Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
File:                     3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft (raw, json)
Hash identifier:          f5KAQWLdA2KWkYAm6LRRUZocbvbY+cZIR17Ehtx/R9I=
Subject key identifier:   43:E0:00:C7:0E:3D:98:AB:68:71:36:CD:B6:E5:6F:47:F2:27:A2:89
Authority key identifier: 3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
Certificate issuer:       /CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Certificate serial:       27195801D699391447179BC60FA0D151CD10D3A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
Manifest number:          01C9
Signing time:             Fri 31 Jan 2025 03:50:00 +0000
Manifest this update:     Fri 31 Jan 2025 03:45:00 +0000
Manifest next update:     Sat 01 Feb 2025 03:50:00 +0000
Files and hashes:         1: 3BCE948E59955EF881BD1ECD2DE385FE7959F195.crl (hash: qqd7M7uxyWgqWOtrTRjEYagE2jZbkC1eDKUE2TYB35A=)
                          2: AS28343.roa (hash: wy9o0Bd1C1hW08tAnq+UA9d0SE/97YVpQp5+JuKyetk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:19:58:01:d6:99:39:14:47:17:9b:c6:0f:a0:d1:51:cd:10:d3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
        Validity
            Not Before: Jan 31 03:45:00 2025 GMT
            Not After : Feb  1 03:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:f5:b8:cb:b6:2f:8a:65:9f:04:82:29:e0:
                    f7:a3:86:2a:4a:df:18:21:90:8b:ee:38:f2:31:a4:
                    7b:56:2c:37:23:e8:a8:27:58:8b:76:96:c6:eb:70:
                    10:8f:c9:45:04:6a:9d:07:0a:8e:34:6b:22:51:ac:
                    23:f1:8b:d2:42:20:13:90:b2:cc:05:38:0b:82:2f:
                    79:b9:3b:5c:08:40:c1:cc:26:41:2d:1c:6e:8c:6f:
                    89:c0:38:93:a4:53:0d:2c:94:b8:f0:6e:13:d3:51:
                    37:7b:29:26:c1:c4:bf:41:bd:e2:2e:f7:04:82:96:
                    00:ff:ee:1d:08:a0:5c:3f:03:46:3b:08:d9:06:f6:
                    2e:b1:ec:07:3d:14:de:f1:92:69:3a:30:84:ff:16:
                    57:d9:38:86:b9:db:75:fd:a9:b1:1e:94:bc:09:9c:
                    af:8c:72:b7:d0:4b:16:6e:ef:3a:bd:fa:6f:ab:92:
                    4e:f0:a1:72:42:00:73:fd:f1:54:7c:df:bc:44:c3:
                    6f:7c:94:d9:5c:5e:74:44:b7:dc:72:c6:44:06:14:
                    92:b7:8f:ed:fe:84:86:56:a4:a2:87:05:5e:aa:3b:
                    70:aa:28:90:e2:08:f4:69:cb:f5:f2:3d:b0:0f:2b:
                    cb:b1:50:12:a8:35:ff:65:ca:5e:24:de:08:7f:59:
                    91:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E0:00:C7:0E:3D:98:AB:68:71:36:CD:B6:E5:6F:47:F2:27:A2:89
            X509v3 Authority Key Identifier:
                keyid:3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:53:54:c0:b9:07:9a:53:67:4b:9d:1c:71:26:87:dc:0c:
         d7:34:f9:9e:3c:52:04:8c:bd:1e:48:ba:f4:64:92:0e:92:a9:
         83:b1:3a:a2:6a:41:89:a2:63:13:fc:8a:03:dd:1c:2d:2d:17:
         e7:64:71:2e:0a:a6:54:aa:82:f8:c4:d2:cd:0c:05:1a:62:3a:
         4b:5c:b2:a7:32:5e:05:5d:5f:0c:47:ad:11:18:47:5a:61:7f:
         06:05:67:ba:12:77:5a:77:ed:b3:79:93:e0:65:55:ff:16:a1:
         e8:9b:56:51:45:69:bd:82:35:4f:47:84:8b:01:72:1f:1e:53:
         2d:a5:44:52:bf:a3:72:33:46:20:a5:a0:92:2d:7e:f8:bb:49:
         f3:68:70:51:8d:e8:f0:4e:63:4e:41:fc:2d:58:ad:7f:82:25:
         36:0e:96:e0:91:72:6c:43:7b:53:ed:fe:49:f6:9d:ae:ca:c3:
         2a:44:85:b4:5a:dd:b4:31:e6:48:b9:e1:05:d6:00:ad:3b:91:
         92:76:ac:59:70:34:fc:53:5f:30:02:5d:e5:f5:d8:f8:71:59:
         3d:a0:63:c4:f0:6c:05:90:ae:77:5a:b5:05:7d:ec:ea:92:5f:
         e3:8d:0e:42:0f:47:71:d3:a9:a0:44:f4:49:0e:30:03:86:d4:
         71:74:4f:08
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUJxlYAdaZORRHF5vGD6DRUc0Q06MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDRTk0OEU1OTk1NUVGODgxQkQxRUNEMkRFMzg1RkU3
OTU5RjE5NTAeFw0yNTAxMzEwMzQ1MDBaFw0yNTAyMDEwMzUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY1QUY1QjhDQkI2MkY4QTY1
OUYwNDgyMjlFMEY3QTM4NjJBNEFERjE4MjE5MDhCRUUzOEYyMzFBNDdCNTYyQzM3
MjNFOEE4Mjc1ODhCNzY5NkM2RUI3MDEwOEZDOTQ1MDQ2QTlEMDcwQThFMzQ2QjIy
NTFBQzIzRjE4QkQyNDIyMDEzOTBCMkNDMDUzODBCODIyRjc5QjkzQjVDMDg0MEMx
Q0MyNjQxMkQxQzZFOEM2Rjg5QzAzODkzQTQ1MzBEMkM5NEI4RjA2RTEzRDM1MTM3
N0IyOTI2QzFDNEJGNDFCREUyMkVGNzA0ODI5NjAwRkZFRTFEMDhBMDVDM0YwMzQ2
M0IwOEQ5MDZGNjJFQjFFQzA3M0QxNERFRjE5MjY5M0EzMDg0RkYxNjU3RDkzODg2
QjlEQjc1RkRBOUIxMUU5NEJDMDk5Q0FGOEM3MkI3RDA0QjE2NkVFRjNBQkRGQTZG
QUI5MjRFRjBBMTcyNDIwMDczRkRGMTU0N0NERkJDNDRDMzZGN0M5NEQ5NUM1RTc0
NDRCN0RDNzJDNjQ0MDYxNDkyQjc4RkVERkU4NDg2NTZBNEEyODcwNTVFQUEzQjcw
QUEyODkwRTIwOEY0NjlDQkY1RjIzREIwMEYyQkNCQjE1MDEyQTgzNUZGNjVDQTVF
MjRERTA4N0Y1OTkxRTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtlr1uMu2L4plnwSCKeD3o4YqSt8YIZCL7jjyMaR7Viw3I+ioJ1iL
dpbG63AQj8lFBGqdBwqONGsiUawj8YvSQiATkLLMBTgLgi95uTtcCEDBzCZBLRxu
jG+JwDiTpFMNLJS48G4T01E3eykmwcS/Qb3iLvcEgpYA/+4dCKBcPwNGOwjZBvYu
sewHPRTe8ZJpOjCE/xZX2TiGudt1/amxHpS8CZyvjHK30EsWbu86vfpvq5JO8KFy
QgBz/fFUfN+8RMNvfJTZXF50RLfccsZEBhSSt4/t/oSGVqSihwVeqjtwqiiQ4gj0
acv18j2wDyvLsVASqDX/ZcpeJN4If1mR5QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FEPgAMcOPZiraHE2zbblb0fyJ6KJMB8GA1UdIwQYMBaAFDvOlI5ZlV74gb0ezS3j
hf55WfGVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzIvM0JDRTk0OEU1OTk1NUVG
ODgxQkQxRUNEMkRFMzg1RkU3OTU5RjE5NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zQkNFOTQ4RTU5OTU1RUY4ODFCRDFFQ0QyREUzODVGRTc5NTlG
MTk1LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0M25yd0NU
aDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzIvM0JDRTk0OEU1OTk1NUVGODgxQkQx
RUNEMkRFMzg1RkU3OTU5RjE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA2fU1TAuQeaU2dLnRxxJofc
DNc0+Z48UgSMvR5IuvRkkg6SqYOxOqJqQYmiYxP8igPdHC0tF+dkcS4KplSqgvjE
0s0MBRpiOktcsqcyXgVdXwxHrREYR1phfwYFZ7oSd1p37bN5k+BlVf8WoeibVlFF
ab2CNU9HhIsBch8eUy2lRFK/o3IzRiCloJItfvi7SfNocFGN6PBOY05B/C1YrX+C
JTYOluCRcmxDe1Pt/kn2na7KwypEhbRa3bQx5ki54QXWAK07kZJ2rFlwNPxTXzAC
XeX12PhxWT2gY8TwbAWQrndatQV97OqSX+ONDkIPR3HTqaBE9EkOMAOG1HF0Twg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:26:56 2025 by rpki-client