Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft
File:                     B52A0D870CC703D8D9FE35123E1890C611011310.mft (raw, json)
Hash identifier:          w5M+J6CS5QGC6JQApR1ajkWxVP2G5Kd1IRlzM6YibXY=
Subject key identifier:   BD:42:68:2A:AD:5A:3D:66:39:47:ED:28:34:26:55:62:68:61:DC:4E
Authority key identifier: B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10
Certificate issuer:       /CN=B52A0D870CC703D8D9FE35123E1890C611011310
Certificate serial:       31BDE25317E2D57DB6AA2E72E43C64E20E527A2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft
Manifest number:          1C
Signing time:             Fri 31 Jan 2025 11:34:11 +0000
Manifest this update:     Fri 31 Jan 2025 11:29:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:40:11 +0000
Files and hashes:         1: 323830343a316563633a3a2f33322d3438203d3e20323634343438.roa (hash: yTXAwNWbp7WNlHhKketoEKnsfr3BDlqsNppl/voJ7z0=)
                          2: B52A0D870CC703D8D9FE35123E1890C611011310.crl (hash: iChMxUqrXfq0Kj5MvrajgphlcN8aGn2CrmbmPNOhKyA=)
                          3: 3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa (hash: aU/MtJ/9aeIF0VSIvMVL3f1p1fHqwO9eh2i+7lRvC14=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bd:e2:53:17:e2:d5:7d:b6:aa:2e:72:e4:3c:64:e2:0e:52:7a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52A0D870CC703D8D9FE35123E1890C611011310
        Validity
            Not Before: Jan 31 11:29:11 2025 GMT
            Not After : Feb  1 14:40:11 2025 GMT
        Subject: CN=BD42682AAD5A3D663947ED28342655626861DC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:e6:e0:9d:63:93:9f:ba:20:97:c4:01:d3:
                    21:33:92:09:82:9a:52:5a:e4:23:f0:b3:59:ca:84:
                    01:d3:c8:26:67:02:a5:3a:1b:1d:22:64:13:48:54:
                    91:85:f5:90:7c:5f:5a:9d:04:3c:50:fa:31:f5:01:
                    1b:6e:0a:d3:91:d3:b7:49:f8:21:a0:cb:90:57:d0:
                    d5:0b:4b:38:e0:a3:89:6e:2e:70:a0:14:77:d7:4e:
                    58:db:6a:18:9c:01:3e:d0:52:13:9c:29:0a:72:25:
                    ed:a3:55:63:2d:98:83:12:9d:b4:17:30:01:93:dc:
                    b3:6e:25:82:da:af:6a:12:5f:8c:d0:6d:1b:e5:66:
                    26:85:f8:75:83:83:e7:8f:9f:94:c6:ef:33:96:14:
                    c0:63:ab:10:ab:56:6a:63:2c:2f:34:8d:6c:9e:7f:
                    cc:e3:4c:90:66:01:01:9e:98:01:66:0d:e6:e7:5f:
                    39:09:40:a1:5b:df:54:ee:34:9b:f6:db:57:23:70:
                    64:86:71:e3:3c:e2:72:6b:b5:d1:cf:d9:5a:c8:74:
                    6d:47:1e:f7:74:f1:cc:56:d5:27:03:a4:fd:10:5a:
                    88:69:98:04:11:a7:18:59:8d:bf:61:ac:23:91:80:
                    b1:bf:1a:84:4d:2a:a0:3a:15:35:49:83:e5:31:3b:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:42:68:2A:AD:5A:3D:66:39:47:ED:28:34:26:55:62:68:61:DC:4E
            X509v3 Authority Key Identifier:
                keyid:B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:a3:82:44:a1:e1:51:30:0c:89:57:73:95:f7:91:6a:f8:
         42:db:35:da:ec:bb:0f:1d:8d:e0:15:e6:08:d3:8c:6f:0d:6e:
         fa:fa:ea:23:40:f5:90:e8:04:20:04:ce:a3:2a:d8:dc:3c:af:
         b2:91:2f:d9:af:f0:6a:49:91:9c:fa:bc:9a:5d:49:55:c7:6d:
         a0:35:e9:e2:5e:b9:6b:77:ae:65:6a:b2:5a:9a:fa:fc:d5:74:
         8d:2b:6a:ec:f2:04:1a:ac:31:eb:b8:4b:15:47:8a:7c:cc:66:
         77:86:fd:fa:27:40:f8:f3:1a:ac:ef:d7:de:84:87:74:e5:67:
         b6:68:5f:d2:c8:b3:4c:4b:c1:d4:d9:6d:74:68:59:b3:4c:16:
         f2:3e:10:51:cc:74:81:f6:36:bc:dd:55:c1:b3:94:88:ad:ac:
         5c:08:7e:6c:ab:07:47:34:52:c4:1a:d1:1a:94:1b:31:41:b2:
         7d:0e:26:f1:ed:20:b8:08:e7:80:c8:a1:2e:f5:e2:4b:7f:cc:
         66:d1:84:85:0f:e2:26:9c:94:bd:93:42:fa:f4:ae:fd:91:5a:
         87:93:96:20:78:4e:47:08:85:e9:b0:f1:c6:68:70:0b:d4:50:
         db:27:b0:ec:73:88:97:aa:3d:93:00:f4:91:ea:6c:2c:db:5f:
         34:de:a5:ec
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUMb3iUxfi1X22qi5y5Dxk4g5Sei8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUyQTBEODcwQ0M3MDNEOEQ5RkUzNTEyM0UxODkwQzYx
MTAxMTMxMDAeFw0yNTAxMzExMTI5MTFaFw0yNTAyMDExNDQwMTFaMDMxMTAvBgNV
BAMTKEJENDI2ODJBQUQ1QTNENjYzOTQ3RUQyODM0MjY1NTYyNjg2MURDNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/+bgnWOTn7ogl8QB0yEzkgmC
mlJa5CPws1nKhAHTyCZnAqU6Gx0iZBNIVJGF9ZB8X1qdBDxQ+jH1ARtuCtOR07dJ
+CGgy5BX0NULSzjgo4luLnCgFHfXTljbahicAT7QUhOcKQpyJe2jVWMtmIMSnbQX
MAGT3LNuJYLar2oSX4zQbRvlZiaF+HWDg+ePn5TG7zOWFMBjqxCrVmpjLC80jWye
f8zjTJBmAQGemAFmDebnXzkJQKFb31TuNJv221cjcGSGceM84nJrtdHP2VrIdG1H
Hvd08cxW1ScDpP0QWohpmAQRpxhZjb9hrCORgLG/GoRNKqA6FTVJg+UxO6KvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUvUJoKq1aPWY5R+0oNCZVYmhh3E4wHwYDVR0j
BBgwFoAUtSoNhwzHA9jZ/jUSPhiQxhEBExAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9wOWJ4cFhNandnNE1UUW5MQnRqR2RNelJiamZTUnBGUjFHQ0JmV01Ba1pV
LzAvQjUyQTBEODcwQ0M3MDNEOEQ5RkUzNTEyM0UxODkwQzYxMTAxMTMxMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNTJBMEQ4NzBDQzcwM0Q4RDlG
RTM1MTIzRTE4OTBDNjExMDExMzEwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3A5
YnhwWE1qd2c0TVRRbkxCdGpHZE16UmJqZlNScEZSMUdDQmZXTUFrWlUvMC9CNTJB
MEQ4NzBDQzcwM0Q4RDlGRTM1MTIzRTE4OTBDNjExMDExMzEwLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
fTSjgkSh4VEwDIlXc5X3kWr4Qts12uy7Dx2N4BXmCNOMbw1u+vrqI0D1kOgEIATO
oyrY3DyvspEv2a/wakmRnPq8ml1JVcdtoDXp4l65a3euZWqyWpr6/NV0jStq7PIE
Gqwx67hLFUeKfMxmd4b9+idA+PMarO/X3oSHdOVntmhf0sizTEvB1NltdGhZs0wW
8j4QUcx0gfY2vN1VwbOUiK2sXAh+bKsHRzRSxBrRGpQbMUGyfQ4m8e0guAjngMih
LvXiS3/MZtGEhQ/iJpyUvZNC+vSu/ZFah5OWIHhORwiF6bDxxmhwC9RQ2yew7HOI
l6o9kwD0kepsLNtfNN6l7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:19:18 2025 by rpki-client