Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
File:                     4E4DCA5E9F4558BA38892642829692F839F2A231.mft (raw, json)
Hash identifier:          iOX8mbUh8qJQDzx709/eMMaHKR081B1Mf0K650oveec=
Subject key identifier:   DC:8B:26:45:05:B0:53:F5:3E:E3:C0:D5:BC:19:F9:1E:64:6D:C8:DB
Authority key identifier: 4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31
Certificate issuer:       /CN=4E4DCA5E9F4558BA38892642829692F839F2A231
Certificate serial:       785AC66FADCA5B4D73B19E3D73D56A0D88BA46F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 07:56:36 +0000
Manifest this update:     Fri 31 Jan 2025 07:51:36 +0000
Manifest next update:     Sat 01 Feb 2025 09:17:36 +0000
Files and hashes:         1: 4E4DCA5E9F4558BA38892642829692F839F2A231.crl (hash: NcyxaYVLawx3qpKrvd+GnQw//WdOLWSHUK0Eb1ngZzE=)
                          2: 34352e3137362e32342e302f32322d3234203d3e20323638393339.roa (hash: Le0VVsnbSe4c2p1uUzoDtRrKXLrj74DSNZA3ayHtHV4=)
                          3: 323830343a356365633a3a2f33322d3438203d3e20323638393339.roa (hash: OH5djnc/lO+Ci6qyMj8cCamYX0OHo/+tF5V0BWjFbdA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5a:c6:6f:ad:ca:5b:4d:73:b1:9e:3d:73:d5:6a:0d:88:ba:46:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4DCA5E9F4558BA38892642829692F839F2A231
        Validity
            Not Before: Jan 31 07:51:36 2025 GMT
            Not After : Feb  1 09:17:36 2025 GMT
        Subject: CN=DC8B264505B053F53EE3C0D5BC19F91E646DC8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:de:78:65:93:be:37:e5:6d:fe:84:16:d1:
                    83:3e:51:b1:39:80:68:db:fa:73:cc:31:9c:e8:7c:
                    2c:60:bd:75:74:65:c1:3c:d9:a5:62:85:60:fc:5c:
                    4e:60:11:bc:af:2e:97:02:6a:63:27:6e:7c:29:c7:
                    3b:de:54:17:ea:9e:8b:eb:27:7f:4a:e4:98:4d:1c:
                    bc:ea:4f:bc:1b:70:99:85:29:09:e1:ab:3a:26:6e:
                    02:95:ba:a1:fd:01:ba:18:27:21:52:e6:4d:ff:2f:
                    88:01:f1:29:0d:6c:96:2b:33:79:f5:23:9c:bd:22:
                    e4:1d:93:79:3d:36:4c:20:3b:f3:1b:df:17:a4:71:
                    28:54:bc:dc:6a:5d:00:81:7b:7f:b5:3d:ac:7b:3b:
                    7c:a1:08:5f:d3:7c:1f:6c:44:ad:14:4d:93:0f:1d:
                    cf:8a:45:b2:ef:3e:7a:79:8c:12:92:2d:4d:a3:8c:
                    bf:10:46:1d:c0:9c:a4:be:79:23:77:e5:f9:39:5b:
                    02:b2:00:e0:75:e1:49:cb:8c:af:df:a8:65:1c:c8:
                    96:8e:36:8f:4f:ec:64:ec:63:cc:4e:55:2d:95:b6:
                    ea:d0:87:c9:9d:52:6b:f7:8b:96:98:41:ba:ca:58:
                    c6:27:6e:9e:11:ad:9d:97:f0:76:ab:ab:0f:40:ca:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8B:26:45:05:B0:53:F5:3E:E3:C0:D5:BC:19:F9:1E:64:6D:C8:DB
            X509v3 Authority Key Identifier:
                keyid:4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:48:76:71:0f:81:f1:5c:8f:2b:9a:b9:c2:13:eb:d3:31:95:
         00:b1:84:e1:cc:75:fb:7d:af:5b:13:76:dd:cd:4a:83:0d:57:
         94:e3:35:08:2e:17:f6:7c:ca:97:95:6a:d9:94:b1:1a:0c:b9:
         16:82:c7:aa:68:68:7b:f4:45:e3:fc:e4:bc:89:1a:5a:c1:bc:
         2e:6d:fc:7d:1e:3b:83:44:71:fd:8d:23:6d:4b:c7:62:5e:79:
         4f:e3:c7:fe:74:eb:29:9c:1f:83:d8:cb:ea:3f:9f:1d:3e:b1:
         17:4d:77:50:fd:e5:5f:a8:71:9a:fb:e8:47:b8:24:97:f5:5a:
         91:39:ab:76:38:ec:6a:74:a1:81:a8:93:6b:c8:81:69:84:28:
         86:15:de:49:07:8b:2d:c4:10:f2:b7:5c:b2:74:8d:0d:a5:33:
         1a:e8:a4:4f:cc:96:bb:cf:99:92:1c:51:7a:2c:1e:d3:8a:ab:
         11:e4:1d:38:08:5b:f1:a1:0b:b5:a8:47:92:92:f0:d2:7e:2c:
         b7:c5:77:10:36:11:e0:74:76:b3:b6:f5:1e:b1:8d:8e:a7:f3:
         4b:21:4e:64:b5:6d:fb:58:33:74:cc:c6:73:8d:8a:33:2d:9a:
         b8:02:d0:a4:b9:33:5a:03:3d:65:6b:86:19:f7:81:3e:7c:9b:
         05:ec:f0:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeFrGb63KW01zsZ49c9VqDYi6RvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU0RENBNUU5RjQ1NThCQTM4ODkyNjQyODI5NjkyRjgz
OUYyQTIzMTAeFw0yNTAxMzEwNzUxMzZaFw0yNTAyMDEwOTE3MzZaMDMxMTAvBgNV
BAMTKERDOEIyNjQ1MDVCMDUzRjUzRUUzQzBENUJDMTlGOTFFNjQ2REM4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV0954ZZO+N+Vt/oQW0YM+UbE5
gGjb+nPMMZzofCxgvXV0ZcE82aVihWD8XE5gEbyvLpcCamMnbnwpxzveVBfqnovr
J39K5JhNHLzqT7wbcJmFKQnhqzombgKVuqH9AboYJyFS5k3/L4gB8SkNbJYrM3n1
I5y9IuQdk3k9NkwgO/Mb3xekcShUvNxqXQCBe3+1Pax7O3yhCF/TfB9sRK0UTZMP
Hc+KRbLvPnp5jBKSLU2jjL8QRh3AnKS+eSN35fk5WwKyAOB14UnLjK/fqGUcyJaO
No9P7GTsY8xOVS2VturQh8mdUmv3i5aYQbrKWMYnbp4RrZ2X8Harqw9Ayr/fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3IsmRQWwU/U+48DVvBn5HmRtyNswHwYDVR0j
BBgwFoAUTk3KXp9FWLo4iSZCgpaS+DnyojEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BM
N3MvMS80RTREQ0E1RTlGNDU1OEJBMzg4OTI2NDI4Mjk2OTJGODM5RjJBMjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFNERDQTVFOUY0NTU4QkEz
ODg5MjY0MjgyOTY5MkY4MzlGMkEyMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BMN3MvMS80
RTREQ0E1RTlGNDU1OEJBMzg4OTI2NDI4Mjk2OTJGODM5RjJBMjMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE0h2cQ+B8VyPK5q5whPr0zGVALGE4cx1+32vWxN23c1Kgw1XlOM1CC4X9nzK
l5Vq2ZSxGgy5FoLHqmhoe/RF4/zkvIkaWsG8Lm38fR47g0Rx/Y0jbUvHYl55T+PH
/nTrKZwfg9jL6j+fHT6xF013UP3lX6hxmvvoR7gkl/VakTmrdjjsanShgaiTa8iB
aYQohhXeSQeLLcQQ8rdcsnSNDaUzGuikT8yWu8+ZkhxReiwe04qrEeQdOAhb8aEL
tahHkpLw0n4st8V3EDYR4HR2s7b1HrGNjqfzSyFOZLVt+1gzdMzGc42KMy2auALQ
pLkzWgM9ZWuGGfeBPnybBezwqw==
-----END CERTIFICATE-----
Generated at Sat May 3 19:49:30 2025 by rpki-client