Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft
File:                     8A93F234754BF521193905D6EAF7AFDBB2811E48.mft (raw, json)
Hash identifier:          TZlfIcAIj+aqfFBULP2CIyWknaURqQMF4OY8G5nx3JA=
Subject key identifier:   FC:1A:28:E5:ED:2B:7B:65:22:C6:E5:81:D5:5E:43:2C:E6:54:8E:90
Authority key identifier: 8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48
Certificate issuer:       /CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
Certificate serial:       6FA06AA7482EF664F573BF197FA3A4445B6BD040
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft
Manifest number:          D2
Signing time:             Fri 31 Jan 2025 08:21:07 +0000
Manifest this update:     Fri 31 Jan 2025 08:16:07 +0000
Manifest next update:     Sat 01 Feb 2025 10:09:07 +0000
Files and hashes:         1: 3139302e332e3136342e302f32342d3234203d3e20323731363033.roa (hash: msgAyNNvQRPv0l8kE70d7l4v19iKAS+gA38asDPC9WQ=)
                          2: 3139302e332e3136342e302f32322d3232203d3e20323731363033.roa (hash: Ito++Ux14+zLQmEMNTjUkGax/mjH5GhWzg71hGG4S9Y=)
                          3: 3139302e332e3136362e302f32342d3234203d3e20323731363033.roa (hash: qWXsWMtA6QvMDMjL3UNVbPvudSgEx8XI/NhBNI1pzqw=)
                          4: 3139302e332e3136372e302f32342d3234203d3e20323731363033.roa (hash: iurEa/Ztd0T/FrostFpyfBEnwpUgdoYWADsgV1oHnvk=)
                          5: 8A93F234754BF521193905D6EAF7AFDBB2811E48.crl (hash: e1p0iyRoTJGRwOKHI8BBtYX60GViYqj9Zv3BItvYoqA=)
                          6: 3139302e332e3136352e302f32342d3234203d3e20323731363033.roa (hash: EAx5Wdm1arllAsPVxI3swxcdfuMy5Oh1aZblIhE/xDY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a0:6a:a7:48:2e:f6:64:f5:73:bf:19:7f:a3:a4:44:5b:6b:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
        Validity
            Not Before: Jan 31 08:16:07 2025 GMT
            Not After : Feb  1 10:09:07 2025 GMT
        Subject: CN=FC1A28E5ED2B7B6522C6E581D55E432CE6548E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:8f:7e:a5:9e:af:0f:47:11:a2:c1:dd:e7:
                    cc:72:7f:0c:ca:54:0e:a3:17:18:83:76:87:21:83:
                    1e:a8:bc:23:d2:2d:d5:bd:30:3b:24:c2:02:13:50:
                    4f:67:e0:61:89:9d:ae:31:f3:a0:b1:ee:71:23:17:
                    ea:03:ac:75:97:c6:fe:ff:94:6a:7b:07:1d:c6:74:
                    8e:25:74:73:f0:5c:0f:d7:ab:b7:be:57:1a:ef:2d:
                    be:aa:a1:43:60:c0:56:ae:8b:f6:5b:57:31:6d:06:
                    38:e3:24:f7:13:05:53:d5:31:c5:ce:29:51:97:cf:
                    46:0f:27:f2:45:4e:98:3b:7f:52:00:87:5c:c0:d0:
                    ff:dc:01:dc:2c:f6:1e:5b:ee:a5:67:5f:5d:21:a2:
                    b4:c2:37:c2:fe:c9:6b:0e:a0:63:5d:8a:da:9a:bd:
                    a6:43:28:dd:1d:57:2c:08:d1:ff:32:0d:fe:33:98:
                    97:04:63:50:be:71:db:49:4d:f4:5d:64:01:63:3e:
                    96:19:17:a0:36:0e:30:5b:ba:ee:47:4a:a4:f8:9c:
                    2c:2c:56:1e:9b:88:28:fb:78:e6:02:ea:bd:b3:1d:
                    e2:01:37:83:9d:60:19:69:6a:5a:62:bf:36:94:34:
                    d2:fd:b9:62:8d:13:fb:f9:0b:33:af:75:13:69:2f:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1A:28:E5:ED:2B:7B:65:22:C6:E5:81:D5:5E:43:2C:E6:54:8E:90
            X509v3 Authority Key Identifier:
                keyid:8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:d6:bb:6b:91:b5:3d:7a:a2:77:2b:c2:26:f2:da:eb:c3:
         76:f6:c0:25:f8:3c:9b:58:8e:50:cc:91:81:d7:72:29:7d:06:
         f5:53:7a:30:15:d1:b9:08:b4:ef:63:40:96:aa:a4:53:d1:e7:
         43:0d:b1:9d:80:e4:f1:04:79:f5:eb:13:b1:27:3d:17:c1:e1:
         39:85:2e:f2:4f:e2:fd:5a:01:b2:e7:5b:17:a4:3e:58:9e:82:
         dd:1f:9e:1e:90:c4:dc:d1:17:cb:88:c5:bd:be:31:a3:f9:27:
         ad:1c:80:09:47:c7:e7:a4:3e:88:82:d8:1f:0b:9e:a4:31:1e:
         10:b0:16:41:a1:04:11:e5:8b:b2:c6:30:bf:42:2e:9b:37:83:
         d5:eb:d5:e5:40:d0:5a:16:db:07:98:eb:61:51:28:40:22:0c:
         b9:dd:d9:c5:b5:c2:60:5c:1c:08:48:02:99:bc:02:d7:c0:96:
         2a:92:2b:c6:0f:17:79:88:b8:cf:88:00:b6:78:e3:91:d6:d1:
         37:12:38:8d:b8:42:b3:b2:e2:9f:54:a7:e0:6a:12:87:a9:41:
         94:0d:45:6c:75:4c:34:6f:91:09:9f:21:9f:76:f2:45:dd:2b:
         47:3b:d1:04:f0:bb:61:e5:da:b4:c3:be:20:a1:5b:65:58:91:
         70:61:00:a2
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUb6Bqp0gu9mT1c78Zf6OkRFtr0EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5M0YyMzQ3NTRCRjUyMTE5MzkwNUQ2RUFGN0FGREJC
MjgxMUU0ODAeFw0yNTAxMzEwODE2MDdaFw0yNTAyMDExMDA5MDdaMDMxMTAvBgNV
BAMTKEZDMUEyOEU1RUQyQjdCNjUyMkM2RTU4MUQ1NUU0MzJDRTY1NDhFOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTj49+pZ6vD0cRosHd58xyfwzK
VA6jFxiDdochgx6ovCPSLdW9MDskwgITUE9n4GGJna4x86Cx7nEjF+oDrHWXxv7/
lGp7Bx3GdI4ldHPwXA/Xq7e+VxrvLb6qoUNgwFaui/ZbVzFtBjjjJPcTBVPVMcXO
KVGXz0YPJ/JFTpg7f1IAh1zA0P/cAdws9h5b7qVnX10horTCN8L+yWsOoGNditqa
vaZDKN0dVywI0f8yDf4zmJcEY1C+cdtJTfRdZAFjPpYZF6A2DjBbuu5HSqT4nCws
Vh6biCj7eOYC6r2zHeIBN4OdYBlpalpivzaUNNL9uWKNE/v5CzOvdRNpL8uLAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU/Boo5e0re2UixuWB1V5DLOZUjpAwHwYDVR0j
BBgwFoAUipPyNHVL9SEZOQXW6vev27KBHkgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SZEpuNUVmbW1nYkhuWkxDOEZaaVd1Vmo2eEhEYXgzTXduV1lUYVVhd3lL
LzAvOEE5M0YyMzQ3NTRCRjUyMTE5MzkwNUQ2RUFGN0FGREJCMjgxMUU0OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QTkzRjIzNDc1NEJGNTIxMTkz
OTA1RDZFQUY3QUZEQkIyODExRTQ4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Jk
Sm41RWZtbWdiSG5aTEM4RlppV3VWajZ4SERheDNNd25XWVRhVWF3eUsvMC84QTkz
RjIzNDc1NEJGNTIxMTkzOTA1RDZFQUY3QUZEQkIyODExRTQ4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
FcDWu2uRtT16oncrwiby2uvDdvbAJfg8m1iOUMyRgddyKX0G9VN6MBXRuQi072NA
lqqkU9HnQw2xnYDk8QR59esTsSc9F8HhOYUu8k/i/VoBsudbF6Q+WJ6C3R+eHpDE
3NEXy4jFvb4xo/knrRyACUfH56Q+iILYHwuepDEeELAWQaEEEeWLssYwv0IumzeD
1evV5UDQWhbbB5jrYVEoQCIMud3ZxbXCYFwcCEgCmbwC18CWKpIrxg8XeYi4z4gA
tnjjkdbRNxI4jbhCs7Lin1Sn4GoSh6lBlA1FbHVMNG+RCZ8hn3byRd0rRzvRBPC7
YeXatMO+IKFbZViRcGEAog==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:37:51 2025 by rpki-client