Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
File:                     DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft (raw, json)
Hash identifier:          a2yrgNtMGWi7+jQaiZ7Mo3EN3WVqg8J2qwvuyYzDXLc=
Subject key identifier:   9F:E6:85:F3:9B:13:B8:2A:99:0C:6D:C9:3A:3E:44:61:E1:A1:8A:34
Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
Certificate issuer:       /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Certificate serial:       379EDA5BC28D437086962AF0CC9C4C87BFF81570
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
Manifest number:          0173
Signing time:             Fri 31 Jan 2025 03:04:55 +0000
Manifest this update:     Fri 31 Jan 2025 02:59:55 +0000
Manifest next update:     Sat 01 Feb 2025 06:04:55 +0000
Files and hashes:         1: 34352e3138382e38322e302f32342d3234203d3e20323639353837.roa (hash: 8qMwfwHyxiSjrQPkgcvlwDMT7v6lOfqz9NtK7vUyNP0=)
                          2: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl (hash: VWu43E6x2s24nzQ8wkepiiCi6AimCFRKHDqQe3Wf3is=)
                          3: 34352e3138382e38332e302f32342d3234203d3e20323639353837.roa (hash: zEHCUYQBGU91wB4l4ja+2BnyiN85mhVi7imziAV+pW8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9e:da:5b:c2:8d:43:70:86:96:2a:f0:cc:9c:4c:87:bf:f8:15:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
        Validity
            Not Before: Jan 31 02:59:55 2025 GMT
            Not After : Feb  1 06:04:55 2025 GMT
        Subject: CN=9FE685F39B13B82A990C6DC93A3E4461E1A18A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:64:a8:07:3b:e4:fa:d2:ef:2f:16:a7:c8:
                    3b:74:70:2c:a0:48:3e:e9:c6:da:31:4f:67:47:4d:
                    34:41:76:e7:a4:2f:5d:cf:ca:44:a7:46:57:28:df:
                    17:5e:d2:52:0b:ac:65:0d:c6:66:3a:20:13:32:69:
                    19:93:a8:7f:6e:b3:05:2d:c6:84:2c:f0:21:ca:8c:
                    50:44:b6:5c:44:f8:ca:91:1f:a7:e4:b8:da:8f:23:
                    ac:b6:4c:3c:a8:43:77:a7:03:99:b8:05:a6:3d:06:
                    9b:ca:3f:a8:67:d6:be:f6:76:24:59:71:45:a5:e9:
                    2c:e6:52:cd:56:27:9a:29:78:79:5a:57:e9:0d:26:
                    54:3d:68:20:ed:0f:ec:58:df:4c:5f:93:6e:55:9b:
                    b4:35:d6:f6:66:db:2a:9b:3f:9f:0e:2f:90:4e:ec:
                    c5:83:8c:76:18:db:25:3d:0d:de:f3:06:d4:72:0d:
                    2a:02:1b:10:f4:d7:e5:91:02:d6:42:05:9f:9c:34:
                    72:c8:03:7d:24:d0:b6:15:3b:71:d5:8e:2b:97:65:
                    17:6c:da:07:ca:13:00:b0:f5:c5:41:7b:f2:cd:64:
                    c1:45:70:80:d8:9c:68:53:f0:e8:f0:a8:1d:88:81:
                    32:27:78:42:28:26:64:00:a1:66:c5:1c:10:7c:a7:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E6:85:F3:9B:13:B8:2A:99:0C:6D:C9:3A:3E:44:61:E1:A1:8A:34
            X509v3 Authority Key Identifier:
                keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2f:e5:cd:38:47:6c:3c:69:b5:51:46:69:af:6f:2e:d6:7d:
         88:16:a9:aa:ce:cb:0b:5c:0f:b8:ab:79:84:5f:f4:1b:84:03:
         17:1d:02:32:8c:32:fa:ef:71:fc:0a:01:3f:9d:b6:84:ff:06:
         30:b9:a8:f9:dd:bd:fa:db:90:ca:7a:b0:2a:3a:10:4f:40:df:
         dc:c6:11:af:df:33:8b:40:e1:47:d0:a4:f8:60:6f:fb:9b:1a:
         15:93:f2:bb:b3:e4:77:99:60:98:28:8a:09:a2:f4:6f:bc:dd:
         04:e6:bf:ec:1a:4d:82:6a:90:02:34:9e:ef:42:70:9c:b1:3b:
         98:60:23:04:91:34:70:3c:14:ed:3a:c2:29:b9:70:39:de:1c:
         c8:a2:a8:11:0f:1a:9f:59:76:ec:bd:34:6f:a4:59:3c:8a:c0:
         90:9d:d1:25:74:c5:fb:41:b0:be:c1:62:23:59:b9:b1:91:7b:
         14:e9:83:9a:14:33:ad:72:fc:67:43:45:a3:42:9a:0f:dd:b6:
         42:61:cc:f0:c1:d9:0e:e1:b2:28:7a:e9:c2:00:8b:24:92:1c:
         73:13:70:ce:ad:57:ed:5b:ae:93:c0:6a:34:b8:f3:59:42:99:
         1c:a8:38:d3:db:3e:fe:48:c7:52:3f:bc:33:e2:86:f5:7f:32:
         cd:81:59:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN57aW8KNQ3CGlirwzJxMh7/4FXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJFMUNFRUZEM0YzRjJDNkVGRUQ0NDFCOUU2QzEwRTQz
RjlEQjg2RTAeFw0yNTAxMzEwMjU5NTVaFw0yNTAyMDEwNjA0NTVaMDMxMTAvBgNV
BAMTKDlGRTY4NUYzOUIxM0I4MkE5OTBDNkRDOTNBM0U0NDYxRTFBMThBMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7WSoBzvk+tLvLxanyDt0cCyg
SD7pxtoxT2dHTTRBduekL13PykSnRlco3xde0lILrGUNxmY6IBMyaRmTqH9uswUt
xoQs8CHKjFBEtlxE+MqRH6fkuNqPI6y2TDyoQ3enA5m4BaY9BpvKP6hn1r72diRZ
cUWl6SzmUs1WJ5opeHlaV+kNJlQ9aCDtD+xY30xfk25Vm7Q11vZm2yqbP58OL5BO
7MWDjHYY2yU9Dd7zBtRyDSoCGxD01+WRAtZCBZ+cNHLIA30k0LYVO3HVjiuXZRds
2gfKEwCw9cVBe/LNZMFFcIDYnGhT8OjwqB2IgTIneEIoJmQAoWbFHBB8pwSDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn+aF85sTuCqZDG3JOj5EYeGhijQwHwYDVR0j
BBgwFoAU2+HO79Pz8sbv7UQbnmwQ5D+duG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEt1MTZxcXNRNnFYTlhyN3BLZm5zalZoQVBMem1IdUhlQlRRb25OWDZ0
MUovMC9EQkUxQ0VFRkQzRjNGMkM2RUZFRDQ0MUI5RTZDMTBFNDNGOURCODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCRTFDRUVGRDNGM0YyQzZF
RkVENDQxQjlFNkMxMEU0M0Y5REI4NkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEt1MTZxcXNRNnFYTlhyN3BLZm5zalZoQVBMem1IdUhlQlRRb25OWDZ0MUovMC9E
QkUxQ0VFRkQzRjNGMkM2RUZFRDQ0MUI5RTZDMTBFNDNGOURCODZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUC/lzThHbDxptVFGaa9vLtZ9iBapqs7LC1wPuKt5hF/0G4QDFx0CMowy+u9x
/AoBP522hP8GMLmo+d29+tuQynqwKjoQT0Df3MYRr98zi0DhR9Ck+GBv+5saFZPy
u7Pkd5lgmCiKCaL0b7zdBOa/7BpNgmqQAjSe70JwnLE7mGAjBJE0cDwU7TrCKblw
Od4cyKKoEQ8an1l27L00b6RZPIrAkJ3RJXTF+0GwvsFiI1m5sZF7FOmDmhQzrXL8
Z0NFo0KaD922QmHM8MHZDuGyKHrpwgCLJJIccxNwzq1X7Vuuk8BqNLjzWUKZHKg4
09s+/kjHUj+8M+KG9X8yzYFZtQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:20:44 2025 by rpki-client