Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.mft
File:                     5D9682CFAC3878AC534AF7900583447A4423AF5E.mft (raw, json)
Hash identifier:          bDjg9PN7Qi4NShUtex6sf63+7L9oawQQCSaTysBDf50=
Subject key identifier:   52:0E:7D:C4:2C:25:FA:5A:0C:7D:90:D1:3B:0F:97:D5:10:75:62:B8
Authority key identifier: 5D:96:82:CF:AC:38:78:AC:53:4A:F7:90:05:83:44:7A:44:23:AF:5E
Certificate issuer:       /CN=5D9682CFAC3878AC534AF7900583447A4423AF5E
Certificate serial:       0A8C2060F9DC7F9F051228DF8869E3401B3816A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.mft
Manifest number:          9A
Signing time:             Fri 31 Jan 2025 00:37:03 +0000
Manifest this update:     Fri 31 Jan 2025 00:32:03 +0000
Manifest next update:     Sat 01 Feb 2025 03:59:03 +0000
Files and hashes:         1: 323830343a313037303a3a2f33322d3438203d3e203238323039.roa (hash: dtCcPG3/k6O365vu7XT+NizepZXwtWXxuoLt7cRCaEA=)
                          2: 3138392e3131332e302e302f32302d3234203d3e203238323039.roa (hash: AkPupdiDJSfKPsfy9qxiUdqrSHcm4Svlmd4pUUIi1vE=)
                          3: 3137392e3132372e302e302f31392d3234203d3e203238323039.roa (hash: 8HBUICuErXnTP31C7q/rZ0TcDxHv4Dn+a2U4usvIFjg=)
                          4: 5D9682CFAC3878AC534AF7900583447A4423AF5E.crl (hash: gLXe6gqm49JEKJ/SOMWp7HswGB+hzgefeOtzxxxfHnU=)
                          5: 3137372e37302e302e302f31392d3234203d3e203238323039.roa (hash: cgPdELlbtg1Jz8F7tZOxXNhH2K5xRCNxWvwnGpaFH7c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8c:20:60:f9:dc:7f:9f:05:12:28:df:88:69:e3:40:1b:38:16:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D9682CFAC3878AC534AF7900583447A4423AF5E
        Validity
            Not Before: Jan 31 00:32:03 2025 GMT
            Not After : Feb  1 03:59:03 2025 GMT
        Subject: CN=520E7DC42C25FA5A0C7D90D13B0F97D5107562B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:ca:c8:56:7d:42:c4:4f:3d:d3:72:59:90:
                    81:dd:e3:91:ba:a1:59:8c:57:5d:fb:db:13:36:98:
                    27:32:fb:d0:bd:d6:e2:68:2c:33:62:f8:ea:80:6f:
                    8c:74:cd:04:ed:03:98:3a:21:b9:36:76:85:be:33:
                    db:da:f3:67:68:07:98:96:24:f9:b7:2e:8d:a7:b5:
                    d5:d1:17:be:be:c7:7c:0c:b3:4e:36:3b:ee:60:8d:
                    e7:54:0e:f6:29:92:26:f3:ce:2c:98:ce:cc:0c:6d:
                    fb:eb:66:1e:a5:da:5a:8d:b6:8f:be:92:1b:14:b0:
                    69:90:36:ac:a7:10:21:0a:2e:56:83:06:1a:59:77:
                    39:cf:be:c5:6b:ca:97:58:72:6f:a3:14:10:49:6a:
                    49:7d:e9:c3:d4:6c:ba:68:99:1b:80:a6:5f:67:8b:
                    95:07:80:5b:35:44:2e:e6:cd:45:7e:6c:24:55:1b:
                    01:bb:2a:3f:ee:4f:1c:46:f8:90:10:b9:5e:a1:84:
                    d5:eb:a0:6c:7f:6c:dd:31:3e:1b:6a:0c:0c:6c:11:
                    55:61:34:68:c1:af:59:ad:52:88:06:15:fd:3c:dc:
                    43:c0:7d:99:82:89:53:ac:f0:44:59:75:25:a0:15:
                    db:28:3d:3a:bd:16:86:35:63:e4:a9:07:87:8a:2a:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0E:7D:C4:2C:25:FA:5A:0C:7D:90:D1:3B:0F:97:D5:10:75:62:B8
            X509v3 Authority Key Identifier:
                keyid:5D:96:82:CF:AC:38:78:AC:53:4A:F7:90:05:83:44:7A:44:23:AF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:50:8b:4f:ba:24:e5:f1:09:86:9e:61:f7:bd:e1:0b:1f:00:
         e5:ab:cd:fe:7d:4f:3b:94:b9:6d:3f:ec:9e:91:dd:2e:12:fc:
         22:30:a9:26:3b:0f:dc:79:58:f1:ba:bc:82:3a:c3:11:ed:64:
         97:ca:1d:78:6d:89:6d:d3:6e:11:40:82:88:d6:27:e6:ed:a1:
         3d:2c:4e:22:e5:a2:91:eb:97:16:bd:95:64:7a:eb:86:38:04:
         cb:29:3e:43:8d:f9:04:c3:2f:cd:1d:a6:bf:26:50:fc:65:1a:
         53:3a:44:dd:a5:5f:e2:2b:77:4b:21:9c:72:76:07:da:ef:89:
         f0:d8:e7:7c:02:6a:56:c1:1b:3c:23:e7:d8:ff:6f:c0:f2:b1:
         3f:89:4f:c0:79:57:6a:51:08:e7:24:9b:7f:f6:2e:fe:1a:19:
         03:1a:1c:14:6c:1a:e4:33:e4:72:32:b1:ba:5c:12:71:5c:c5:
         72:01:47:6c:b6:c9:81:3a:f6:cd:64:80:49:d5:55:44:75:98:
         d3:e1:e8:4f:ec:6f:6c:b6:66:da:b6:54:28:ad:7d:dd:c8:e4:
         c7:ce:ff:60:b2:4a:a5:d6:59:69:64:d3:d0:45:fd:24:38:cc:
         7e:63:30:6e:77:98:d2:1b:88:c0:75:54:02:33:eb:20:f5:8c:
         cf:63:3a:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCowgYPncf58FEijfiGnjQBs4FqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ5NjgyQ0ZBQzM4NzhBQzUzNEFGNzkwMDU4MzQ0N0E0
NDIzQUY1RTAeFw0yNTAxMzEwMDMyMDNaFw0yNTAyMDEwMzU5MDNaMDMxMTAvBgNV
BAMTKDUyMEU3REM0MkMyNUZBNUEwQzdEOTBEMTNCMEY5N0Q1MTA3NTYyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmecrIVn1CxE8903JZkIHd45G6
oVmMV1372xM2mCcy+9C91uJoLDNi+OqAb4x0zQTtA5g6Ibk2doW+M9va82doB5iW
JPm3Lo2ntdXRF76+x3wMs042O+5gjedUDvYpkibzziyYzswMbfvrZh6l2lqNto++
khsUsGmQNqynECEKLlaDBhpZdznPvsVrypdYcm+jFBBJakl96cPUbLpomRuApl9n
i5UHgFs1RC7mzUV+bCRVGwG7Kj/uTxxG+JAQuV6hhNXroGx/bN0xPhtqDAxsEVVh
NGjBr1mtUogGFf083EPAfZmCiVOs8ERZdSWgFdsoPTq9FoY1Y+SpB4eKKp/TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUg59xCwl+loMfZDROw+X1RB1YrgwHwYDVR0j
BBgwFoAUXZaCz6w4eKxTSveQBYNEekQjr14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlBBRlh5RGJjaEUzU3hGZ1dEaHluWnJERWl2bjRQOEFKNWRXSGY1WVJV
dkovMC81RDk2ODJDRkFDMzg3OEFDNTM0QUY3OTAwNTgzNDQ3QTQ0MjNBRjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEOTY4MkNGQUMzODc4QUM1
MzRBRjc5MDA1ODM0NDdBNDQyM0FGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NlBBRlh5RGJjaEUzU3hGZ1dEaHluWnJERWl2bjRQOEFKNWRXSGY1WVJVdkovMC81
RDk2ODJDRkFDMzg3OEFDNTM0QUY3OTAwNTgzNDQ3QTQ0MjNBRjVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARFCLT7ok5fEJhp5h973hCx8A5avN/n1PO5S5bT/snpHdLhL8IjCpJjsP3HlY
8bq8gjrDEe1kl8odeG2JbdNuEUCCiNYn5u2hPSxOIuWikeuXFr2VZHrrhjgEyyk+
Q435BMMvzR2mvyZQ/GUaUzpE3aVf4it3SyGccnYH2u+J8NjnfAJqVsEbPCPn2P9v
wPKxP4lPwHlXalEI5ySbf/Yu/hoZAxocFGwa5DPkcjKxulwScVzFcgFHbLbJgTr2
zWSASdVVRHWY0+HoT+xvbLZm2rZUKK193cjkx87/YLJKpdZZaWTT0EX9JDjMfmMw
bneY0huIwHVUAjPrIPWMz2M62A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:36:56 2025 by rpki-client