Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.mft
File:                     4418672372D7B89BAF5317B3C66BDA9B0F826423.mft (raw, json)
Hash identifier:          VlZhE/0afCUPYljunWkU0PZ6d9jzhJSN6OMc58hMPys=
Subject key identifier:   75:3D:33:46:2A:DF:9D:1F:DF:B4:72:7C:56:76:F4:8C:05:C2:DF:68
Authority key identifier: 44:18:67:23:72:D7:B8:9B:AF:53:17:B3:C6:6B:DA:9B:0F:82:64:23
Certificate issuer:       /CN=4418672372D7B89BAF5317B3C66BDA9B0F826423
Certificate serial:       5A083555B1269C9844BC215887861F9DE58738C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4418672372D7B89BAF5317B3C66BDA9B0F826423.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.mft
Manifest number:          85
Signing time:             Fri 31 Jan 2025 15:37:49 +0000
Manifest this update:     Fri 31 Jan 2025 15:32:49 +0000
Manifest next update:     Sat 01 Feb 2025 18:48:49 +0000
Files and hashes:         1: 3137372e3130342e31362e302f32302d3332203d3e20323632363234.roa (hash: F/eCzspoa1q8rw6wJxGFslGG4g81kgk1oziIHTT2n/k=)
                          2: 4418672372D7B89BAF5317B3C66BDA9B0F826423.crl (hash: ga3emWWJvO27zwakbywhK2B5QRqa6mmnhAGSYEsIimI=)
                          3: 323830343a3733343a3a2f33322d313238203d3e20323632363234.roa (hash: TERANMHNxiitWRr0QykNWO623iMYkBOXfZ+z6eHIS1c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:08:35:55:b1:26:9c:98:44:bc:21:58:87:86:1f:9d:e5:87:38:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418672372D7B89BAF5317B3C66BDA9B0F826423
        Validity
            Not Before: Jan 31 15:32:49 2025 GMT
            Not After : Feb  1 18:48:49 2025 GMT
        Subject: CN=753D33462ADF9D1FDFB4727C5676F48C05C2DF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:fa:a1:b6:e0:aa:2a:f1:f4:76:70:36:01:
                    b3:9e:09:67:02:9f:6d:4a:b5:00:83:63:a3:75:56:
                    5d:84:9e:57:4a:73:7b:f0:d9:c0:34:eb:64:28:dc:
                    ec:6f:f2:4b:a5:3e:8d:65:8c:93:ef:82:1e:ec:0d:
                    2e:ec:33:ed:24:08:e9:42:1e:ac:a8:5a:a5:9f:fa:
                    2a:60:c7:e8:6a:22:a8:9f:30:66:e6:62:83:14:35:
                    e9:ed:bd:bc:a2:89:af:7e:51:02:ef:b2:7d:bf:92:
                    0c:4c:82:7f:f1:c9:e8:e5:47:0b:13:08:7c:40:55:
                    2b:82:e0:6d:00:4c:96:2e:86:f6:5c:33:56:2d:8c:
                    64:11:c4:67:83:16:01:4b:55:32:11:9a:d9:d8:f6:
                    79:80:bb:0c:0b:01:93:1c:70:d3:22:c2:31:40:5c:
                    70:6a:51:f9:4a:a2:97:d3:a8:c8:6c:13:97:5a:95:
                    94:11:c5:f9:4d:97:cb:1f:41:84:e3:80:3e:45:ac:
                    8c:01:69:02:48:d9:0b:cb:aa:34:f7:53:af:1e:b9:
                    69:33:2f:6e:e8:07:ea:1a:65:54:79:f8:88:6e:f4:
                    ff:98:5d:01:f1:2a:ef:e6:90:a0:09:83:4d:3d:22:
                    cd:91:47:94:76:c7:36:19:d5:5b:12:3f:b5:36:c3:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3D:33:46:2A:DF:9D:1F:DF:B4:72:7C:56:76:F4:8C:05:C2:DF:68
            X509v3 Authority Key Identifier:
                keyid:44:18:67:23:72:D7:B8:9B:AF:53:17:B3:C6:6B:DA:9B:0F:82:64:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4418672372D7B89BAF5317B3C66BDA9B0F826423.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:e2:15:b6:38:f7:aa:b8:0f:5a:78:b9:fe:5b:6c:d3:69:
         d0:95:b0:02:6f:22:b3:97:06:c6:93:8a:f8:93:53:24:db:7f:
         1f:30:9a:b6:48:d5:21:76:03:0d:c0:c4:68:3c:b2:6d:bf:ba:
         83:d9:d0:07:a6:d9:6c:e4:ae:93:1e:86:31:97:e1:96:64:64:
         2d:a2:36:49:6c:57:16:3b:9f:a2:b6:73:6f:ff:33:fa:fb:04:
         fc:82:56:d2:d3:58:35:40:d8:47:c7:53:dd:56:61:98:b1:82:
         2c:d2:29:68:8a:5b:5b:27:c5:5a:f3:af:a1:ad:f8:c7:21:98:
         6b:46:50:99:b8:5e:01:b7:3d:6d:30:b8:11:3e:55:26:75:9e:
         7f:fd:f5:89:b7:21:d8:b7:5e:b3:f7:c5:9b:5d:ef:20:3c:40:
         1b:48:64:c5:f0:d2:6c:b7:71:77:81:7d:4e:ce:9e:92:fc:58:
         88:af:a1:17:da:bc:d2:cf:79:88:ab:48:24:d8:ff:28:ab:85:
         78:af:69:51:03:31:21:f3:e1:bd:23:e6:db:a2:a4:17:87:51:
         d6:45:de:26:76:b3:3e:a0:58:00:2b:8d:8c:42:17:47:ad:8f:
         ac:c6:13:de:05:c9:45:2e:83:2c:1e:c5:db:26:81:27:3a:05:
         77:c1:a1:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWgg1VbEmnJhEvCFYh4YfneWHOMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQxODY3MjM3MkQ3Qjg5QkFGNTMxN0IzQzY2QkRBOUIw
RjgyNjQyMzAeFw0yNTAxMzExNTMyNDlaFw0yNTAyMDExODQ4NDlaMDMxMTAvBgNV
BAMTKDc1M0QzMzQ2MkFERjlEMUZERkI0NzI3QzU2NzZGNDhDMDVDMkRGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZOvqhtuCqKvH0dnA2AbOeCWcC
n21KtQCDY6N1Vl2EnldKc3vw2cA062Qo3Oxv8kulPo1ljJPvgh7sDS7sM+0kCOlC
HqyoWqWf+ipgx+hqIqifMGbmYoMUNentvbyiia9+UQLvsn2/kgxMgn/xyejlRwsT
CHxAVSuC4G0ATJYuhvZcM1YtjGQRxGeDFgFLVTIRmtnY9nmAuwwLAZMccNMiwjFA
XHBqUflKopfTqMhsE5dalZQRxflNl8sfQYTjgD5FrIwBaQJI2QvLqjT3U68euWkz
L27oB+oaZVR5+Ihu9P+YXQHxKu/mkKAJg009Is2RR5R2xzYZ1VsSP7U2w0gbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdT0zRirfnR/ftHJ8Vnb0jAXC32gwHwYDVR0j
BBgwFoAURBhnI3LXuJuvUxezxmvamw+CZCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVQ4ek05Q1l2eEhqeFpIYVUzQzlMZ3JTbmR5U0w0WGJMaGdWOE4zZTl2
UzQvMC80NDE4NjcyMzcyRDdCODlCQUY1MzE3QjNDNjZCREE5QjBGODI2NDIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0MTg2NzIzNzJEN0I4OUJB
RjUzMTdCM0M2NkJEQTlCMEY4MjY0MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVQ4ek05Q1l2eEhqeFpIYVUzQzlMZ3JTbmR5U0w0WGJMaGdWOE4zZTl2UzQvMC80
NDE4NjcyMzcyRDdCODlCQUY1MzE3QjNDNjZCREE5QjBGODI2NDIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF/3iFbY496q4D1p4uf5bbNNp0JWwAm8is5cGxpOK+JNTJNt/HzCatkjVIXYD
DcDEaDyybb+6g9nQB6bZbOSukx6GMZfhlmRkLaI2SWxXFjuforZzb/8z+vsE/IJW
0tNYNUDYR8dT3VZhmLGCLNIpaIpbWyfFWvOvoa34xyGYa0ZQmbheAbc9bTC4ET5V
JnWef/31ibch2Ldes/fFm13vIDxAG0hkxfDSbLdxd4F9Ts6ekvxYiK+hF9q80s95
iKtIJNj/KKuFeK9pUQMxIfPhvSPm26KkF4dR1kXeJnazPqBYACuNjEIXR62PrMYT
3gXJRS6DLB7F2yaBJzoFd8GhTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:08 2025 by rpki-client