Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft
File:                     9B0FDA073951168EEB28943672D529AFE023A2B0.mft (raw, json)
Hash identifier:          pmtWxzKv7k6OllJUlVg98BdMsgs/frmQuBK+1wFzihM=
Subject key identifier:   B6:98:B4:96:C9:C6:95:51:AE:A8:FF:4C:08:1C:E5:78:AD:79:AD:BF
Authority key identifier: 9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0
Certificate issuer:       /CN=9B0FDA073951168EEB28943672D529AFE023A2B0
Certificate serial:       0785DC677C875712FB79790D072DA3F70998F48E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 15:05:19 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 17:44:19 +0000
Files and hashes:         1: 323830343a376638383a3a2f33322d3438203d3e20323731363934.roa (hash: 2WhDpJJ/Sz4d4Q7w7NYNUptL0MEhvw+trrIOk1uN/ZM=)
                          2: 9B0FDA073951168EEB28943672D529AFE023A2B0.crl (hash: DUBkLbdmPz2DxdNLGQNfc8da/4L6YRYcApi2TSLz8T4=)
                          3: 3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa (hash: EPqmDHbtz3rmlTSH8k4JxalPId3rLJ5/5pg/Ig/cfjQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:85:dc:67:7c:87:57:12:fb:79:79:0d:07:2d:a3:f7:09:98:f4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B0FDA073951168EEB28943672D529AFE023A2B0
        Validity
            Not Before: Jan 31 15:00:19 2025 GMT
            Not After : Feb  1 17:44:19 2025 GMT
        Subject: CN=B698B496C9C69551AEA8FF4C081CE578AD79ADBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:ec:bf:7c:24:3e:a4:7e:58:e2:d8:ef:e8:
                    87:0b:f3:0b:50:f2:15:38:82:a5:91:11:b9:69:21:
                    fc:00:53:06:65:ce:1b:63:0a:ca:3b:7c:00:42:43:
                    11:8d:28:dc:a7:3d:38:c9:21:37:b0:cd:1f:02:1a:
                    04:90:f7:79:e7:c9:d7:31:ba:0d:f1:f9:c8:18:16:
                    61:61:df:9e:46:71:3d:01:69:bb:21:98:f4:e7:40:
                    59:5a:2b:3f:ef:23:3b:4e:43:fd:a8:0c:00:a4:10:
                    19:af:7d:85:da:a9:cd:a6:51:ea:e6:92:a2:74:fb:
                    f1:63:36:e6:69:75:6b:8d:49:42:11:8a:a8:bd:7d:
                    37:9d:c1:f2:b8:27:3b:47:55:8f:11:5b:c9:80:5c:
                    15:bb:d0:bd:66:03:8f:3d:f1:9f:c5:1b:b3:a8:4e:
                    7b:14:a9:8c:7e:8c:dd:f0:83:8f:bd:43:ce:2b:43:
                    44:61:47:d1:c5:46:a3:21:06:dc:58:76:13:f4:b7:
                    83:e6:24:67:75:0e:89:d5:e2:69:27:3c:62:66:12:
                    18:06:99:87:ef:98:81:5c:4c:28:39:12:07:5e:d4:
                    75:4b:5c:8b:dd:8d:eb:24:f8:d1:06:51:8c:8c:e5:
                    5a:40:10:5e:fb:fe:98:07:d7:ef:32:23:89:3c:93:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:98:B4:96:C9:C6:95:51:AE:A8:FF:4C:08:1C:E5:78:AD:79:AD:BF
            X509v3 Authority Key Identifier:
                keyid:9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:f4:73:7e:83:a7:30:cd:f6:89:04:6e:b2:0e:fb:92:6e:
         4a:4d:36:11:7e:2f:e2:43:92:bf:12:2a:77:91:a1:6f:68:a2:
         c2:ca:61:96:5d:8e:d2:ed:3d:f5:40:46:38:c0:29:14:62:55:
         a7:52:c6:f4:86:33:89:62:1f:c4:a1:aa:07:cd:7c:5a:10:e0:
         fd:89:e6:de:2b:6d:37:ac:bf:12:eb:5b:25:70:46:03:97:33:
         a8:33:de:d8:bf:07:c7:c0:d4:89:df:53:96:11:c0:cf:54:29:
         bf:37:0f:88:94:8e:9a:55:13:55:c1:32:34:39:40:25:b0:e6:
         42:d3:bc:39:f4:e5:16:25:62:36:7a:77:9d:0d:03:0c:c9:df:
         23:b2:f9:ac:e1:a1:2f:b8:5b:67:ee:b1:bf:08:ce:cb:d5:c9:
         83:23:35:f1:29:45:b9:64:bc:3f:47:52:40:df:2a:6b:3f:d2:
         66:ec:b3:73:38:79:a7:fc:2e:e1:2a:e4:1c:4d:d3:d6:7d:5d:
         b3:e8:13:3a:bc:73:e1:46:18:9f:89:e2:a9:94:c8:ee:b2:fc:
         96:6c:ab:eb:23:48:4c:cb:59:82:bf:01:67:4a:d7:06:31:ae:
         07:02:9b:7b:20:ee:8b:4d:71:4a:42:98:a1:4c:aa:50:1e:75:
         d5:84:58:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUB4XcZ3yHVxL7eXkNBy2j9wmY9I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIwRkRBMDczOTUxMTY4RUVCMjg5NDM2NzJENTI5QUZF
MDIzQTJCMDAeFw0yNTAxMzExNTAwMTlaFw0yNTAyMDExNzQ0MTlaMDMxMTAvBgNV
BAMTKEI2OThCNDk2QzlDNjk1NTFBRUE4RkY0QzA4MUNFNTc4QUQ3OUFEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Aey/fCQ+pH5Y4tjv6IcL8wtQ
8hU4gqWREblpIfwAUwZlzhtjCso7fABCQxGNKNynPTjJITewzR8CGgSQ93nnydcx
ug3x+cgYFmFh355GcT0BabshmPTnQFlaKz/vIztOQ/2oDACkEBmvfYXaqc2mUerm
kqJ0+/FjNuZpdWuNSUIRiqi9fTedwfK4JztHVY8RW8mAXBW70L1mA4898Z/FG7Oo
TnsUqYx+jN3wg4+9Q84rQ0RhR9HFRqMhBtxYdhP0t4PmJGd1DonV4mknPGJmEhgG
mYfvmIFcTCg5Egde1HVLXIvdjesk+NEGUYyM5VpAEF77/pgH1+8yI4k8k1GBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtpi0lsnGlVGuqP9MCBzleK15rb8wHwYDVR0j
BBgwFoAUmw/aBzlRFo7rKJQ2ctUpr+AjorAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmtHTTFiTFpUalFGR1ZEMXFIaWFWUDdoeTJ5MXdMdG9wbUNOeGVDc1Jm
eTQvMS85QjBGREEwNzM5NTExNjhFRUIyODk0MzY3MkQ1MjlBRkUwMjNBMkIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCMEZEQTA3Mzk1MTE2OEVF
QjI4OTQzNjcyRDUyOUFGRTAyM0EyQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmtHTTFiTFpUalFGR1ZEMXFIaWFWUDdoeTJ5MXdMdG9wbUNOeGVDc1JmeTQvMS85
QjBGREEwNzM5NTExNjhFRUIyODk0MzY3MkQ1MjlBRkUwMjNBMkIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARKL0c36DpzDN9okEbrIO+5JuSk02EX4v4kOSvxIqd5Ghb2iiwsphll2O0u09
9UBGOMApFGJVp1LG9IYziWIfxKGqB818WhDg/Ynm3ittN6y/EutbJXBGA5czqDPe
2L8Hx8DUid9TlhHAz1QpvzcPiJSOmlUTVcEyNDlAJbDmQtO8OfTlFiViNnp3nQ0D
DMnfI7L5rOGhL7hbZ+6xvwjOy9XJgyM18SlFuWS8P0dSQN8qaz/SZuyzczh5p/wu
4SrkHE3T1n1ds+gTOrxz4UYYn4niqZTI7rL8lmyr6yNITMtZgr8BZ0rXBjGuBwKb
eyDui01xSkKYoUyqUB511YRYeA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:33 2025 by rpki-client