Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.mft
File:                     45924C2A6FC8004A74776A6A41B211AA62067986.mft (raw, json)
Hash identifier:          48qe3uP0+QEYhbU26HPmMXCl2VeZlw+8GmXnrdM29k0=
Subject key identifier:   26:8B:DF:7F:C1:09:45:CA:0A:E2:73:B4:42:D2:78:52:7E:23:44:DF
Authority key identifier: 45:92:4C:2A:6F:C8:00:4A:74:77:6A:6A:41:B2:11:AA:62:06:79:86
Certificate issuer:       /CN=45924C2A6FC8004A74776A6A41B211AA62067986
Certificate serial:       21154548D4DCA2883B65BD912D5863C7E8B3273D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45924C2A6FC8004A74776A6A41B211AA62067986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 07:20:24 +0000
Manifest this update:     Fri 31 Jan 2025 07:15:24 +0000
Manifest next update:     Sat 01 Feb 2025 09:37:24 +0000
Files and hashes:         1: 323830343a376637633a3a2f33322d313238203d3e20323731363931.roa (hash: nOb6/qajRz/C2Vkuqkx6trm4QVSFbxnQo3p0Mc6Xa00=)
                          2: 45924C2A6FC8004A74776A6A41B211AA62067986.crl (hash: ev/fAVQSxC868nHax8/jr3910goP3tlswFWTbsdcuLw=)
                          3: 3139302e3138352e39382e302f32332d3332203d3e20323731363931.roa (hash: MmK3Mw2PTeelL+Bklz2dIbAyxFB8Sn4oNnyZdmyCWo8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:15:45:48:d4:dc:a2:88:3b:65:bd:91:2d:58:63:c7:e8:b3:27:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45924C2A6FC8004A74776A6A41B211AA62067986
        Validity
            Not Before: Jan 31 07:15:24 2025 GMT
            Not After : Feb  1 09:37:24 2025 GMT
        Subject: CN=268BDF7FC10945CA0AE273B442D278527E2344DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:0f:49:9b:45:de:91:61:14:33:27:e7:45:
                    96:85:0e:11:83:82:91:af:fd:78:e3:38:af:d2:43:
                    8d:54:8a:91:05:d6:90:f8:23:df:20:20:ea:9c:d7:
                    f4:d8:be:7e:2b:92:e2:7c:c0:de:91:60:13:09:be:
                    8c:cd:fa:e0:55:73:04:91:23:c9:0b:12:89:f6:8a:
                    5b:7f:bb:98:a6:b3:e0:77:d2:ee:5c:3a:e7:e1:4c:
                    69:5a:8a:00:4a:09:bc:9b:9b:ff:d3:14:72:8b:2a:
                    f3:87:ad:d6:f7:29:6b:b5:78:98:79:14:8a:88:44:
                    e4:39:3c:6d:4e:64:a3:42:23:38:9d:54:35:02:e6:
                    6c:eb:ca:6e:33:55:97:cf:43:64:81:34:c2:2d:4b:
                    d2:1a:1d:b8:d9:a3:cf:51:98:07:b6:6f:c3:47:4a:
                    da:86:fe:23:17:25:32:21:69:e3:6d:16:77:ad:46:
                    5b:3d:09:b4:2d:f5:e0:71:ee:f9:6b:6d:cc:9f:db:
                    6c:2f:31:9e:30:b2:65:c3:63:d7:bf:6e:58:48:ae:
                    25:23:00:c3:04:7a:09:8e:ed:71:0d:71:b1:21:21:
                    fb:e3:d5:68:bf:d0:65:ea:95:da:f6:ae:43:73:b1:
                    cd:91:6e:b7:75:b4:40:e4:4a:b3:eb:30:8e:a3:f1:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:DF:7F:C1:09:45:CA:0A:E2:73:B4:42:D2:78:52:7E:23:44:DF
            X509v3 Authority Key Identifier:
                keyid:45:92:4C:2A:6F:C8:00:4A:74:77:6A:6A:41:B2:11:AA:62:06:79:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45924C2A6FC8004A74776A6A41B211AA62067986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:5b:e9:ca:d0:dc:2d:ec:1e:70:25:f1:5f:97:43:e9:e0:
         ba:8e:f0:01:00:8f:cb:e8:0d:ca:ca:44:f8:84:a1:1d:45:41:
         13:55:28:b3:81:0f:47:c3:d0:c5:e0:b4:0a:0a:57:df:6a:26:
         3f:93:8c:76:30:51:6d:37:1d:50:40:4e:e5:56:53:6e:96:86:
         91:1f:ed:a9:c4:0b:ba:b6:4e:5a:ac:55:63:fe:58:3c:3c:3d:
         4c:2f:04:e2:c7:78:d6:84:60:02:c3:2e:50:c9:3c:98:96:25:
         9c:32:a4:39:48:c3:ec:d2:fe:1c:10:aa:32:42:0e:5a:af:94:
         d6:38:ce:5e:e0:f8:8a:ef:af:ab:a6:f6:65:97:b1:05:e8:f2:
         c0:ef:0f:cd:11:13:d7:98:6a:74:bf:10:ee:c6:3c:50:9e:e3:
         ad:9f:e2:9a:0e:bd:4b:0f:52:e5:d9:a0:a2:12:8b:9f:9d:4f:
         69:88:a5:ce:8d:88:27:fb:3b:f4:b4:20:c1:45:c8:6a:76:fc:
         98:dd:79:dd:c0:44:8b:a8:f3:e2:74:bd:0e:76:5a:16:9c:14:
         d5:1d:ec:a0:1b:9d:69:38:30:fa:d1:03:87:e9:4b:fe:99:d1:
         82:cd:fd:dc:32:c9:04:7f:b2:cc:83:f7:a2:52:e4:4f:5a:2d:
         3f:a6:fe:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIRVFSNTcoog7Zb2RLVhjx+izJz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU5MjRDMkE2RkM4MDA0QTc0Nzc2QTZBNDFCMjExQUE2
MjA2Nzk4NjAeFw0yNTAxMzEwNzE1MjRaFw0yNTAyMDEwOTM3MjRaMDMxMTAvBgNV
BAMTKDI2OEJERjdGQzEwOTQ1Q0EwQUUyNzNCNDQyRDI3ODUyN0UyMzQ0REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lg9Jm0XekWEUMyfnRZaFDhGD
gpGv/XjjOK/SQ41UipEF1pD4I98gIOqc1/TYvn4rkuJ8wN6RYBMJvozN+uBVcwSR
I8kLEon2ilt/u5ims+B30u5cOufhTGlaigBKCbybm//TFHKLKvOHrdb3KWu1eJh5
FIqIROQ5PG1OZKNCIzidVDUC5mzrym4zVZfPQ2SBNMItS9IaHbjZo89RmAe2b8NH
StqG/iMXJTIhaeNtFnetRls9CbQt9eBx7vlrbcyf22wvMZ4wsmXDY9e/blhIriUj
AMMEegmO7XENcbEhIfvj1Wi/0GXqldr2rkNzsc2Rbrd1tEDkSrPrMI6j8d0bAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJovff8EJRcoK4nO0QtJ4Un4jRN8wHwYDVR0j
BBgwFoAURZJMKm/IAEp0d2pqQbIRqmIGeYYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTVNWGd2YkhFSndINmFuWm1SZmhXUVZRcnh4dTM4Z1RCQTljNjN2Y3NT
N1QvMS80NTkyNEMyQTZGQzgwMDRBNzQ3NzZBNkE0MUIyMTFBQTYyMDY3OTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1OTI0QzJBNkZDODAwNEE3
NDc3NkE2QTQxQjIxMUFBNjIwNjc5ODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTVNWGd2YkhFSndINmFuWm1SZmhXUVZRcnh4dTM4Z1RCQTljNjN2Y3NTN1QvMS80
NTkyNEMyQTZGQzgwMDRBNzQ3NzZBNkE0MUIyMTFBQTYyMDY3OTg2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe1db6crQ3C3sHnAl8V+XQ+nguo7wAQCPy+gNyspE+IShHUVBE1Uos4EPR8PQ
xeC0CgpX32omP5OMdjBRbTcdUEBO5VZTbpaGkR/tqcQLurZOWqxVY/5YPDw9TC8E
4sd41oRgAsMuUMk8mJYlnDKkOUjD7NL+HBCqMkIOWq+U1jjOXuD4iu+vq6b2ZZex
BejywO8PzRET15hqdL8Q7sY8UJ7jrZ/img69Sw9S5dmgohKLn51PaYilzo2IJ/s7
9LQgwUXIanb8mN153cBEi6jz4nS9DnZaFpwU1R3soBudaTgw+tEDh+lL/pnRgs39
3DLJBH+yzIP3olLkT1otP6b+Ng==
-----END CERTIFICATE-----