Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
File:                     D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft (raw, json)
Hash identifier:          sygU2MMLduRiqFqyvuKB8vWOmYgRD2lmRsSmbNgH9r4=
Subject key identifier:   C3:03:4A:10:92:E2:46:16:7A:10:42:19:20:A3:86:EC:07:39:69:5E
Authority key identifier: D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
Certificate issuer:       /CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
Certificate serial:       438719A8A7BAE79DE1595D81D905EF445FF640E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
Manifest number:          FB
Signing time:             Fri 31 Jan 2025 17:09:31 +0000
Manifest this update:     Fri 31 Jan 2025 17:04:31 +0000
Manifest next update:     Sat 01 Feb 2025 19:08:31 +0000
Files and hashes:         1: 34352e3138392e36382e302f32322d3332203d3e20323639353732.roa (hash: Vwj5Az/NWZAAUaAv7XOqlvQGb5veDSWIk0EdmPOEINA=)
                          2: D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl (hash: 3BsHTBUI9KWn+gi8GXm4eqhl5lhzO9oZKHGSIJwaHLg=)
                          3: 323830343a363661303a3a2f33322d313238203d3e20323639353732.roa (hash: ixoJxirT+bmWJBIHMou4PsWxfO7fEsii3/ee7epxLEs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:87:19:a8:a7:ba:e7:9d:e1:59:5d:81:d9:05:ef:44:5f:f6:40:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
        Validity
            Not Before: Jan 31 17:04:31 2025 GMT
            Not After : Feb  1 19:08:31 2025 GMT
        Subject: CN=C3034A1092E246167A10421920A386EC0739695E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:86:e2:6c:14:06:9c:bf:da:f9:06:13:e5:
                    71:96:21:59:24:5c:31:c2:a2:0f:36:74:6f:22:cc:
                    97:53:d8:18:4e:0a:26:9c:e6:d6:78:bc:c8:5d:52:
                    65:02:14:9e:6b:6a:ea:f8:8b:89:16:d9:7a:01:99:
                    53:2a:97:d3:35:33:e0:03:0e:71:6f:1f:5b:ee:a2:
                    e5:f1:4f:95:90:8c:74:b0:51:5d:dd:39:f6:f5:4c:
                    7f:06:58:95:49:2b:53:b6:77:39:6e:0b:30:30:9e:
                    7f:88:5a:f8:c7:82:60:0d:aa:47:8e:86:9b:51:73:
                    b1:ec:6b:ea:64:6b:be:82:e3:b3:c7:c7:8a:e5:5d:
                    54:d5:ae:e6:99:f7:4d:93:b7:12:be:7d:18:01:b1:
                    62:9d:84:1f:7a:16:3f:15:6d:b9:76:87:13:59:e7:
                    f1:1a:eb:37:39:eb:3c:2d:98:2c:9c:1f:54:7e:ef:
                    e3:6e:34:56:d1:6b:94:f3:71:b8:2e:18:59:b9:8e:
                    bb:39:d6:2c:43:2e:76:cc:1c:8b:75:95:ab:4d:d0:
                    89:61:1b:ae:85:c3:f7:7c:6a:57:f3:ef:e6:50:a5:
                    4c:9b:5f:61:02:77:be:63:c2:44:17:e0:e3:45:dd:
                    f9:7e:6b:1a:dd:3c:9a:08:00:ce:3b:90:39:ce:1b:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:4A:10:92:E2:46:16:7A:10:42:19:20:A3:86:EC:07:39:69:5E
            X509v3 Authority Key Identifier:
                keyid:D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ac:8a:8e:09:7c:1e:4f:4d:d4:e2:7a:7e:40:12:d0:0f:e6:
         25:da:de:cd:9d:81:53:29:ad:f8:48:a5:90:b8:4a:02:ee:c3:
         33:a1:b7:52:5c:cc:f4:f5:96:12:46:52:91:a3:52:05:49:8a:
         d1:2e:19:e9:3c:5b:7a:3f:aa:2a:22:45:2b:a4:fa:41:56:25:
         e9:73:f9:92:c5:81:77:72:9c:49:a1:71:86:fe:08:30:9f:b2:
         37:e1:8b:c0:28:87:11:fc:1c:af:76:7b:df:32:af:2e:0d:8a:
         a1:d7:d4:1c:18:25:e8:d6:c4:50:42:06:70:ad:8d:21:71:0a:
         03:a7:08:23:86:0d:ab:b2:4a:ab:e8:b6:dd:81:b8:6b:04:b3:
         42:03:45:df:f5:15:99:37:c8:e3:ee:ba:75:7c:cb:2c:71:fd:
         43:96:88:2e:1a:cc:12:30:93:53:3f:83:f8:64:44:01:55:9c:
         33:17:54:df:ad:b4:c0:09:d6:91:ee:20:90:46:a4:0d:0c:a1:
         e0:b6:49:79:18:f2:78:59:4e:84:f5:1b:ef:47:ff:f1:0c:ef:
         e7:7c:5c:c7:bd:f5:9d:e5:fa:53:c2:0b:56:f7:57:4f:59:20:
         53:db:67:12:eb:9b:df:83:6e:a6:f0:92:eb:31:f1:27:dc:95:
         59:81:b5:80
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUQ4cZqKe6553hWV2B2QXvRF/2QOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDI4REQxMTM1RUI0RUE2ODQxNkI0MkNGRDE5REY1
MDI5MjlEMjAeFw0yNTAxMzExNzA0MzFaFw0yNTAyMDExOTA4MzFaMDMxMTAvBgNV
BAMTKEMzMDM0QTEwOTJFMjQ2MTY3QTEwNDIxOTIwQTM4NkVDMDczOTY5NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0IbibBQGnL/a+QYT5XGWIVkk
XDHCog82dG8izJdT2BhOCiac5tZ4vMhdUmUCFJ5raur4i4kW2XoBmVMql9M1M+AD
DnFvH1vuouXxT5WQjHSwUV3dOfb1TH8GWJVJK1O2dzluCzAwnn+IWvjHgmANqkeO
hptRc7Hsa+pka76C47PHx4rlXVTVruaZ902TtxK+fRgBsWKdhB96Fj8Vbbl2hxNZ
5/Ea6zc56zwtmCycH1R+7+NuNFbRa5TzcbguGFm5jrs51ixDLnbMHIt1latN0Ilh
G66Fw/d8alfz7+ZQpUybX2ECd75jwkQX4ONF3fl+axrdPJoIAM47kDnOGx+tAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUwwNKEJLiRhZ6EEIZIKOG7Ac5aV4wHwYDVR0j
BBgwFoAU1U0o3RE1606mhBa0LP0Z31ApKdIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jYjdoR3hjYzdBalpQQWpFTXdiY1RXMlpWMUdoc3JMYnY2aW5XQ3AySlNu
LzAvRDU0RDI4REQxMTM1RUI0RUE2ODQxNkI0MkNGRDE5REY1MDI5MjlEMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENTREMjhERDExMzVFQjRFQTY4
NDE2QjQyQ0ZEMTlERjUwMjkyOUQyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Ni
N2hHeGNjN0FqWlBBakVNd2JjVFcyWlYxR2hzckxidjZpbldDcDJKU24vMC9ENTRE
MjhERDExMzVFQjRFQTY4NDE2QjQyQ0ZEMTlERjUwMjkyOUQyLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
A6yKjgl8Hk9N1OJ6fkAS0A/mJdrezZ2BUymt+EilkLhKAu7DM6G3UlzM9PWWEkZS
kaNSBUmK0S4Z6Txbej+qKiJFK6T6QVYl6XP5ksWBd3KcSaFxhv4IMJ+yN+GLwCiH
Efwcr3Z73zKvLg2KodfUHBgl6NbEUEIGcK2NIXEKA6cII4YNq7JKq+i23YG4awSz
QgNF3/UVmTfI4+66dXzLLHH9Q5aILhrMEjCTUz+D+GREAVWcMxdU3620wAnWke4g
kEakDQyh4LZJeRjyeFlOhPUb70f/8Qzv53xcx731neX6U8ILVvdXT1kgU9tnEuub
34NupvCS6zHxJ9yVWYG1gA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:28:33 2025 by rpki-client