Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
File:                     34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft (raw, json)
Hash identifier:          JuSEhgDM8Ql5UsaOfsYWwMSzV9cSI/KmpR7K/DoxOdw=
Subject key identifier:   D4:A0:C2:99:3E:0E:93:A0:BA:30:6B:67:43:6A:FA:57:20:B4:C9:8C
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       64545D0905C407B4191CDBFD8FEFC80B4D2852B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 13:34:41 +0000
Manifest this update:     Fri 31 Jan 2025 13:29:41 +0000
Manifest next update:     Sat 01 Feb 2025 15:02:41 +0000
Files and hashes:         1: 34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl (hash: D4ehdITGQ7SnaYm6/+vLDv7BXhee8YqPJtFKPEEXLMk=)
                          2: 3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa (hash: OA47yZPSEOsG8FciXQrI+5zuOdqVQAOZOPUQbLUacVM=)
                          3: 323830343a383466343a3a2f33322d3431203d3e20323732353438.roa (hash: Vpi0mUElRJod6vXUj4vQVws/ynf4Yo8gUGY6pKPu65k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:54:5d:09:05:c4:07:b4:19:1c:db:fd:8f:ef:c8:0b:4d:28:52:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Jan 31 13:29:41 2025 GMT
            Not After : Feb  1 15:02:41 2025 GMT
        Subject: CN=D4A0C2993E0E93A0BA306B67436AFA5720B4C98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a2:d4:99:10:60:b5:91:89:12:46:9a:2a:9d:
                    42:ef:30:aa:4d:0e:80:a7:ed:24:e8:6f:68:f3:a0:
                    a0:05:1c:48:ff:9d:e0:d2:fb:5d:66:7e:89:f9:6e:
                    87:9f:24:5f:9b:7e:49:fc:b5:b9:37:69:4b:63:93:
                    65:9e:d9:65:1f:3c:2a:72:28:dd:d0:f8:64:0b:11:
                    3a:0b:40:73:e9:72:82:ea:0e:15:36:5e:0c:c8:51:
                    8c:30:a0:1f:f7:0c:22:f7:d6:2a:fd:50:1e:bc:68:
                    d9:f9:e0:0d:18:b9:54:6b:74:d4:96:c8:be:0f:26:
                    4d:07:3f:f9:1f:5a:db:6b:29:ad:ed:b3:42:d5:a8:
                    69:7f:22:6d:95:d8:2f:a0:82:fa:00:45:e7:9e:6a:
                    3a:ff:0f:07:53:53:82:ff:68:8e:db:f8:3c:43:81:
                    f7:51:93:47:7c:8c:d0:ba:bd:1b:25:9b:23:d2:13:
                    e3:71:5f:e6:72:2a:ff:bb:ed:10:2b:b8:2a:35:d9:
                    0b:19:8e:49:ec:02:1a:7d:b9:67:37:40:da:45:88:
                    7e:1c:19:da:af:6f:31:cd:79:30:34:c6:c1:94:94:
                    85:05:4a:c2:ce:ab:d0:f2:51:9e:0c:b6:c4:3e:a2:
                    eb:e4:8b:a6:7b:ae:9e:e8:c9:0d:be:95:45:f9:5c:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A0:C2:99:3E:0E:93:A0:BA:30:6B:67:43:6A:FA:57:20:B4:C9:8C
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2c:c7:51:ce:8e:b3:62:80:2c:e4:d9:2d:57:80:79:a5:48:
         62:9c:2e:6a:b2:c5:ad:d2:ef:4b:99:00:0b:04:3a:dc:e4:85:
         09:bf:5a:e4:a8:62:96:0a:88:4f:d4:d9:2b:10:54:06:7f:b4:
         82:a1:18:5f:73:21:25:bb:8e:35:e3:1f:82:89:d6:f1:19:65:
         db:db:c1:b5:e6:49:fe:a0:5c:12:bf:94:c8:be:37:8f:85:ab:
         59:65:f3:d0:ef:89:fc:9c:d8:41:28:77:6f:da:ae:0e:18:08:
         a8:52:16:25:80:88:ed:0a:fa:bf:15:dd:d6:71:72:29:d1:d3:
         1c:51:ad:0e:7a:c5:4c:b3:86:e6:0c:b6:c9:65:58:d7:51:61:
         aa:bc:2b:f6:03:8c:41:ff:db:3c:36:f6:fa:6d:6b:1d:99:0f:
         0f:98:f8:bf:a7:91:d4:1e:5f:93:c8:5a:df:d7:96:f7:fa:d1:
         a4:16:73:9d:9c:7c:bb:c9:d6:29:a7:d3:05:4f:cc:ba:6b:30:
         8c:db:3e:47:c4:2c:cc:55:14:fb:54:99:57:23:cc:e0:4d:d2:
         8d:fa:95:e7:3f:6e:bc:18:08:6c:24:2a:d5:ac:30:cc:e4:30:
         8f:c9:19:71:72:11:d0:14:d4:62:97:05:4f:40:ed:1d:74:41:
         23:25:79:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZFRdCQXEB7QZHNv9j+/IC00oUrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyOTZBQzAyNzRDOUUxOEZGQTFERTZBNzZEOEU4QjhF
RjdGRDMxRjAeFw0yNTAxMzExMzI5NDFaFw0yNTAyMDExNTAyNDFaMDMxMTAvBgNV
BAMTKEQ0QTBDMjk5M0UwRTkzQTBCQTMwNkI2NzQzNkFGQTU3MjBCNEM5OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYotSZEGC1kYkSRpoqnULvMKpN
DoCn7STob2jzoKAFHEj/neDS+11mfon5boefJF+bfkn8tbk3aUtjk2We2WUfPCpy
KN3Q+GQLEToLQHPpcoLqDhU2XgzIUYwwoB/3DCL31ir9UB68aNn54A0YuVRrdNSW
yL4PJk0HP/kfWttrKa3ts0LVqGl/Im2V2C+ggvoAReeeajr/DwdTU4L/aI7b+DxD
gfdRk0d8jNC6vRslmyPSE+NxX+ZyKv+77RAruCo12QsZjknsAhp9uWc3QNpFiH4c
GdqvbzHNeTA0xsGUlIUFSsLOq9DyUZ4MtsQ+ouvki6Z7rp7oyQ2+lUX5XHeNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1KDCmT4Ok6C6MGtnQ2r6VyC0yYwwHwYDVR0j
BBgwFoAUNClqwCdMnhj/od5qdtjouO9/0x8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk5CUzVWQktkZTROOWNiSDJzenNqMWVvaHhNUHAxNm5BTUZROUE2REtS
R2svMS8zNDI5NkFDMDI3NEM5RTE4RkZBMURFNkE3NkQ4RThCOEVGN0ZEMzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0Mjk2QUMwMjc0QzlFMThG
RkExREU2QTc2RDhFOEI4RUY3RkQzMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rk5CUzVWQktkZTROOWNiSDJzenNqMWVvaHhNUHAxNm5BTUZROUE2REtSR2svMS8z
NDI5NkFDMDI3NEM5RTE4RkZBMURFNkE3NkQ4RThCOEVGN0ZEMzFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbyzHUc6Os2KALOTZLVeAeaVIYpwuarLFrdLvS5kACwQ63OSFCb9a5KhilgqI
T9TZKxBUBn+0gqEYX3MhJbuONeMfgonW8Rll29vBteZJ/qBcEr+UyL43j4WrWWXz
0O+J/JzYQSh3b9quDhgIqFIWJYCI7Qr6vxXd1nFyKdHTHFGtDnrFTLOG5gy2yWVY
11Fhqrwr9gOMQf/bPDb2+m1rHZkPD5j4v6eR1B5fk8ha39eW9/rRpBZznZx8u8nW
KafTBU/MumswjNs+R8QszFUU+1SZVyPM4E3SjfqV5z9uvBgIbCQq1awwzOQwj8kZ
cXIR0BTUYpcFT0DtHXRBIyV59w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:19 2025 by rpki-client