Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
File:                     3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft (raw, json)
Hash identifier:          6alRkPqVvuVrs7rv7etXjctW03UI7wKcKIAiRmULNvo=
Subject key identifier:   CD:F2:04:6F:3E:E5:9A:87:8E:C3:6E:9B:95:22:6E:D4:B3:AE:2A:09
Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Certificate issuer:       /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Certificate serial:       4BF6D663DF0A90B53A5A60AB7313F82954E4F85E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
Manifest number:          24
Signing time:             Fri 31 Jan 2025 14:54:59 +0000
Manifest this update:     Fri 31 Jan 2025 14:49:59 +0000
Manifest next update:     Sat 01 Feb 2025 15:25:59 +0000
Files and hashes:         1: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl (hash: cgSFPnhVv8Xf0PzlTCrEBVj+7TjPwlYTCSLrn87it8s=)
                          2: 3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa (hash: adeQrk3GHwoD07zzNg8h8DoI+T/hg8cMNdSF33h18Mw=)
                          3: 323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (hash: mHONVwFSZafTrb2bs4XTqeqR/1IxRdzcYgif/PNK+5w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f6:d6:63:df:0a:90:b5:3a:5a:60:ab:73:13:f8:29:54:e4:f8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
        Validity
            Not Before: Jan 31 14:49:59 2025 GMT
            Not After : Feb  1 15:25:59 2025 GMT
        Subject: CN=CDF2046F3EE59A878EC36E9B95226ED4B3AE2A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:16:3b:e3:5e:f4:3b:2b:14:50:82:be:08:6f:
                    e4:64:b6:e0:93:54:56:d8:39:43:e4:d1:d9:09:ff:
                    51:14:e0:a3:5e:ba:61:92:92:0a:bf:20:d6:f8:48:
                    30:b4:a3:3f:e8:b0:93:b3:2e:a3:39:6e:bf:96:7e:
                    f6:74:15:c3:64:e8:4a:c5:50:c1:9a:87:ff:8e:6c:
                    1f:61:7c:be:47:34:60:6e:c4:35:72:7e:d4:b5:8d:
                    9c:61:9e:2d:57:05:ab:b4:41:f5:a0:19:04:7b:06:
                    4c:3e:ad:36:b0:18:60:31:ea:6a:b0:64:d6:87:c1:
                    6b:6c:0a:2b:0a:57:4e:f7:cb:fc:9d:30:16:ab:0c:
                    ea:f4:66:59:99:9b:7a:f3:db:87:83:0d:8b:02:c2:
                    62:a2:49:1b:6c:b3:ea:a7:a7:ca:6b:9f:39:66:86:
                    71:a8:46:ca:83:77:d9:65:70:7e:aa:47:ad:9e:d7:
                    4d:26:07:48:a6:fa:e9:26:42:fd:1a:e5:27:6e:82:
                    d6:fc:c2:83:cc:e7:8c:75:1f:7f:31:68:08:f3:f6:
                    10:91:1f:7e:95:24:5f:5a:f3:9b:a2:5b:09:ba:9c:
                    cc:f8:ab:10:8f:bd:f6:5b:06:f0:8a:cf:c7:3b:6e:
                    80:47:b6:c1:57:aa:9d:ce:53:94:71:22:89:f6:ad:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F2:04:6F:3E:E5:9A:87:8E:C3:6E:9B:95:22:6E:D4:B3:AE:2A:09
            X509v3 Authority Key Identifier:
                keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:59:0d:4c:e7:2a:b1:0b:ea:a3:3f:5e:36:81:b3:36:be:03:
         f4:34:79:fe:37:63:fa:fc:12:2a:84:ca:18:3c:84:6d:d4:c1:
         df:6c:91:86:f1:f4:32:44:72:eb:6e:47:37:6a:40:76:e4:71:
         f0:f9:db:29:c4:98:83:fd:d2:e5:31:35:dd:63:31:2c:18:ee:
         31:8a:7d:7f:32:8a:90:13:c1:96:ec:15:c8:6b:aa:32:6f:29:
         e0:61:f9:07:14:71:89:33:98:c4:46:2f:b5:83:7e:fb:c2:7d:
         53:63:94:d7:e5:10:f8:da:5c:18:57:b6:b5:85:cb:75:9d:cc:
         8d:99:b6:ad:ea:d5:d5:ea:21:13:7c:bf:bc:6c:c9:4b:15:41:
         89:0f:df:33:de:fd:7a:39:2f:4f:8b:07:c1:f1:0f:28:8d:c8:
         ff:d5:e1:f4:ba:0a:1e:89:cc:8a:07:36:05:70:bb:52:f4:1b:
         2f:ce:60:a9:7f:38:e2:7e:52:e8:80:c9:4b:e6:9e:db:2e:8b:
         a3:3b:bd:8f:b5:99:90:8e:fc:16:71:61:38:13:59:29:f5:28:
         17:78:31:0d:9c:83:d8:02:7a:99:8e:38:89:a9:18:91:91:a9:
         88:84:dd:4c:01:a3:68:bb:09:9b:05:af:9c:f5:35:45:36:9c:
         7a:b3:7e:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS/bWY98KkLU6WmCrcxP4KVTk+F4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U1ODZGOTk4OTQ5MjQ1QTdCQTg3RDU0QzQ4REI2QzQz
NjBDRUI5RDAeFw0yNTAxMzExNDQ5NTlaFw0yNTAyMDExNTI1NTlaMDMxMTAvBgNV
BAMTKENERjIwNDZGM0VFNTlBODc4RUMzNkU5Qjk1MjI2RUQ0QjNBRTJBMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyFjvjXvQ7KxRQgr4Ib+RktuCT
VFbYOUPk0dkJ/1EU4KNeumGSkgq/INb4SDC0oz/osJOzLqM5br+WfvZ0FcNk6ErF
UMGah/+ObB9hfL5HNGBuxDVyftS1jZxhni1XBau0QfWgGQR7Bkw+rTawGGAx6mqw
ZNaHwWtsCisKV073y/ydMBarDOr0ZlmZm3rz24eDDYsCwmKiSRtss+qnp8prnzlm
hnGoRsqDd9llcH6qR62e100mB0im+ukmQv0a5Sdugtb8woPM54x1H38xaAjz9hCR
H36VJF9a85uiWwm6nMz4qxCPvfZbBvCKz8c7boBHtsFXqp3OU5RxIon2rUMZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzfIEbz7lmoeOw26blSJu1LOuKgkwHwYDVR0j
BBgwFoAUPlhvmYlJJFp7qH1UxI22xDYM650wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3I5eHl0a2t0cEJlMVE1QnROUndQTFh6RGIxVXQ4YTludWVia3NmM1hZ
WGQvMC8zRTU4NkY5OTg5NDkyNDVBN0JBODdENTRDNDhEQjZDNDM2MENFQjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFNTg2Rjk5ODk0OTI0NUE3
QkE4N0Q1NEM0OERCNkM0MzYwQ0VCOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3I5eHl0a2t0cEJlMVE1QnROUndQTFh6RGIxVXQ4YTludWVia3NmM1hZWGQvMC8z
RTU4NkY5OTg5NDkyNDVBN0JBODdENTRDNDhEQjZDNDM2MENFQjlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFVkNTOcqsQvqoz9eNoGzNr4D9DR5/jdj+vwSKoTKGDyEbdTB32yRhvH0MkRy
625HN2pAduRx8PnbKcSYg/3S5TE13WMxLBjuMYp9fzKKkBPBluwVyGuqMm8p4GH5
BxRxiTOYxEYvtYN++8J9U2OU1+UQ+NpcGFe2tYXLdZ3MjZm2rerV1eohE3y/vGzJ
SxVBiQ/fM979ejkvT4sHwfEPKI3I/9Xh9LoKHonMigc2BXC7UvQbL85gqX844n5S
6IDJS+ae2y6Lozu9j7WZkI78FnFhOBNZKfUoF3gxDZyD2AJ6mY44iakYkZGpiITd
TAGjaLsJmwWvnPU1RTacerN+2g==
-----END CERTIFICATE-----
Generated at Wed May 7 10:56:36 2025 by rpki-client