Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.mft
File:                     05D1E73FF1B023D43F8C09ED71815BC2F6620D99.mft (raw, json)
Hash identifier:          8K3pBV9eQGKTkRf5tspE+tWMfAW8HVdthjzbT5r7aRk=
Subject key identifier:   33:D7:83:3C:39:B8:61:1B:82:30:E3:FB:8D:14:B9:90:03:2A:68:9C
Authority key identifier: 05:D1:E7:3F:F1:B0:23:D4:3F:8C:09:ED:71:81:5B:C2:F6:62:0D:99
Certificate issuer:       /CN=05D1E73FF1B023D43F8C09ED71815BC2F6620D99
Certificate serial:       186F35E1B1184F94BB198A9C73EA2D30419A3D01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.mft
Manifest number:          018F
Signing time:             Fri 31 Jan 2025 04:38:00 +0000
Manifest this update:     Fri 31 Jan 2025 04:33:00 +0000
Manifest next update:     Sat 01 Feb 2025 08:28:00 +0000
Files and hashes:         1: 34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (hash: LC45gGuPJWKidAdvEZQT2xJbtU7foRURu8t0zBj0Hl0=)
                          2: 323830343a353139383a3a2f33322d313238203d3e20323638343634.roa (hash: vA9Trm7phzNtclz8SCNEElkocoKAQL8q1LZ3svSRxWI=)
                          3: 05D1E73FF1B023D43F8C09ED71815BC2F6620D99.crl (hash: 9DLoXnIx29wGMRqtKzrjLeS3l4zyKQavoseRHKMYuZ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6f:35:e1:b1:18:4f:94:bb:19:8a:9c:73:ea:2d:30:41:9a:3d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05D1E73FF1B023D43F8C09ED71815BC2F6620D99
        Validity
            Not Before: Jan 31 04:33:00 2025 GMT
            Not After : Feb  1 08:28:00 2025 GMT
        Subject: CN=33D7833C39B8611B8230E3FB8D14B990032A689C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:76:ae:80:83:2c:11:62:38:7f:a8:e2:4e:
                    e1:13:90:f7:0a:cb:ad:ca:72:2b:4a:b0:f6:55:93:
                    e7:2a:cf:b0:08:99:40:47:37:c4:b0:80:ff:44:1f:
                    b0:55:af:a1:14:f6:ac:b1:e7:ac:1d:e2:23:ae:26:
                    76:a9:31:ba:bf:ca:8f:59:d6:6b:f8:19:3b:91:f4:
                    d6:21:75:d1:0d:b2:4c:4e:42:ca:63:30:dd:d6:ab:
                    1f:4f:58:4d:b4:02:a5:a2:38:6c:31:d7:4b:b4:14:
                    85:3d:49:4e:52:5b:3b:b6:fb:da:bb:ec:1a:f6:89:
                    0f:ef:21:0c:8b:6a:50:c9:83:71:5f:30:e3:74:3a:
                    9b:e7:d4:06:90:84:b7:25:dc:d6:14:7b:95:f9:35:
                    19:45:1c:68:40:23:2f:d9:46:ee:70:30:24:66:df:
                    26:a7:65:49:f0:77:cd:fb:9b:8d:f7:90:0b:6d:c9:
                    02:77:e9:7e:8c:2a:72:c3:04:f7:6a:eb:c5:5c:23:
                    c2:0d:fb:8c:3c:4c:fa:9c:c2:c3:c3:6c:fd:20:86:
                    04:db:3e:94:ac:7a:da:a4:9f:5c:4b:b6:42:0f:5d:
                    02:cf:1d:ea:1d:b0:35:b1:8e:1e:64:e3:61:a0:18:
                    23:fd:da:72:30:71:0b:e9:46:ba:1b:6b:c5:8e:df:
                    fc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D7:83:3C:39:B8:61:1B:82:30:E3:FB:8D:14:B9:90:03:2A:68:9C
            X509v3 Authority Key Identifier:
                keyid:05:D1:E7:3F:F1:B0:23:D4:3F:8C:09:ED:71:81:5B:C2:F6:62:0D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:4b:c0:a7:b8:97:4b:88:6a:b2:d8:ff:72:ff:68:8c:5c:
         28:55:09:b9:c7:06:37:82:43:f7:98:38:02:76:02:fb:f9:34:
         6f:a9:f4:4d:64:f5:98:ad:9b:b2:f3:03:db:5b:aa:fd:34:61:
         52:f6:9f:44:5e:b5:3c:88:1c:9e:98:55:f2:56:39:e0:5b:82:
         10:f9:7b:cd:01:fe:a1:c5:5d:c7:0b:30:a0:51:5b:98:aa:31:
         dc:24:6b:c9:b4:24:d7:b2:fe:4b:d7:78:e3:52:12:9d:17:b3:
         bd:72:2d:9f:3d:e9:4b:5d:24:79:f8:b0:d5:08:0b:59:aa:51:
         8c:62:f7:84:03:99:86:03:62:b2:18:0b:38:28:9c:93:c0:1f:
         a5:c9:49:dc:e8:70:e6:b7:2c:da:2e:4e:8c:6c:f2:5b:a0:ff:
         5a:3f:3c:20:87:5d:da:fd:9f:73:7b:78:5c:9d:22:ca:be:9e:
         b3:f6:4e:33:67:32:55:40:30:db:1c:34:48:bd:f9:14:da:0a:
         07:a8:fb:b2:ee:2e:01:bc:86:62:d8:3f:a8:5e:d2:86:04:e1:
         56:58:b0:e4:1e:03:32:a8:ec:60:90:c4:3e:8c:72:9f:9f:d5:
         29:0d:5f:80:7b:66:74:bc:35:6d:a4:9a:f0:c8:08:38:b4:56:
         7a:54:8b:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGG814bEYT5S7GYqcc+otMEGaPQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVEMUU3M0ZGMUIwMjNENDNGOEMwOUVENzE4MTVCQzJG
NjYyMEQ5OTAeFw0yNTAxMzEwNDMzMDBaFw0yNTAyMDEwODI4MDBaMDMxMTAvBgNV
BAMTKDMzRDc4MzNDMzlCODYxMUI4MjMwRTNGQjhEMTRCOTkwMDMyQTY4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hXaugIMsEWI4f6jiTuETkPcK
y63KcitKsPZVk+cqz7AImUBHN8SwgP9EH7BVr6EU9qyx56wd4iOuJnapMbq/yo9Z
1mv4GTuR9NYhddENskxOQspjMN3Wqx9PWE20AqWiOGwx10u0FIU9SU5SWzu2+9q7
7Br2iQ/vIQyLalDJg3FfMON0Opvn1AaQhLcl3NYUe5X5NRlFHGhAIy/ZRu5wMCRm
3yanZUnwd837m433kAttyQJ36X6MKnLDBPdq68VcI8IN+4w8TPqcwsPDbP0ghgTb
PpSsetqkn1xLtkIPXQLPHeodsDWxjh5k42GgGCP92nIwcQvpRroba8WO3/wnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUM9eDPDm4YRuCMOP7jRS5kAMqaJwwHwYDVR0j
BBgwFoAUBdHnP/GwI9Q/jAntcYFbwvZiDZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGZnZkZRUEZoZE00cEFENXczZlBiWVlwNkNNZlh5N3NKOEdldk05Z2dm
THcvMS8wNUQxRTczRkYxQjAyM0Q0M0Y4QzA5RUQ3MTgxNUJDMkY2NjIwRDk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1RDFFNzNGRjFCMDIzRDQz
RjhDMDlFRDcxODE1QkMyRjY2MjBEOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGZnZkZRUEZoZE00cEFENXczZlBiWVlwNkNNZlh5N3NKOEdldk05Z2dmTHcvMS8w
NUQxRTczRkYxQjAyM0Q0M0Y4QzA5RUQ3MTgxNUJDMkY2NjIwRDk5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoP1LwKe4l0uIarLY/3L/aIxcKFUJuccGN4JD95g4AnYC+/k0b6n0TWT1mK2b
svMD21uq/TRhUvafRF61PIgcnphV8lY54FuCEPl7zQH+ocVdxwswoFFbmKox3CRr
ybQk17L+S9d441ISnRezvXItnz3pS10kefiw1QgLWapRjGL3hAOZhgNishgLOCic
k8AfpclJ3Ohw5rcs2i5OjGzyW6D/Wj88IIdd2v2fc3t4XJ0iyr6es/ZOM2cyVUAw
2xw0SL35FNoKB6j7su4uAbyGYtg/qF7ShgThVliw5B4DMqjsYJDEPoxyn5/VKQ1f
gHtmdLw1baSa8MgIOLRWelSLIQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:03:57 2025 by rpki-client