Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.mft
File:                     D93EABAFE6C4BBB0E20474DA146E626A7B718C49.mft (raw, json)
Hash identifier:          ak71KAoJlcs16lQZntcqsBhycJVmyI8DfUE9v8vHfKc=
Subject key identifier:   DF:AC:00:A7:09:9A:84:6E:E3:C5:52:7D:43:BA:9E:90:84:BD:6A:85
Authority key identifier: D9:3E:AB:AF:E6:C4:BB:B0:E2:04:74:DA:14:6E:62:6A:7B:71:8C:49
Certificate issuer:       /CN=D93EABAFE6C4BBB0E20474DA146E626A7B718C49
Certificate serial:       048741AAB1C9B4D016A65C2AC6DBB71672314BE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.mft
Manifest number:          4C
Signing time:             Fri 31 Jan 2025 04:33:28 +0000
Manifest this update:     Fri 31 Jan 2025 04:28:28 +0000
Manifest next update:     Sat 01 Feb 2025 07:02:28 +0000
Files and hashes:         1: D93EABAFE6C4BBB0E20474DA146E626A7B718C49.crl (hash: n/BrbjI/8bMvObBdqfqG4wkaZLs4oQsVoayfMbyMwKY=)
                          2: 3137392e302e3139302e302f32342d3234203d3e20323730383538.roa (hash: I+fnROOaCsDDTEksWUgm4TYdNgb0fqNwPSZ9of+cfjA=)
                          3: 3137392e302e3139312e302f32342d3234203d3e20323730383538.roa (hash: DLA7agCXDTCrlvS5FMrPCu4+CYvwpIORDVI+0EURuwI=)
                          4: 323830343a373238343a3a2f33332d3438203d3e20323730383538.roa (hash: nBchnEjMUsrWoIn7OGJ0mC6af9tiFnP2Whw1XwB6DyE=)
                          5: 323830343a373238343a383030303a3a2f33332d3438203d3e20323730383538.roa (hash: k/71jXLiHoCDA7VwWKpYoMXiPcKAL16phi5aYMlyDMg=)
                          6: 323830343a373238343a3a2f33322d3438203d3e20323730383538.roa (hash: gVY/ebSu3wTglaVWFUd4ipq1A3/+d4qtdWzvkaKUDTQ=)
                          7: 3137392e302e3139302e302f32332d3234203d3e20323730383538.roa (hash: E3W46EG8j2JwRXdMEoJVmIlw3oOkXI83ARPCiu/e6cY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:87:41:aa:b1:c9:b4:d0:16:a6:5c:2a:c6:db:b7:16:72:31:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93EABAFE6C4BBB0E20474DA146E626A7B718C49
        Validity
            Not Before: Jan 31 04:28:28 2025 GMT
            Not After : Feb  1 07:02:28 2025 GMT
        Subject: CN=DFAC00A7099A846EE3C5527D43BA9E9084BD6A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:c5:56:fb:d7:61:0d:fa:07:f2:67:6d:c6:
                    fa:be:73:93:e1:dc:d7:47:d5:5a:43:55:dc:29:b8:
                    b1:90:4d:ab:4c:51:21:48:4b:f5:66:a4:39:80:af:
                    67:34:b8:92:94:ef:50:db:40:e0:26:ac:ed:40:43:
                    81:60:64:da:76:7c:d1:59:b6:3d:7a:4b:c1:c2:4a:
                    c7:c5:39:81:e4:9d:9c:4f:11:51:28:d1:52:58:3f:
                    51:82:a3:8e:8b:de:49:68:01:d8:db:a8:eb:26:f4:
                    d2:69:1b:8a:b1:99:12:c4:01:7f:d2:3f:c3:c6:ac:
                    10:22:03:82:85:a4:6a:e5:c9:d8:3a:59:cc:85:93:
                    4b:04:40:aa:22:1f:9e:55:48:58:71:59:d6:48:f9:
                    86:8c:66:de:48:19:d7:68:b2:9e:1a:05:9e:ee:ea:
                    8d:fd:08:cd:8c:15:42:9b:ef:35:9f:c4:ea:13:86:
                    24:f2:75:93:d8:8a:8c:09:b1:24:9a:8c:9d:13:4e:
                    7c:ef:6d:14:2a:5a:5a:dd:af:83:9f:18:5c:5b:f9:
                    df:af:54:b4:64:f0:c2:cd:e5:72:ab:4d:9e:9b:7f:
                    a8:9a:66:46:9c:0a:df:4b:ff:1f:e7:d4:ac:85:a3:
                    97:b1:45:b1:55:88:db:4b:74:4b:a9:a1:6d:a6:65:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AC:00:A7:09:9A:84:6E:E3:C5:52:7D:43:BA:9E:90:84:BD:6A:85
            X509v3 Authority Key Identifier:
                keyid:D9:3E:AB:AF:E6:C4:BB:B0:E2:04:74:DA:14:6E:62:6A:7B:71:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:11:e0:57:83:ef:80:81:31:ed:b3:60:d9:ad:84:f7:eb:37:
         bc:12:57:29:ff:8e:b8:45:be:55:4a:a3:7e:db:9e:4d:e1:88:
         6e:0b:9b:45:68:01:53:f4:a7:db:d1:a5:f5:38:2a:eb:44:cb:
         8b:ea:53:bc:78:ba:2f:7f:be:f3:5f:44:0b:12:c4:23:ab:b9:
         13:19:83:56:f4:d4:76:e8:ee:b8:75:a3:e0:06:6a:f0:a0:d6:
         ac:70:41:7e:68:83:e5:4f:19:fb:a0:ce:53:7c:71:86:1b:de:
         e4:6a:87:43:32:3f:88:8a:c4:28:30:c7:b9:a9:f6:83:a7:da:
         02:d3:7d:3f:9b:bb:09:1d:37:08:13:4f:2d:d3:80:03:d2:b2:
         35:2c:26:b4:6f:0a:00:59:db:aa:27:88:2f:f9:39:f7:a2:6b:
         c5:b7:94:cb:82:11:49:51:46:fb:2b:9e:de:8a:14:21:5e:08:
         7d:f1:f0:9d:fe:1d:eb:37:3d:1d:24:08:2a:30:fa:6e:99:08:
         68:66:b0:c7:f6:27:7f:d0:06:80:bc:7b:09:c4:ba:5f:61:76:
         35:28:bb:c5:63:c9:19:2d:42:aa:25:f9:1c:37:f0:dd:a3:cb:
         cb:9c:f3:4c:17:fd:b9:a8:71:9d:56:48:c4:a0:9f:63:53:f8:
         2a:03:aa:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBIdBqrHJtNAWplwqxtu3FnIxS+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkzRUFCQUZFNkM0QkJCMEUyMDQ3NERBMTQ2RTYyNkE3
QjcxOEM0OTAeFw0yNTAxMzEwNDI4MjhaFw0yNTAyMDEwNzAyMjhaMDMxMTAvBgNV
BAMTKERGQUMwMEE3MDk5QTg0NkVFM0M1NTI3RDQzQkE5RTkwODRCRDZBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/sVW+9dhDfoH8mdtxvq+c5Ph
3NdH1VpDVdwpuLGQTatMUSFIS/VmpDmAr2c0uJKU71DbQOAmrO1AQ4FgZNp2fNFZ
tj16S8HCSsfFOYHknZxPEVEo0VJYP1GCo46L3kloAdjbqOsm9NJpG4qxmRLEAX/S
P8PGrBAiA4KFpGrlydg6WcyFk0sEQKoiH55VSFhxWdZI+YaMZt5IGddosp4aBZ7u
6o39CM2MFUKb7zWfxOoThiTydZPYiowJsSSajJ0TTnzvbRQqWlrdr4OfGFxb+d+v
VLRk8MLN5XKrTZ6bf6iaZkacCt9L/x/n1KyFo5exRbFViNtLdEupoW2mZavlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU36wApwmahG7jxVJ9Q7qekIS9aoUwHwYDVR0j
BBgwFoAU2T6rr+bEu7DiBHTaFG5iantxjEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzR5S1Q3dEdrYkR5dzNxVHk0RXoyN292dURxdVd3VmpmTjVBWjh3VGY2
TmkvMS9EOTNFQUJBRkU2QzRCQkIwRTIwNDc0REExNDZFNjI2QTdCNzE4QzQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5M0VBQkFGRTZDNEJCQjBF
MjA0NzREQTE0NkU2MjZBN0I3MThDNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzR5S1Q3dEdrYkR5dzNxVHk0RXoyN292dURxdVd3VmpmTjVBWjh3VGY2TmkvMS9E
OTNFQUJBRkU2QzRCQkIwRTIwNDc0REExNDZFNjI2QTdCNzE4QzQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASBHgV4PvgIEx7bNg2a2E9+s3vBJXKf+OuEW+VUqjftueTeGIbgubRWgBU/Sn
29Gl9Tgq60TLi+pTvHi6L3++819ECxLEI6u5ExmDVvTUdujuuHWj4AZq8KDWrHBB
fmiD5U8Z+6DOU3xxhhve5GqHQzI/iIrEKDDHuan2g6faAtN9P5u7CR03CBNPLdOA
A9KyNSwmtG8KAFnbqieIL/k596JrxbeUy4IRSVFG+yue3ooUIV4IffHwnf4d6zc9
HSQIKjD6bpkIaGawx/Ynf9AGgLx7CcS6X2F2NSi7xWPJGS1CqiX5HDfw3aPLy5zz
TBf9uahxnVZIxKCfY1P4KgOqXw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:22 2025 by rpki-client