Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft
File:                     25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft (raw, json)
Hash identifier:          Au4BdC9Ia+f1Mh1gZINFckga8gTTODTGhKMSc2j7UdU=
Subject key identifier:   5E:51:F8:55:EA:72:5D:17:A4:AC:72:61:07:F5:46:2D:FF:BB:5C:AD
Authority key identifier: 25:E9:E2:DC:5F:3D:7E:F7:EE:5E:5C:70:3C:40:32:A9:29:6F:98:D5
Certificate issuer:       /CN=25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5
Certificate serial:       02497EEF9F8D543CAE2F1D25BF2A24217AF7C919
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft
Manifest number:          3F
Signing time:             Fri 31 Jan 2025 01:14:22 +0000
Manifest this update:     Fri 31 Jan 2025 01:09:22 +0000
Manifest next update:     Sat 01 Feb 2025 04:54:22 +0000
Files and hashes:         1: 25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.crl (hash: 3aBpSUuaU+MNqODheK6mT+omvTf399qy7AZqQCymsBs=)
                          2: 3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa (hash: dUUPHdfzaaApAGOx5SEA2qWgEl+cVYg/hYO5LVqjPKA=)
                          3: 323830343a333835343a3a2f33322d3438203d3e20323636343730.roa (hash: 31SdXREOUa6wDgGNSBqbraCzoOF/TO46GqGYuv+ffkE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:49:7e:ef:9f:8d:54:3c:ae:2f:1d:25:bf:2a:24:21:7a:f7:c9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5
        Validity
            Not Before: Jan 31 01:09:22 2025 GMT
            Not After : Feb  1 04:54:22 2025 GMT
        Subject: CN=5E51F855EA725D17A4AC726107F5462DFFBB5CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:62:f0:cf:08:45:ca:8b:bb:d2:b4:99:bf:5b:
                    64:1b:05:0e:21:3c:bd:75:8b:6d:95:3e:80:a9:a8:
                    03:7a:30:d5:a7:9a:5a:d8:ab:54:5f:73:7b:b7:18:
                    48:ed:03:12:c3:7a:54:85:4a:9e:c0:c5:ab:bb:0a:
                    b2:76:35:0c:41:21:2c:ab:01:40:ab:86:51:f3:c5:
                    be:e5:66:52:1d:93:c3:5d:10:23:da:a1:05:61:54:
                    a3:08:b8:7b:19:37:37:8b:af:cf:5b:4c:4e:2b:da:
                    0e:50:c8:c6:a6:37:84:f1:e2:a6:92:2c:75:79:6d:
                    53:b6:3d:c3:63:95:10:fe:aa:f4:5b:6f:77:67:35:
                    98:ac:13:b4:7e:c1:26:2a:7c:8f:1e:a8:ae:6a:b7:
                    4b:8f:04:8e:76:4b:73:2b:16:c9:ec:59:25:78:fd:
                    4f:e3:c5:3b:2c:58:13:d4:c3:1b:fb:15:c3:fb:2a:
                    79:db:1c:ad:86:11:8f:e6:c5:44:63:b4:6d:ae:67:
                    dc:b9:90:9d:c5:07:a3:c4:7a:31:65:d3:ca:25:b9:
                    bb:8d:8f:21:95:9c:69:49:98:d7:53:1a:24:ce:a5:
                    c2:b0:0e:5d:f6:c9:c5:f7:8f:bd:5e:41:8a:c7:60:
                    76:e0:2f:8a:74:b9:d5:a1:d7:47:b2:0b:0f:b5:a0:
                    f3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:51:F8:55:EA:72:5D:17:A4:AC:72:61:07:F5:46:2D:FF:BB:5C:AD
            X509v3 Authority Key Identifier:
                keyid:25:E9:E2:DC:5F:3D:7E:F7:EE:5E:5C:70:3C:40:32:A9:29:6F:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:dd:e3:48:cb:2e:2f:34:08:da:38:fc:91:10:be:60:c6:0e:
         57:fe:a1:ed:5d:6d:88:29:38:0b:d1:7f:e5:b7:9d:62:f2:1f:
         4c:a7:60:57:63:af:df:b5:ba:d4:22:78:6c:c5:ef:20:12:09:
         b3:7f:05:be:8c:11:e3:d4:ba:39:f3:f3:a4:85:eb:35:1c:2f:
         72:f9:d9:4a:f4:54:0b:d4:ed:0a:70:65:b8:35:0c:a3:ca:cb:
         4e:56:44:ae:2a:ed:2e:b9:da:7a:12:72:0b:87:dd:0b:10:f5:
         07:77:ce:07:ca:59:67:4a:1b:da:59:fc:14:20:10:17:a0:96:
         49:c5:e7:d1:58:08:12:19:f5:fd:54:8d:90:69:a5:a9:57:5d:
         13:f0:67:a6:3b:6f:9a:0f:4a:0e:3c:1f:44:ee:96:11:ca:48:
         4f:9e:d1:62:42:4d:e0:94:01:2f:49:b4:23:1f:01:56:38:46:
         90:5d:13:37:8a:ba:e4:fd:74:6d:53:41:32:c3:f0:18:40:5b:
         7b:9f:5a:0e:4d:0b:57:b1:e0:ff:0a:7c:37:3e:30:cd:85:ab:
         82:62:47:d8:40:dc:29:59:43:bc:a0:b9:01:c7:8a:73:73:bf:
         4f:43:d4:5f:b1:ec:59:93:38:7c:1f:1f:9e:ed:56:e0:c9:c4:
         a1:4a:96:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAkl+75+NVDyuLx0lvyokIXr3yRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVFOUUyREM1RjNEN0VGN0VFNUU1QzcwM0M0MDMyQTky
OTZGOThENTAeFw0yNTAxMzEwMTA5MjJaFw0yNTAyMDEwNDU0MjJaMDMxMTAvBgNV
BAMTKDVFNTFGODU1RUE3MjVEMTdBNEFDNzI2MTA3RjU0NjJERkZCQjVDQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcYvDPCEXKi7vStJm/W2QbBQ4h
PL11i22VPoCpqAN6MNWnmlrYq1Rfc3u3GEjtAxLDelSFSp7Axau7CrJ2NQxBISyr
AUCrhlHzxb7lZlIdk8NdECPaoQVhVKMIuHsZNzeLr89bTE4r2g5QyMamN4Tx4qaS
LHV5bVO2PcNjlRD+qvRbb3dnNZisE7R+wSYqfI8eqK5qt0uPBI52S3MrFsnsWSV4
/U/jxTssWBPUwxv7FcP7KnnbHK2GEY/mxURjtG2uZ9y5kJ3FB6PEejFl08olubuN
jyGVnGlJmNdTGiTOpcKwDl32ycX3j71eQYrHYHbgL4p0udWh10eyCw+1oPO9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXlH4VepyXRekrHJhB/VGLf+7XK0wHwYDVR0j
BBgwFoAUJeni3F89fvfuXlxwPEAyqSlvmNUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjFEZ0FvWXZNM0RHckE0eG4xd3BqWGdBMkxuM2JVcUtzSHNvUmhpRlB4
M2MvMC8yNUU5RTJEQzVGM0Q3RUY3RUU1RTVDNzAzQzQwMzJBOTI5NkY5OEQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1RTlFMkRDNUYzRDdFRjdF
RTVFNUM3MDNDNDAzMkE5Mjk2Rjk4RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjFEZ0FvWXZNM0RHckE0eG4xd3BqWGdBMkxuM2JVcUtzSHNvUmhpRlB4M2MvMC8y
NUU5RTJEQzVGM0Q3RUY3RUU1RTVDNzAzQzQwMzJBOTI5NkY5OEQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKt3jSMsuLzQI2jj8kRC+YMYOV/6h7V1tiCk4C9F/5bedYvIfTKdgV2Ov37W6
1CJ4bMXvIBIJs38FvowR49S6OfPzpIXrNRwvcvnZSvRUC9TtCnBluDUMo8rLTlZE
rirtLrnaehJyC4fdCxD1B3fOB8pZZ0ob2ln8FCAQF6CWScXn0VgIEhn1/VSNkGml
qVddE/Bnpjtvmg9KDjwfRO6WEcpIT57RYkJN4JQBL0m0Ix8BVjhGkF0TN4q65P10
bVNBMsPwGEBbe59aDk0LV7Hg/wp8Nz4wzYWrgmJH2EDcKVlDvKC5AceKc3O/T0PU
X7HsWZM4fB8fnu1W4MnEoUqWpQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:55:28 2025 by rpki-client