Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft
File:                     9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft (raw, json)
Hash identifier:          b9Jpl+TaY2wxBlo2XXm6kPPN8H7j0ug6rPdR1VAcooo=
Subject key identifier:   9E:34:24:8D:E8:3F:1C:E9:12:00:7E:74:8F:6E:5C:71:1D:B8:07:35
Authority key identifier: 9C:05:0C:4A:1C:62:1D:E7:91:F7:79:A0:F2:2E:B9:BC:65:B9:6C:C6
Certificate issuer:       /CN=9C050C4A1C621DE791F779A0F22EB9BC65B96CC6
Certificate serial:       3EA53049045B05F6784E1BB967DC02D3BD699FFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft
Manifest number:          37
Signing time:             Fri 31 Jan 2025 07:26:22 +0000
Manifest this update:     Fri 31 Jan 2025 07:21:22 +0000
Manifest next update:     Sat 01 Feb 2025 09:09:22 +0000
Files and hashes:         1: 323830343a383637383a3a2f33322d313238203d3e20323732363435.roa (hash: OGIYXHmyAfVyYcG0EfMx5VdOGi3aoyNoGsB72H/WKFc=)
                          2: 3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa (hash: auk03NIomiU7IyBLRKg327Vt0oxhDqLW6Pu2/8MfffM=)
                          3: 9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.crl (hash: MKQNX47+/oKeZd6qwOJTWOC5lr9YJg2R+1QPS1qFXnY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:30:49:04:5b:05:f6:78:4e:1b:b9:67:dc:02:d3:bd:69:9f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C050C4A1C621DE791F779A0F22EB9BC65B96CC6
        Validity
            Not Before: Jan 31 07:21:22 2025 GMT
            Not After : Feb  1 09:09:22 2025 GMT
        Subject: CN=9E34248DE83F1CE912007E748F6E5C711DB80735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:3d:01:b7:c6:16:b1:6b:cb:64:b8:80:71:
                    44:0a:5e:eb:1d:60:d6:0e:1d:dd:55:e3:19:0e:c0:
                    f3:24:5e:c7:42:f1:94:e9:1f:28:04:11:d9:01:3a:
                    15:e5:bd:c8:b7:bd:91:6f:a7:85:c4:6e:37:08:b3:
                    d5:d7:ff:1a:37:8d:12:30:44:83:06:0c:49:dc:04:
                    36:88:ca:47:ae:64:fa:ac:a0:7d:91:34:7f:5b:22:
                    e1:b9:7f:76:12:4e:b9:e5:d8:ac:06:17:c8:93:ed:
                    cb:59:ac:c0:35:d6:b8:16:d7:44:8d:cb:78:8c:9e:
                    3b:fb:76:32:90:11:0a:f4:f4:9d:68:3f:8f:b0:11:
                    24:4b:45:87:0e:8e:96:7e:8d:fe:13:b6:ee:de:f2:
                    bc:62:90:13:b2:08:15:b6:63:e4:f1:ff:5d:26:0f:
                    9c:e4:8f:ab:2d:91:67:61:cf:75:8d:7e:0a:e1:71:
                    3c:80:1d:1f:e8:56:69:6a:73:d0:98:0c:e5:11:1d:
                    a6:e4:53:eb:13:e5:60:b6:84:84:ab:f2:52:8b:7d:
                    53:09:65:b3:1d:5a:b5:bf:f5:e2:eb:fc:6b:3c:27:
                    cf:11:66:06:05:77:83:16:e6:41:e6:a4:2f:50:e6:
                    bd:d2:29:05:8c:f9:13:34:0e:68:04:cb:9c:39:1a:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:24:8D:E8:3F:1C:E9:12:00:7E:74:8F:6E:5C:71:1D:B8:07:35
            X509v3 Authority Key Identifier:
                keyid:9C:05:0C:4A:1C:62:1D:E7:91:F7:79:A0:F2:2E:B9:BC:65:B9:6C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:12:91:cc:a6:bb:1b:d2:7f:c4:9e:c5:96:26:41:44:ea:
         14:18:3e:59:17:77:e6:4d:31:30:4f:4e:7d:cf:a3:55:d9:2d:
         90:d3:2d:31:ef:47:69:21:0d:cf:51:7a:3c:1a:47:b5:dc:13:
         fe:84:b9:3a:b7:c4:2d:d6:19:84:08:86:3d:42:9e:71:2f:de:
         5f:e2:bb:ed:74:30:d7:b8:e6:b3:d8:c4:16:82:38:18:cd:25:
         45:3a:ca:3e:42:fe:86:6c:30:33:12:d1:7b:26:ba:17:fa:9c:
         ce:39:19:42:66:eb:c0:c7:e9:89:8b:18:a1:4d:9b:e1:7f:59:
         54:83:4a:23:c8:d5:45:02:98:7e:dc:c6:80:51:2b:15:42:79:
         d6:82:df:d1:dc:80:62:a9:da:01:32:df:1a:86:93:84:a5:6a:
         8a:51:0c:d0:15:eb:b5:b2:3f:e1:e0:52:49:34:44:a6:bc:16:
         fb:db:c1:2d:1a:ce:14:74:a7:9b:5d:5f:4c:8f:a5:fc:2e:52:
         71:59:09:93:0e:ea:39:52:5a:6c:31:9e:19:f9:48:fa:fc:5b:
         c8:18:fa:96:73:c4:9d:d1:6a:4a:97:f2:7f:d1:9e:87:a9:22:
         f9:3b:71:3d:d7:ee:eb:a3:9d:05:c8:88:18:a7:47:81:14:20:
         c3:15:3e:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPqUwSQRbBfZ4Thu5Z9wC071pn/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwNTBDNEExQzYyMURFNzkxRjc3OUEwRjIyRUI5QkM2
NUI5NkNDNjAeFw0yNTAxMzEwNzIxMjJaFw0yNTAyMDEwOTA5MjJaMDMxMTAvBgNV
BAMTKDlFMzQyNDhERTgzRjFDRTkxMjAwN0U3NDhGNkU1QzcxMURCODA3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTHT0Bt8YWsWvLZLiAcUQKXusd
YNYOHd1V4xkOwPMkXsdC8ZTpHygEEdkBOhXlvci3vZFvp4XEbjcIs9XX/xo3jRIw
RIMGDEncBDaIykeuZPqsoH2RNH9bIuG5f3YSTrnl2KwGF8iT7ctZrMA11rgW10SN
y3iMnjv7djKQEQr09J1oP4+wESRLRYcOjpZ+jf4Ttu7e8rxikBOyCBW2Y+Tx/10m
D5zkj6stkWdhz3WNfgrhcTyAHR/oVmlqc9CYDOURHabkU+sT5WC2hISr8lKLfVMJ
ZbMdWrW/9eLr/Gs8J88RZgYFd4MW5kHmpC9Q5r3SKQWM+RM0DmgEy5w5GkyxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnjQkjeg/HOkSAH50j25ccR24BzUwHwYDVR0j
BBgwFoAUnAUMShxiHeeR93mg8i65vGW5bMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWl6UFdReGRRaXlUdmFmN3lKcWh6NWZYRlNwVVJTd2l1QlRCMXdza0ha
NEIvMC85QzA1MEM0QTFDNjIxREU3OTFGNzc5QTBGMjJFQjlCQzY1Qjk2Q0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMDUwQzRBMUM2MjFERTc5
MUY3NzlBMEYyMkVCOUJDNjVCOTZDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWl6UFdReGRRaXlUdmFmN3lKcWh6NWZYRlNwVVJTd2l1QlRCMXdza0haNEIvMC85
QzA1MEM0QTFDNjIxREU3OTFGNzc5QTBGMjJFQjlCQzY1Qjk2Q0M2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjpkSkcymuxvSf8SexZYmQUTqFBg+WRd35k0xME9Ofc+jVdktkNMtMe9HaSEN
z1F6PBpHtdwT/oS5OrfELdYZhAiGPUKecS/eX+K77XQw17jms9jEFoI4GM0lRTrK
PkL+hmwwMxLReya6F/qczjkZQmbrwMfpiYsYoU2b4X9ZVINKI8jVRQKYftzGgFEr
FUJ51oLf0dyAYqnaATLfGoaThKVqilEM0BXrtbI/4eBSSTREprwW+9vBLRrOFHSn
m11fTI+l/C5ScVkJkw7qOVJabDGeGflI+vxbyBj6lnPEndFqSpfyf9Geh6ki+Ttx
Pdfu66OdBciIGKdHgRQgwxU+eQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:55 2025 by rpki-client