Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft
File:                     2E8650E1A7B09F7749A5126450B8242131048354.mft (raw, json)
Hash identifier:          qJMX7qUV6skQXJJSg7fgZ6j/HC4XHn900T36eGY9ywE=
Subject key identifier:   18:0B:EC:6F:50:0B:66:28:A4:45:76:80:6B:8D:DD:FF:59:A9:DF:A6
Authority key identifier: 2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54
Certificate issuer:       /CN=2E8650E1A7B09F7749A5126450B8242131048354
Certificate serial:       378D83CA0D0B21A9657D385505C1BA398FFFCD62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft
Manifest number:          1A
Signing time:             Fri 31 Jan 2025 03:28:23 +0000
Manifest this update:     Fri 31 Jan 2025 03:23:23 +0000
Manifest next update:     Sat 01 Feb 2025 04:23:23 +0000
Files and hashes:         1: 2E8650E1A7B09F7749A5126450B8242131048354.crl (hash: qC+XjdFXs1RO22r+yag7a9RsLCuPT9txJiUtgtjLizI=)
                          2: 323830343a356234303a3a2f33322d3336203d3e20323638383239.roa (hash: iXy3tHUl3km60vhOY0//DDwjHAi0M+tseEfBUYOwiww=)
                          3: 34352e3137332e3232302e302f32322d3234203d3e20323638383239.roa (hash: 0fbl4Nt+LJET4F45bay6iK3Uv8jm0eAtJZhWEv6V2gY=)
                          4: 34352e3232392e3230302e302f32322d3234203d3e20323638383239.roa (hash: aoR4SWmGzpQPG69zKzbTb09O3XY3+zdRv+Fu0NAqgaA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8d:83:ca:0d:0b:21:a9:65:7d:38:55:05:c1:ba:39:8f:ff:cd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8650E1A7B09F7749A5126450B8242131048354
        Validity
            Not Before: Jan 31 03:23:23 2025 GMT
            Not After : Feb  1 04:23:23 2025 GMT
        Subject: CN=180BEC6F500B6628A44576806B8DDDFF59A9DFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:36:73:8c:4a:ec:6d:23:00:ff:a0:9f:c6:
                    d9:24:89:cf:c9:e2:c0:e3:84:b7:c1:a2:c6:4c:0b:
                    bf:10:1f:8a:7e:77:56:46:57:2a:49:5d:44:fb:8c:
                    14:04:f4:70:c1:52:e3:23:f6:5d:fd:6f:73:a7:5b:
                    5a:42:78:a3:a9:2a:3f:c3:c0:13:2a:3a:e7:59:68:
                    a5:fd:ed:dd:a4:14:8a:5c:fb:27:71:27:c8:d9:c8:
                    c0:91:61:c6:76:ba:0f:31:99:ad:61:ec:3f:14:c2:
                    00:f1:10:0b:f9:26:57:d8:91:a1:a5:be:e6:f3:2a:
                    da:9e:b8:9f:33:9d:60:fb:00:52:55:b0:e8:d8:11:
                    42:12:a0:ee:f0:45:87:1a:bc:7a:8a:67:12:db:36:
                    a9:96:5d:2f:c4:53:ac:96:a5:0a:8a:f2:98:ef:0a:
                    1e:8b:bd:6a:7e:31:ae:4b:9c:ee:48:57:2f:a9:a3:
                    35:de:38:be:14:98:0f:b6:6b:00:70:e1:37:1c:62:
                    ce:88:ed:06:97:34:ff:ec:f5:e5:8d:d8:d2:71:c2:
                    a7:16:1c:1c:92:ed:ca:9b:a8:43:c0:c9:e4:e9:51:
                    e7:cc:52:05:b3:d0:ee:13:66:21:0f:c0:ce:4f:f5:
                    8f:81:32:62:26:b2:e7:70:0b:59:74:32:10:14:02:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0B:EC:6F:50:0B:66:28:A4:45:76:80:6B:8D:DD:FF:59:A9:DF:A6
            X509v3 Authority Key Identifier:
                keyid:2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:64:ff:98:81:88:ca:3c:d9:06:02:96:51:22:9d:70:45:97:
         61:ed:da:c2:32:f4:62:bd:8d:7d:b1:98:40:02:9e:4d:f0:28:
         b0:e4:18:15:21:c3:98:7b:9c:e5:88:64:42:5e:83:79:b2:72:
         c1:a6:36:48:ec:1a:cf:54:1a:3c:2a:f8:4f:1b:a9:a7:bb:58:
         ae:25:30:47:09:30:68:8f:15:f8:08:3b:68:af:e2:80:6f:76:
         2d:71:6d:08:45:25:32:fe:e6:16:35:09:d1:33:3c:89:0a:c7:
         08:0d:8a:12:6f:f5:0f:83:ee:e7:9a:a2:ae:fd:fc:18:25:59:
         75:16:6e:ef:12:0a:61:7c:6a:13:25:9e:5e:5d:08:d7:ae:11:
         4c:5b:11:5d:40:62:6b:0e:4e:f1:b8:bf:b3:cf:d1:40:d7:c7:
         a9:79:28:be:7d:80:ec:eb:d1:62:ca:68:1a:2e:f6:14:c2:23:
         bb:c2:f1:3e:70:2d:b1:26:a6:da:94:e2:5b:43:49:a0:c6:f2:
         3d:29:ad:5f:b8:f9:b8:4a:14:4c:01:9e:da:3c:83:96:a9:7c:
         88:a8:be:8b:4c:6a:49:b7:74:4d:37:a9:d7:af:70:30:c5:96:
         78:fe:ba:56:30:04:26:77:11:5b:48:76:5e:6b:ef:52:e5:06:
         8d:75:a0:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN42Dyg0LIallfThVBcG6OY//zWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4NjUwRTFBN0IwOUY3NzQ5QTUxMjY0NTBCODI0MjEz
MTA0ODM1NDAeFw0yNTAxMzEwMzIzMjNaFw0yNTAyMDEwNDIzMjNaMDMxMTAvBgNV
BAMTKDE4MEJFQzZGNTAwQjY2MjhBNDQ1NzY4MDZCOEREREZGNTlBOURGQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CTZzjErsbSMA/6Cfxtkkic/J
4sDjhLfBosZMC78QH4p+d1ZGVypJXUT7jBQE9HDBUuMj9l39b3OnW1pCeKOpKj/D
wBMqOudZaKX97d2kFIpc+ydxJ8jZyMCRYcZ2ug8xma1h7D8UwgDxEAv5JlfYkaGl
vubzKtqeuJ8znWD7AFJVsOjYEUISoO7wRYcavHqKZxLbNqmWXS/EU6yWpQqK8pjv
Ch6LvWp+Ma5LnO5IVy+pozXeOL4UmA+2awBw4TccYs6I7QaXNP/s9eWN2NJxwqcW
HByS7cqbqEPAyeTpUefMUgWz0O4TZiEPwM5P9Y+BMmImsudwC1l0MhAUAjaJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGAvsb1ALZiikRXaAa43d/1mp36YwHwYDVR0j
BBgwFoAULoZQ4aewn3dJpRJkULgkITEEg1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkNEaHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZ
WnEvMC8yRTg2NTBFMUE3QjA5Rjc3NDlBNTEyNjQ1MEI4MjQyMTMxMDQ4MzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFODY1MEUxQTdCMDlGNzc0
OUE1MTI2NDUwQjgyNDIxMzEwNDgzNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkNEaHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZWnEvMC8y
RTg2NTBFMUE3QjA5Rjc3NDlBNTEyNjQ1MEI4MjQyMTMxMDQ4MzU0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs2T/mIGIyjzZBgKWUSKdcEWXYe3awjL0Yr2NfbGYQAKeTfAosOQYFSHDmHuc
5YhkQl6DebJywaY2SOwaz1QaPCr4Txupp7tYriUwRwkwaI8V+Ag7aK/igG92LXFt
CEUlMv7mFjUJ0TM8iQrHCA2KEm/1D4Pu55qirv38GCVZdRZu7xIKYXxqEyWeXl0I
164RTFsRXUBiaw5O8bi/s8/RQNfHqXkovn2A7OvRYspoGi72FMIju8LxPnAtsSam
2pTiW0NJoMbyPSmtX7j5uEoUTAGe2jyDlql8iKi+i0xqSbd0TTep169wMMWWeP66
VjAEJncRW0h2XmvvUuUGjXWgfg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:49 2025 by rpki-client