Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
File:                     3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json)
Hash identifier:          i9/+efvBm3j2/BRiskliTZjlu19q97J9y7m5jcSQjkU=
Subject key identifier:   CF:CF:7B:6E:A5:F4:6F:5A:BC:34:F2:1B:BF:CC:FB:2A:97:C4:BA:0B
Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Certificate issuer:       /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Certificate serial:       347694ED02116C56DBEB218EC62799C521348C87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
Manifest number:          03
Signing time:             Fri 31 Jan 2025 18:48:52 +0000
Manifest this update:     Fri 31 Jan 2025 18:43:52 +0000
Manifest next update:     Sat 01 Feb 2025 20:41:52 +0000
Files and hashes:         1: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: b7fiRtlRSnmIrbRXCQI6GCV2VybfWjH1M09FPMn69ec=)
                          2: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE=)
                          3: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: tbkH5yeZvuDlAXrYeHvJYz6TwGXhqVtSN5MEPVbKHTU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:76:94:ed:02:11:6c:56:db:eb:21:8e:c6:27:99:c5:21:34:8c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
        Validity
            Not Before: Jan 31 18:43:52 2025 GMT
            Not After : Feb  1 20:41:52 2025 GMT
        Subject: CN=CFCF7B6EA5F46F5ABC34F21BBFCCFB2A97C4BA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:c4:8e:25:37:65:b8:d1:7d:0c:89:c0:ab:
                    9f:44:cd:c2:6f:dc:7a:6e:e0:dd:34:9a:db:c1:48:
                    a2:82:e8:74:eb:cd:a6:2c:0c:de:e8:73:c0:53:75:
                    a2:5c:1c:fc:1a:63:da:ee:70:4a:01:95:44:48:ca:
                    64:a6:c3:4d:e5:17:46:c6:e2:6f:2c:47:c4:62:b2:
                    18:87:43:b5:f2:77:eb:77:15:ca:e3:90:65:43:99:
                    ff:06:9e:f2:c1:e1:3b:c1:af:f1:7f:f2:b0:7a:7a:
                    dd:11:fa:46:77:17:e2:b4:b2:c8:48:f3:a4:f0:85:
                    f4:31:ff:c9:f7:8e:0c:ed:3a:43:de:2b:81:5a:c5:
                    91:a6:6d:f1:64:e8:0c:e3:80:cf:6a:ec:36:5c:af:
                    10:f1:13:e8:ea:1f:85:de:54:9d:4a:78:83:90:1c:
                    96:5e:0c:f2:e3:17:46:5d:dd:19:fa:03:e4:8d:01:
                    cd:5a:43:ad:10:11:55:49:01:fc:ea:7d:e5:6f:86:
                    a9:47:0f:41:61:43:d8:1d:fd:86:02:96:84:db:be:
                    a4:e8:0b:d5:78:10:06:ec:5c:ce:3f:41:7b:a3:d7:
                    19:a2:bb:ea:85:e6:2f:11:a7:ff:28:15:33:77:23:
                    57:f8:dd:d4:2e:01:81:39:38:67:fa:ed:5b:56:91:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CF:7B:6E:A5:F4:6F:5A:BC:34:F2:1B:BF:CC:FB:2A:97:C4:BA:0B
            X509v3 Authority Key Identifier:
                keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:13:9e:1b:af:c7:40:59:54:76:17:74:9a:26:66:08:1a:
         16:26:d3:93:fa:a7:91:6d:ca:13:7b:ad:33:6a:52:7c:b7:4b:
         18:41:80:8a:d3:e0:db:90:53:a1:64:7c:2e:14:7e:8b:bb:b4:
         20:26:fc:b0:ae:08:6f:7a:f8:e6:10:87:5f:e3:b7:1b:a4:cd:
         e9:de:22:07:9b:dc:4f:b2:b5:ca:57:a4:79:b5:2d:78:03:8e:
         10:a1:2a:77:07:10:2c:04:dc:ac:90:ec:95:02:77:3f:a8:ad:
         3b:e0:57:5f:ca:3d:b9:74:aa:57:60:d2:17:9b:e2:4d:12:96:
         27:9f:00:97:6d:5a:5f:d2:a0:2d:0f:e5:6d:28:b5:2b:61:31:
         02:eb:2b:e1:fe:c8:dd:3f:cb:f9:da:a8:55:69:7b:9b:b1:22:
         b5:5a:99:0a:1d:73:96:bb:b1:95:ce:36:f1:f2:72:bf:f7:63:
         2c:fe:22:6a:ed:8e:15:d3:36:e1:b9:ef:9e:f3:2c:4e:fc:f7:
         da:19:54:60:fb:2a:26:dd:9b:3b:73:40:e1:96:f3:72:f8:e4:
         20:0e:8d:5e:5b:da:a0:6f:9d:f0:8e:8d:6c:5a:0f:23:f4:74:
         28:08:47:fc:53:c6:a4:43:2b:77:e8:3f:f5:aa:71:47:cd:e2:
         8c:c7:5f:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNHaU7QIRbFbb6yGOxieZxSE0jIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy
QjBDOTFDODAeFw0yNTAxMzExODQzNTJaFw0yNTAyMDEyMDQxNTJaMDMxMTAvBgNV
BAMTKENGQ0Y3QjZFQTVGNDZGNUFCQzM0RjIxQkJGQ0NGQjJBOTdDNEJBMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KcSOJTdluNF9DInAq59EzcJv
3Hpu4N00mtvBSKKC6HTrzaYsDN7oc8BTdaJcHPwaY9rucEoBlURIymSmw03lF0bG
4m8sR8RishiHQ7Xyd+t3FcrjkGVDmf8GnvLB4TvBr/F/8rB6et0R+kZ3F+K0sshI
86TwhfQx/8n3jgztOkPeK4FaxZGmbfFk6AzjgM9q7DZcrxDxE+jqH4XeVJ1KeIOQ
HJZeDPLjF0Zd3Rn6A+SNAc1aQ60QEVVJAfzqfeVvhqlHD0FhQ9gd/YYCloTbvqTo
C9V4EAbsXM4/QXuj1xmiu+qF5i8Rp/8oFTN3I1f43dQuAYE5OGf67VtWkXQ/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUz897bqX0b1q8NPIbv8z7KpfEugswHwYDVR0j
BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw
WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG
QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8z
RkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUX0Tnhuvx0BZVHYXdJomZggaFibTk/qnkW3KE3utM2pSfLdLGEGAitPg25BT
oWR8LhR+i7u0ICb8sK4Ib3r45hCHX+O3G6TN6d4iB5vcT7K1ylekebUteAOOEKEq
dwcQLATcrJDslQJ3P6itO+BXX8o9uXSqV2DSF5viTRKWJ58Al21aX9KgLQ/lbSi1
K2ExAusr4f7I3T/L+dqoVWl7m7EitVqZCh1zlruxlc428fJyv/djLP4iau2OFdM2
4bnvnvMsTvz32hlUYPsqJt2bO3NA4ZbzcvjkIA6NXlvaoG+d8I6NbFoPI/R0KAhH
/FPGpEMrd+g/9apxR83ijMdfEg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:43 2025 by rpki-client