Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.mft
File:                     94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.mft (raw, json)
Hash identifier:          jwJKFf/++69AHT7yv46LFAWvNKR/4D3VgvbKatEMJ6g=
Subject key identifier:   ED:84:F3:B0:CC:75:73:9E:66:2D:BF:18:8F:9F:4F:94:F2:7C:5F:1B
Authority key identifier: 94:D6:1A:37:D7:CA:E2:09:2F:25:62:DE:AA:D1:85:9A:F3:61:1C:9D
Certificate issuer:       /CN=94D61A37D7CAE2092F2562DEAAD1859AF3611C9D
Certificate serial:       0AC9CC25C2650ED3C59E1B7C9FB01ED37F664F93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.mft
Manifest number:          24
Signing time:             Fri 18 Apr 2025 18:59:58 +0000
Manifest this update:     Fri 18 Apr 2025 18:54:58 +0000
Manifest next update:     Sat 19 Apr 2025 22:08:58 +0000
Files and hashes:         1: 34352e3136312e34382e302f32322d3232203d3e20323638343437.roa (hash: eJdW+SquBMHxKjxunUGYFXhNtIt44CqyufBec6HKwjA=)
                          2: 34352e3136312e34382e302f32332d3233203d3e20323638343437.roa (hash: s+RFv+kqDfvXnkiVLXL4eHK5YfMu/BZzoeaxcbVjkxw=)
                          3: 34352e3136312e35312e302f32342d3234203d3e20323638343437.roa (hash: Fs69lfhw3SytADFjfKdBk80M+inCfmaEJayrfEhsERE=)
                          4: 94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.crl (hash: Ebk+59Nsu9gjLbZMm7FkWhwcpQLstpzlH3HfNLtfQwU=)
                          5: 323830343a353135633a3a2f33322d3332203d3e20323638343437.roa (hash: ftSTGHGdBeur8gaLRw3H9eINSE35Rjgut6gyDd+EO5E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c9:cc:25:c2:65:0e:d3:c5:9e:1b:7c:9f:b0:1e:d3:7f:66:4f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94D61A37D7CAE2092F2562DEAAD1859AF3611C9D
        Validity
            Not Before: Apr 18 18:54:58 2025 GMT
            Not After : Apr 19 22:08:58 2025 GMT
        Subject: CN=ED84F3B0CC75739E662DBF188F9F4F94F27C5F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:23:73:58:05:b1:59:62:f3:53:4a:96:a3:
                    0f:4c:75:9c:84:9e:92:9f:aa:0c:42:97:8a:35:24:
                    16:44:83:21:11:d7:53:4b:1b:e9:fc:5f:38:de:cd:
                    84:b2:22:9e:4e:6e:9f:b5:03:68:7a:ff:40:bb:53:
                    56:86:ca:4d:29:a5:26:1a:50:65:e7:9d:b9:8d:58:
                    33:75:db:94:d0:e1:b7:b8:cd:ab:2a:f6:33:87:38:
                    cb:9b:d9:2d:e0:52:48:37:12:e7:de:a9:d9:46:c7:
                    75:7c:64:d5:08:8c:82:d5:f5:34:73:8f:87:0a:14:
                    ac:c0:d6:6d:e8:75:38:a9:a0:b6:03:b7:9c:cf:5b:
                    25:96:86:04:3c:76:ca:cb:50:7a:50:13:be:32:fb:
                    46:d5:a0:52:f9:87:0e:51:c3:39:d6:26:4d:1d:bf:
                    be:c1:36:c3:9e:77:77:4b:c0:dd:dc:4d:4b:f1:1d:
                    44:62:d4:70:03:50:41:9d:9a:35:e7:87:4d:26:35:
                    a9:4b:67:0c:3f:65:c5:cf:56:6e:56:cd:47:e2:93:
                    56:47:81:cb:ca:4c:9a:e6:43:f7:d7:4a:90:50:bf:
                    7c:78:4a:5b:97:77:5e:ed:6b:aa:ad:03:77:04:6f:
                    89:51:74:da:7f:85:83:38:45:3e:15:73:fb:a9:4a:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:84:F3:B0:CC:75:73:9E:66:2D:BF:18:8F:9F:4F:94:F2:7C:5F:1B
            X509v3 Authority Key Identifier:
                keyid:94:D6:1A:37:D7:CA:E2:09:2F:25:62:DE:AA:D1:85:9A:F3:61:1C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4d:bc:d3:02:4c:ef:55:bd:8b:4f:d3:8a:63:4d:8e:f8:91:
         9a:3b:04:94:a6:0e:8a:7d:76:90:46:bd:0c:07:3e:42:14:55:
         cb:21:cd:b2:91:87:31:f2:76:05:2c:6c:e4:5d:bd:2b:a2:43:
         55:08:3c:2a:5c:88:2f:b6:9b:86:31:dd:bf:21:34:f8:39:ad:
         3a:5a:5b:0e:00:3b:2f:a0:25:7f:ff:64:da:d2:d4:e6:41:0f:
         f3:ba:ce:33:08:84:93:00:28:e5:2b:13:28:2d:eb:4c:51:99:
         6a:7a:97:fb:6d:c9:d5:da:95:01:b0:1b:82:39:b5:9c:1e:4d:
         70:f5:92:78:19:6e:25:8d:46:50:64:0c:d4:b9:7e:ca:9d:e5:
         e1:b5:25:09:68:ec:f4:8e:ba:6d:6d:b6:a8:15:83:9f:21:23:
         c7:15:96:9d:94:8b:96:c3:e0:07:06:00:2c:f7:98:3c:b4:49:
         66:e4:2a:00:14:81:29:eb:9e:9d:79:7e:97:53:7a:f1:97:6a:
         56:4e:87:6d:a2:13:f7:b0:dd:ab:d2:34:0f:b7:9a:e5:23:49:
         80:71:e6:f1:ae:37:b3:b1:da:a2:6f:70:66:b9:a0:65:25:87:
         46:ec:b9:3c:a3:02:97:f6:e2:f9:84:1f:83:d6:c1:20:2e:5c:
         9e:f9:c4:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCsnMJcJlDtPFnht8n7Ae039mT5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRENjFBMzdEN0NBRTIwOTJGMjU2MkRFQUFEMTg1OUFG
MzYxMUM5RDAeFw0yNTA0MTgxODU0NThaFw0yNTA0MTkyMjA4NThaMDMxMTAvBgNV
BAMTKEVEODRGM0IwQ0M3NTczOUU2NjJEQkYxODhGOUY0Rjk0RjI3QzVGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30CNzWAWxWWLzU0qWow9MdZyE
npKfqgxCl4o1JBZEgyER11NLG+n8XzjezYSyIp5Obp+1A2h6/0C7U1aGyk0ppSYa
UGXnnbmNWDN125TQ4be4zasq9jOHOMub2S3gUkg3EufeqdlGx3V8ZNUIjILV9TRz
j4cKFKzA1m3odTipoLYDt5zPWyWWhgQ8dsrLUHpQE74y+0bVoFL5hw5RwznWJk0d
v77BNsOed3dLwN3cTUvxHURi1HADUEGdmjXnh00mNalLZww/ZcXPVm5WzUfik1ZH
gcvKTJrmQ/fXSpBQv3x4SluXd17ta6qtA3cEb4lRdNp/hYM4RT4Vc/upSh8FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7YTzsMx1c55mLb8Yj59PlPJ8XxswHwYDVR0j
BBgwFoAUlNYaN9fK4gkvJWLeqtGFmvNhHJ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDhrNmlmRjJrU0pmR3lqUkpXMk1QdFhVUUpZUU5lQVZUZHhLOEVMUlg0
SmsvMC85NEQ2MUEzN0Q3Q0FFMjA5MkYyNTYyREVBQUQxODU5QUYzNjExQzlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0RDYxQTM3RDdDQUUyMDky
RjI1NjJERUFBRDE4NTlBRjM2MTFDOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NDhrNmlmRjJrU0pmR3lqUkpXMk1QdFhVUUpZUU5lQVZUZHhLOEVMUlg0SmsvMC85
NEQ2MUEzN0Q3Q0FFMjA5MkYyNTYyREVBQUQxODU5QUYzNjExQzlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApU280wJM71W9i0/TimNNjviRmjsElKYOin12kEa9DAc+QhRVyyHNspGHMfJ2
BSxs5F29K6JDVQg8KlyIL7abhjHdvyE0+DmtOlpbDgA7L6Alf/9k2tLU5kEP87rO
MwiEkwAo5SsTKC3rTFGZanqX+23J1dqVAbAbgjm1nB5NcPWSeBluJY1GUGQM1Ll+
yp3l4bUlCWjs9I66bW22qBWDnyEjxxWWnZSLlsPgBwYALPeYPLRJZuQqABSBKeue
nXl+l1N68ZdqVk6HbaIT97Ddq9I0D7ea5SNJgHHm8a43s7Haom9wZrmgZSWHRuy5
PKMCl/bi+YQfg9bBIC5cnvnE6A==
-----END CERTIFICATE-----