Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.mft
File:                     CF15C8D7D516810DCF3125064D7826895FDF86CE.mft (raw, json)
Hash identifier:          Tp9j5QzBcO16BvsninCmbh2k8P67h7kK1h/Sh7WNBdE=
Subject key identifier:   C5:70:A9:A4:FA:79:E6:B0:5D:48:17:F0:63:5A:CC:12:B1:B6:EF:54
Authority key identifier: CF:15:C8:D7:D5:16:81:0D:CF:31:25:06:4D:78:26:89:5F:DF:86:CE
Certificate issuer:       /CN=CF15C8D7D516810DCF3125064D7826895FDF86CE
Certificate serial:       029BE3078ADA052317F7B8254AB7810A94B95151
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15C8D7D516810DCF3125064D7826895FDF86CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 11:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 10:55:29 +0000
Manifest next update:     Sat 01 Feb 2025 12:35:29 +0000
Files and hashes:         1: 3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (hash: h0GSThscJp3w8YuxAJTtH8KV6FYWEuHT8mktIdar9pw=)
                          2: 323830343a333230303a3a2f33322d3334203d3e20323635303530.roa (hash: b6oP9PtpShAKu5HJQ0mIzEWwl/6s8ndMSFPFNfk+1Nc=)
                          3: CF15C8D7D516810DCF3125064D7826895FDF86CE.crl (hash: 8QMZbGhrq9Q+GjjGOlvY4k2LqkUTayI0WPTu+DUQktc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:e3:07:8a:da:05:23:17:f7:b8:25:4a:b7:81:0a:94:b9:51:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15C8D7D516810DCF3125064D7826895FDF86CE
        Validity
            Not Before: Jan 31 10:55:29 2025 GMT
            Not After : Feb  1 12:35:29 2025 GMT
        Subject: CN=C570A9A4FA79E6B05D4817F0635ACC12B1B6EF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:16:90:5e:e7:4b:db:fd:58:69:42:e4:44:
                    2c:e5:a7:e4:7a:44:6a:9a:5e:ee:c2:54:d0:ad:55:
                    d0:a0:a7:52:5c:42:d8:b0:b3:78:10:d9:51:e5:db:
                    a9:7d:ff:77:cf:31:25:1a:2d:2a:1c:32:ce:0b:c2:
                    55:0b:2f:f7:b5:a8:8b:57:e7:a0:99:d4:42:b2:d5:
                    6c:99:8c:09:8f:5b:2c:df:8e:c8:3d:62:92:1f:48:
                    08:bb:19:37:2f:56:68:01:63:37:bd:6a:04:27:06:
                    00:39:a5:ac:0b:75:35:02:82:fe:14:70:33:f8:80:
                    e0:c0:82:52:1e:cf:51:88:1e:13:63:91:06:00:62:
                    ea:e2:03:70:6a:46:9b:89:84:b8:b0:11:e3:6f:8d:
                    e6:b1:08:54:2d:67:29:da:d1:4d:69:e6:68:a5:ae:
                    ac:0a:82:c3:a7:57:0a:1c:42:09:37:8c:de:01:f5:
                    5c:e0:a3:9c:37:d3:be:e3:0d:c5:71:40:ea:85:35:
                    e7:9f:e7:e1:1e:b1:1c:80:93:d7:88:01:da:38:56:
                    3f:f5:b5:a4:e1:a5:fe:53:b3:f2:3a:43:e0:99:ae:
                    59:96:17:6a:eb:da:0e:f8:0b:c7:46:c9:2b:19:63:
                    fe:3c:c5:47:2a:01:42:82:1d:a3:77:3d:a1:79:94:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:70:A9:A4:FA:79:E6:B0:5D:48:17:F0:63:5A:CC:12:B1:B6:EF:54
            X509v3 Authority Key Identifier:
                keyid:CF:15:C8:D7:D5:16:81:0D:CF:31:25:06:4D:78:26:89:5F:DF:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15C8D7D516810DCF3125064D7826895FDF86CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:da:ed:d9:df:25:c7:aa:1d:0b:8f:45:7d:d6:74:1f:c4:
         70:38:00:6a:4f:5d:c0:35:e8:fa:88:67:17:94:7f:a0:de:09:
         28:81:17:46:64:91:c0:dc:f3:cc:5e:74:f9:44:07:5d:79:00:
         f6:6d:ea:40:78:67:47:73:5a:43:ab:85:7a:9e:38:bf:6a:75:
         2b:e8:f3:5e:25:aa:cd:23:dd:80:df:f9:9c:02:00:ed:93:a8:
         d9:2f:fc:06:af:88:21:cb:78:75:ba:ff:5b:43:9f:1f:6c:08:
         1c:70:15:b7:e2:87:f2:ed:c7:43:1b:e6:ab:69:06:46:71:df:
         3f:54:44:c9:2a:97:ee:28:31:93:30:7a:9b:2f:52:4a:fb:a5:
         17:91:63:79:6c:a7:f0:b2:98:bc:05:56:57:d2:ea:d0:ee:5f:
         f7:92:30:6e:ae:0d:20:de:83:33:ba:5f:d8:8f:b1:a4:72:49:
         13:8c:13:c3:36:0b:09:6d:cd:94:f2:b7:39:49:7b:c7:25:24:
         6c:b3:b0:27:40:14:2a:7c:91:6a:9c:c9:b4:bc:11:6a:ef:e0:
         ea:4f:ee:d3:a7:0c:a3:e9:22:d2:68:fc:fe:2c:45:cc:28:b0:
         87:d8:43:1b:d0:1e:55:78:bc:b8:a7:da:94:67:3b:65:12:2d:
         2e:cf:18:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUApvjB4raBSMX97glSreBCpS5UVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNUM4RDdENTE2ODEwRENGMzEyNTA2NEQ3ODI2ODk1
RkRGODZDRTAeFw0yNTAxMzExMDU1MjlaFw0yNTAyMDExMjM1MjlaMDMxMTAvBgNV
BAMTKEM1NzBBOUE0RkE3OUU2QjA1RDQ4MTdGMDYzNUFDQzEyQjFCNkVGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNRaQXudL2/1YaULkRCzlp+R6
RGqaXu7CVNCtVdCgp1JcQtiws3gQ2VHl26l9/3fPMSUaLSocMs4LwlULL/e1qItX
56CZ1EKy1WyZjAmPWyzfjsg9YpIfSAi7GTcvVmgBYze9agQnBgA5pawLdTUCgv4U
cDP4gODAglIez1GIHhNjkQYAYuriA3BqRpuJhLiwEeNvjeaxCFQtZyna0U1p5mil
rqwKgsOnVwocQgk3jN4B9Vzgo5w3077jDcVxQOqFNeef5+EesRyAk9eIAdo4Vj/1
taThpf5Ts/I6Q+CZrlmWF2rr2g74C8dGySsZY/48xUcqAUKCHaN3PaF5lClDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxXCppPp55rBdSBfwY1rMErG271QwHwYDVR0j
BBgwFoAUzxXI19UWgQ3PMSUGTXgmiV/fhs4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1
dDcvMi9DRjE1QzhEN0Q1MTY4MTBEQ0YzMTI1MDY0RDc4MjY4OTVGREY4NkNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTVDOEQ3RDUxNjgxMERD
RjMxMjUwNjRENzgyNjg5NUZERjg2Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1dDcvMi9D
RjE1QzhEN0Q1MTY4MTBEQ0YzMTI1MDY0RDc4MjY4OTVGREY4NkNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASLXa7dnfJceqHQuPRX3WdB/EcDgAak9dwDXo+ohnF5R/oN4JKIEXRmSRwNzz
zF50+UQHXXkA9m3qQHhnR3NaQ6uFep44v2p1K+jzXiWqzSPdgN/5nAIA7ZOo2S/8
Bq+IIct4dbr/W0OfH2wIHHAVt+KH8u3HQxvmq2kGRnHfP1REySqX7igxkzB6my9S
SvulF5FjeWyn8LKYvAVWV9Lq0O5f95Iwbq4NIN6DM7pf2I+xpHJJE4wTwzYLCW3N
lPK3OUl7xyUkbLOwJ0AUKnyRapzJtLwRau/g6k/u06cMo+ki0mj8/ixFzCiwh9hD
G9AeVXi8uKfalGc7ZRItLs8YWg==
-----END CERTIFICATE-----
Generated at Wed May 7 23:33:51 2025 by rpki-client