Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.mft
File:                     22C965CFD1C68B15DAE2F2D8CAE324448D335934.mft (raw, json)
Hash identifier:          JTXCvgo9U+uSyTQz06hya+BtS+FuQIEL1BYIFt1eemA=
Subject key identifier:   52:F1:4F:35:35:93:1D:9E:A7:9C:71:3E:5F:91:3C:F5:24:03:83:89
Authority key identifier: 22:C9:65:CF:D1:C6:8B:15:DA:E2:F2:D8:CA:E3:24:44:8D:33:59:34
Certificate issuer:       /CN=22C965CFD1C68B15DAE2F2D8CAE324448D335934
Certificate serial:       2704EBE3BE6C9EDD5A56A29E775B898E7DFF4B5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C965CFD1C68B15DAE2F2D8CAE324448D335934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.mft
Manifest number:          0127
Signing time:             Fri 31 Jan 2025 15:40:34 +0000
Manifest this update:     Fri 31 Jan 2025 15:35:34 +0000
Manifest next update:     Sat 01 Feb 2025 16:31:34 +0000
Files and hashes:         1: 22C965CFD1C68B15DAE2F2D8CAE324448D335934.crl (hash: rEZ1+JdH4Hi/P08Yc2yH+gWqq7WvVAjpXSeGkiDWAJg=)
                          2: 323830343a343835303a3a2f33322d3438203d3e20323637313133.roa (hash: WCmIt5pnHbRBSKwA0myZNwuIa+Ickjwl0eI29l6uOr4=)
                          3: 34352e3232372e3134302e302f32322d3234203d3e20323637313133.roa (hash: ST3IY+Kxzt+t4JXm5VivAozyjpX5A5pqI0/ne9S0qus=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:04:eb:e3:be:6c:9e:dd:5a:56:a2:9e:77:5b:89:8e:7d:ff:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22C965CFD1C68B15DAE2F2D8CAE324448D335934
        Validity
            Not Before: Jan 31 15:35:34 2025 GMT
            Not After : Feb  1 16:31:34 2025 GMT
        Subject: CN=52F14F3535931D9EA79C713E5F913CF524038389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:09:8c:b4:14:74:8d:9b:16:f5:de:44:f1:86:
                    04:d3:f8:d5:3c:86:ec:2b:94:62:7f:4c:9d:bd:f1:
                    e9:2b:67:63:a1:ca:88:77:55:c8:29:4e:37:fb:20:
                    aa:ab:45:08:67:5a:a0:30:2b:d8:9f:bd:5d:aa:4e:
                    e6:36:eb:d2:a1:41:28:1d:2f:15:2e:80:be:53:3b:
                    f9:50:30:7b:1d:c6:e4:cb:b1:09:ee:bc:b1:e0:2e:
                    aa:d4:e7:23:02:a0:52:99:95:c2:79:30:b5:cb:17:
                    93:76:03:22:6b:83:60:7a:cb:38:87:d4:85:92:ea:
                    8f:ef:1c:76:84:16:ad:4b:d7:97:6d:59:17:06:d5:
                    c5:4f:68:1f:0c:49:51:45:e4:37:d2:b2:de:b4:c5:
                    87:12:31:80:ac:4d:fe:33:74:f1:74:86:40:6d:fc:
                    24:d0:b1:40:fe:c4:60:60:22:0c:bf:a0:9b:a8:87:
                    6c:5b:52:21:51:06:c9:e2:7e:1a:2b:a2:f6:79:8c:
                    40:3b:16:df:6e:26:40:ee:e6:17:45:b7:78:2e:59:
                    a7:bc:47:10:79:3c:10:9d:eb:7a:5c:c9:ce:03:c4:
                    5c:33:32:38:13:bd:b7:5d:bb:00:25:c9:ab:28:68:
                    3f:06:22:93:ae:2b:f7:c5:34:1c:de:c4:3e:e8:61:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F1:4F:35:35:93:1D:9E:A7:9C:71:3E:5F:91:3C:F5:24:03:83:89
            X509v3 Authority Key Identifier:
                keyid:22:C9:65:CF:D1:C6:8B:15:DA:E2:F2:D8:CA:E3:24:44:8D:33:59:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C965CFD1C68B15DAE2F2D8CAE324448D335934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:33:1d:a6:db:a1:eb:70:43:96:f6:c6:58:9f:3e:54:9e:60:
         6d:dd:fd:a8:f1:6b:7b:66:bc:1e:15:1e:22:69:d9:bb:f0:25:
         18:1d:15:48:f4:13:d7:1f:a2:65:90:fb:63:c3:65:bc:fd:cf:
         eb:12:53:8f:3c:23:8b:b1:e7:24:98:09:15:33:f3:9c:9e:3e:
         ac:17:51:ce:15:d9:4a:69:19:2d:72:0c:90:8d:c6:ce:dc:6e:
         e6:e0:cb:2a:bc:6d:2c:ed:e8:e6:a2:88:a1:09:f4:5c:3c:e3:
         33:04:38:e3:40:6b:3b:c1:59:af:fd:46:01:c7:a7:49:dd:9a:
         fd:43:e8:3d:1a:c1:f7:f1:42:4e:bb:a2:27:e7:4a:02:8c:ce:
         61:8d:9d:56:24:72:dd:64:be:92:05:f0:cd:89:29:c7:1e:42:
         3a:34:a7:68:d5:fa:c2:9d:ef:68:1c:87:8e:b6:32:64:74:19:
         e8:20:b6:bf:64:ae:e0:e7:e3:6f:58:4b:c2:d9:64:43:9c:d5:
         09:51:5c:64:9e:d8:19:5b:7f:3e:7e:78:e3:36:11:02:63:13:
         5b:c0:f2:14:a3:6f:30:62:01:f3:f7:b0:73:6b:80:58:47:6f:
         a4:6f:e1:78:17:54:c9:a0:47:d7:d2:10:08:51:b8:5b:da:3a:
         e6:88:50:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJwTr475snt1aVqKed1uJjn3/S10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJDOTY1Q0ZEMUM2OEIxNURBRTJGMkQ4Q0FFMzI0NDQ4
RDMzNTkzNDAeFw0yNTAxMzExNTM1MzRaFw0yNTAyMDExNjMxMzRaMDMxMTAvBgNV
BAMTKDUyRjE0RjM1MzU5MzFEOUVBNzlDNzEzRTVGOTEzQ0Y1MjQwMzgzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrCYy0FHSNmxb13kTxhgTT+NU8
huwrlGJ/TJ298ekrZ2Ohyoh3VcgpTjf7IKqrRQhnWqAwK9ifvV2qTuY269KhQSgd
LxUugL5TO/lQMHsdxuTLsQnuvLHgLqrU5yMCoFKZlcJ5MLXLF5N2AyJrg2B6yziH
1IWS6o/vHHaEFq1L15dtWRcG1cVPaB8MSVFF5DfSst60xYcSMYCsTf4zdPF0hkBt
/CTQsUD+xGBgIgy/oJuoh2xbUiFRBsnifhorovZ5jEA7Ft9uJkDu5hdFt3guWae8
RxB5PBCd63pcyc4DxFwzMjgTvbdduwAlyasoaD8GIpOuK/fFNBzexD7oYTspAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUvFPNTWTHZ6nnHE+X5E89SQDg4kwHwYDVR0j
BBgwFoAUIsllz9HGixXa4vLYyuMkRI0zWTQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW5uNHF1blNpb2l4d1pOajdXdkYxdWpNOXB6cWg5M0VuckdmSG5odUhN
WkovMC8yMkM5NjVDRkQxQzY4QjE1REFFMkYyRDhDQUUzMjQ0NDhEMzM1OTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQzk2NUNGRDFDNjhCMTVE
QUUyRjJEOENBRTMyNDQ0OEQzMzU5MzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OW5uNHF1blNpb2l4d1pOajdXdkYxdWpNOXB6cWg5M0VuckdmSG5odUhNWkovMC8y
MkM5NjVDRkQxQzY4QjE1REFFMkYyRDhDQUUzMjQ0NDhEMzM1OTM0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvTMdptuh63BDlvbGWJ8+VJ5gbd39qPFre2a8HhUeImnZu/AlGB0VSPQT1x+i
ZZD7Y8NlvP3P6xJTjzwji7HnJJgJFTPznJ4+rBdRzhXZSmkZLXIMkI3Gztxu5uDL
KrxtLO3o5qKIoQn0XDzjMwQ440BrO8FZr/1GAcenSd2a/UPoPRrB9/FCTruiJ+dK
AozOYY2dViRy3WS+kgXwzYkpxx5COjSnaNX6wp3vaByHjrYyZHQZ6CC2v2Su4Ofj
b1hLwtlkQ5zVCVFcZJ7YGVt/Pn544zYRAmMTW8DyFKNvMGIB8/ewc2uAWEdvpG/h
eBdUyaBH19IQCFG4W9o65ohQQQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:17 2025 by rpki-client