Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft
File:                     AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft (raw, json)
Hash identifier:          O1BLDDyOfzhkB3/5ajwbm9WCFktlMYDYixLD3Q5bAxU=
Subject key identifier:   B7:A6:B5:CA:7E:C1:37:3C:47:15:EC:66:18:A6:A1:F5:14:1A:B0:84
Authority key identifier: AD:6D:43:80:AF:CD:C7:5E:B0:1F:AA:58:AA:53:B5:19:81:D6:FA:A6
Certificate issuer:       /CN=AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6
Certificate serial:       7724F6D54BC1D7735ECDFB4B2A4779ABAFC377C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft
Manifest number:          DD
Signing time:             Fri 31 Jan 2025 17:10:16 +0000
Manifest this update:     Fri 31 Jan 2025 17:05:16 +0000
Manifest next update:     Sat 01 Feb 2025 19:36:16 +0000
Files and hashes:         1: 34352e3136352e36302e302f32322d3234203d3e20323638363538.roa (hash: kKVMRuc29JaRp7AtWdHLGQmD2SLTZvYD+53MTtlwoBY=)
                          2: AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.crl (hash: hjNCSY4oHjYhE1Z5CCFuVD6YeD+03g8DRNvxp1tJA6w=)
                          3: 323830343a353439303a3a2f33322d3438203d3e20323638363538.roa (hash: ksFtokBA6mRr4HQ5CEpOHlzmFfkthndiwd+GOqVGoc4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:24:f6:d5:4b:c1:d7:73:5e:cd:fb:4b:2a:47:79:ab:af:c3:77:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6
        Validity
            Not Before: Jan 31 17:05:16 2025 GMT
            Not After : Feb  1 19:36:16 2025 GMT
        Subject: CN=B7A6B5CA7EC1373C4715EC6618A6A1F5141AB084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:90:54:95:82:0f:e9:72:de:20:51:32:9b:
                    84:5d:84:5b:76:f2:a3:55:a8:7b:c8:69:08:71:9e:
                    73:48:4e:77:7f:f3:d4:b5:a1:e5:ad:cb:f1:f3:f5:
                    6a:4f:fd:f0:09:40:07:e2:03:e9:ba:0b:45:d0:dc:
                    b3:7f:66:a8:ce:56:f4:a4:a1:40:95:6c:aa:e0:e3:
                    53:d3:cb:fc:2b:ff:22:d4:a7:74:8b:53:3d:c4:0b:
                    c6:6a:fd:b6:e3:35:ef:9b:08:ae:1a:e4:2e:5e:b4:
                    77:5e:d7:8b:57:f4:4c:ea:65:b9:e3:2a:6b:da:93:
                    1c:16:7e:19:80:55:b2:db:0c:b5:c0:b0:ea:8a:4d:
                    73:2b:c1:07:39:7f:01:46:44:35:67:cc:18:3e:6b:
                    ed:57:0a:7d:00:81:c9:ec:82:8f:87:bc:0e:2f:d5:
                    99:fb:39:1f:73:75:a7:ba:a4:f8:be:df:3d:3e:3e:
                    31:98:9c:fb:f0:0a:dc:55:f8:1b:ad:c8:13:65:ba:
                    24:8d:c2:90:c1:e5:a8:cf:e2:d5:76:c8:a0:5b:0a:
                    16:05:06:1f:1a:88:ca:bc:96:19:9c:d2:57:38:81:
                    9d:45:07:57:b4:9c:10:37:cc:44:1d:79:f4:a0:32:
                    97:d0:d3:6c:90:16:14:c6:fd:91:7f:c3:95:2d:e5:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:B5:CA:7E:C1:37:3C:47:15:EC:66:18:A6:A1:F5:14:1A:B0:84
            X509v3 Authority Key Identifier:
                keyid:AD:6D:43:80:AF:CD:C7:5E:B0:1F:AA:58:AA:53:B5:19:81:D6:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:12:94:b4:72:a5:97:7e:2b:1f:b1:c3:e6:39:2e:e2:bf:9a:
         83:4a:f6:45:36:42:cb:44:f6:b2:a6:eb:a2:e6:1d:35:32:ae:
         98:85:05:b7:5c:a5:31:fd:12:ad:2b:a9:ac:8a:8c:87:86:1f:
         e5:3c:90:23:25:fc:60:fc:58:b2:f9:96:f8:8a:b9:ef:3b:0a:
         98:0b:8f:63:73:64:76:4c:7e:e7:3c:88:6c:f0:f9:2a:19:1e:
         05:c4:3e:0d:f7:cb:44:54:c7:2f:a3:17:18:84:1d:19:b1:64:
         29:a2:a1:61:0e:cb:73:30:e9:e0:90:d5:78:84:a8:86:88:e1:
         dc:39:d3:55:ba:45:9b:51:9b:f2:1b:be:da:cf:ec:61:fa:1f:
         c5:81:ee:7c:7c:91:83:e3:fb:b5:f2:ae:ae:f7:3c:fc:d2:e0:
         ee:72:94:b6:20:32:3c:c4:a0:3d:1e:84:77:30:6e:c6:7e:7f:
         d3:84:4f:10:7a:2b:ef:54:61:8e:a5:d2:46:87:71:3b:20:27:
         78:c9:df:df:4c:a5:47:bd:1e:c8:61:5e:de:40:54:35:43:1a:
         78:e0:59:62:19:b1:4c:c6:2d:6f:9b:42:e9:a5:6b:48:32:c8:
         5c:b2:c8:2a:b1:54:91:3d:ba:ea:f1:aa:73:a8:44:8d:05:78:
         5e:fb:37:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdyT21UvB13NezftLKkd5q6/Dd8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ2RDQzODBBRkNEQzc1RUIwMUZBQTU4QUE1M0I1MTk4
MUQ2RkFBNjAeFw0yNTAxMzExNzA1MTZaFw0yNTAyMDExOTM2MTZaMDMxMTAvBgNV
BAMTKEI3QTZCNUNBN0VDMTM3M0M0NzE1RUM2NjE4QTZBMUY1MTQxQUIwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRpBUlYIP6XLeIFEym4RdhFt2
8qNVqHvIaQhxnnNITnd/89S1oeWty/Hz9WpP/fAJQAfiA+m6C0XQ3LN/ZqjOVvSk
oUCVbKrg41PTy/wr/yLUp3SLUz3EC8Zq/bbjNe+bCK4a5C5etHde14tX9EzqZbnj
KmvakxwWfhmAVbLbDLXAsOqKTXMrwQc5fwFGRDVnzBg+a+1XCn0Agcnsgo+HvA4v
1Zn7OR9zdae6pPi+3z0+PjGYnPvwCtxV+ButyBNluiSNwpDB5ajP4tV2yKBbChYF
Bh8aiMq8lhmc0lc4gZ1FB1e0nBA3zEQdefSgMpfQ02yQFhTG/ZF/w5Ut5ZhBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUt6a1yn7BNzxHFexmGKah9RQasIQwHwYDVR0j
BBgwFoAUrW1DgK/Nx16wH6pYqlO1GYHW+qYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpKaG1zdTF3YzRNbXN1SktzVDlWVVc0REtIVWtaQm1EWXNGQ1VLbVdh
WHcvMC9BRDZENDM4MEFGQ0RDNzVFQjAxRkFBNThBQTUzQjUxOTgxRDZGQUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENkQ0MzgwQUZDREM3NUVC
MDFGQUE1OEFBNTNCNTE5ODFENkZBQTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXpKaG1zdTF3YzRNbXN1SktzVDlWVVc0REtIVWtaQm1EWXNGQ1VLbVdhWHcvMC9B
RDZENDM4MEFGQ0RDNzVFQjAxRkFBNThBQTUzQjUxOTgxRDZGQUE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXxKUtHKll34rH7HD5jku4r+ag0r2RTZCy0T2sqbrouYdNTKumIUFt1ylMf0S
rSuprIqMh4Yf5TyQIyX8YPxYsvmW+Iq57zsKmAuPY3Nkdkx+5zyIbPD5KhkeBcQ+
DffLRFTHL6MXGIQdGbFkKaKhYQ7LczDp4JDVeISohojh3DnTVbpFm1Gb8hu+2s/s
YfofxYHufHyRg+P7tfKurvc8/NLg7nKUtiAyPMSgPR6EdzBuxn5/04RPEHor71Rh
jqXSRodxOyAneMnf30ylR70eyGFe3kBUNUMaeOBZYhmxTMYtb5tC6aVrSDLIXLLI
KrFUkT266vGqc6hEjQV4Xvs3zQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:27 2025 by rpki-client