Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File:                     CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier:          gy260CFZ4bOGNkZhTTvAXl9/I/a2Xdyr6UrMIY4U15c=
Subject key identifier:   42:6D:32:61:36:E7:40:40:61:FA:AE:2D:AC:9C:B4:01:13:3E:FF:2E
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       6CB2505AD6ED0A6F006A6C4CE1A88A56C3D46C8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number:          0192
Signing time:             Fri 31 Jan 2025 14:47:54 +0000
Manifest this update:     Fri 31 Jan 2025 14:42:54 +0000
Manifest next update:     Sat 01 Feb 2025 18:01:54 +0000
Files and hashes:         1: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: s7t+LB6TWa+6vCLlCN23j7ZLFFlwYQj6vAFF3txI5ss=)
                          2: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: +SubH5n61pjrF3hxGdgjm+ALOjcGc3fm6PMJ+TUbbcs=)
                          3: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: +rJXbg2BhMbDszndHjEfU3BWMA1SEzI0oe8oMQmV1Wg=)
                          4: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: quD7ewZ+hAKb3dQFXJdjHk7Ggj5P45b3H2P2NpRZ+Xg=)
                          5: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: qwlAa+TzoIqDtn13LuAdsOICHfeQ1H919iT7kM2L9II=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b2:50:5a:d6:ed:0a:6f:00:6a:6c:4c:e1:a8:8a:56:c3:d4:6c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Jan 31 14:42:54 2025 GMT
            Not After : Feb  1 18:01:54 2025 GMT
        Subject: CN=426D326136E7404061FAAE2DAC9CB401133EFF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:c3:e4:f1:ac:db:4c:a3:84:97:96:42:75:
                    78:45:11:e3:95:f5:ec:d6:bc:c9:64:1a:99:f2:35:
                    a9:16:7a:8a:15:1b:e3:97:4a:41:6a:2d:4b:7f:a3:
                    88:a6:36:ac:72:f3:40:d4:09:82:a1:af:79:75:57:
                    17:2e:c5:ee:9f:58:d7:a5:94:c5:45:e3:3e:cb:e5:
                    f0:72:25:b4:b5:82:a5:3d:41:12:23:bc:6f:ed:e6:
                    b4:71:bd:e8:e0:11:01:d6:e1:db:60:b4:d2:da:e8:
                    61:ca:08:b4:a7:e5:f1:41:19:24:d5:92:27:ab:6d:
                    b2:5c:82:ff:7b:24:85:22:b8:78:8b:da:f8:b5:61:
                    d3:77:af:8c:53:43:df:a3:63:81:e8:f1:d6:49:dc:
                    bf:30:25:e3:48:33:9c:c4:e1:3a:55:09:e0:79:10:
                    6b:c2:4d:54:ba:0e:f8:a2:7c:f2:7f:31:68:d0:86:
                    51:63:c2:98:22:a6:ce:e9:e4:e1:cb:c0:32:ba:61:
                    79:63:65:2f:63:f3:bf:2d:d0:be:27:91:2a:90:28:
                    3f:b1:6b:d0:e6:24:4b:89:69:ce:87:14:88:d0:98:
                    82:91:df:e2:f8:01:e7:42:4b:97:38:6d:da:bd:2b:
                    8c:9d:fd:8e:af:13:77:4d:ec:6a:51:12:0b:5d:97:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6D:32:61:36:E7:40:40:61:FA:AE:2D:AC:9C:B4:01:13:3E:FF:2E
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:93:da:55:dd:a3:f3:9e:62:b5:a7:db:c0:cb:6f:bf:73:a0:
         32:9a:e2:c3:e5:b3:bd:7c:75:f6:79:c0:72:b7:b8:44:c7:64:
         81:d7:4b:53:0c:5c:c6:24:76:33:71:a6:18:99:fe:e8:7c:30:
         78:89:16:66:94:80:6e:c9:c0:d8:38:35:7d:7c:d7:4a:e6:3b:
         48:38:26:c4:af:46:88:bf:40:75:61:84:b7:80:be:79:92:ff:
         57:69:c7:ce:ba:78:3f:cf:62:3d:ad:77:3f:de:70:45:3f:cc:
         18:22:4c:ee:98:de:7b:d0:f1:9e:1e:f5:0c:a5:52:0f:31:73:
         28:03:11:af:7c:da:d9:c1:4d:e1:05:43:58:db:01:8f:fc:62:
         d0:19:63:b9:97:3b:59:a6:b6:43:6f:5e:dd:2b:f5:64:65:63:
         e8:00:b2:1d:ae:b7:9c:5b:f3:8c:ca:47:31:ca:84:9e:07:08:
         29:7d:72:0c:01:16:7f:a2:9b:5d:ab:51:5d:ee:7f:4e:0e:44:
         b1:83:0d:87:1d:e4:58:b9:61:4c:85:5c:f3:72:29:78:8c:46:
         65:1c:cc:24:f2:ae:24:74:b1:9a:54:a8:82:4f:56:c7:51:32:
         37:a7:7b:1a:6b:ec:86:78:23:5d:d2:42:fd:db:83:be:a2:10:
         e9:fd:b9:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbLJQWtbtCm8AamxM4aiKVsPUbIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NERkIyNTI4NEQxNDExQTA1QzJENUE5ODE2OUJBQTA5
MEVFRjRFMTAeFw0yNTAxMzExNDQyNTRaFw0yNTAyMDExODAxNTRaMDMxMTAvBgNV
BAMTKDQyNkQzMjYxMzZFNzQwNDA2MUZBQUUyREFDOUNCNDAxMTMzRUZGMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJb8Pk8azbTKOEl5ZCdXhFEeOV
9ezWvMlkGpnyNakWeooVG+OXSkFqLUt/o4imNqxy80DUCYKhr3l1Vxcuxe6fWNel
lMVF4z7L5fByJbS1gqU9QRIjvG/t5rRxvejgEQHW4dtgtNLa6GHKCLSn5fFBGSTV
kierbbJcgv97JIUiuHiL2vi1YdN3r4xTQ9+jY4Ho8dZJ3L8wJeNIM5zE4TpVCeB5
EGvCTVS6DviifPJ/MWjQhlFjwpgips7p5OHLwDK6YXljZS9j878t0L4nkSqQKD+x
a9DmJEuJac6HFIjQmIKR3+L4AedCS5c4bdq9K4yd/Y6vE3dN7GpREgtdlxhXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQm0yYTbnQEBh+q4trJy0ARM+/y4wHwYDVR0j
BBgwFoAUzN+yUoTRQRoFwtWpgWm6oJDu9OEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dl
bncvMS9DQ0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDREZCMjUyODREMTQxMUEw
NUMyRDVBOTgxNjlCQUEwOTBFRUY0RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dlbncvMS9D
Q0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB5PaVd2j855itafbwMtvv3OgMpriw+WzvXx19nnAcre4RMdkgddLUwxcxiR2
M3GmGJn+6HwweIkWZpSAbsnA2Dg1fXzXSuY7SDgmxK9GiL9AdWGEt4C+eZL/V2nH
zrp4P89iPa13P95wRT/MGCJM7pjee9Dxnh71DKVSDzFzKAMRr3za2cFN4QVDWNsB
j/xi0BljuZc7Waa2Q29e3Sv1ZGVj6ACyHa63nFvzjMpHMcqEngcIKX1yDAEWf6Kb
XatRXe5/Tg5EsYMNhx3kWLlhTIVc83IpeIxGZRzMJPKuJHSxmlSogk9Wx1EyN6d7
GmvshngjXdJC/duDvqIQ6f252Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:38 2025 by rpki-client