Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
File:                     23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json)
Hash identifier:          P91ELLD2b+RCzSKEZI25oC0KTKk3cL0717MsNhT0S64=
Subject key identifier:   2D:24:9F:97:36:BC:A4:70:DA:98:B7:11:9A:6F:CE:38:4B:55:7B:49
Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
Certificate issuer:       /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
Certificate serial:       4AC1D7490BC8EC77198FEBD3B8609702590E0BF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
Manifest number:          012E
Signing time:             Fri 31 Jan 2025 13:12:49 +0000
Manifest this update:     Fri 31 Jan 2025 13:07:49 +0000
Manifest next update:     Sat 01 Feb 2025 16:02:49 +0000
Files and hashes:         1: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: Wsu27lj+OxEwteJDFUBY3rXDxyOYfTb6YV80eRmJbcc=)
                          2: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: 0pQ8fu/1k9geUnbt2OC4GCq25F/cu3ncxK1fK6VVlAY=)
                          3: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: BymP1oE1knapGmmucKq85s1m4dhcM3LP2vsYwSrRS7o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c1:d7:49:0b:c8:ec:77:19:8f:eb:d3:b8:60:97:02:59:0e:0b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
        Validity
            Not Before: Jan 31 13:07:49 2025 GMT
            Not After : Feb  1 16:02:49 2025 GMT
        Subject: CN=2D249F9736BCA470DA98B7119A6FCE384B557B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:d8:8f:e6:40:f7:4f:b7:61:a8:d6:7c:0e:
                    18:63:b9:85:8f:e8:e3:be:a0:ef:37:9f:d6:80:f8:
                    12:c8:c3:cf:58:e7:a8:be:0a:d9:94:48:12:f0:6a:
                    61:0a:2d:99:80:0f:d7:51:99:a5:56:4d:ec:80:4a:
                    53:a0:85:9c:cc:76:8c:77:77:2c:60:42:16:b6:38:
                    da:78:1c:9d:7d:9b:2c:f3:66:8c:33:0a:59:54:ba:
                    91:8f:df:2a:9f:ef:ec:30:52:9b:61:0e:9b:d2:b2:
                    90:d0:fa:c1:6e:92:a4:2b:32:d8:50:91:d0:a2:eb:
                    55:df:a3:02:fe:7c:b4:76:19:46:f4:81:75:fd:f7:
                    82:e4:66:2b:8c:5d:ab:e1:11:10:25:0a:d4:46:33:
                    21:d6:c2:25:da:37:5c:57:78:fa:ca:92:db:d4:29:
                    17:6c:5c:87:b3:76:66:ca:9e:4c:d4:3f:f0:78:13:
                    76:b1:5f:2d:d6:7b:c7:d4:43:0e:1d:6c:14:7b:44:
                    3e:eb:ea:b1:3e:ed:70:d1:2d:68:6c:a1:9e:c0:90:
                    40:bc:d2:eb:5e:0e:63:ee:81:f9:e4:1d:5e:e6:d2:
                    14:1e:d8:51:cc:d5:a2:a5:31:61:8b:80:43:0f:52:
                    92:d4:6c:5d:7a:27:c7:6c:e8:9a:25:c1:bd:68:e8:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:24:9F:97:36:BC:A4:70:DA:98:B7:11:9A:6F:CE:38:4B:55:7B:49
            X509v3 Authority Key Identifier:
                keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:d8:ba:8c:8c:16:76:cc:3d:aa:02:a3:a5:1f:2d:51:59:
         53:11:eb:b5:e7:5a:ea:0d:b6:49:4a:19:a6:2a:32:b7:1a:37:
         b7:3b:6a:12:55:bb:57:3f:a5:5a:47:54:92:e2:1c:b5:15:7a:
         d0:43:c4:45:25:1e:1f:0d:fa:96:dc:de:47:58:6a:84:6e:fa:
         5f:c0:cc:29:9c:5a:45:19:da:74:71:f1:0a:9a:b1:e8:67:cc:
         9e:69:10:05:3d:e1:82:87:27:da:91:78:d1:d7:40:3a:9d:8f:
         24:34:a1:02:31:e9:a7:94:0f:bc:15:6c:a8:63:b7:9c:10:1e:
         e7:d4:e8:ac:2b:1b:6f:cd:c7:76:02:24:c3:96:4b:b3:09:2d:
         2d:e4:53:50:b8:68:38:fc:b2:8c:55:fe:9c:5e:d4:6c:f8:17:
         dc:12:b4:b0:0d:4e:f4:63:14:2d:47:7f:a3:4b:ce:06:a9:4a:
         df:58:95:ff:23:00:9d:a2:8e:04:9f:e4:6f:d9:07:e6:04:3d:
         13:92:96:97:54:8a:c7:77:f3:22:c3:e6:3b:c8:95:d8:16:12:
         67:6b:5b:7c:24:74:39:c3:58:ce:78:72:e0:52:9a:90:62:25:
         b0:fb:53:29:58:ae:9c:a9:cb:a5:e4:1b:3c:76:1e:b1:dd:f8:
         02:48:69:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSsHXSQvI7HcZj+vTuGCXAlkOC/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNBQ0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4
RTgyNzdEQTAeFw0yNTAxMzExMzA3NDlaFw0yNTAyMDExNjAyNDlaMDMxMTAvBgNV
BAMTKDJEMjQ5Rjk3MzZCQ0E0NzBEQTk4QjcxMTlBNkZDRTM4NEI1NTdCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqodiP5kD3T7dhqNZ8DhhjuYWP
6OO+oO83n9aA+BLIw89Y56i+CtmUSBLwamEKLZmAD9dRmaVWTeyASlOghZzMdox3
dyxgQha2ONp4HJ19myzzZowzCllUupGP3yqf7+wwUpthDpvSspDQ+sFukqQrMthQ
kdCi61XfowL+fLR2GUb0gXX994LkZiuMXavhERAlCtRGMyHWwiXaN1xXePrKktvU
KRdsXIezdmbKnkzUP/B4E3axXy3We8fUQw4dbBR7RD7r6rE+7XDRLWhsoZ7AkEC8
0uteDmPugfnkHV7m0hQe2FHM1aKlMWGLgEMPUpLUbF16J8ds6Jolwb1o6Kl5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULSSflza8pHDamLcRmm/OOEtVe0kwHwYDVR0j
BBgwFoAUI6yoOey0bMO1vWyGv2mXwY6Cd9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5
MlEvMC8yM0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQUNBODM5RUNCNDZDQzNC
NUJENkM4NkJGNjk5N0MxOEU4Mjc3REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5MlEvMC8y
M0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATjbYuoyMFnbMPaoCo6UfLVFZUxHrteda6g22SUoZpioytxo3tztqElW7Vz+l
WkdUkuIctRV60EPERSUeHw36ltzeR1hqhG76X8DMKZxaRRnadHHxCpqx6GfMnmkQ
BT3hgocn2pF40ddAOp2PJDShAjHpp5QPvBVsqGO3nBAe59TorCsbb83HdgIkw5ZL
swktLeRTULhoOPyyjFX+nF7UbPgX3BK0sA1O9GMULUd/o0vOBqlK31iV/yMAnaKO
BJ/kb9kH5gQ9E5KWl1SKx3fzIsPmO8iV2BYSZ2tbfCR0OcNYznhy4FKakGIlsPtT
KViunKnLpeQbPHYesd34Akhpag==
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:05:01 2025 by rpki-client