Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/2A50FAE337A6C3B2403E936C43EE2E93CE369248.mft
File:                     2A50FAE337A6C3B2403E936C43EE2E93CE369248.mft (raw, json)
Hash identifier:          UGsFUf3Ui/qIp/cho6ESnoJCtutoVBa/7UKjLn+LnfU=
Subject key identifier:   D9:D1:EB:18:27:DB:76:DB:18:54:80:77:85:E2:44:76:02:2B:B2:11
Authority key identifier: 2A:50:FA:E3:37:A6:C3:B2:40:3E:93:6C:43:EE:2E:93:CE:36:92:48
Certificate issuer:       /CN=2A50FAE337A6C3B2403E936C43EE2E93CE369248
Certificate serial:       69E60A6BCD3E1EE0955B9D9B838D259ACC972A6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A50FAE337A6C3B2403E936C43EE2E93CE369248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/2A50FAE337A6C3B2403E936C43EE2E93CE369248.mft
Manifest number:          3D
Signing time:             Fri 31 Jan 2025 03:10:12 +0000
Manifest this update:     Fri 31 Jan 2025 03:05:12 +0000
Manifest next update:     Sat 01 Feb 2025 03:44:12 +0000
Files and hashes:         1: 323830343a363062383a3a2f33322d313238203d3e20323639313836.roa (hash: CKXl6WAbGyrGUI+XC0gxiuLB0lQcBTy9AtiTLx/Lc50=)
                          2: 34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa (hash: znyWn9wGUvDsfG8CETfksd730Xv1Qq367zOUtJ8J2Kc=)
                          3: 2A50FAE337A6C3B2403E936C43EE2E93CE369248.crl (hash: OECiAL+NjDvnuzFrLXs/BbQQREwjcjVlIkC0WV4iM3A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e6:0a:6b:cd:3e:1e:e0:95:5b:9d:9b:83:8d:25:9a:cc:97:2a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A50FAE337A6C3B2403E936C43EE2E93CE369248
        Validity
            Not Before: Jan 31 03:05:12 2025 GMT
            Not After : Feb  1 03:44:12 2025 GMT
        Subject: CN=D9D1EB1827DB76DB1854807785E24476022BB211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:df:49:df:b4:4f:47:81:ee:5e:10:dd:68:
                    21:95:91:a8:c7:a6:aa:3d:46:02:4e:f8:c8:ac:38:
                    35:4f:f1:38:9b:4e:24:5b:a8:75:90:56:ff:f8:48:
                    e7:63:78:5b:36:83:ea:a0:25:2d:85:ca:b2:16:2e:
                    51:cf:10:eb:1c:d1:91:81:b4:75:1b:14:ce:17:a2:
                    0f:57:95:e0:e0:da:d9:3b:e4:c0:29:59:30:a8:39:
                    26:c7:54:99:d0:7c:5f:ae:0d:87:8f:ee:9c:e6:0a:
                    04:93:e0:1c:29:01:ad:09:8a:7a:2a:ed:d7:1c:a1:
                    46:02:7c:98:39:c8:80:4d:a6:f3:45:92:88:ae:30:
                    22:9a:3f:b7:56:8b:6e:63:3c:09:5d:65:03:0e:dd:
                    1e:d7:6e:97:81:6c:bd:96:da:92:7a:37:d4:fa:e5:
                    3b:e3:b0:b7:d2:38:f6:c1:0d:e3:69:22:99:3a:06:
                    18:b9:7b:4b:91:1f:ee:c2:f8:b4:2a:e8:24:24:b8:
                    15:fc:71:1c:1e:28:76:16:dd:10:ad:56:ac:86:a7:
                    18:93:9b:38:17:43:22:2f:06:a4:6a:cc:ca:7b:24:
                    ca:3d:5e:ee:5f:d0:5b:45:f6:b5:56:9f:2f:23:b7:
                    49:52:cb:0c:98:ad:d0:fb:56:a3:fd:7a:a8:eb:a4:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D1:EB:18:27:DB:76:DB:18:54:80:77:85:E2:44:76:02:2B:B2:11
            X509v3 Authority Key Identifier:
                keyid:2A:50:FA:E3:37:A6:C3:B2:40:3E:93:6C:43:EE:2E:93:CE:36:92:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/2A50FAE337A6C3B2403E936C43EE2E93CE369248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A50FAE337A6C3B2403E936C43EE2E93CE369248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/2A50FAE337A6C3B2403E936C43EE2E93CE369248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c4:66:36:98:10:89:21:ca:b8:d3:72:70:90:d3:b3:72:ba:
         f2:00:a6:36:7c:40:a2:f5:5f:40:df:24:a0:a6:1f:e9:7e:2d:
         51:5d:81:ea:d9:0f:ed:77:8e:60:03:16:3c:4b:a2:5f:0b:3d:
         24:11:68:02:f1:08:fb:18:9d:17:33:9a:ac:ae:95:f4:96:05:
         7a:89:e1:9c:ab:3f:59:e5:45:13:d5:9e:19:ef:2d:7b:1d:b0:
         c0:75:b3:61:44:63:4a:40:56:46:56:6a:1d:0b:1e:9c:9f:8e:
         8f:2f:18:44:54:24:2c:ef:99:57:75:60:ea:71:b5:f1:06:da:
         93:ed:cd:20:23:86:c7:89:20:6b:24:98:d7:84:63:cf:96:b9:
         61:cd:12:49:aa:fe:23:21:fa:f3:4c:49:f3:a3:cc:8b:e7:11:
         51:29:c8:31:2e:3d:fa:2e:57:da:36:62:fa:4f:0c:c0:25:27:
         ea:05:26:00:75:f6:0d:f4:cc:1d:2e:4b:07:29:31:f8:cd:c7:
         69:8e:3c:2e:0a:43:4a:a2:af:75:c0:47:18:24:1f:be:42:12:
         7e:80:c4:e8:3c:75:fb:bc:69:29:20:cc:d6:4a:e2:84:ef:a3:
         5c:78:9f:25:9d:a6:c1:4b:aa:73:29:47:8f:1d:17:a8:4d:71:
         45:37:70:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaeYKa80+HuCVW52bg40lmsyXKm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE1MEZBRTMzN0E2QzNCMjQwM0U5MzZDNDNFRTJFOTND
RTM2OTI0ODAeFw0yNTAxMzEwMzA1MTJaFw0yNTAyMDEwMzQ0MTJaMDMxMTAvBgNV
BAMTKEQ5RDFFQjE4MjdEQjc2REIxODU0ODA3Nzg1RTI0NDc2MDIyQkIyMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiB99J37RPR4HuXhDdaCGVkajH
pqo9RgJO+MisODVP8TibTiRbqHWQVv/4SOdjeFs2g+qgJS2FyrIWLlHPEOsc0ZGB
tHUbFM4Xog9XleDg2tk75MApWTCoOSbHVJnQfF+uDYeP7pzmCgST4BwpAa0Jinoq
7dccoUYCfJg5yIBNpvNFkoiuMCKaP7dWi25jPAldZQMO3R7XbpeBbL2W2pJ6N9T6
5TvjsLfSOPbBDeNpIpk6Bhi5e0uRH+7C+LQq6CQkuBX8cRweKHYW3RCtVqyGpxiT
mzgXQyIvBqRqzMp7JMo9Xu5f0FtF9rVWny8jt0lSywyYrdD7VqP9eqjrpPI1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2dHrGCfbdtsYVIB3heJEdgIrshEwHwYDVR0j
BBgwFoAUKlD64zemw7JAPpNsQ+4uk842kkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVNM01jcEJUWEdBMlZaNXVpZmN4Nk01VmhrSmMzOHJ2ZkdTOEZoMlVM
ZzEvMC8yQTUwRkFFMzM3QTZDM0IyNDAzRTkzNkM0M0VFMkU5M0NFMzY5MjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNTBGQUUzMzdBNkMzQjI0
MDNFOTM2QzQzRUUyRTkzQ0UzNjkyNDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjVNM01jcEJUWEdBMlZaNXVpZmN4Nk01VmhrSmMzOHJ2ZkdTOEZoMlVMZzEvMC8y
QTUwRkFFMzM3QTZDM0IyNDAzRTkzNkM0M0VFMkU5M0NFMzY5MjQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAksRmNpgQiSHKuNNycJDTs3K68gCmNnxAovVfQN8koKYf6X4tUV2B6tkP7XeO
YAMWPEuiXws9JBFoAvEI+xidFzOarK6V9JYFeonhnKs/WeVFE9WeGe8tex2wwHWz
YURjSkBWRlZqHQsenJ+Ojy8YRFQkLO+ZV3Vg6nG18Qbak+3NICOGx4kgaySY14Rj
z5a5Yc0SSar+IyH680xJ86PMi+cRUSnIMS49+i5X2jZi+k8MwCUn6gUmAHX2DfTM
HS5LBykx+M3HaY48LgpDSqKvdcBHGCQfvkISfoDE6Dx1+7xpKSDM1krihO+jXHif
JZ2mwUuqcylHjx0XqE1xRTdw9A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:20:20 2025 by rpki-client