Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
File:                     A99D272225729B303C95F28914878741C6AE29BE.mft (raw, json)
Hash identifier:          JNAnIn2oLqYHlIbM/0iA35iJ5NYNB9lEdJaU9Wqep4o=
Subject key identifier:   00:99:5B:68:F8:D0:5E:7E:52:A6:A3:C6:0B:60:B2:09:0A:40:1E:BF
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       78EDE849E0F2F5B13E075140DC89CB6AAF5BF073
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
Manifest number:          019F
Signing time:             Fri 31 Jan 2025 13:45:53 +0000
Manifest this update:     Fri 31 Jan 2025 13:40:53 +0000
Manifest next update:     Sat 01 Feb 2025 17:08:53 +0000
Files and hashes:         1: 323830343a343134633a3a2f33322d3438203d3e203238323034.roa (hash: Y+DgAcjFJov2MwOMcTCBVD+DlxL8/JhlfjtG6/6PAho=)
                          2: A99D272225729B303C95F28914878741C6AE29BE.crl (hash: CCw1pl7RhsgZ71AhU8TkBZ/WxNe0yyr6UvPA7rQZ/pY=)
                          3: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (hash: mVhez4oH+ZZe1MpwRKuWrOKm17wq5GZedCe2C7CQYTo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:e8:49:e0:f2:f5:b1:3e:07:51:40:dc:89:cb:6a:af:5b:f0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Jan 31 13:40:53 2025 GMT
            Not After : Feb  1 17:08:53 2025 GMT
        Subject: CN=00995B68F8D05E7E52A6A3C60B60B2090A401EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:8f:95:3f:fb:96:9c:d1:8e:19:e2:28:75:
                    1f:f1:21:6c:0b:2e:7e:45:44:d3:0e:ca:c3:ab:86:
                    3d:2c:ed:ec:4b:aa:91:72:0d:2f:f6:83:27:ff:93:
                    78:8d:c8:ea:ce:d6:76:f3:77:b6:9a:ff:1b:a5:e7:
                    9c:d8:1d:5a:20:36:d4:0b:f8:87:63:9a:eb:ad:3a:
                    8d:0f:ac:d4:c5:52:f4:44:04:2c:ce:74:06:92:65:
                    57:66:56:74:3c:2e:a4:8a:dd:2d:5d:30:32:1a:7e:
                    9e:9d:cc:6a:11:53:97:46:b2:59:1c:b3:25:94:1e:
                    e7:eb:cf:fb:d5:99:59:34:0a:03:46:33:e2:92:48:
                    e3:a1:dc:99:4e:26:96:b3:95:c2:b1:66:e1:ea:10:
                    72:b7:2e:91:12:a0:a7:04:bc:73:d9:d6:01:48:03:
                    f1:b4:ab:0b:18:f1:b7:a9:74:6f:ca:1c:7b:be:a1:
                    55:20:60:72:e8:01:96:d4:9b:f6:ef:3d:30:61:19:
                    c0:b6:62:ac:78:75:0a:c4:dd:35:70:63:47:05:dc:
                    58:34:d9:69:14:bf:96:29:da:89:8f:09:a6:f0:eb:
                    23:08:25:94:9e:b3:31:6d:ca:5a:56:15:6f:76:6b:
                    7b:3f:ce:40:ac:93:8a:b5:5e:89:e9:39:bf:7e:dd:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:99:5B:68:F8:D0:5E:7E:52:A6:A3:C6:0B:60:B2:09:0A:40:1E:BF
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:13:e0:87:54:91:41:07:38:48:ab:27:4c:65:57:5b:46:6f:
         4e:91:58:3c:9f:0f:e4:98:94:21:e4:6f:69:f8:0c:da:df:86:
         0e:7b:90:56:d5:28:3a:4d:4e:e5:d3:74:5e:53:0f:0c:30:6a:
         67:6c:a8:ed:13:c0:00:8d:f8:a9:cf:ec:90:33:5a:68:fb:f4:
         a6:fb:36:f1:e8:21:0a:5b:e0:d6:c5:61:f2:e4:58:8b:03:ff:
         6e:ec:0a:53:bf:91:4c:fc:3e:0f:ab:af:e7:db:4e:38:80:f5:
         b8:7d:66:20:66:16:06:8b:80:0b:6f:e7:7c:29:85:30:e4:6f:
         de:ae:54:a0:23:bb:96:a1:51:6e:e1:0f:5f:f9:c4:09:a7:21:
         84:b5:f4:27:7f:23:5d:c6:08:93:68:9d:0b:8c:61:40:b9:fa:
         3e:63:79:9e:41:35:81:7d:87:b9:77:ed:26:e5:17:c4:37:f4:
         97:15:c0:f5:1a:27:26:5d:db:29:de:17:24:9b:8b:55:b2:f0:
         2f:92:51:e0:79:a8:27:bd:e4:6e:33:e9:63:42:d1:5b:4f:04:
         50:95:2f:0c:46:28:28:f6:1a:98:24:16:db:fa:9f:74:8e:71:
         67:60:15:3d:45:dd:59:99:ab:35:8c:b2:aa:48:b4:64:d8:0c:
         43:eb:c6:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeO3oSeDy9bE+B1FA3InLaq9b8HMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk5RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFD
NkFFMjlCRTAeFw0yNTAxMzExMzQwNTNaFw0yNTAyMDExNzA4NTNaMDMxMTAvBgNV
BAMTKDAwOTk1QjY4RjhEMDVFN0U1MkE2QTNDNjBCNjBCMjA5MEE0MDFFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBI+VP/uWnNGOGeIodR/xIWwL
Ln5FRNMOysOrhj0s7exLqpFyDS/2gyf/k3iNyOrO1nbzd7aa/xul55zYHVogNtQL
+IdjmuutOo0PrNTFUvREBCzOdAaSZVdmVnQ8LqSK3S1dMDIafp6dzGoRU5dGslkc
syWUHufrz/vVmVk0CgNGM+KSSOOh3JlOJpazlcKxZuHqEHK3LpESoKcEvHPZ1gFI
A/G0qwsY8bepdG/KHHu+oVUgYHLoAZbUm/bvPTBhGcC2Yqx4dQrE3TVwY0cF3Fg0
2WkUv5Yp2omPCabw6yMIJZSeszFtylpWFW92a3s/zkCsk4q1XonpOb9+3VOXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAJlbaPjQXn5SpqPGC2CyCQpAHr8wHwYDVR0j
BBgwFoAUqZ0nIiVymzA8lfKJFIeHQcauKb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBN
RmgvMC9BOTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OUQyNzIyMjU3MjlCMzAz
Qzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC9B
OTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWBPgh1SRQQc4SKsnTGVXW0ZvTpFYPJ8P5JiUIeRvafgM2t+GDnuQVtUoOk1O
5dN0XlMPDDBqZ2yo7RPAAI34qc/skDNaaPv0pvs28eghClvg1sVh8uRYiwP/buwK
U7+RTPw+D6uv59tOOID1uH1mIGYWBouAC2/nfCmFMORv3q5UoCO7lqFRbuEPX/nE
CachhLX0J38jXcYIk2idC4xhQLn6PmN5nkE1gX2HuXftJuUXxDf0lxXA9RonJl3b
Kd4XJJuLVbLwL5JR4HmoJ73kbjPpY0LRW08EUJUvDEYoKPYamCQW2/qfdI5xZ2AV
PUXdWZmrNYyyqki0ZNgMQ+vGtg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:19:01 2025 by rpki-client