Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft
File:                     CFF957416ABC451AD3955260CF69F31756051BD6.mft (raw, json)
Hash identifier:          7wEVuOiXg1REsjlc690EmeYuJe1kMKgtLh6RQKcvIDo=
Subject key identifier:   9D:A1:F3:6E:ED:FA:D2:8C:F8:68:2C:59:D1:0E:8E:02:8B:7D:7B:F2
Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
Certificate issuer:       /CN=CFF957416ABC451AD3955260CF69F31756051BD6
Certificate serial:       0299467EC67F32AD038186BD401DB362870ED6AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft
Manifest number:          0125
Signing time:             Fri 31 Jan 2025 12:50:36 +0000
Manifest this update:     Fri 31 Jan 2025 12:45:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:40:36 +0000
Files and hashes:         1: 3137302e3234372e36342e302f32322d3234203d3e203532353932.roa (hash: iIrQVb+oFNoMn4qIX3ARP+rhcCH/gWUK95CLvP//8bw=)
                          2: CFF957416ABC451AD3955260CF69F31756051BD6.crl (hash: gQEVxzBmhBb2vj7sQZs/drI/orzbEtgA+lv1NBIpnNU=)
                          3: 323830343a333937633a3a2f33322d3336203d3e203532353932.roa (hash: LUk6V76y8pZ51vvrFPnkR/k2b6NOOQ6fbAfl2u9oEpE=)
                          4: 3137372e38372e39322e302f32322d3234203d3e203532353932.roa (hash: sC82pz7FH/iYsVEwYZs15az+rfen1uSo1vnf4wG5pKA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:99:46:7e:c6:7f:32:ad:03:81:86:bd:40:1d:b3:62:87:0e:d6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6
        Validity
            Not Before: Jan 31 12:45:36 2025 GMT
            Not After : Feb  1 13:40:36 2025 GMT
        Subject: CN=9DA1F36EEDFAD28CF8682C59D10E8E028B7D7BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:55:02:c6:e8:e3:87:67:08:ed:de:93:f1:
                    8a:5d:d1:d3:0a:43:c0:ae:5b:f0:72:48:f9:c2:61:
                    b1:48:a4:83:8b:72:96:af:06:95:8a:bb:ed:95:af:
                    7d:b4:7d:f5:dc:ae:d2:6b:41:4c:56:29:f1:6c:eb:
                    e6:1e:6e:ac:67:b7:d9:2d:37:b6:25:11:7f:f5:17:
                    12:b0:d2:85:99:a3:f9:e1:60:3d:ab:38:61:88:45:
                    fa:ca:98:f6:40:f7:42:53:a7:5e:36:48:45:47:11:
                    18:e1:1a:dc:3d:4f:18:48:ea:67:36:8d:0a:0d:eb:
                    ea:de:01:bf:c0:8a:58:79:70:b8:62:16:db:0c:a9:
                    5d:2f:3a:c9:68:f6:26:3b:9d:7d:21:0d:e6:47:b3:
                    b1:dd:29:43:80:08:b6:13:ed:06:11:e2:be:8a:6c:
                    2a:d5:4b:2e:2b:de:d2:38:1f:57:2e:b0:64:66:c4:
                    83:7d:28:f3:46:f3:a3:8b:88:94:dd:54:b0:f1:5f:
                    aa:43:c3:5c:12:61:02:3c:8f:be:1a:50:c2:91:30:
                    8c:18:26:ee:85:ef:74:86:a1:4b:6d:71:dc:40:f9:
                    9c:71:e0:d8:7f:e7:08:a4:e4:a9:ad:14:04:09:bf:
                    74:7d:58:71:34:0d:d9:6f:e1:a6:05:99:28:ec:5b:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A1:F3:6E:ED:FA:D2:8C:F8:68:2C:59:D1:0E:8E:02:8B:7D:7B:F2
            X509v3 Authority Key Identifier:
                keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f2:7c:68:6a:e8:d1:38:1f:8e:1f:90:86:3c:6a:17:aa:dc:
         9d:a4:25:31:69:a2:ec:64:b0:78:d0:83:e9:b6:da:f1:0c:e2:
         04:56:25:e7:5e:a0:90:e2:de:97:79:db:a4:40:f5:ff:75:67:
         44:f7:7e:79:97:95:64:39:ba:4f:8d:2f:e4:60:bf:d8:64:6f:
         38:57:be:18:52:c4:1e:65:cd:c7:a1:91:8d:2b:0d:a7:f8:ec:
         94:c3:f7:35:d9:3b:f2:50:25:ba:da:c4:85:d1:db:77:1d:44:
         47:cd:d0:ad:f9:e2:fd:be:dc:7d:13:14:06:16:5e:f3:34:79:
         8a:b2:5b:f5:1d:d9:44:7d:da:61:eb:be:fb:e8:00:0c:ad:c2:
         fe:11:a5:f1:a6:9a:56:50:9d:0a:82:e0:e2:75:92:3b:0a:e6:
         a1:91:dc:d8:5b:14:66:cc:19:8c:c0:2b:66:8f:57:48:76:ae:
         d5:a5:ea:ef:07:fb:74:57:fb:e0:cc:cd:c2:5e:41:3a:8d:9c:
         ad:34:53:5d:9f:4b:1f:46:8a:e7:da:75:ed:79:ef:0a:a8:f2:
         4e:64:30:68:78:59:89:df:ae:7a:96:01:f6:0a:01:6c:47:3a:
         8d:56:ee:30:58:7f:7d:e3:9e:ae:3d:57:d2:03:08:44:03:3e:
         89:e2:8f:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAplGfsZ/Mq0DgYa9QB2zYocO1qwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZGOTU3NDE2QUJDNDUxQUQzOTU1MjYwQ0Y2OUYzMTc1
NjA1MUJENjAeFw0yNTAxMzExMjQ1MzZaFw0yNTAyMDExMzQwMzZaMDMxMTAvBgNV
BAMTKDlEQTFGMzZFRURGQUQyOENGODY4MkM1OUQxMEU4RTAyOEI3RDdCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjVUCxujjh2cI7d6T8Ypd0dMK
Q8CuW/BySPnCYbFIpIOLcpavBpWKu+2Vr320ffXcrtJrQUxWKfFs6+Yebqxnt9kt
N7YlEX/1FxKw0oWZo/nhYD2rOGGIRfrKmPZA90JTp142SEVHERjhGtw9TxhI6mc2
jQoN6+reAb/Ailh5cLhiFtsMqV0vOslo9iY7nX0hDeZHs7HdKUOACLYT7QYR4r6K
bCrVSy4r3tI4H1cusGRmxIN9KPNG86OLiJTdVLDxX6pDw1wSYQI8j74aUMKRMIwY
Ju6F73SGoUttcdxA+Zxx4Nh/5wik5KmtFAQJv3R9WHE0Ddlv4aYFmSjsW/efAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnaHzbu360oz4aCxZ0Q6OAot9e/IwHwYDVR0j
BBgwFoAUz/lXQWq8RRrTlVJgz2nzF1YFG9YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdj
SFUvMC9DRkY5NTc0MTZBQkM0NTFBRDM5NTUyNjBDRjY5RjMxNzU2MDUxQkQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRjk1NzQxNkFCQzQ1MUFE
Mzk1NTI2MENGNjlGMzE3NTYwNTFCRDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdjSFUvMC9D
RkY5NTc0MTZBQkM0NTFBRDM5NTUyNjBDRjY5RjMxNzU2MDUxQkQ2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdPJ8aGro0Tgfjh+QhjxqF6rcnaQlMWmi7GSweNCD6bba8QziBFYl516gkOLe
l3nbpED1/3VnRPd+eZeVZDm6T40v5GC/2GRvOFe+GFLEHmXNx6GRjSsNp/jslMP3
Ndk78lAlutrEhdHbdx1ER83Qrfni/b7cfRMUBhZe8zR5irJb9R3ZRH3aYeu+++gA
DK3C/hGl8aaaVlCdCoLg4nWSOwrmoZHc2FsUZswZjMArZo9XSHau1aXq7wf7dFf7
4MzNwl5BOo2crTRTXZ9LH0aK59p17XnvCqjyTmQwaHhZid+uepYB9goBbEc6jVbu
MFh/feOerj1X0gMIRAM+ieKP/g==
-----END CERTIFICATE-----
Generated at Tue May 6 05:18:27 2025 by rpki-client