Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
File:                     D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft (raw, json)
Hash identifier:          jPZb+gHlk2g7l9HalbJPVLzHpvH1ucqcv+IGaFYGGL0=
Subject key identifier:   D0:6E:C0:71:96:DD:6A:AA:73:C9:94:F2:D4:89:87:06:B8:14:FE:C4
Authority key identifier: D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0
Certificate issuer:       /CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
Certificate serial:       62C7AA8BA586E3834054E6210FAE0D0E6F1FC0A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
Manifest number:          018E
Signing time:             Fri 31 Jan 2025 06:41:17 +0000
Manifest this update:     Fri 31 Jan 2025 06:36:17 +0000
Manifest next update:     Sat 01 Feb 2025 09:30:17 +0000
Files and hashes:         1: 323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa (hash: +iFl0YnLIC52e3+rg/bJCIX7rJB2a4qU7fLI3aorGu4=)
                          2: 3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa (hash: wvGh1P3MzmL58gw8ooAZvkDuTkrTJ5LTSnC2AEQbdM0=)
                          3: D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl (hash: 54eaG1yjTIQkTpgzzaZajr0feM1/7CHxLLDtAi9ez1M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c7:aa:8b:a5:86:e3:83:40:54:e6:21:0f:ae:0d:0e:6f:1f:c0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
        Validity
            Not Before: Jan 31 06:36:17 2025 GMT
            Not After : Feb  1 09:30:17 2025 GMT
        Subject: CN=D06EC07196DD6AAA73C994F2D4898706B814FEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:e6:ea:77:17:df:51:e2:0a:d6:63:fd:44:
                    e2:3b:0c:cb:9f:7e:e0:d5:7c:8d:e2:28:19:99:56:
                    0e:f3:1a:aa:d4:ee:19:5a:03:5a:7b:df:8f:aa:2e:
                    de:e7:d3:bd:e5:82:1b:75:f1:0c:85:f2:1b:40:c0:
                    80:5d:4f:1a:6e:81:79:be:a4:69:f5:42:bb:c7:29:
                    91:ad:38:d6:00:5b:b6:fd:aa:a2:91:bc:7a:a5:4c:
                    47:d5:7d:cd:cb:d6:2c:16:ca:04:ca:cd:e5:0f:f4:
                    73:3f:b1:cf:f2:27:68:75:9a:41:79:41:cf:94:06:
                    f0:1e:2d:f6:c2:da:7d:9c:d1:c7:37:ca:0b:00:dc:
                    80:df:e9:bb:f0:ca:0a:99:1d:1b:72:c9:3c:37:9a:
                    b6:a2:23:7a:e1:be:86:77:bb:de:81:78:c5:c5:5f:
                    52:a3:1f:40:06:43:d7:cc:08:ed:03:72:a0:1f:71:
                    e0:4b:66:6b:78:e0:d5:04:97:7d:e3:33:2f:65:d9:
                    a9:ed:03:d1:93:59:52:e6:02:f4:3e:58:6b:0b:b9:
                    06:e9:f1:d9:e3:23:91:dc:61:d4:19:70:ac:7d:60:
                    61:25:ca:89:f6:5a:d6:df:71:77:83:0e:0f:e4:98:
                    4f:28:6d:30:58:64:b0:ac:7f:be:cf:4b:5b:1e:b4:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:C0:71:96:DD:6A:AA:73:C9:94:F2:D4:89:87:06:B8:14:FE:C4
            X509v3 Authority Key Identifier:
                keyid:D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f6:06:ad:fa:fd:7a:b1:04:95:53:11:64:20:97:f5:28:fe:
         5a:2e:0b:58:ef:73:68:df:97:d8:66:42:d4:66:33:de:11:f8:
         3c:8b:93:ec:b5:b8:88:3d:2b:32:ff:c8:33:70:64:d8:7c:bf:
         aa:6d:57:32:de:df:1e:c7:a7:cc:4c:ce:ea:2f:ca:2a:c6:99:
         3a:78:b5:65:a5:38:6a:03:af:9b:cd:92:56:7f:43:12:31:ad:
         b8:86:f1:77:c6:0c:3d:cf:be:bc:47:6c:08:fe:17:4d:5f:47:
         77:85:2e:15:1b:25:a1:68:42:f4:be:81:1f:c4:4d:b8:27:61:
         29:3f:88:e9:71:f3:4b:ba:05:9f:56:02:aa:23:d4:72:ae:aa:
         80:b9:37:6f:66:96:b7:56:fe:ee:08:12:a5:4e:0b:f3:1c:6f:
         97:c3:35:df:77:e5:a1:dc:10:66:e8:ee:0c:7a:aa:8f:c2:66:
         82:36:54:12:fc:00:43:13:0a:87:57:47:cb:0f:1c:13:7a:4c:
         1f:15:5e:96:10:60:75:d0:00:4d:1a:e9:70:24:53:84:53:a5:
         2c:e0:a1:07:21:be:4e:42:95:9a:55:70:a4:e6:83:95:13:72:
         c5:2b:06:2d:a9:8c:aa:ba:a3:3f:87:64:3e:48:3a:da:05:70:
         6b:6b:38:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYseqi6WG44NAVOYhD64NDm8fwKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZEOTczOUI1MjgwRDgyODI5QUZBRDUzMUUzOUQ1RkE4
NkUwNEFEMDAeFw0yNTAxMzEwNjM2MTdaFw0yNTAyMDEwOTMwMTdaMDMxMTAvBgNV
BAMTKEQwNkVDMDcxOTZERDZBQUE3M0M5OTRGMkQ0ODk4NzA2QjgxNEZFQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqObqdxffUeIK1mP9ROI7DMuf
fuDVfI3iKBmZVg7zGqrU7hlaA1p734+qLt7n073lght18QyF8htAwIBdTxpugXm+
pGn1QrvHKZGtONYAW7b9qqKRvHqlTEfVfc3L1iwWygTKzeUP9HM/sc/yJ2h1mkF5
Qc+UBvAeLfbC2n2c0cc3ygsA3IDf6bvwygqZHRtyyTw3mraiI3rhvoZ3u96BeMXF
X1KjH0AGQ9fMCO0DcqAfceBLZmt44NUEl33jMy9l2antA9GTWVLmAvQ+WGsLuQbp
8dnjI5HcYdQZcKx9YGElyon2WtbfcXeDDg/kmE8obTBYZLCsf77PS1setOgBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0G7AcZbdaqpzyZTy1ImHBrgU/sQwHwYDVR0j
BBgwFoAU1tlzm1KA2Cgpr61THjnV+obgStAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVDaFVYRDI0WllvM3g1ZWg4R1M1Z3hINVhMcUVHRG9EQkVqcUEza1U5
cG4vMC9ENkQ5NzM5QjUyODBEODI4MjlBRkFENTMxRTM5RDVGQTg2RTA0QUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2RDk3MzlCNTI4MEQ4Mjgy
OUFGQUQ1MzFFMzlENUZBODZFMDRBRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDVDaFVYRDI0WllvM3g1ZWg4R1M1Z3hINVhMcUVHRG9EQkVqcUEza1U5cG4vMC9E
NkQ5NzM5QjUyODBEODI4MjlBRkFENTMxRTM5RDVGQTg2RTA0QUQwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKvYGrfr9erEElVMRZCCX9Sj+Wi4LWO9zaN+X2GZC1GYz3hH4PIuT7LW4iD0r
Mv/IM3Bk2Hy/qm1XMt7fHsenzEzO6i/KKsaZOni1ZaU4agOvm82SVn9DEjGtuIbx
d8YMPc++vEdsCP4XTV9Hd4UuFRsloWhC9L6BH8RNuCdhKT+I6XHzS7oFn1YCqiPU
cq6qgLk3b2aWt1b+7ggSpU4L8xxvl8M133flodwQZujuDHqqj8JmgjZUEvwAQxMK
h1dHyw8cE3pMHxVelhBgddAATRrpcCRThFOlLOChByG+TkKVmlVwpOaDlRNyxSsG
LamMqrqjP4dkPkg62gVwa2s4Gg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:56:31 2025 by rpki-client