Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
File:                     37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft (raw, json)
Hash identifier:          XpGeJFxr67lKfqtMhf4fD6DEGE8T5+TRub8R075sDZE=
Subject key identifier:   FF:BF:31:DC:B7:75:9E:29:0C:F8:88:33:48:F7:95:A4:B9:E0:4A:28
Authority key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
Certificate issuer:       /CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Certificate serial:       53E267499E622CBB6B9028762B8C1CE8AF2E8224
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
Manifest number:          0191
Signing time:             Fri 31 Jan 2025 04:57:24 +0000
Manifest this update:     Fri 31 Jan 2025 04:52:24 +0000
Manifest next update:     Sat 01 Feb 2025 05:17:24 +0000
Files and hashes:         1: 37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl (hash: /15a3x6g9jtXhc/ttwwvKLnYy1q5lTpoTHJfcvknMJ4=)
                          2: 323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (hash: beuMrVEkWutKZOE26o1RUmzJDSUluuinNdYImwuT8NY=)
                          3: 3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa (hash: y5cOMkMMAMHSIAHr+v1FX+Aa0BYFkdB82/YOE+0HEPQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e2:67:49:9e:62:2c:bb:6b:90:28:76:2b:8c:1c:e8:af:2e:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
        Validity
            Not Before: Jan 31 04:52:24 2025 GMT
            Not After : Feb  1 05:17:24 2025 GMT
        Subject: CN=FFBF31DCB7759E290CF8883348F795A4B9E04A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:c1:e5:b0:56:53:8b:06:33:06:c5:ee:05:
                    e0:70:bb:30:d4:4a:cf:06:b8:7b:61:77:f7:b7:d3:
                    10:d1:ce:43:4f:de:fa:ce:79:22:ed:48:36:db:1d:
                    1e:e0:57:8b:9e:07:5b:9a:36:68:34:51:6c:6f:14:
                    d0:72:03:e5:ac:b8:fa:32:56:4b:e0:74:f5:74:e6:
                    d3:28:2e:94:c1:76:79:1e:d1:b3:63:3b:b5:40:17:
                    01:11:0c:4b:c6:af:c7:d5:3d:ea:b8:63:67:db:5a:
                    bf:05:65:09:0f:4f:77:4e:6b:36:d8:12:c6:84:fe:
                    98:11:74:b2:88:6f:f3:80:53:a8:2e:d7:6f:a8:a2:
                    25:16:19:75:8e:69:86:18:88:a9:62:4f:06:44:da:
                    40:53:da:41:5c:09:8b:fe:84:d3:4f:5f:ca:d6:92:
                    1b:14:98:1e:32:49:d6:6b:86:ce:40:d9:c5:14:f4:
                    27:0a:26:a6:1f:81:57:a8:0b:41:62:a2:f5:68:e2:
                    00:cc:aa:2e:dc:7b:43:7a:d8:11:9f:51:3b:01:66:
                    18:3f:a0:f8:6d:61:2a:74:b3:a5:cc:88:c0:8c:62:
                    6b:66:2b:f5:7b:bc:e3:df:34:7b:0e:e0:af:49:24:
                    85:28:6a:1b:bd:fa:45:2e:4d:20:18:22:ba:03:f0:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BF:31:DC:B7:75:9E:29:0C:F8:88:33:48:F7:95:A4:B9:E0:4A:28
            X509v3 Authority Key Identifier:
                keyid:37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:21:f7:ac:97:3f:2a:33:23:38:91:6f:96:17:8e:86:47:4c:
         78:27:04:5d:6f:ae:59:3b:5e:c3:85:6c:2f:d3:70:73:ec:ef:
         49:83:96:95:aa:06:8c:9c:89:ae:99:42:18:83:fa:ea:a9:f5:
         fc:e4:7a:0b:72:5e:50:61:e6:b9:33:51:6d:0a:73:84:8e:18:
         1c:e0:03:32:d0:30:a1:da:ad:17:1a:c6:3d:b4:43:89:16:72:
         e8:08:7b:41:48:c7:0b:35:4b:e1:92:24:60:e3:73:65:ef:ac:
         52:ba:b7:df:11:8d:42:65:93:1d:c6:78:3f:89:46:f7:22:70:
         69:55:68:4e:cb:74:b4:1c:e8:1f:1f:55:0e:61:f1:6c:eb:da:
         e8:17:e9:25:36:61:09:13:96:0f:83:9c:ae:8a:34:fc:af:1b:
         29:03:54:69:f7:05:28:4f:e1:46:c5:a7:9f:48:b8:be:33:b0:
         07:f5:59:bf:f3:d2:6d:8d:60:0b:15:d1:64:f8:dc:42:94:5a:
         46:93:2f:53:5b:1f:d8:33:e1:4b:61:e8:a8:3e:3a:13:bb:72:
         e7:5e:f5:e3:74:e3:6d:2b:02:d0:a4:47:9e:d9:d0:6a:9f:35:
         e1:94:60:27:e1:1f:ca:d7:3f:6b:40:da:d3:bf:c1:c9:a8:3d:
         eb:b2:c0:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU+JnSZ5iLLtrkCh2K4wc6K8ugiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdFOTA1MjNDODI3QTU3QzExRTBCOTdBMDNFNkFEMEFG
MzUwRDdCQjAeFw0yNTAxMzEwNDUyMjRaFw0yNTAyMDEwNTE3MjRaMDMxMTAvBgNV
BAMTKEZGQkYzMURDQjc3NTlFMjkwQ0Y4ODgzMzQ4Rjc5NUE0QjlFMDRBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyMHlsFZTiwYzBsXuBeBwuzDU
Ss8GuHthd/e30xDRzkNP3vrOeSLtSDbbHR7gV4ueB1uaNmg0UWxvFNByA+WsuPoy
VkvgdPV05tMoLpTBdnke0bNjO7VAFwERDEvGr8fVPeq4Y2fbWr8FZQkPT3dOazbY
EsaE/pgRdLKIb/OAU6gu12+ooiUWGXWOaYYYiKliTwZE2kBT2kFcCYv+hNNPX8rW
khsUmB4ySdZrhs5A2cUU9CcKJqYfgVeoC0FiovVo4gDMqi7ce0N62BGfUTsBZhg/
oPhtYSp0s6XMiMCMYmtmK/V7vOPfNHsO4K9JJIUoahu9+kUuTSAYIroD8NQhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/78x3Ld1nikM+IgzSPeVpLngSigwHwYDVR0j
BBgwFoAUN+kFI8gnpXwR4Ll6A+atCvNQ17swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVjNVVQbzFtckZtcGRCcGo2YTVWTG9rTGVCOXozU28yTWhjc3pFVGQ3
UlUvMS8zN0U5MDUyM0M4MjdBNTdDMTFFMEI5N0EwM0U2QUQwQUYzNTBEN0JCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3RTkwNTIzQzgyN0E1N0Mx
MUUwQjk3QTAzRTZBRDBBRjM1MEQ3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzVjNVVQbzFtckZtcGRCcGo2YTVWTG9rTGVCOXozU28yTWhjc3pFVGQ3UlUvMS8z
N0U5MDUyM0M4MjdBNTdDMTFFMEI5N0EwM0U2QUQwQUYzNTBEN0JCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiSH3rJc/KjMjOJFvlheOhkdMeCcEXW+uWTtew4VsL9Nwc+zvSYOWlaoGjJyJ
rplCGIP66qn1/OR6C3JeUGHmuTNRbQpzhI4YHOADMtAwodqtFxrGPbRDiRZy6Ah7
QUjHCzVL4ZIkYONzZe+sUrq33xGNQmWTHcZ4P4lG9yJwaVVoTst0tBzoHx9VDmHx
bOva6BfpJTZhCROWD4Ocroo0/K8bKQNUafcFKE/hRsWnn0i4vjOwB/VZv/PSbY1g
CxXRZPjcQpRaRpMvU1sf2DPhS2HoqD46E7ty517143TjbSsC0KRHntnQap814ZRg
J+Efytc/a0Da07/Byag967LAPA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:50:25 2025 by rpki-client