Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft
File:                     704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft (raw, json)
Hash identifier:          xh7IlsQW36ynCs2jT1QtGwfdr3v40UztInfY2/LoFEA=
Subject key identifier:   24:5B:3D:C1:5E:EA:CF:DF:E5:39:C5:A8:01:AD:69:53:E2:90:B0:B1
Authority key identifier: 70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
Certificate issuer:       /CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Certificate serial:       31FCE3088E5E485045460EB5CA35482FF6A44C64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft
Manifest number:          0176
Signing time:             Fri 31 Jan 2025 01:58:49 +0000
Manifest this update:     Fri 31 Jan 2025 01:53:49 +0000
Manifest next update:     Sat 01 Feb 2025 03:35:49 +0000
Files and hashes:         1: 3133382e3138352e3139362e302f32322d3232203d3e20323633383437.roa (hash: NDaWlLktMn1w6/OFvrVG9VmsReqvq8/YsdwyXkC8yAw=)
                          2: 323830343a323661383a3a2f33322d3336203d3e20323633383437.roa (hash: 1MxJny3AEFF6EnjF5MA0bGJ2ksOQDdHQKIX6odlm5S4=)
                          3: 3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa (hash: V9K9CNnADslJnaJYWOIBlFUvmKpcpsAt4ZE5NfFCW2w=)
                          4: 3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa (hash: +o3i+RkEBwS6gNhxS7XVLcejWkc8phx4kgtsYuABNvo=)
                          5: 704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl (hash: 9PopXXm2tRIyc4xtwUnJzdcpLuFNN0e16spEYPedxj4=)
                          6: 3133382e3138352e3139382e302f32342d3234203d3e20323633383437.roa (hash: mmJ2wCCiudcomB2GCJ2qqB1PKLnRgCAl1k6D8YNmHBY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fc:e3:08:8e:5e:48:50:45:46:0e:b5:ca:35:48:2f:f6:a4:4c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
        Validity
            Not Before: Jan 31 01:53:49 2025 GMT
            Not After : Feb  1 03:35:49 2025 GMT
        Subject: CN=245B3DC15EEACFDFE539C5A801AD6953E290B0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:77:f6:aa:b0:95:ac:5c:2e:e1:a3:32:8e:d5:
                    44:f8:79:ec:a6:b5:84:49:b7:c4:9b:cb:82:55:81:
                    fa:d6:fc:02:0a:98:c9:5b:c9:61:ae:ec:c3:be:d2:
                    7f:88:c0:29:77:7f:ed:e8:bb:59:38:a8:ae:32:42:
                    5d:7a:ad:a4:0f:4a:d0:2c:b9:69:f4:23:57:a4:91:
                    22:73:ba:52:50:6f:54:b4:bf:03:66:12:33:ab:97:
                    65:97:73:bd:83:31:6f:75:cd:55:98:7b:fc:f4:ff:
                    fb:66:3e:e5:d5:45:f7:66:91:2c:93:01:b6:56:45:
                    27:17:87:f8:f7:98:31:a7:41:29:3d:6d:46:83:7e:
                    a3:f4:e1:f6:9b:78:65:2a:36:5b:e8:8e:d7:04:8b:
                    67:b5:f8:62:21:e0:57:d9:87:d0:6b:48:c2:7c:68:
                    af:d7:79:be:cd:1e:45:8b:1d:37:b0:19:ec:e0:77:
                    ab:ad:8a:4f:d2:5c:84:ac:e6:36:39:42:50:c3:ae:
                    00:9d:c7:22:54:b9:96:fe:59:25:07:2d:b3:62:c1:
                    26:70:93:73:e0:fa:cc:2b:1e:2c:03:70:20:29:5f:
                    29:c9:88:18:bb:bf:2c:e1:37:9f:6d:5c:18:f7:33:
                    e8:d7:71:99:1d:6c:72:da:da:63:0d:f4:66:85:80:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5B:3D:C1:5E:EA:CF:DF:E5:39:C5:A8:01:AD:69:53:E2:90:B0:B1
            X509v3 Authority Key Identifier:
                keyid:70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:07:a1:85:b2:f0:fc:36:0c:3c:73:96:81:c7:0c:51:3c:dd:
         c3:27:c8:40:c3:a1:fc:b5:fe:f0:d6:11:87:92:b1:73:89:3b:
         63:e0:90:1c:10:0b:64:ee:86:e0:4f:5d:99:fb:d5:04:b8:d5:
         ac:22:2c:3c:17:72:78:dc:36:cb:b8:79:3a:39:36:c2:fc:f5:
         d5:96:31:71:78:4f:2f:22:e4:a0:e1:5f:5d:e7:7a:b5:ed:e4:
         79:e6:a6:47:1a:9d:7a:69:af:38:cc:37:f8:b6:96:8d:a6:ca:
         c8:eb:2d:c2:19:4f:26:ed:32:89:99:e9:5e:1c:b5:ad:b3:52:
         d3:02:09:e2:79:f0:f4:25:61:96:16:e2:2d:6d:78:97:e0:02:
         84:fc:79:16:61:77:c9:c5:14:db:a3:37:39:c7:19:90:01:8e:
         e0:1d:9c:de:78:f0:01:86:d3:85:e7:3d:12:40:44:ee:f5:e0:
         0e:4e:dd:b0:26:e8:c6:7f:3c:68:c4:50:22:e6:be:31:24:07:
         80:e7:60:10:d2:10:e1:93:02:37:94:68:6b:d3:6f:33:df:b7:
         26:34:03:3a:64:d8:d9:d6:82:e9:2a:dd:dd:76:25:0d:5c:0f:
         70:19:5d:27:90:d2:bd:22:9d:b0:5d:8f:13:1f:82:c6:22:d1:
         08:43:f0:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMfzjCI5eSFBFRg61yjVIL/akTGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA0NDU4Q0RDNTc5NTZEOTZFNDE4N0IxOENBRjhCOUJD
MjdGQzRFRjAeFw0yNTAxMzEwMTUzNDlaFw0yNTAyMDEwMzM1NDlaMDMxMTAvBgNV
BAMTKDI0NUIzREMxNUVFQUNGREZFNTM5QzVBODAxQUQ2OTUzRTI5MEIwQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOd/aqsJWsXC7hozKO1UT4eeym
tYRJt8Sby4JVgfrW/AIKmMlbyWGu7MO+0n+IwCl3f+3ou1k4qK4yQl16raQPStAs
uWn0I1ekkSJzulJQb1S0vwNmEjOrl2WXc72DMW91zVWYe/z0//tmPuXVRfdmkSyT
AbZWRScXh/j3mDGnQSk9bUaDfqP04fabeGUqNlvojtcEi2e1+GIh4FfZh9BrSMJ8
aK/Xeb7NHkWLHTewGezgd6utik/SXISs5jY5QlDDrgCdxyJUuZb+WSUHLbNiwSZw
k3Pg+swrHiwDcCApXynJiBi7vyzhN59tXBj3M+jXcZkdbHLa2mMN9GaFgN77AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJFs9wV7qz9/lOcWoAa1pU+KQsLEwHwYDVR0j
BBgwFoAUcERYzcV5VtluQYexjK+Lm8J/xO8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzI4OEF5RHg5emduVTMxck5LcnJpOVZrbkh4WXd2ellRYnd1ajc0S1ZD
VjIvMC83MDQ0NThDREM1Nzk1NkQ5NkU0MTg3QjE4Q0FGOEI5QkMyN0ZDNEVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwNDQ1OENEQzU3OTU2RDk2
RTQxODdCMThDQUY4QjlCQzI3RkM0RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzI4OEF5RHg5emduVTMxck5LcnJpOVZrbkh4WXd2ellRYnd1ajc0S1ZDVjIvMC83
MDQ0NThDREM1Nzk1NkQ5NkU0MTg3QjE4Q0FGOEI5QkMyN0ZDNEVGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcgehhbLw/DYMPHOWgccMUTzdwyfIQMOh/LX+8NYRh5Kxc4k7Y+CQHBALZO6G
4E9dmfvVBLjVrCIsPBdyeNw2y7h5Ojk2wvz11ZYxcXhPLyLkoOFfXed6te3keeam
RxqdemmvOMw3+LaWjabKyOstwhlPJu0yiZnpXhy1rbNS0wIJ4nnw9CVhlhbiLW14
l+AChPx5FmF3ycUU26M3OccZkAGO4B2c3njwAYbThec9EkBE7vXgDk7dsCboxn88
aMRQIua+MSQHgOdgENIQ4ZMCN5Roa9NvM9+3JjQDOmTY2daC6Srd3XYlDVwPcBld
J5DSvSKdsF2PEx+CxiLRCEPwVA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:27:25 2025 by rpki-client