObDSO92GGf1w5fRuoIbdz
sso9dIwY8UTedDUQ08WLZ60Jw5mbYzZDNL91EcZm4zQEW0NYdAuwDjG/wZ7l5alW
kl7A38Pbkq4Unh/I5RgC85vGQmMHqkDyxqWBPQoo1RnhyBDlUNXl6feLSUwdBSB7
0RabG06drrBWQzG5Njeh4qPLzTmEcw97kFs/8kHyyBjf42EXBIZgIdzpKk1dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9O+/ZYSE5/ceLIs21Uxi9Jcze6wwHwYDVR0j
BBgwFoAUZeHbWYSAJjelgAIlqHwU6XoVYBswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRMUkU0eE54QW53RnBxcEdhN3k3R2ZBVXlzTHR4RWJiTDRrcGQzZVdU
VXovMS82NUUxREI1OTg0ODAyNjM3QTU4MDAyMjVBODdDMTRFOTdBMTU2MDFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RTFEQjU5ODQ4MDI2MzdB
NTgwMDIyNUE4N0MxNEU5N0ExNTYwMUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmRMUkU0eE54QW53RnBxcEdhN3k3R2ZBVXlzTHR4RWJiTDRrcGQzZVdUVXovMS82
NUUxREI1OTg0ODAyNjM3QTU4MDAyMjVBODdDMTRFOTdBMTU2MDFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbVqNcB0g05/gPLysStohGqAa/7Zh4xwD39WEvY2Jxeoeklbj3ea2557/9UW7
fHCwFGHoNI//5h3KETBcKugZRlgg4Btm1y5GqtmGjNRmwSQ55uGJ9uxW268wOpig
IDr+lzkZJ1W1GZl/cSRMTIoyHs68KFUU5Yxxk2seLObN3ngd2cZc5RLLPakRJBFH
K5bqfH8G3YVzckIs+U65U0TkCH/9R83VJ5e2bNLswa0AirdTuxOCFxw1dpgm0eBR
t0yzl8XbtFG0DwwIMviqq8jOav1KvFVUTyTi8h8GhRF9+QS45/fH0fXRs6jvAkr4
03alpkamuQKiXIEM+IEgDM2jyg==
-----END CERTIFICATE-----