Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/AC0D80B73BF744D977473A8C7A20CE18408EB61F.mft
File:                     AC0D80B73BF744D977473A8C7A20CE18408EB61F.mft (raw, json)
Hash identifier:          +/Z1+XABDE3v7tf8b1cUK2/liUt7sgJ1fh5+qCBQbIw=
Subject key identifier:   DA:2D:44:CA:9B:F5:B9:6C:3B:E8:82:93:0C:F5:D0:B5:83:54:BB:F3
Authority key identifier: AC:0D:80:B7:3B:F7:44:D9:77:47:3A:8C:7A:20:CE:18:40:8E:B6:1F
Certificate issuer:       /CN=AC0D80B73BF744D977473A8C7A20CE18408EB61F
Certificate serial:       4A8AFD8F12A8DF07BE64D88214F55FE33EE6D18A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC0D80B73BF744D977473A8C7A20CE18408EB61F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/AC0D80B73BF744D977473A8C7A20CE18408EB61F.mft
Manifest number:          08
Signing time:             Fri 31 Jan 2025 10:06:33 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:33 +0000
Manifest next update:     Sat 01 Feb 2025 10:59:33 +0000
Files and hashes:         1: AC0D80B73BF744D977473A8C7A20CE18408EB61F.crl (hash: 6Y4HpeKqkOHwn7CZPmJJi7CUCFKo47Va6I7j2tAlbbo=)
                          2: 34352e3136322e3131322e302f32322d3332203d3e20323638353035.roa (hash: gxyicQqzAt4soWZj1+GJsuyV1a+Kckv/Hw4psNSphpI=)
                          3: 323830343a353234303a3a2f33322d313238203d3e20323638353035.roa (hash: +aJPgN5pTBv+zzLKcqltc3Nc2qGY3JoWPwj8u+nsTGY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8a:fd:8f:12:a8:df:07:be:64:d8:82:14:f5:5f:e3:3e:e6:d1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC0D80B73BF744D977473A8C7A20CE18408EB61F
        Validity
            Not Before: Jan 31 10:01:33 2025 GMT
            Not After : Feb  1 10:59:33 2025 GMT
        Subject: CN=DA2D44CA9BF5B96C3BE882930CF5D0B58354BBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:43:50:2d:52:ee:8d:b8:7c:42:1c:96:aa:
                    74:1f:32:38:76:f6:87:ff:46:2e:1b:86:08:88:15:
                    a6:96:4d:20:3d:45:ca:75:f3:46:67:da:54:21:0e:
                    0c:89:a1:de:68:9f:a9:dc:28:ff:50:f6:9e:b6:0e:
                    6e:da:0d:29:9d:39:67:2a:67:98:3b:54:78:c4:7c:
                    d1:7f:95:13:69:a5:19:d9:85:ab:e3:be:d3:b8:d3:
                    7c:00:67:b4:71:04:de:07:c7:76:03:d1:56:99:a0:
                    71:9e:08:0a:78:79:5c:49:16:32:e9:4c:29:3c:a6:
                    a7:b0:31:77:d2:ad:d1:d1:01:fd:5b:88:d9:19:5c:
                    32:b1:f1:d9:6a:73:72:28:8f:83:79:80:4e:97:49:
                    5d:45:6d:ea:9a:39:f0:7b:ca:86:02:09:74:fc:5e:
                    20:f1:0c:cb:d6:52:c6:61:2d:9b:7f:1f:e5:1d:7c:
                    38:43:d4:21:ee:f9:85:87:6a:72:85:b1:55:bf:71:
                    68:55:a1:a8:83:de:b4:a0:aa:ba:12:f2:61:09:39:
                    49:a2:cb:2a:6d:47:b1:5f:7e:d5:21:dc:fa:8c:aa:
                    5e:be:5b:ed:c8:a6:03:85:06:6e:1e:34:dc:06:c7:
                    af:b2:28:22:d8:3c:e7:77:8c:b6:5d:a4:1b:67:93:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2D:44:CA:9B:F5:B9:6C:3B:E8:82:93:0C:F5:D0:B5:83:54:BB:F3
            X509v3 Authority Key Identifier:
                keyid:AC:0D:80:B7:3B:F7:44:D9:77:47:3A:8C:7A:20:CE:18:40:8E:B6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/AC0D80B73BF744D977473A8C7A20CE18408EB61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC0D80B73BF744D977473A8C7A20CE18408EB61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/AC0D80B73BF744D977473A8C7A20CE18408EB61F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:60:fa:4d:e5:89:56:51:43:3a:51:ee:4c:82:3b:b4:b7:
         25:8d:59:2b:4b:68:5c:6d:81:09:9f:7c:f1:64:b8:26:5d:6c:
         19:07:fe:4e:4c:11:01:fc:5b:ec:e3:21:77:b9:8b:92:9b:4e:
         27:94:7b:4f:f8:58:06:9f:4d:47:c0:d9:bc:94:4d:46:0a:55:
         b4:21:f4:df:a7:29:a0:93:47:a4:88:6e:ce:79:c5:9b:b2:4e:
         d2:3d:4b:a4:26:f0:d6:43:e9:ea:45:e9:56:8f:ad:37:45:e8:
         ba:eb:d7:af:1d:e3:2e:ff:f5:58:13:76:c7:76:0b:00:57:e3:
         8f:b7:af:34:81:25:11:90:e9:d6:30:e1:2a:80:a7:4e:80:0e:
         d9:ef:20:c6:e5:26:ab:62:6c:df:36:bd:84:ba:b3:8f:62:ed:
         52:d2:be:16:46:d1:2f:37:93:63:cf:c1:d1:1b:5d:b7:ae:5e:
         aa:9c:5b:49:be:a7:7c:8c:97:ce:03:9d:1e:a6:f8:83:be:9b:
         5c:23:e4:24:be:a1:a6:70:bc:d3:0b:12:9b:3f:02:14:3a:5e:
         db:70:b7:ba:60:7a:61:a1:11:79:09:b7:5f:19:5e:d0:5c:83:
         a7:2c:bc:ac:30:84:07:15:2f:55:3b:fe:f5:27:67:a0:a6:20:
         0a:79:33:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSor9jxKo3we+ZNiCFPVf4z7m0YowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMwRDgwQjczQkY3NDREOTc3NDczQThDN0EyMENFMTg0
MDhFQjYxRjAeFw0yNTAxMzExMDAxMzNaFw0yNTAyMDExMDU5MzNaMDMxMTAvBgNV
BAMTKERBMkQ0NENBOUJGNUI5NkMzQkU4ODI5MzBDRjVEMEI1ODM1NEJCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PkNQLVLujbh8QhyWqnQfMjh2
9of/Ri4bhgiIFaaWTSA9Rcp180Zn2lQhDgyJod5on6ncKP9Q9p62Dm7aDSmdOWcq
Z5g7VHjEfNF/lRNppRnZhavjvtO403wAZ7RxBN4Hx3YD0VaZoHGeCAp4eVxJFjLp
TCk8pqewMXfSrdHRAf1biNkZXDKx8dlqc3Ioj4N5gE6XSV1FbeqaOfB7yoYCCXT8
XiDxDMvWUsZhLZt/H+UdfDhD1CHu+YWHanKFsVW/cWhVoaiD3rSgqroS8mEJOUmi
yyptR7FfftUh3PqMql6+W+3IpgOFBm4eNNwGx6+yKCLYPOd3jLZdpBtnk3uxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2i1Eypv1uWw76IKTDPXQtYNUu/MwHwYDVR0j
BBgwFoAUrA2Atzv3RNl3RzqMeiDOGECOth8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1FHVHV6aGdyVzgxZ1pvTkhOYk1hTGNadWZjQW9RWEwzOGRIRUtlTnZS
SEsvMC9BQzBEODBCNzNCRjc0NEQ5Nzc0NzNBOEM3QTIwQ0UxODQwOEVCNjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMEQ4MEI3M0JGNzQ0RDk3
NzQ3M0E4QzdBMjBDRTE4NDA4RUI2MUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1FHVHV6aGdyVzgxZ1pvTkhOYk1hTGNadWZjQW9RWEwzOGRIRUtlTnZSSEsvMC9B
QzBEODBCNzNCRjc0NEQ5Nzc0NzNBOEM3QTIwQ0UxODQwOEVCNjFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX4hg+k3liVZRQzpR7kyCO7S3JY1ZK0toXG2BCZ988WS4Jl1sGQf+TkwRAfxb
7OMhd7mLkptOJ5R7T/hYBp9NR8DZvJRNRgpVtCH036cpoJNHpIhuznnFm7JO0j1L
pCbw1kPp6kXpVo+tN0XouuvXrx3jLv/1WBN2x3YLAFfjj7evNIElEZDp1jDhKoCn
ToAO2e8gxuUmq2Js3za9hLqzj2LtUtK+FkbRLzeTY8/B0Rtdt65eqpxbSb6nfIyX
zgOdHqb4g76bXCPkJL6hpnC80wsSmz8CFDpe23C3umB6YaEReQm3Xxle0FyDpyy8
rDCEBxUvVTv+9SdnoKYgCnkzpQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:57:50 2025 by rpki-client