Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft
File:                     60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft (raw, json)
Hash identifier:          4CpirmByRi3e8zjpjZLn0XMOvjArp4AXPuZEHQvaZds=
Subject key identifier:   CF:66:BA:40:BF:BD:3D:68:E5:23:1A:19:C6:78:05:8C:71:E7:BB:A1
Authority key identifier: 60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50
Certificate issuer:       /CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
Certificate serial:       06F8F5CC93AC871DA270A39225B1136DA4DC4C26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft
Manifest number:          0190
Signing time:             Fri 31 Jan 2025 12:33:46 +0000
Manifest this update:     Fri 31 Jan 2025 12:28:46 +0000
Manifest next update:     Sat 01 Feb 2025 15:43:46 +0000
Files and hashes:         1: 60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl (hash: BFxQsC+XSlvOfFElnI6k7vkB6XJ6jqzUzuP9QLsf0zE=)
                          2: 323830343a376130383a3a2f33322d3438203d3e20323731333433.roa (hash: vHMoVzcQtexxyFFSsCDhy6KM+UmjdH+tEOru9AKI4Ww=)
                          3: 3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (hash: Pqbqpw9soOH+SYmYL6Z7cBcJnaH2aj06XpbYGkFpNYw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f8:f5:cc:93:ac:87:1d:a2:70:a3:92:25:b1:13:6d:a4:dc:4c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
        Validity
            Not Before: Jan 31 12:28:46 2025 GMT
            Not After : Feb  1 15:43:46 2025 GMT
        Subject: CN=CF66BA40BFBD3D68E5231A19C678058C71E7BBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:ba:89:ad:45:bf:37:5d:93:e3:08:1a:70:
                    7d:04:54:80:da:43:61:95:d3:dd:ec:1b:d9:07:8b:
                    db:31:c4:e1:cc:6b:e2:a3:ab:c5:13:1d:70:77:bc:
                    9a:df:44:1b:1c:bc:ab:7b:cb:45:45:a1:3d:27:fe:
                    8c:99:b7:c0:1a:c3:2e:0b:1f:b6:25:6b:62:b7:1b:
                    ae:28:1f:2e:0e:04:ee:13:a6:05:ce:fe:99:5f:84:
                    37:65:3f:29:b4:d1:63:c6:99:36:26:8a:db:42:71:
                    b2:c7:a2:b4:e7:21:c8:c3:b1:0c:87:4b:73:a7:67:
                    3e:8e:3c:2d:70:a4:67:21:4e:61:ac:38:27:ea:4c:
                    ce:31:f9:b3:68:d7:dc:d8:74:96:cf:66:5c:1c:b6:
                    6f:83:1a:bb:05:6b:ea:5f:c8:44:24:3e:2a:50:0b:
                    f8:10:32:22:b4:59:a5:27:b0:75:4e:a5:63:1d:a5:
                    2e:85:68:fe:25:d2:2b:d6:12:cb:5b:d7:78:46:c9:
                    b2:24:18:eb:3d:6f:20:5d:81:7c:80:7e:e3:00:99:
                    b0:c1:5f:0c:d3:5b:ca:45:53:6e:7a:9b:33:77:fa:
                    af:95:3c:e2:d4:e9:bb:15:0d:6f:19:f9:6f:1d:7e:
                    4e:7d:16:50:61:e7:49:53:2f:23:b2:2a:4c:76:93:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:BA:40:BF:BD:3D:68:E5:23:1A:19:C6:78:05:8C:71:E7:BB:A1
            X509v3 Authority Key Identifier:
                keyid:60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:ec:3c:bd:f3:f3:0b:b9:7d:cf:f7:54:85:eb:a4:9e:74:
         a3:25:85:44:49:52:f7:9e:b4:75:c0:c0:c7:ac:da:5d:e0:97:
         89:c3:1a:7c:2f:fd:65:9d:16:a7:68:c5:cb:1c:d9:ad:60:25:
         4c:5b:52:5e:af:43:5b:36:a0:67:37:73:a7:ab:2b:15:65:6f:
         71:c2:4f:e7:53:7b:46:0b:50:c3:86:71:f8:da:f0:6e:44:31:
         b5:ee:fa:13:a5:66:be:9c:59:aa:20:cc:04:30:1c:15:14:6c:
         0d:70:2f:58:9c:d0:f0:06:1a:06:4b:3b:a2:e2:3f:35:8e:ed:
         3c:51:33:f9:4c:69:ae:11:86:3a:2e:ec:75:1b:ba:93:97:fa:
         05:c9:a9:d3:60:8f:84:35:0b:65:a0:eb:03:37:e9:c9:3f:42:
         34:4f:f6:cb:15:e6:04:7c:d8:da:21:d5:27:b7:90:27:bd:fb:
         59:dc:5b:b1:bd:d9:18:39:ab:f2:ff:37:7e:fe:c6:8a:9e:0b:
         68:10:2e:4a:f8:bd:e4:48:18:78:a1:47:79:c3:06:c8:53:7a:
         45:63:17:04:13:25:bf:9d:10:cd:5c:91:98:86:87:8e:44:5f:
         d6:a6:4f:37:94:c3:48:78:d6:23:31:25:43:43:9a:fb:fc:97:
         04:90:a1:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBvj1zJOshx2icKOSJbETbaTcTCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAzNTFERjM4MEM0QjNCNDVGQTY1NjNEMjBDM0M1OTZB
MTNCMEM1MDAeFw0yNTAxMzExMjI4NDZaFw0yNTAyMDExNTQzNDZaMDMxMTAvBgNV
BAMTKENGNjZCQTQwQkZCRDNENjhFNTIzMUExOUM2NzgwNThDNzFFN0JCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSALqJrUW/N12T4wgacH0EVIDa
Q2GV093sG9kHi9sxxOHMa+Kjq8UTHXB3vJrfRBscvKt7y0VFoT0n/oyZt8Aawy4L
H7Yla2K3G64oHy4OBO4TpgXO/plfhDdlPym00WPGmTYmittCcbLHorTnIcjDsQyH
S3OnZz6OPC1wpGchTmGsOCfqTM4x+bNo19zYdJbPZlwctm+DGrsFa+pfyEQkPipQ
C/gQMiK0WaUnsHVOpWMdpS6FaP4l0ivWEstb13hGybIkGOs9byBdgXyAfuMAmbDB
XwzTW8pFU256mzN3+q+VPOLU6bsVDW8Z+W8dfk59FlBh50lTLyOyKkx2k3t3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUz2a6QL+9PWjlIxoZxngFjHHnu6EwHwYDVR0j
BBgwFoAUYDUd84DEs7RfplY9IMPFlqE7DFAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0
NUsvMi82MDM1MURGMzgwQzRCM0I0NUZBNjU2M0QyMEMzQzU5NkExM0IwQzUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMzUxREYzODBDNEIzQjQ1
RkE2NTYzRDIwQzNDNTk2QTEzQjBDNTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0NUsvMi82
MDM1MURGMzgwQzRCM0I0NUZBNjU2M0QyMEMzQzU5NkExM0IwQzUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZCvsPL3z8wu5fc/3VIXrpJ50oyWFRElS9560dcDAx6zaXeCXicMafC/9ZZ0W
p2jFyxzZrWAlTFtSXq9DWzagZzdzp6srFWVvccJP51N7RgtQw4Zx+NrwbkQxte76
E6VmvpxZqiDMBDAcFRRsDXAvWJzQ8AYaBks7ouI/NY7tPFEz+UxprhGGOi7sdRu6
k5f6Bcmp02CPhDULZaDrAzfpyT9CNE/2yxXmBHzY2iHVJ7eQJ737Wdxbsb3ZGDmr
8v83fv7Gip4LaBAuSvi95EgYeKFHecMGyFN6RWMXBBMlv50QzVyRmIaHjkRf1qZP
N5TDSHjWIzElQ0Oa+/yXBJChcA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:28 2025 by rpki-client