Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
File:                     5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft (raw, json)
Hash identifier:          IlDUGVHaRTR/d5pwZwwOJan1ho4Eu5Nkw6we8i/3RLY=
Subject key identifier:   17:5A:22:3B:AB:B4:14:1A:23:34:9B:A6:B3:12:9C:81:77:F1:EB:01
Authority key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Certificate issuer:       /CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Certificate serial:       4699A1E4C620A0A60A35BE7872181479B74ED4FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 10:32:03 +0000
Manifest this update:     Fri 31 Jan 2025 10:27:03 +0000
Manifest next update:     Sat 01 Feb 2025 11:11:03 +0000
Files and hashes:         1: 5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl (hash: Ecr6fZ03HJPAKDDWBqOa/n9g9+BVSPq+NFZKMiezz4g=)
                          2: 3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa (hash: /uDCbXCUR82CbFhssScEltM4zne1ybW8+c3eD2W6q8I=)
                          3: 323830343a336638303a3a2f33322d3332203d3e20323635383937.roa (hash: k5GNjhJnp+fh5SYAaIfYUo42YX1IkklUXcyEtKBAFkQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:99:a1:e4:c6:20:a0:a6:0a:35:be:78:72:18:14:79:b7:4e:d4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
        Validity
            Not Before: Jan 31 10:27:03 2025 GMT
            Not After : Feb  1 11:11:03 2025 GMT
        Subject: CN=175A223BABB4141A23349BA6B3129C8177F1EB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:87:58:42:56:72:c0:40:bc:a7:ca:a0:15:
                    5d:c8:d3:bf:67:de:5d:5e:14:38:0b:ee:cf:01:3b:
                    9f:60:a5:56:5b:e9:12:0f:32:c6:d4:66:39:78:10:
                    11:51:99:ef:16:5c:8e:c3:70:82:2c:c8:3c:07:7e:
                    6a:a2:fa:8e:f5:54:0f:a5:54:7a:ff:7d:37:5f:53:
                    71:44:71:b5:56:b2:60:e2:49:39:dd:87:14:14:1d:
                    00:60:8f:d0:52:56:6a:6d:7b:4d:44:c7:4d:6a:61:
                    e4:73:a2:b9:3c:57:e1:ea:80:69:bd:53:7f:c0:cf:
                    44:3c:bc:e3:61:2b:cf:5f:45:fe:52:99:34:70:ec:
                    07:67:d7:41:a1:a5:79:9b:e8:34:2d:35:d0:51:a3:
                    ad:5d:e2:52:6c:0d:5a:f7:fe:c6:9f:79:14:5f:0f:
                    3a:b9:ec:b5:a6:96:43:c8:af:a0:fc:a5:a6:34:5c:
                    ba:e5:cb:89:53:31:e1:4f:cb:9c:bd:6c:68:8c:3f:
                    b5:c6:de:11:a8:25:7e:d4:f7:c9:d9:7d:29:37:d4:
                    a9:ed:b9:87:c9:f6:09:f6:00:d7:9c:ee:3d:e5:ab:
                    ac:96:82:19:10:49:1b:b2:86:a2:e1:95:93:fa:d5:
                    37:73:c4:55:f8:11:b0:47:cc:d5:df:00:08:95:d3:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:22:3B:AB:B4:14:1A:23:34:9B:A6:B3:12:9C:81:77:F1:EB:01
            X509v3 Authority Key Identifier:
                keyid:5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ff:71:8e:7d:46:03:70:83:49:a0:38:28:d1:6d:e6:4b:43:
         86:f7:9b:84:3a:e2:38:de:78:f6:5c:92:0d:82:ee:95:14:31:
         cc:77:4f:0e:0b:e9:01:6e:3f:49:2b:de:b6:1e:e1:d9:8a:a1:
         0c:b3:ee:e3:19:ec:e0:b5:a0:5e:c2:4c:3a:93:58:6e:82:2c:
         6e:8b:35:3d:10:5e:64:cc:c3:7c:d7:81:a6:0d:28:c9:24:75:
         9b:46:b0:2c:37:c4:19:02:fa:05:df:7a:5a:6c:44:1b:3c:04:
         46:86:65:c3:18:21:48:6c:cb:25:11:8c:a1:b9:61:3e:bc:68:
         fe:bc:ce:6b:a3:e9:57:01:ad:cf:1d:76:a7:f0:21:ad:e5:5f:
         e4:a7:17:aa:13:d3:11:52:53:00:95:70:7d:06:ea:6b:26:6f:
         24:25:4b:d1:0b:cf:f9:94:da:a8:4d:99:8a:81:48:95:4c:34:
         73:0c:30:b4:70:1b:8a:0b:c6:95:b0:4e:19:33:b2:7d:6a:01:
         c3:33:a0:fc:05:44:e0:54:83:2d:cd:de:3c:f2:ec:9f:1a:31:
         27:a2:d7:26:3c:94:51:e0:96:54:ed:4d:b3:81:fd:89:84:0a:
         9a:30:61:d4:78:c3:8a:67:c1:9e:46:09:53:5a:4a:b3:57:21:
         86:34:44:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURpmh5MYgoKYKNb54chgUebdO1P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE1RTI2QjFCMEYxMkFCQTI3NTM3NTQzNjIzOUJGREQ3
NkU1MTg5QTAeFw0yNTAxMzExMDI3MDNaFw0yNTAyMDExMTExMDNaMDMxMTAvBgNV
BAMTKDE3NUEyMjNCQUJCNDE0MUEyMzM0OUJBNkIzMTI5QzgxNzdGMUVCMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5YdYQlZywEC8p8qgFV3I079n
3l1eFDgL7s8BO59gpVZb6RIPMsbUZjl4EBFRme8WXI7DcIIsyDwHfmqi+o71VA+l
VHr/fTdfU3FEcbVWsmDiSTndhxQUHQBgj9BSVmpte01Ex01qYeRzork8V+HqgGm9
U3/Az0Q8vONhK89fRf5SmTRw7Adn10GhpXmb6DQtNdBRo61d4lJsDVr3/safeRRf
Dzq57LWmlkPIr6D8paY0XLrly4lTMeFPy5y9bGiMP7XG3hGoJX7U98nZfSk31Knt
uYfJ9gn2ANec7j3lq6yWghkQSRuyhqLhlZP61TdzxFX4EbBHzNXfAAiV0zLdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUF1oiO6u0FBojNJumsxKcgXfx6wEwHwYDVR0j
BBgwFoAUWl4msbDxKronU3VDYjm/3XblGJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRhUWpNMlpOZ2hRZDZrTTlCMUFjTnNmVVY0Rk1IWnpjMnUzb052eGQ5
ZzUvMS81QTVFMjZCMUIwRjEyQUJBMjc1Mzc1NDM2MjM5QkZERDc2RTUxODlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNUUyNkIxQjBGMTJBQkEy
NzUzNzU0MzYyMzlCRkRENzZFNTE4OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkRhUWpNMlpOZ2hRZDZrTTlCMUFjTnNmVVY0Rk1IWnpjMnUzb052eGQ5ZzUvMS81
QTVFMjZCMUIwRjEyQUJBMjc1Mzc1NDM2MjM5QkZERDc2RTUxODlBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn/9xjn1GA3CDSaA4KNFt5ktDhvebhDriON549lySDYLulRQxzHdPDgvpAW4/
SSveth7h2YqhDLPu4xns4LWgXsJMOpNYboIsbos1PRBeZMzDfNeBpg0oySR1m0aw
LDfEGQL6Bd96WmxEGzwERoZlwxghSGzLJRGMoblhPrxo/rzOa6PpVwGtzx12p/Ah
reVf5KcXqhPTEVJTAJVwfQbqayZvJCVL0QvP+ZTaqE2ZioFIlUw0cwwwtHAbigvG
lbBOGTOyfWoBwzOg/AVE4FSDLc3ePPLsnxoxJ6LXJjyUUeCWVO1Ns4H9iYQKmjBh
1HjDimfBnkYJU1pKs1chhjREiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:59 2025 by rpki-client