Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
File:                     3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json)
Hash identifier:          oOvrieK08IKInD/zJN4Tg+G37p5f9KqGEyjrQDrFbVA=
Subject key identifier:   59:FD:BA:DE:42:7B:7B:35:CF:A9:98:8F:E7:8F:42:C1:8A:42:9E:65
Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
Certificate issuer:       /CN=3895E2089A93A58E1062DE9612B321CA505C51FA
Certificate serial:       28C4B5AC459B946B3E82D7F1FA80A198EB8752A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
Manifest number:          01C6
Signing time:             Fri 31 Jan 2025 02:52:00 +0000
Manifest this update:     Fri 31 Jan 2025 02:47:00 +0000
Manifest next update:     Sat 01 Feb 2025 02:52:00 +0000
Files and hashes:         1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: FPhpP3+wKbmwYM6dQWRq1VVRAy8CcsJFWZjw/E9RE00=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c4:b5:ac:45:9b:94:6b:3e:82:d7:f1:fa:80:a1:98:eb:87:52:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA
        Validity
            Not Before: Jan 31 02:47:00 2025 GMT
            Not After : Feb  7 02:52:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:48:4c:7c:c6:d9:54:14:ce:d7:1b:82:cf:
                    2a:0d:b1:fc:f1:13:68:05:f2:17:0f:6e:d6:cc:2d:
                    48:53:aa:18:bd:6e:70:5e:7e:5a:53:fc:f0:4a:bf:
                    12:4d:d8:a4:dc:0b:e3:a4:b5:02:5a:00:a6:56:58:
                    86:e8:98:55:c0:9a:f6:d4:95:6a:1e:49:9a:bf:10:
                    ab:42:86:cb:96:25:e8:61:13:6a:5d:32:18:c3:b5:
                    29:d7:6e:62:e0:6e:78:b4:36:92:ff:20:81:db:4f:
                    ad:99:6d:dd:44:46:55:87:ec:0e:ff:55:09:54:43:
                    dd:01:e3:59:4e:2c:90:bc:73:5b:15:7d:d5:72:14:
                    61:58:e5:b6:c9:9c:0c:c2:1c:50:94:71:7e:61:91:
                    70:fa:ca:cd:75:91:5c:c1:42:2c:28:5e:72:ce:0e:
                    0d:fa:94:d9:5b:0f:87:f2:49:e6:be:9b:61:f6:a4:
                    dc:2f:8c:87:96:5b:42:24:37:e9:6e:a6:45:c5:91:
                    1e:e4:f0:8a:17:8f:eb:0e:38:9a:32:3a:2d:af:e4:
                    33:b3:f3:bd:3e:32:00:55:a3:25:06:e3:cb:d2:91:
                    8e:59:ca:16:4c:a3:28:12:89:e9:a8:ab:09:ed:97:
                    53:2d:da:17:ed:89:28:ac:69:e7:18:18:c0:2b:9a:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FD:BA:DE:42:7B:7B:35:CF:A9:98:8F:E7:8F:42:C1:8A:42:9E:65
            X509v3 Authority Key Identifier:
                keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:92:a9:05:d6:a2:a8:3c:52:92:83:3a:09:06:32:c0:94:3f:
         e1:98:12:b9:4a:20:b7:85:de:b1:f1:54:54:85:3f:49:7a:ed:
         b1:29:5c:67:f2:22:c8:a7:41:36:ee:f6:be:ea:48:a2:27:67:
         76:6f:35:02:b4:58:70:9c:c7:71:52:86:5e:fd:40:a6:c9:70:
         6a:d8:95:08:2f:a1:1a:cd:48:6f:6b:49:1d:6b:db:40:41:7a:
         ff:3b:55:6e:73:65:9d:92:59:38:48:f3:5d:ca:e4:6a:05:2f:
         c5:dd:ed:96:b0:1b:b3:49:42:5d:7f:12:b7:51:96:cd:97:ec:
         ae:bb:32:b7:59:94:11:58:25:53:23:62:23:16:55:c1:9b:1c:
         44:5e:06:db:25:c4:6a:93:c4:44:49:44:2d:f4:ec:7a:4f:3a:
         14:bb:68:09:a2:12:dc:a2:2f:7f:c1:78:06:c2:69:3b:c8:88:
         bb:ef:14:7e:9b:65:08:77:39:1e:de:05:6f:27:70:78:86:7b:
         9a:2b:71:f2:91:0a:c8:02:b1:24:22:ce:10:a1:b5:76:d3:2f:
         8c:77:80:b3:e1:0f:e0:99:18:ef:4e:46:14:e6:87:2c:7d:d2:
         a6:66:9c:17:6f:82:01:dd:4b:44:8e:f5:49:86:cf:30:07:25:
         93:2d:00:72
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUKMS1rEWblGs+gtfx+oChmOuHUqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg5NUUyMDg5QTkzQTU4RTEwNjJERTk2MTJCMzIxQ0E1
MDVDNTFGQTAeFw0yNTAxMzEwMjQ3MDBaFw0yNTAyMDcwMjUyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI3RjQ4NEM3Q0M2RDk1NDE0
Q0VENzFCODJDRjJBMERCMUZDRjExMzY4MDVGMjE3MEY2RUQ2Q0MyRDQ4NTNBQTE4
QkQ2RTcwNUU3RTVBNTNGQ0YwNEFCRjEyNEREOEE0REMwQkUzQTRCNTAyNUEwMEE2
NTY1ODg2RTg5ODU1QzA5QUY2RDQ5NTZBMUU0OTlBQkYxMEFCNDI4NkNCOTYyNUU4
NjExMzZBNUQzMjE4QzNCNTI5RDc2RTYyRTA2RTc4QjQzNjkyRkYyMDgxREI0RkFE
OTk2RERENDQ0NjU1ODdFQzBFRkY1NTA5NTQ0M0REMDFFMzU5NEUyQzkwQkM3MzVC
MTU3REQ1NzIxNDYxNThFNUI2Qzk5QzBDQzIxQzUwOTQ3MTdFNjE5MTcwRkFDQUNE
NzU5MTVDQzE0MjJDMjg1RTcyQ0UwRTBERkE5NEQ5NUIwRjg3RjI0OUU2QkU5QjYx
RjZBNERDMkY4Qzg3OTY1QjQyMjQzN0U5NkVBNjQ1QzU5MTFFRTRGMDhBMTc4RkVC
MEUzODlBMzIzQTJEQUZFNDMzQjNGM0JEM0UzMjAwNTVBMzI1MDZFM0NCRDI5MThF
NTlDQTE2NENBMzI4MTI4OUU5QThBQjA5RUQ5NzUzMkREQTE3RUQ4OTI4QUM2OUU3
MTgxOEMwMkI5QTA1QkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq39ITHzG2VQUztcbgs8qDbH88RNoBfIXD27WzC1IU6oYvW5wXn5a
U/zwSr8STdik3AvjpLUCWgCmVliG6JhVwJr21JVqHkmavxCrQobLliXoYRNqXTIY
w7Up125i4G54tDaS/yCB20+tmW3dREZVh+wO/1UJVEPdAeNZTiyQvHNbFX3VchRh
WOW2yZwMwhxQlHF+YZFw+srNdZFcwUIsKF5yzg4N+pTZWw+H8knmvpth9qTcL4yH
lltCJDfpbqZFxZEe5PCKF4/rDjiaMjotr+Qzs/O9PjIAVaMlBuPL0pGOWcoWTKMo
EonpqKsJ7ZdTLdoX7YkorGnnGBjAK5oFuwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FFn9ut5Ce3s1z6mYj+ePQsGKQp5lMB8GA1UdIwQYMBaAFDiV4giak6WOEGLelhKz
IcpQXFH6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lr
U1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5NUUyMDg5QTkzQTU4
RTEwNjJERTk2MTJCMzIxQ0E1MDVDNTFGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zODk1RTIwODlBOTNBNThFMTA2MkRFOTYxMkIzMjFDQTUwNUM1
MUZBLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lrU1RGVGhZ
QXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5NUUyMDg5QTkzQTU4RTEwNjJE
RTk2MTJCMzIxQ0E1MDVDNTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHiSqQXWoqg8UpKDOgkGMsCU
P+GYErlKILeF3rHxVFSFP0l67bEpXGfyIsinQTbu9r7qSKInZ3ZvNQK0WHCcx3FS
hl79QKbJcGrYlQgvoRrNSG9rSR1r20BBev87VW5zZZ2SWThI813K5GoFL8Xd7Zaw
G7NJQl1/ErdRls2X7K67MrdZlBFYJVMjYiMWVcGbHEReBtslxGqTxERJRC307HpP
OhS7aAmiEtyiL3/BeAbCaTvIiLvvFH6bZQh3OR7eBW8ncHiGe5orcfKRCsgCsSQi
zhChtXbTL4x3gLPhD+CZGO9ORhTmhyx90qZmnBdvggHdS0SO9UmGzzAHJZMtAHI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:25 2025 by rpki-client