Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
File:                     F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft (raw, json)
Hash identifier:          2SJ/84WzJvLHqGsAz/n4uPuqi55CWvBaaW7wwsn+A0s=
Subject key identifier:   8F:BC:48:2F:0B:A4:49:72:9D:62:0B:AD:67:2F:A4:F0:A4:77:AD:42
Authority key identifier: F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF
Certificate issuer:       /CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
Certificate serial:       6E81A1E0D0E8AFA53F5A1AFB65118F6A60E9B85F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
Manifest number:          0190
Signing time:             Fri 31 Jan 2025 03:05:14 +0000
Manifest this update:     Fri 31 Jan 2025 03:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 05:13:14 +0000
Files and hashes:         1: 3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa (hash: jqgsi4Sq2GGek0tBJ9nxrdX7K8MskU0gnahmvL22E90=)
                          2: F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl (hash: 4jcWGbc+Edz4vJSevQgWqBzb+dj0RuB2JLdZm+k8lUA=)
                          3: 323830343a373736633a3a2f33322d3438203d3e20323731313737.roa (hash: EwTR6gknKKO5uNyJAD+o5YiaQPgjUBYvX2irD3M4pe0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:81:a1:e0:d0:e8:af:a5:3f:5a:1a:fb:65:11:8f:6a:60:e9:b8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
        Validity
            Not Before: Jan 31 03:00:14 2025 GMT
            Not After : Feb  1 05:13:14 2025 GMT
        Subject: CN=8FBC482F0BA449729D620BAD672FA4F0A477AD42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:32:ab:71:ae:70:b3:32:91:f6:cc:a5:ce:
                    c4:bb:1c:03:4f:15:9e:13:02:6a:1d:c7:bf:22:be:
                    c7:6d:7c:6a:0c:20:23:c9:e9:90:97:c2:e9:08:4e:
                    05:d2:3b:3e:42:dc:9d:c7:85:41:94:c7:88:98:a8:
                    da:11:47:87:e4:d8:db:c6:59:f7:6a:f2:12:fe:7c:
                    fd:87:bf:ab:7d:c4:77:06:25:df:6e:82:75:d8:c5:
                    8f:76:d0:c3:40:d1:d8:f0:a0:d4:4f:0b:3a:bd:de:
                    4d:37:59:89:40:c8:3d:87:3b:c4:dd:de:18:7a:ac:
                    89:94:2e:8a:6a:6b:04:fb:76:f3:e4:f9:17:77:5d:
                    cd:b2:4a:73:5d:c3:c9:cc:35:a1:5b:5c:0c:38:40:
                    f0:8c:11:51:e2:75:c1:a2:e0:8f:0a:16:cb:ee:02:
                    c5:3f:b0:e8:ed:ad:c1:62:37:20:49:5b:2f:9f:11:
                    e9:f4:33:94:19:b8:fb:49:3b:de:45:2a:62:7b:0b:
                    1f:45:78:36:c4:f9:69:f9:94:b2:ba:d2:0e:ba:78:
                    18:f1:d5:93:50:ce:46:43:d8:18:ff:59:26:3c:7a:
                    42:46:fa:c8:af:6e:73:ad:3e:76:d4:ad:9e:10:13:
                    da:95:db:43:79:5f:83:dd:d6:3e:f2:ea:95:e0:24:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BC:48:2F:0B:A4:49:72:9D:62:0B:AD:67:2F:A4:F0:A4:77:AD:42
            X509v3 Authority Key Identifier:
                keyid:F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:7b:1d:0f:eb:eb:ce:d2:13:b7:7f:3a:86:86:0f:78:f6:
         05:36:a2:ff:19:76:59:5c:c9:b9:5a:d2:be:96:65:59:00:04:
         db:cb:84:02:7c:2c:98:43:4c:a0:aa:fd:f7:00:91:13:e0:d4:
         07:98:59:91:7d:20:82:11:76:0b:82:fd:e2:b6:d4:4a:04:36:
         e2:d4:35:f8:21:fa:81:b5:65:df:3b:85:a0:ee:8b:26:e3:cf:
         76:40:3f:bd:8a:17:7c:96:34:6e:91:50:0f:a1:6b:2f:2b:30:
         2f:b7:8c:d9:cc:ed:df:f7:65:24:dd:b8:ef:1b:62:94:b1:ea:
         2f:46:33:cb:5c:a8:3f:14:d4:85:95:f6:cb:06:b8:66:ea:88:
         cc:a8:d2:c5:76:ba:83:62:50:be:8c:e9:37:74:05:f7:c6:80:
         11:dd:bf:8d:7a:9f:f0:51:e1:e0:a3:48:ae:ed:30:08:21:37:
         88:97:c6:51:f5:08:23:ee:38:2f:61:a8:3d:7f:01:ea:5f:fa:
         eb:1e:8a:51:4c:48:8a:0a:36:d1:80:99:54:8a:82:3f:00:2b:
         02:35:41:72:a8:6e:46:65:00:43:5e:00:f4:7c:11:65:2d:d9:
         d9:61:36:5a:45:5b:b4:21:0e:10:92:e3:2c:85:47:26:a0:79:
         ef:26:09:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUboGh4NDor6U/Whr7ZRGPamDpuF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBDRUEyRjdDRTA4QjI5M0ZCMDNCNTRBMjg1MkI1MUE1
NTA1NjBDRjAeFw0yNTAxMzEwMzAwMTRaFw0yNTAyMDEwNTEzMTRaMDMxMTAvBgNV
BAMTKDhGQkM0ODJGMEJBNDQ5NzI5RDYyMEJBRDY3MkZBNEYwQTQ3N0FENDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35zKrca5wszKR9sylzsS7HANP
FZ4TAmodx78ivsdtfGoMICPJ6ZCXwukITgXSOz5C3J3HhUGUx4iYqNoRR4fk2NvG
Wfdq8hL+fP2Hv6t9xHcGJd9ugnXYxY920MNA0djwoNRPCzq93k03WYlAyD2HO8Td
3hh6rImULopqawT7dvPk+Rd3Xc2ySnNdw8nMNaFbXAw4QPCMEVHidcGi4I8KFsvu
AsU/sOjtrcFiNyBJWy+fEen0M5QZuPtJO95FKmJ7Cx9FeDbE+Wn5lLK60g66eBjx
1ZNQzkZD2Bj/WSY8ekJG+sivbnOtPnbUrZ4QE9qV20N5X4Pd1j7y6pXgJI7hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUj7xILwukSXKdYgutZy+k8KR3rUIwHwYDVR0j
BBgwFoAU8M6i984IspP7A7VKKFK1GlUFYM8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1pLaU1VSmgyWE1DampNNjdVVlE1VDZ3QnFyQnU1YTZSdXIxTFFlUTFB
TlAvMS9GMENFQTJGN0NFMDhCMjkzRkIwM0I1NEEyODUyQjUxQTU1MDU2MENGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQ0VBMkY3Q0UwOEIyOTNG
QjAzQjU0QTI4NTJCNTFBNTUwNTYwQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1pLaU1VSmgyWE1DampNNjdVVlE1VDZ3QnFyQnU1YTZSdXIxTFFlUTFBTlAvMS9G
MENFQTJGN0NFMDhCMjkzRkIwM0I1NEEyODUyQjUxQTU1MDU2MENGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgeh7HQ/r687SE7d/OoaGD3j2BTai/xl2WVzJuVrSvpZlWQAE28uEAnwsmENM
oKr99wCRE+DUB5hZkX0gghF2C4L94rbUSgQ24tQ1+CH6gbVl3zuFoO6LJuPPdkA/
vYoXfJY0bpFQD6FrLyswL7eM2czt3/dlJN247xtilLHqL0Yzy1yoPxTUhZX2ywa4
ZuqIzKjSxXa6g2JQvozpN3QF98aAEd2/jXqf8FHh4KNIru0wCCE3iJfGUfUII+44
L2GoPX8B6l/66x6KUUxIigo20YCZVIqCPwArAjVBcqhuRmUAQ14A9HwRZS3Z2WE2
WkVbtCEOEJLjLIVHJqB57yYJbA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:21:45 2025 by rpki-client