Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft
File:                     154E883FCB52E91706C17788E2199491DC6E45F7.mft (raw, json)
Hash identifier:          CeVbz8ThXiBXxXe6fhHIPE0yG8JLXSOOi4Zz+co9W5E=
Subject key identifier:   A6:9F:FC:20:EE:F8:A4:E3:16:AC:DF:B3:FC:4E:9B:10:FD:6B:A6:92
Authority key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7
Certificate issuer:       /CN=154E883FCB52E91706C17788E2199491DC6E45F7
Certificate serial:       4EC2838EA5B2A34144D24C5D79E830C2C4049A85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft
Manifest number:          3A
Signing time:             Fri 31 Jan 2025 04:30:11 +0000
Manifest this update:     Fri 31 Jan 2025 04:25:11 +0000
Manifest next update:     Sat 01 Feb 2025 05:10:11 +0000
Files and hashes:         1: 323830343a323264633a3a2f33322d313238203d3e20323634313237.roa (hash: iYDnpcMHkaGzNO7gIY/DrPZv1ulWPd1Nlh+aVYROuAo=)
                          2: 154E883FCB52E91706C17788E2199491DC6E45F7.crl (hash: n+Q81JBiFwuO/PqlLd8Q5VlLmk7yo3elVMJ+hhiOwHs=)
                          3: 3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa (hash: pNbhPDxda7jRgPzU04Q9/bS8qQcdhfwJ71v1pPX72ss=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c2:83:8e:a5:b2:a3:41:44:d2:4c:5d:79:e8:30:c2:c4:04:9a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154E883FCB52E91706C17788E2199491DC6E45F7
        Validity
            Not Before: Jan 31 04:25:11 2025 GMT
            Not After : Feb  1 05:10:11 2025 GMT
        Subject: CN=A69FFC20EEF8A4E316ACDFB3FC4E9B10FD6BA692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:3e:32:bd:87:05:ca:47:3a:b1:55:89:c4:
                    cc:99:61:73:d3:9f:e0:11:2c:65:00:50:1d:1c:b1:
                    c9:76:a0:d4:82:c1:20:de:31:4f:28:45:0e:28:24:
                    86:f8:64:16:47:0b:f2:40:11:f7:13:da:1a:84:17:
                    28:5e:b1:d2:58:65:a0:65:3b:a4:da:39:d1:10:b1:
                    1c:7e:ae:4e:9a:f9:9f:19:1b:34:b5:24:06:24:30:
                    a3:90:2f:d6:25:e6:4d:4b:74:aa:7e:f4:43:94:97:
                    7c:c2:76:08:33:fd:b5:d4:a8:6d:70:ab:1a:5d:65:
                    d3:2a:58:8a:93:8d:b3:4d:f2:26:43:78:f6:dd:dd:
                    85:9c:be:4e:01:b4:f7:b2:bd:b6:00:1d:38:66:b0:
                    95:7e:49:1d:23:e8:3e:03:c4:2c:70:75:e8:4d:6b:
                    77:41:b9:49:0a:b7:41:bd:00:12:29:ed:2c:a4:44:
                    0b:cc:89:e7:66:81:1b:1c:cc:74:c8:cc:8b:38:a1:
                    fc:c2:3d:86:47:e0:88:f5:8d:df:5e:eb:b2:60:d4:
                    80:c9:8a:7b:34:b9:16:49:e5:1e:9d:48:50:39:c7:
                    17:dc:b5:26:f8:fd:eb:d0:37:f3:1d:cc:6f:5f:2e:
                    d8:d2:22:85:1f:8a:d7:9d:4b:15:4d:9f:29:3b:d2:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:FC:20:EE:F8:A4:E3:16:AC:DF:B3:FC:4E:9B:10:FD:6B:A6:92
            X509v3 Authority Key Identifier:
                keyid:15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:68:db:6c:b2:63:25:c5:8c:1b:2d:e7:94:e4:0c:b0:2d:dc:
         f8:01:50:c8:b6:4a:b5:fc:f8:8a:10:3f:2d:d0:4d:c2:41:87:
         e1:78:27:6b:23:f3:c7:77:5d:43:63:24:f5:21:83:b6:74:0d:
         5f:0b:a2:9b:2d:a6:d6:06:7d:f9:03:15:21:0e:a5:d6:ef:c3:
         25:e2:1c:40:78:87:45:68:22:ca:56:e8:46:ef:a9:ad:58:47:
         f5:0a:41:b4:26:65:2b:50:34:55:dd:db:4f:8b:47:8c:9c:71:
         5a:63:71:bf:c7:9c:48:40:b6:ab:0a:04:4a:1f:d6:ba:61:45:
         d5:b2:1a:00:3a:ce:d6:97:ba:14:26:6f:13:b1:c6:9c:23:e4:
         a2:24:bc:57:7d:9a:8a:fd:b8:df:c8:11:36:39:f5:27:c7:1f:
         9c:46:99:f1:c8:d0:b0:28:59:18:62:16:64:eb:6c:0e:64:45:
         e7:71:07:05:0f:15:5e:5a:c9:c7:d1:cc:cb:25:3b:57:06:58:
         f0:fe:34:5c:16:4e:c2:08:35:84:e1:60:6f:52:ef:35:9d:2a:
         7e:ea:84:2b:8b:f9:aa:6a:4c:80:ca:bb:3f:3e:da:f1:0c:b1:
         90:ba:8d:c6:08:f2:19:87:9f:63:6b:25:10:46:4e:2d:32:8b:
         d4:d4:b0:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTsKDjqWyo0FE0kxdeegwwsQEmoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RTg4M0ZDQjUyRTkxNzA2QzE3Nzg4RTIxOTk0OTFE
QzZFNDVGNzAeFw0yNTAxMzEwNDI1MTFaFw0yNTAyMDEwNTEwMTFaMDMxMTAvBgNV
BAMTKEE2OUZGQzIwRUVGOEE0RTMxNkFDREZCM0ZDNEU5QjEwRkQ2QkE2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIj4yvYcFykc6sVWJxMyZYXPT
n+ARLGUAUB0cscl2oNSCwSDeMU8oRQ4oJIb4ZBZHC/JAEfcT2hqEFyhesdJYZaBl
O6TaOdEQsRx+rk6a+Z8ZGzS1JAYkMKOQL9Yl5k1LdKp+9EOUl3zCdggz/bXUqG1w
qxpdZdMqWIqTjbNN8iZDePbd3YWcvk4BtPeyvbYAHThmsJV+SR0j6D4DxCxwdehN
a3dBuUkKt0G9ABIp7SykRAvMiedmgRsczHTIzIs4ofzCPYZH4Ij1jd9e67Jg1IDJ
ins0uRZJ5R6dSFA5xxfctSb4/evQN/MdzG9fLtjSIoUfitedSxVNnyk70ggXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpp/8IO74pOMWrN+z/E6bEP1rppIwHwYDVR0j
BBgwFoAUFU6IP8tS6RcGwXeI4hmUkdxuRfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3dLSkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcx
VTYvMC8xNTRFODgzRkNCNTJFOTE3MDZDMTc3ODhFMjE5OTQ5MURDNkU0NUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1NEU4ODNGQ0I1MkU5MTcw
NkMxNzc4OEUyMTk5NDkxREM2RTQ1RjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3dLSkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcxVTYvMC8x
NTRFODgzRkNCNTJFOTE3MDZDMTc3ODhFMjE5OTQ5MURDNkU0NUY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIWjbbLJjJcWMGy3nlOQMsC3c+AFQyLZKtfz4ihA/LdBNwkGH4XgnayPzx3dd
Q2Mk9SGDtnQNXwuimy2m1gZ9+QMVIQ6l1u/DJeIcQHiHRWgiylboRu+prVhH9QpB
tCZlK1A0Vd3bT4tHjJxxWmNxv8ecSEC2qwoESh/WumFF1bIaADrO1pe6FCZvE7HG
nCPkoiS8V32aiv2438gRNjn1J8cfnEaZ8cjQsChZGGIWZOtsDmRF53EHBQ8VXlrJ
x9HMyyU7VwZY8P40XBZOwgg1hOFgb1LvNZ0qfuqEK4v5qmpMgMq7Pz7a8QyxkLqN
xgjyGYefY2slEEZOLTKL1NSwbg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:24:47 2025 by rpki-client