Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
File:                     54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft (raw, json)
Hash identifier:          48pdMFuUCiMO03DjCD9DBag+c4PFfBqnlBEPRrCbpNA=
Subject key identifier:   47:D5:32:C5:7E:F8:10:CC:F5:B5:68:22:77:A2:3E:A8:88:DD:42:3B
Authority key identifier: 54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A
Certificate issuer:       /CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
Certificate serial:       411D26F3C1267DA3566B8F7415080B8F32BEABD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
Manifest number:          0170
Signing time:             Fri 31 Jan 2025 16:35:47 +0000
Manifest this update:     Fri 31 Jan 2025 16:30:47 +0000
Manifest next update:     Sat 01 Feb 2025 16:48:47 +0000
Files and hashes:         1: 323830343a333932383a3a2f33322d313238203d3e20323636303135.roa (hash: cVdd8iheHo2+VF1/h/+bsnvVWWZ+pq004ZLroK7EFvA=)
                          2: 54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl (hash: KjmJPxYP633iV1pRbUwNNz7iM9n5azvkBpwPDZFGv8A=)
                          3: 3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa (hash: 7W9R7eUvhkBdu4XRDPO72CBqEgO4hFTf2BkYR3VJzt0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:26:f3:c1:26:7d:a3:56:6b:8f:74:15:08:0b:8f:32:be:ab:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
        Validity
            Not Before: Jan 31 16:30:47 2025 GMT
            Not After : Feb  1 16:48:47 2025 GMT
        Subject: CN=47D532C57EF810CCF5B5682277A23EA888DD423B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:2f:c7:3d:4d:ee:c4:a2:cd:a3:5e:53:55:
                    dd:f5:c7:9d:aa:a4:59:94:82:19:e7:4a:8e:7e:cf:
                    07:d0:85:f9:8b:b1:97:eb:5c:c3:2e:d2:6f:3f:3f:
                    d1:a6:5e:1d:e0:62:ad:62:7e:f6:06:e6:fb:4b:72:
                    54:c4:db:5e:26:8e:30:25:5e:81:da:e0:1c:10:12:
                    21:5a:d6:28:0b:8a:60:f5:1f:fd:a4:07:3f:b1:04:
                    fc:3e:1a:76:03:88:4b:72:cc:9b:f4:5c:1b:54:f4:
                    11:08:11:ae:62:0e:49:fe:c9:48:ee:b3:e9:60:bf:
                    dc:26:14:c5:26:0d:32:1b:47:30:c2:04:34:1a:46:
                    74:30:08:4d:38:4c:e5:c9:b6:b3:8d:a4:2c:f7:80:
                    d9:2b:88:ce:53:af:0e:cb:00:7a:9c:5f:61:a9:6a:
                    1c:9f:cb:b9:c8:af:54:bb:e5:b7:83:c9:15:6c:24:
                    6d:15:2f:87:fa:5d:42:98:fb:58:8a:6f:ac:4f:14:
                    af:70:9a:39:36:4c:42:ca:10:3c:ce:c1:c0:e2:3d:
                    4b:30:19:3c:81:c6:f6:d5:10:87:d7:80:41:33:40:
                    ed:6d:2f:49:a4:c2:51:cf:d6:01:cd:39:a2:2b:c9:
                    8d:f8:f5:53:5b:4e:29:81:84:f3:92:6f:5e:6d:b3:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D5:32:C5:7E:F8:10:CC:F5:B5:68:22:77:A2:3E:A8:88:DD:42:3B
            X509v3 Authority Key Identifier:
                keyid:54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:9f:f9:d1:75:2b:f7:b5:e3:c6:d0:88:25:11:93:8e:55:
         50:cb:d7:ab:85:42:cf:ca:08:b3:65:d8:64:35:97:80:6d:0c:
         be:15:17:b7:e3:c7:fc:fb:e6:ee:cd:cd:fa:f6:d6:43:d9:f3:
         04:9a:11:ab:fe:c7:18:34:63:ce:a1:1e:3f:43:4c:95:df:99:
         de:43:4b:c2:1c:f7:30:ca:02:27:d8:49:02:83:92:57:4d:6c:
         5e:b9:fd:83:4d:f0:84:00:5f:3d:ca:98:10:d4:e5:2e:61:68:
         7c:c1:29:6b:7c:9d:e6:6b:73:6a:c6:6a:34:ae:e8:d2:46:56:
         7c:65:16:5a:77:ff:5f:59:3c:bb:e8:70:e8:9c:1f:c1:6d:7c:
         eb:7a:91:87:a6:13:bb:f4:f8:a0:bc:db:6b:43:1f:6b:dc:ee:
         35:28:84:91:42:98:f6:49:44:7a:93:5d:5c:a2:bb:69:7d:65:
         a5:d1:ad:a6:8c:e0:5e:c6:c8:f6:30:fc:a0:b6:fc:0b:8e:04:
         b3:73:d1:cd:05:4e:b8:c0:3c:ef:f2:45:cb:f3:39:af:87:75:
         c4:da:25:81:28:e0:f4:ba:ad:88:a3:05:aa:04:6d:8a:4d:a7:
         c5:9e:62:a8:52:47:00:64:c6:b9:3f:5e:88:95:db:de:52:bf:
         91:2b:46:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQR0m88EmfaNWa490FQgLjzK+q9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ2NTQ4NTVBRjdBNDdGQTNFRTVFN0FGRDQyMkZGRDNE
QkJGRUM0QTAeFw0yNTAxMzExNjMwNDdaFw0yNTAyMDExNjQ4NDdaMDMxMTAvBgNV
BAMTKDQ3RDUzMkM1N0VGODEwQ0NGNUI1NjgyMjc3QTIzRUE4ODhERDQyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Yi/HPU3uxKLNo15TVd31x52q
pFmUghnnSo5+zwfQhfmLsZfrXMMu0m8/P9GmXh3gYq1ifvYG5vtLclTE214mjjAl
XoHa4BwQEiFa1igLimD1H/2kBz+xBPw+GnYDiEtyzJv0XBtU9BEIEa5iDkn+yUju
s+lgv9wmFMUmDTIbRzDCBDQaRnQwCE04TOXJtrONpCz3gNkriM5Trw7LAHqcX2Gp
ahyfy7nIr1S75beDyRVsJG0VL4f6XUKY+1iKb6xPFK9wmjk2TELKEDzOwcDiPUsw
GTyBxvbVEIfXgEEzQO1tL0mkwlHP1gHNOaIryY349VNbTimBhPOSb15ts6ktAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUR9UyxX74EMz1tWgid6I+qIjdQjswHwYDVR0j
BBgwFoAUVGVIVa96R/o+5eev1CL/09u/7EowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJy
ZU4vMC81NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NjU0ODU1QUY3QTQ3RkEz
RUU1RTdBRkQ0MjJGRkQzREJCRkVDNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJyZU4vMC81
NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjJmf+dF1K/e148bQiCURk45VUMvXq4VCz8oIs2XYZDWXgG0MvhUXt+PH/Pvm
7s3N+vbWQ9nzBJoRq/7HGDRjzqEeP0NMld+Z3kNLwhz3MMoCJ9hJAoOSV01sXrn9
g03whABfPcqYENTlLmFofMEpa3yd5mtzasZqNK7o0kZWfGUWWnf/X1k8u+hw6Jwf
wW1863qRh6YTu/T4oLzba0Mfa9zuNSiEkUKY9klEepNdXKK7aX1lpdGtpozgXsbI
9jD8oLb8C44Es3PRzQVOuMA87/JFy/M5r4d1xNolgSjg9LqtiKMFqgRtik2nxZ5i
qFJHAGTGuT9eiJXb3lK/kStGvw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:58 2025 by rpki-client