Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft
File:                     CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft (raw, json)
Hash identifier:          pVDioFvEkdc0kRVa49TsofdiWrSrWU4Q2a+Bc3bwIFA=
Subject key identifier:   0D:A0:C9:7B:BB:BE:91:48:4B:18:F8:4A:56:90:F0:20:AC:73:6E:7A
Authority key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
Certificate issuer:       /CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Certificate serial:       76E07E33C9FECDA460AF7EAF161E8478EEE79BC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft
Manifest number:          015C
Signing time:             Fri 31 Jan 2025 03:40:54 +0000
Manifest this update:     Fri 31 Jan 2025 03:35:54 +0000
Manifest next update:     Sat 01 Feb 2025 05:34:54 +0000
Files and hashes:         1: 34352e3136342e3139362e302f32322d3234203d3e20323638363430.roa (hash: SjGGr0jVVBuvxVEYDCjrS16pxM1pj6wVP7fSVrCw0TI=)
                          2: CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl (hash: K9vmu+oBO9TzY7CVuBQjp3ml5u9gkdG6IZ5FaQrOeB0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e0:7e:33:c9:fe:cd:a4:60:af:7e:af:16:1e:84:78:ee:e7:9b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
        Validity
            Not Before: Jan 31 03:35:54 2025 GMT
            Not After : Feb  1 05:34:54 2025 GMT
        Subject: CN=0DA0C97BBBBE91484B18F84A5690F020AC736E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:a3:07:22:1e:2a:af:82:e6:6d:83:bd:6c:
                    4d:a4:89:66:c7:29:e0:b5:fe:84:92:3d:74:75:7d:
                    8d:56:b6:2e:2d:f2:07:8d:ac:55:8e:5a:66:84:3d:
                    3e:98:75:76:c3:69:9d:fe:ed:1e:d9:6b:6e:1f:49:
                    84:cb:ea:85:fe:68:68:08:59:f4:5a:0e:55:93:88:
                    49:a0:32:e7:b6:08:d7:cc:3d:b2:d9:b9:d8:dc:19:
                    66:ce:db:4c:1f:a1:cf:1e:e9:0c:7a:cb:a1:b9:3a:
                    73:62:fc:d6:30:1b:4b:73:69:0d:1d:7b:cc:c5:37:
                    cf:ad:c0:f3:85:18:30:b1:ad:0e:9b:61:7f:6b:35:
                    a6:67:19:f3:0c:43:b7:f7:9c:94:e1:31:1f:db:77:
                    ab:6e:83:48:c9:d8:97:36:28:b5:a5:fb:02:34:9f:
                    fb:25:fa:59:00:50:8b:10:b5:65:0d:ab:d9:6e:71:
                    2e:ee:b7:87:67:91:e5:22:57:96:0b:7b:1f:5b:eb:
                    40:55:e4:d8:1f:27:83:b6:31:16:6c:6c:4f:9c:58:
                    15:fe:91:14:3c:48:a0:5a:f8:98:36:43:f8:93:ea:
                    84:2c:fd:07:a0:b7:61:67:7c:57:b9:b9:9c:7b:8b:
                    60:f8:91:78:6a:ac:90:92:a2:40:ee:5c:ac:09:5e:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A0:C9:7B:BB:BE:91:48:4B:18:F8:4A:56:90:F0:20:AC:73:6E:7A
            X509v3 Authority Key Identifier:
                keyid:CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:61:b9:09:ac:31:10:48:a8:c0:0d:15:03:68:db:5f:97:dc:
         96:4f:2d:92:97:31:1a:f5:28:63:b7:77:d4:68:00:cb:c9:87:
         1a:26:f0:f6:5c:76:ef:f4:b8:cd:ad:9a:37:e3:c5:a8:5c:3f:
         36:f3:11:13:72:ac:ca:28:67:f4:d6:6b:71:8c:16:25:bf:6d:
         73:d9:ec:3c:de:86:17:54:e5:69:7d:6f:e5:ec:4d:f1:a5:cf:
         09:d4:d3:5e:8e:a3:75:df:f7:fd:67:d9:f6:f6:41:0c:bd:13:
         84:c9:9d:90:3c:cc:b1:3b:71:90:a1:f1:6e:b2:d8:58:5d:0b:
         bd:44:29:b9:73:4d:a9:0b:2e:5c:6c:ad:80:1d:57:02:cf:46:
         29:94:38:c5:2d:8f:ce:eb:75:ff:75:90:53:3b:1f:73:f0:fc:
         72:9a:77:90:9c:d0:25:67:3a:69:99:51:2d:c3:18:94:30:01:
         94:c3:d9:24:82:32:67:61:e1:ee:62:99:c4:e9:ce:4f:78:61:
         13:4a:eb:99:b1:18:b2:9f:4b:9a:b4:5c:22:88:c1:3a:a9:1c:
         66:eb:13:ed:e6:64:29:44:34:33:df:40:39:5d:3e:57:04:42:
         d1:48:e5:94:67:4e:89:b9:32:90:05:bb:b6:70:5a:24:41:87:
         db:13:a8:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUduB+M8n+zaRgr36vFh6EeO7nm8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JBNEFGREVGNTcwQjM0OUFGNjhFRTlBMEFEMDdCRERE
N0IyMzNFRjAeFw0yNTAxMzEwMzM1NTRaFw0yNTAyMDEwNTM0NTRaMDMxMTAvBgNV
BAMTKDBEQTBDOTdCQkJCRTkxNDg0QjE4Rjg0QTU2OTBGMDIwQUM3MzZFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aaMHIh4qr4LmbYO9bE2kiWbH
KeC1/oSSPXR1fY1Wti4t8geNrFWOWmaEPT6YdXbDaZ3+7R7Za24fSYTL6oX+aGgI
WfRaDlWTiEmgMue2CNfMPbLZudjcGWbO20wfoc8e6Qx6y6G5OnNi/NYwG0tzaQ0d
e8zFN8+twPOFGDCxrQ6bYX9rNaZnGfMMQ7f3nJThMR/bd6tug0jJ2Jc2KLWl+wI0
n/sl+lkAUIsQtWUNq9lucS7ut4dnkeUiV5YLex9b60BV5NgfJ4O2MRZsbE+cWBX+
kRQ8SKBa+Jg2Q/iT6oQs/Qegt2FnfFe5uZx7i2D4kXhqrJCSokDuXKwJXkDDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDaDJe7u+kUhLGPhKVpDwIKxzbnowHwYDVR0j
BBgwFoAUy6Sv3vVws0mvaO6aCtB73deyM+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40
Y3cvMC9DQkE0QUZERUY1NzBCMzQ5QUY2OEVFOUEwQUQwN0JEREQ3QjIzM0VGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQTRBRkRFRjU3MEIzNDlB
RjY4RUU5QTBBRDA3QkRERDdCMjMzRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40Y3cvMC9D
QkE0QUZERUY1NzBCMzQ5QUY2OEVFOUEwQUQwN0JEREQ3QjIzM0VGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALmG5CawxEEiowA0VA2jbX5fclk8tkpcxGvUoY7d31GgAy8mHGibw9lx27/S4
za2aN+PFqFw/NvMRE3Ksyihn9NZrcYwWJb9tc9nsPN6GF1TlaX1v5exN8aXPCdTT
Xo6jdd/3/WfZ9vZBDL0ThMmdkDzMsTtxkKHxbrLYWF0LvUQpuXNNqQsuXGytgB1X
As9GKZQ4xS2Pzut1/3WQUzsfc/D8cpp3kJzQJWc6aZlRLcMYlDABlMPZJIIyZ2Hh
7mKZxOnOT3hhE0rrmbEYsp9LmrRcIojBOqkcZusT7eZkKUQ0M99AOV0+VwRC0Ujl
lGdOibkykAW7tnBaJEGH2xOoaw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:45:28 2025 by rpki-client