Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.mft
File:                     50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.mft (raw, json)
Hash identifier:          sHXQhjEZsgjyJK1/8hK1py6dgT1XXygKUWlNwbzVljU=
Subject key identifier:   CE:97:30:3A:B4:69:9E:1B:6B:F9:F3:0B:4E:09:60:E2:03:0A:5D:B6
Authority key identifier: 50:D5:50:C4:97:1B:CF:7D:FC:66:92:EB:9F:F3:8C:FD:C5:44:4C:81
Certificate issuer:       /CN=50D550C4971BCF7DFC6692EB9FF38CFDC5444C81
Certificate serial:       2D134AF6F446BDE1B910240109130ADB64AFDDE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.mft
Manifest number:          0126
Signing time:             Fri 31 Jan 2025 06:42:12 +0000
Manifest this update:     Fri 31 Jan 2025 06:37:12 +0000
Manifest next update:     Sat 01 Feb 2025 06:54:12 +0000
Files and hashes:         1: 50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.crl (hash: y63YsvjsMXw8L5oEgNOlWhlWIk1pG5sMWaUUyd4fsIY=)
                          2: 3139302e3131352e36342e302f32322d3234203d3e20323730343139.roa (hash: qWBCRz9UVFuqYPltSsR88KjYceFyAYKTL6wTyf5bYyg=)
                          3: 323830343a366262383a3a2f33322d3438203d3e20323730343139.roa (hash: d4QG4spBLxUE37fewvfHi+0JdxVodqicHdWhXEtuc9I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:13:4a:f6:f4:46:bd:e1:b9:10:24:01:09:13:0a:db:64:af:dd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50D550C4971BCF7DFC6692EB9FF38CFDC5444C81
        Validity
            Not Before: Jan 31 06:37:12 2025 GMT
            Not After : Feb  1 06:54:12 2025 GMT
        Subject: CN=CE97303AB4699E1B6BF9F30B4E0960E2030A5DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:91:7e:db:6b:c9:28:5f:b9:cc:d4:1c:ef:
                    a4:e0:71:bf:7d:7a:bb:d2:f7:bb:f6:cb:f3:be:25:
                    f8:31:bd:e5:85:3a:94:8f:23:30:57:fb:5c:05:25:
                    be:4a:b6:ee:9b:17:b0:c6:5b:12:90:ca:3d:7c:6d:
                    2a:f2:6d:30:d0:ea:6a:1a:71:bc:af:6a:fa:ce:fe:
                    16:7a:f6:9a:61:94:5a:56:23:51:3d:18:aa:8e:da:
                    96:7b:68:61:6c:ce:35:cc:9c:e3:35:a4:66:8d:b9:
                    71:bd:a1:94:0f:6c:79:27:ae:2d:87:0a:02:26:a1:
                    f5:20:96:20:64:ef:d7:96:a8:94:38:dd:17:4a:0f:
                    c6:ae:86:01:2d:49:9f:b1:75:c3:db:a9:ec:b9:ea:
                    f2:8d:06:2f:e8:10:3e:e8:7d:44:f1:b2:5c:68:2f:
                    6f:89:82:11:0e:46:20:67:76:d6:52:65:ef:1e:93:
                    87:db:31:26:58:ab:b5:3a:38:ab:2b:9f:04:f9:57:
                    07:0d:51:c8:e8:61:81:77:a6:84:80:b2:7b:ee:e9:
                    8e:4b:da:14:bd:e7:97:e1:47:0e:64:f3:6b:70:bb:
                    10:dc:be:a3:28:11:33:91:de:05:df:7b:bf:89:4b:
                    b0:61:73:c3:95:8a:b1:79:6b:69:24:18:0a:5b:0c:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:97:30:3A:B4:69:9E:1B:6B:F9:F3:0B:4E:09:60:E2:03:0A:5D:B6
            X509v3 Authority Key Identifier:
                keyid:50:D5:50:C4:97:1B:CF:7D:FC:66:92:EB:9F:F3:8C:FD:C5:44:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:64:b8:d9:6a:92:75:2d:20:20:26:21:b2:7a:b2:7b:63:a8:
         81:61:ba:66:63:fe:c8:12:b4:77:04:61:91:8e:6e:f3:32:67:
         3c:00:0b:27:ba:bc:67:53:9d:75:8d:fa:ad:3a:5e:2c:d6:de:
         6c:70:76:cd:8e:18:54:ab:52:15:18:84:59:3c:c1:2a:cf:33:
         f4:d8:5c:be:4a:82:8c:04:e2:d0:e6:dc:de:3c:e0:12:68:fd:
         d0:4d:1e:22:52:39:51:e4:ea:0c:0a:58:ce:1f:d6:ca:bf:2d:
         61:2d:3a:88:60:fc:10:94:fc:d7:f8:2d:d5:e1:f5:0b:1a:db:
         13:9d:ef:d1:3a:c0:60:5e:e9:b1:3e:df:99:58:e5:9c:88:5f:
         4d:93:26:8d:32:96:ed:7c:5e:99:c5:32:e6:d7:95:cc:fa:a3:
         ba:22:2b:5a:89:43:6d:69:d5:9b:63:49:ae:61:b4:a1:5b:cb:
         74:e2:97:03:93:8f:2f:16:44:af:a4:8a:2a:be:53:30:8f:fa:
         c8:09:68:b3:f4:92:ce:e1:43:d6:96:16:80:ff:42:d3:b0:3b:
         b0:64:24:59:44:2d:4a:44:2a:0e:fe:72:f5:94:f0:37:e2:a5:
         70:36:a9:bf:20:59:48:f0:3d:be:9f:2b:b2:bc:06:1f:bf:ae:
         e0:3d:dc:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULRNK9vRGveG5ECQBCRMK22Sv3eQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBENTUwQzQ5NzFCQ0Y3REZDNjY5MkVCOUZGMzhDRkRD
NTQ0NEM4MTAeFw0yNTAxMzEwNjM3MTJaFw0yNTAyMDEwNjU0MTJaMDMxMTAvBgNV
BAMTKENFOTczMDNBQjQ2OTlFMUI2QkY5RjMwQjRFMDk2MEUyMDMwQTVEQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZJF+22vJKF+5zNQc76Tgcb99
ervS97v2y/O+JfgxveWFOpSPIzBX+1wFJb5Ktu6bF7DGWxKQyj18bSrybTDQ6moa
cbyvavrO/hZ69pphlFpWI1E9GKqO2pZ7aGFszjXMnOM1pGaNuXG9oZQPbHknri2H
CgImofUgliBk79eWqJQ43RdKD8auhgEtSZ+xdcPbqey56vKNBi/oED7ofUTxslxo
L2+JghEORiBndtZSZe8ek4fbMSZYq7U6OKsrnwT5VwcNUcjoYYF3poSAsnvu6Y5L
2hS955fhRw5k82twuxDcvqMoETOR3gXfe7+JS7Bhc8OVirF5a2kkGApbDESHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzpcwOrRpnhtr+fMLTglg4gMKXbYwHwYDVR0j
BBgwFoAUUNVQxJcbz338ZpLrn/OM/cVETIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWM4cDVuN3BLVjNVUmhidEE4YncxQmtvdkNHUmt2dEpReXRXb0JRZjFR
VGYvMC81MEQ1NTBDNDk3MUJDRjdERkM2NjkyRUI5RkYzOENGREM1NDQ0QzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwRDU1MEM0OTcxQkNGN0RG
QzY2OTJFQjlGRjM4Q0ZEQzU0NDRDODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWM4cDVuN3BLVjNVUmhidEE4YncxQmtvdkNHUmt2dEpReXRXb0JRZjFRVGYvMC81
MEQ1NTBDNDk3MUJDRjdERkM2NjkyRUI5RkYzOENGREM1NDQ0QzgxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnGS42WqSdS0gICYhsnqye2OogWG6ZmP+yBK0dwRhkY5u8zJnPAALJ7q8Z1Od
dY36rTpeLNbebHB2zY4YVKtSFRiEWTzBKs8z9NhcvkqCjATi0Obc3jzgEmj90E0e
IlI5UeTqDApYzh/Wyr8tYS06iGD8EJT81/gt1eH1CxrbE53v0TrAYF7psT7fmVjl
nIhfTZMmjTKW7XxemcUy5teVzPqjuiIrWolDbWnVm2NJrmG0oVvLdOKXA5OPLxZE
r6SKKr5TMI/6yAlos/SSzuFD1pYWgP9C07A7sGQkWUQtSkQqDv5y9ZTwN+KlcDap
vyBZSPA9vp8rsrwGH7+u4D3cTw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:49 2025 by rpki-client