Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.mft
File:                     090868DBC98ADC1F6A723C3495F8BFBDF361207C.mft (raw, json)
Hash identifier:          +rAq+VZ1OimRz5SpXwKG0CF9t0SHz9VpP1Y1yNigeJA=
Subject key identifier:   36:77:58:66:FE:5F:26:A2:9B:15:E3:83:4E:A7:60:CE:9E:DD:3B:7B
Authority key identifier: 09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C
Certificate issuer:       /CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
Certificate serial:       43F2AEDB86FB4DB5941C7A2C5932FC9424D4CBE6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.mft
Manifest number:          019A
Signing time:             Fri 31 Jan 2025 14:36:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:31:34 +0000
Manifest next update:     Sat 01 Feb 2025 16:17:34 +0000
Files and hashes:         1: 323830343a376433633a3a2f33322d3336203d3e20323731353438.roa (hash: /IE6CWiBh26f81Kr4BpZCRexpRhO9B1cxAQNhAOXkPY=)
                          2: 090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl (hash: OeZsBLikaeCpnAVMn3qKc/sHcRMxRmt1vnC9/7msC80=)
                          3: 3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa (hash: 29qPVQQeQp9iyL2OoR8gfZ73j0UMVUFQLFtp81L/gh0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f2:ae:db:86:fb:4d:b5:94:1c:7a:2c:59:32:fc:94:24:d4:cb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
        Validity
            Not Before: Jan 31 14:31:34 2025 GMT
            Not After : Feb  1 16:17:34 2025 GMT
        Subject: CN=36775866FE5F26A29B15E3834EA760CE9EDD3B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:02:56:56:6b:76:23:05:cb:e7:08:c7:29:
                    56:c1:3f:e8:29:cf:6a:5b:e6:31:f5:8d:74:a1:18:
                    51:8d:f9:2f:90:70:33:75:22:fd:3e:cc:4e:9e:84:
                    41:86:7c:24:27:c1:79:c0:c5:c9:e1:fb:52:a8:e0:
                    62:3b:1a:30:f5:d4:e1:bd:41:a3:65:9c:56:d4:64:
                    d1:f1:09:ac:70:ec:3e:e1:a5:43:1c:c8:38:95:a3:
                    05:35:4b:2a:7a:4f:26:0f:01:09:80:55:5c:98:42:
                    a1:b0:b2:23:59:65:a9:38:1b:e2:5c:31:dc:b7:a0:
                    05:fa:23:fe:34:28:d3:2b:c7:06:98:4f:2b:86:fd:
                    49:7b:dc:a7:d5:2a:59:85:d2:b0:df:ef:be:be:5b:
                    06:0e:fd:0b:88:f1:76:a3:f2:7e:8d:fa:68:2b:25:
                    5a:6a:9b:97:56:c1:a5:8c:3b:61:59:57:a9:08:db:
                    65:4b:50:a5:12:87:09:e3:9a:4c:91:f1:b8:73:b6:
                    57:b9:88:a6:8c:7a:2f:d4:85:81:54:ca:47:70:5e:
                    4d:b6:5d:ea:7b:74:72:1b:37:ae:89:66:d1:32:f8:
                    3c:26:03:9f:10:05:60:fe:9d:15:0f:08:21:06:c8:
                    85:67:20:41:27:29:01:cb:b2:a7:ed:8e:de:7d:5c:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:77:58:66:FE:5F:26:A2:9B:15:E3:83:4E:A7:60:CE:9E:DD:3B:7B
            X509v3 Authority Key Identifier:
                keyid:09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e9:51:75:2a:5c:60:08:31:4f:91:e5:4c:43:b4:75:27:1d:
         c3:de:bd:bb:d5:b7:fb:c0:65:39:c8:40:ad:3d:d3:7c:39:03:
         b3:3f:a7:ea:42:81:25:62:8c:e0:38:a4:d9:d3:71:dd:3f:f1:
         b2:dd:40:9f:3a:dd:fd:47:d6:f1:c6:e2:37:9f:59:3a:2f:d3:
         e5:0c:86:d4:ce:50:99:c2:0d:ef:74:33:a0:21:6d:2e:d6:c1:
         ca:12:4b:d3:c6:41:bd:f6:7d:b3:30:83:5c:86:b8:75:cb:0f:
         a7:a3:7f:ce:45:ce:0b:2c:d7:62:33:75:40:6f:fc:ae:cf:55:
         f3:d1:35:43:5a:a3:ec:ab:02:8d:b4:96:28:87:40:b7:86:e2:
         41:f3:8c:4c:af:ff:38:e6:19:d6:36:89:21:a8:3d:70:b8:70:
         f5:80:00:8b:79:d0:f4:7e:37:1a:4a:10:99:20:ad:c7:ec:2d:
         99:27:00:78:20:c0:e8:d7:89:fa:66:13:1f:ec:e2:c7:1a:41:
         94:44:1e:51:61:83:db:21:c0:85:80:65:80:c4:07:66:73:25:
         49:26:8e:cd:5d:5c:c9:1e:be:4c:8d:70:cb:48:8e:36:1d:9f:
         ae:7c:d5:21:8b:29:78:fe:53:b4:1c:27:48:ed:b4:a1:42:50:
         94:dc:8a:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ/Ku24b7TbWUHHosWTL8lCTUy+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkwODY4REJDOThBREMxRjZBNzIzQzM0OTVGOEJGQkRG
MzYxMjA3QzAeFw0yNTAxMzExNDMxMzRaFw0yNTAyMDExNjE3MzRaMDMxMTAvBgNV
BAMTKDM2Nzc1ODY2RkU1RjI2QTI5QjE1RTM4MzRFQTc2MENFOUVERDNCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgogJWVmt2IwXL5wjHKVbBP+gp
z2pb5jH1jXShGFGN+S+QcDN1Iv0+zE6ehEGGfCQnwXnAxcnh+1Ko4GI7GjD11OG9
QaNlnFbUZNHxCaxw7D7hpUMcyDiVowU1Syp6TyYPAQmAVVyYQqGwsiNZZak4G+Jc
Mdy3oAX6I/40KNMrxwaYTyuG/Ul73KfVKlmF0rDf776+WwYO/QuI8Xaj8n6N+mgr
JVpqm5dWwaWMO2FZV6kI22VLUKUShwnjmkyR8bhztle5iKaMei/UhYFUykdwXk22
Xep7dHIbN66JZtEy+DwmA58QBWD+nRUPCCEGyIVnIEEnKQHLsqftjt59XIVrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNndYZv5fJqKbFeODTqdgzp7dO3swHwYDVR0j
BBgwFoAUCQho28mK3B9qcjw0lfi/vfNhIHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzFRNXd5aWJpZ1lyOTkzRlhRTHFaNkxDR0tWdUM5RFcyUlVuUVhKdEhk
aUovMS8wOTA4NjhEQkM5OEFEQzFGNkE3MjNDMzQ5NUY4QkZCREYzNjEyMDdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5MDg2OERCQzk4QURDMUY2
QTcyM0MzNDk1RjhCRkJERjM2MTIwN0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzFRNXd5aWJpZ1lyOTkzRlhRTHFaNkxDR0tWdUM5RFcyUlVuUVhKdEhkaUovMS8w
OTA4NjhEQkM5OEFEQzFGNkE3MjNDMzQ5NUY4QkZCREYzNjEyMDdDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYelRdSpcYAgxT5HlTEO0dScdw969u9W3+8BlOchArT3TfDkDsz+n6kKBJWKM
4Dik2dNx3T/xst1Anzrd/UfW8cbiN59ZOi/T5QyG1M5QmcIN73QzoCFtLtbByhJL
08ZBvfZ9szCDXIa4dcsPp6N/zkXOCyzXYjN1QG/8rs9V89E1Q1qj7KsCjbSWKIdA
t4biQfOMTK//OOYZ1jaJIag9cLhw9YAAi3nQ9H43GkoQmSCtx+wtmScAeCDA6NeJ
+mYTH+zixxpBlEQeUWGD2yHAhYBlgMQHZnMlSSaOzV1cyR6+TI1wy0iONh2frnzV
IYspeP5TtBwnSO20oUJQlNyK7g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:26 2025 by rpki-client