Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/928E3532313B68B88D73621D23280068103FA0CC.mft
File:                     928E3532313B68B88D73621D23280068103FA0CC.mft (raw, json)
Hash identifier:          keSp3PoeorKrU6+5e2RHLg28u8kSHeiBnxDZsy4JZKE=
Subject key identifier:   23:55:6D:8A:EF:29:41:B8:0C:E9:AB:E6:02:27:AB:16:08:24:B9:7E
Authority key identifier: 92:8E:35:32:31:3B:68:B8:8D:73:62:1D:23:28:00:68:10:3F:A0:CC
Certificate issuer:       /CN=928E3532313B68B88D73621D23280068103FA0CC
Certificate serial:       251975EDF3EA90EBBDA8FD8911471315CC0471CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928E3532313B68B88D73621D23280068103FA0CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/928E3532313B68B88D73621D23280068103FA0CC.mft
Manifest number:          0159
Signing time:             Fri 31 Jan 2025 09:33:33 +0000
Manifest this update:     Fri 31 Jan 2025 09:28:33 +0000
Manifest next update:     Sat 01 Feb 2025 11:28:33 +0000
Files and hashes:         1: 323830343a373738303a3a2f33322d3336203d3e20323731313832.roa (hash: jufgApHBj0JSNcLYiOSx+1mfEtfG3GAwomEMbEMR5+g=)
                          2: 928E3532313B68B88D73621D23280068103FA0CC.crl (hash: FkbT6cDezO39wa1q9WLIpOr+3P98T+4PzvmcgRiigIQ=)
                          3: 3137392e35312e3135362e302f32322d3234203d3e20323731313832.roa (hash: wwZmXpPh6bDETtsahrMNvU4KfdHfqRJYfgh0xKYR7pw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:19:75:ed:f3:ea:90:eb:bd:a8:fd:89:11:47:13:15:cc:04:71:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928E3532313B68B88D73621D23280068103FA0CC
        Validity
            Not Before: Jan 31 09:28:33 2025 GMT
            Not After : Feb  1 11:28:33 2025 GMT
        Subject: CN=23556D8AEF2941B80CE9ABE60227AB160824B97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:27:99:b2:85:d1:09:b8:6e:b3:4e:44:72:
                    50:60:60:2d:69:0f:12:05:37:86:5b:02:93:59:cd:
                    e1:48:c2:3d:56:13:72:50:30:41:2a:c6:e9:bf:06:
                    b2:fc:b4:43:f2:d3:e6:24:9a:91:36:4c:26:46:cc:
                    9c:ea:0a:ae:9e:fe:9b:ad:99:19:da:f7:e3:93:08:
                    ed:5a:c2:21:d4:b1:1d:f2:a0:0c:d6:19:db:e3:e8:
                    13:52:72:f6:1d:73:90:4e:e7:f2:29:7a:8a:71:07:
                    54:be:ca:3b:78:3e:a9:e7:a6:58:cc:a0:45:db:93:
                    66:ef:f3:9f:ea:4f:96:63:a4:74:54:ab:eb:bc:64:
                    58:3a:71:eb:66:e2:01:7e:a5:d3:49:6e:90:a9:95:
                    dd:cb:3c:f8:f5:f4:cc:38:6d:65:b0:91:45:8c:d5:
                    f4:63:72:89:80:c4:c0:76:31:6b:e2:d7:7f:98:bb:
                    a6:82:d2:cb:8a:21:17:d9:9c:0b:7e:3d:60:29:48:
                    bf:2d:41:55:07:ef:0e:87:be:b8:be:85:52:ab:2c:
                    49:74:d6:3f:a2:8a:f2:82:2b:6c:0e:9f:da:43:da:
                    41:33:58:1c:15:58:fb:cc:62:35:1c:0f:fd:fd:4c:
                    6d:f5:d8:0c:77:42:d3:72:c3:cc:07:2c:27:1e:a8:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:55:6D:8A:EF:29:41:B8:0C:E9:AB:E6:02:27:AB:16:08:24:B9:7E
            X509v3 Authority Key Identifier:
                keyid:92:8E:35:32:31:3B:68:B8:8D:73:62:1D:23:28:00:68:10:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/928E3532313B68B88D73621D23280068103FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928E3532313B68B88D73621D23280068103FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/928E3532313B68B88D73621D23280068103FA0CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:e6:c3:09:05:4e:ee:9c:0c:82:d8:db:26:d7:13:46:26:
         5a:09:46:33:5c:5f:57:84:2d:c9:31:ee:a3:25:1f:9e:ca:34:
         98:6c:4c:28:95:52:eb:4a:b7:eb:75:52:48:5c:0f:05:c2:d9:
         4d:f7:fe:32:88:4a:cb:d8:c4:85:20:ee:ae:42:cd:3c:ab:68:
         47:a8:74:42:7c:ca:75:af:f2:2f:d2:73:da:72:70:a7:d5:e0:
         12:94:a4:a3:30:6a:8c:f5:9c:23:44:eb:44:b2:75:93:18:86:
         62:1e:f4:20:9f:26:ca:26:a0:d0:e2:98:33:fa:b8:a2:e2:f0:
         da:42:e3:4b:19:1f:88:0c:e9:96:a3:55:2b:28:ac:e3:a9:a6:
         89:8d:11:4a:10:fc:aa:bc:f1:f4:e4:6c:a4:ac:0f:df:53:40:
         8c:0d:b0:13:70:4b:d4:e0:b4:b7:3f:d9:d0:f7:d7:71:47:87:
         e9:ef:11:fe:5c:95:f3:06:88:54:03:4e:5f:85:52:ee:45:48:
         f7:8f:2a:a5:d1:0b:4b:a6:74:de:0c:ff:24:f8:f7:9b:a3:a4:
         f5:66:b5:c6:da:7e:e8:62:5c:af:72:5e:72:c1:95:f8:10:79:
         c2:3c:81:1e:0f:a9:80:1a:dd:2e:8d:ea:f3:e4:4e:3c:1a:f6:
         40:12:75:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJRl17fPqkOu9qP2JEUcTFcwEccswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4RTM1MzIzMTNCNjhCODhENzM2MjFEMjMyODAwNjgx
MDNGQTBDQzAeFw0yNTAxMzEwOTI4MzNaFw0yNTAyMDExMTI4MzNaMDMxMTAvBgNV
BAMTKDIzNTU2RDhBRUYyOTQxQjgwQ0U5QUJFNjAyMjdBQjE2MDgyNEI5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgyeZsoXRCbhus05EclBgYC1p
DxIFN4ZbApNZzeFIwj1WE3JQMEEqxum/BrL8tEPy0+YkmpE2TCZGzJzqCq6e/put
mRna9+OTCO1awiHUsR3yoAzWGdvj6BNScvYdc5BO5/IpeopxB1S+yjt4PqnnpljM
oEXbk2bv85/qT5ZjpHRUq+u8ZFg6cetm4gF+pdNJbpCpld3LPPj19Mw4bWWwkUWM
1fRjcomAxMB2MWvi13+Yu6aC0suKIRfZnAt+PWApSL8tQVUH7w6Hvri+hVKrLEl0
1j+iivKCK2wOn9pD2kEzWBwVWPvMYjUcD/39TG312Ax3QtNyw8wHLCceqF1jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUI1Vtiu8pQbgM6avmAierFggkuX4wHwYDVR0j
BBgwFoAUko41MjE7aLiNc2IdIygAaBA/oMwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlZNTmZiTUpSZFB1Wm0zM3dyU1FQaHVhb2pNNURFRm5GUHZOYTIxaFFu
Q3EvMC85MjhFMzUzMjMxM0I2OEI4OEQ3MzYyMUQyMzI4MDA2ODEwM0ZBMENDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyOEUzNTMyMzEzQjY4Qjg4
RDczNjIxRDIzMjgwMDY4MTAzRkEwQ0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RlZNTmZiTUpSZFB1Wm0zM3dyU1FQaHVhb2pNNURFRm5GUHZOYTIxaFFuQ3EvMC85
MjhFMzUzMjMxM0I2OEI4OEQ3MzYyMUQyMzI4MDA2ODEwM0ZBMENDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAChzmwwkFTu6cDILY2ybXE0YmWglGM1xfV4QtyTHuoyUfnso0mGxMKJVS60q3
63VSSFwPBcLZTff+MohKy9jEhSDurkLNPKtoR6h0QnzKda/yL9Jz2nJwp9XgEpSk
ozBqjPWcI0TrRLJ1kxiGYh70IJ8myiag0OKYM/q4ouLw2kLjSxkfiAzplqNVKyis
46mmiY0RShD8qrzx9ORspKwP31NAjA2wE3BL1OC0tz/Z0PfXcUeH6e8R/lyV8waI
VANOX4VS7kVI948qpdELS6Z03gz/JPj3m6Ok9Wa1xtp+6GJcr3JecsGV+BB5wjyB
Hg+pgBrdLo3q8+ROPBr2QBJ18g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:17:27 2025 by rpki-client