Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.mft
File:                     ADF401935A5874E3102919A63C65BE4EAF80AF70.mft (raw, json)
Hash identifier:          ATqNpNE/u0Fphbc18HMj5UDyCgi2VwzQs5968qT+DDU=
Subject key identifier:   91:E3:B8:DA:3E:41:C4:F3:9A:30:C1:B9:09:CF:6F:B1:AA:8A:F2:CC
Authority key identifier: AD:F4:01:93:5A:58:74:E3:10:29:19:A6:3C:65:BE:4E:AF:80:AF:70
Certificate issuer:       /CN=ADF401935A5874E3102919A63C65BE4EAF80AF70
Certificate serial:       40A54B85ABD70977E88F428925E6189BB97EC1A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.mft
Manifest number:          0184
Signing time:             Fri 31 Jan 2025 14:26:45 +0000
Manifest this update:     Fri 31 Jan 2025 14:21:45 +0000
Manifest next update:     Sat 01 Feb 2025 14:28:45 +0000
Files and hashes:         1: 323830343a373835383a3a2f33322d3336203d3e20323731323336.roa (hash: Qt6Xi0IhHCXiH6bOYq1+XgVzbYZ3eW2RTzaWgwrEa8Y=)
                          2: ADF401935A5874E3102919A63C65BE4EAF80AF70.crl (hash: 5x4YpkRLgdiueSvQ1cBXcQgxc/xmigAXgFQZ1RpK6Fs=)
                          3: 3230312e35342e3138302e302f32322d3234203d3e20323731323336.roa (hash: vdN9iGEu+KjQulChj8NqpSXODvdz9QfiIOr1DcNejzs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a5:4b:85:ab:d7:09:77:e8:8f:42:89:25:e6:18:9b:b9:7e:c1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF401935A5874E3102919A63C65BE4EAF80AF70
        Validity
            Not Before: Jan 31 14:21:45 2025 GMT
            Not After : Feb  1 14:28:45 2025 GMT
        Subject: CN=91E3B8DA3E41C4F39A30C1B909CF6FB1AA8AF2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:51:c8:5c:d1:23:b6:72:94:28:72:dc:07:71:
                    5c:6c:e9:3b:41:63:1a:bf:9e:73:e4:12:b3:ed:bf:
                    c1:37:07:67:15:3b:3d:f9:13:c1:15:d8:8f:2d:7f:
                    83:0a:86:cb:73:e0:c1:19:78:76:89:85:26:a6:c2:
                    16:7c:7f:f1:b4:6f:8b:97:c4:6a:34:b5:b6:d7:73:
                    dd:93:de:56:d0:d6:6b:a4:20:ff:17:f4:52:53:db:
                    ff:78:25:cc:ca:89:0d:12:46:fc:f5:08:c9:a9:f9:
                    51:a9:9f:9e:4f:d3:33:3a:7f:92:ea:91:10:08:cf:
                    17:8e:b5:76:0f:b9:b7:c6:32:33:d0:18:cd:c0:f0:
                    23:83:f0:2a:1d:70:36:10:fd:b6:b1:e3:57:ec:2c:
                    fa:27:07:35:1d:f3:ae:5c:f1:02:c2:84:26:a3:ae:
                    3c:27:5f:c3:98:af:83:0f:24:10:c7:8a:99:43:60:
                    b1:cd:4a:63:a6:08:2e:a3:11:31:3a:80:1b:7b:22:
                    78:aa:c5:ff:57:8c:1f:22:fd:a0:76:f2:38:da:4c:
                    9a:b6:0f:f7:ae:7b:fb:f5:41:f2:1c:ac:55:5e:c8:
                    01:d5:79:2e:01:55:2a:bd:9f:1d:2c:39:e4:26:9b:
                    34:c4:30:12:07:bb:c6:31:29:83:ad:f8:e9:49:c5:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E3:B8:DA:3E:41:C4:F3:9A:30:C1:B9:09:CF:6F:B1:AA:8A:F2:CC
            X509v3 Authority Key Identifier:
                keyid:AD:F4:01:93:5A:58:74:E3:10:29:19:A6:3C:65:BE:4E:AF:80:AF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:77:82:7c:9d:9a:24:15:58:2a:6e:7d:a6:cb:dd:5a:06:af:
         af:7c:91:34:dd:ad:cc:00:73:78:49:5c:f7:02:65:d8:1d:0d:
         10:6e:61:39:6f:6c:c5:3a:07:87:c4:9d:64:44:46:85:74:1d:
         4e:ec:e3:e0:6a:4b:04:8d:70:ba:67:37:4a:b5:78:42:e5:7c:
         a3:13:ea:c2:90:5d:df:57:84:5e:8b:99:55:b8:f5:6d:e0:8b:
         86:9a:e2:89:d8:33:69:01:40:62:cb:94:8f:55:08:69:35:89:
         7f:d2:0b:d5:41:38:30:55:5f:f4:51:a7:7b:e3:0c:0b:8c:5e:
         6b:c0:cf:35:57:64:80:d9:e3:df:6d:31:59:28:5c:86:50:1a:
         31:37:db:50:44:93:d9:05:75:62:68:54:6d:1d:c1:3a:d3:31:
         73:13:f8:c1:1e:cc:d4:59:24:39:5d:11:b1:9b:c7:2e:49:7f:
         e2:a8:89:9d:74:c5:db:a7:ae:c1:40:d4:85:53:b1:1b:c7:c7:
         99:02:27:5b:e1:43:2c:45:fb:60:d6:1a:9c:82:a4:23:70:0d:
         fc:48:fe:bc:1a:c5:01:29:6e:a6:1f:47:33:26:26:36:aa:5f:
         ad:1b:00:b0:ce:12:9c:f7:63:82:bb:3e:58:08:ad:1f:29:66:
         18:d5:3c:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQKVLhavXCXfoj0KJJeYYm7l+waYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURGNDAxOTM1QTU4NzRFMzEwMjkxOUE2M0M2NUJFNEVB
RjgwQUY3MDAeFw0yNTAxMzExNDIxNDVaFw0yNTAyMDExNDI4NDVaMDMxMTAvBgNV
BAMTKDkxRTNCOERBM0U0MUM0RjM5QTMwQzFCOTA5Q0Y2RkIxQUE4QUYyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsUchc0SO2cpQoctwHcVxs6TtB
Yxq/nnPkErPtv8E3B2cVOz35E8EV2I8tf4MKhstz4MEZeHaJhSamwhZ8f/G0b4uX
xGo0tbbXc92T3lbQ1mukIP8X9FJT2/94JczKiQ0SRvz1CMmp+VGpn55P0zM6f5Lq
kRAIzxeOtXYPubfGMjPQGM3A8COD8CodcDYQ/bax41fsLPonBzUd865c8QLChCaj
rjwnX8OYr4MPJBDHiplDYLHNSmOmCC6jETE6gBt7Iniqxf9XjB8i/aB28jjaTJq2
D/eue/v1QfIcrFVeyAHVeS4BVSq9nx0sOeQmmzTEMBIHu8YxKYOt+OlJxe6PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkeO42j5BxPOaMMG5Cc9vsaqK8swwHwYDVR0j
BBgwFoAUrfQBk1pYdOMQKRmmPGW+Tq+Ar3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NuVlhLRmJGenJSNlVyOEhYV3oxRG01b0pNZG03MU44VUhnckM0RmJ6
bUEvMS9BREY0MDE5MzVBNTg3NEUzMTAyOTE5QTYzQzY1QkU0RUFGODBBRjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERjQwMTkzNUE1ODc0RTMx
MDI5MTlBNjNDNjVCRTRFQUY4MEFGNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3NuVlhLRmJGenJSNlVyOEhYV3oxRG01b0pNZG03MU44VUhnckM0RmJ6bUEvMS9B
REY0MDE5MzVBNTg3NEUzMTAyOTE5QTYzQzY1QkU0RUFGODBBRjcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN3eCfJ2aJBVYKm59psvdWgavr3yRNN2tzABzeElc9wJl2B0NEG5hOW9sxToH
h8SdZERGhXQdTuzj4GpLBI1wumc3SrV4QuV8oxPqwpBd31eEXouZVbj1beCLhpri
idgzaQFAYsuUj1UIaTWJf9IL1UE4MFVf9FGne+MMC4xea8DPNVdkgNnj320xWShc
hlAaMTfbUEST2QV1YmhUbR3BOtMxcxP4wR7M1FkkOV0RsZvHLkl/4qiJnXTF26eu
wUDUhVOxG8fHmQInW+FDLEX7YNYanIKkI3AN/Ej+vBrFASluph9HMyYmNqpfrRsA
sM4SnPdjgrs+WAitHylmGNU8nQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:18 2025 by rpki-client