Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/E312F825223DA5B1F75598C00FD0F34488E55230.mft
File:                     E312F825223DA5B1F75598C00FD0F34488E55230.mft (raw, json)
Hash identifier:          hQ5YFDAdH9B5eJEZpq1K8aRIiH5lsBlVfwFalUy5SU8=
Subject key identifier:   82:36:C1:33:EA:3A:44:82:E7:4F:B7:28:46:1A:B4:06:99:A5:13:7E
Authority key identifier: E3:12:F8:25:22:3D:A5:B1:F7:55:98:C0:0F:D0:F3:44:88:E5:52:30
Certificate issuer:       /CN=E312F825223DA5B1F75598C00FD0F34488E55230
Certificate serial:       658916295BC0DB89F204523C9AE57AECA04F2CB5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E312F825223DA5B1F75598C00FD0F34488E55230.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/E312F825223DA5B1F75598C00FD0F34488E55230.mft
Manifest number:          18
Signing time:             Thu 17 Apr 2025 08:41:00 +0000
Manifest this update:     Thu 17 Apr 2025 08:36:00 +0000
Manifest next update:     Fri 18 Apr 2025 11:02:00 +0000
Files and hashes:         1: 323830343a343930633a3a2f33322d3438203d3e20323637313631.roa (hash: R5q/oljUxAaBo2iJHedz2HI3A/H/2gzzP+bchxN1dsc=)
                          2: 34352e3233302e3133362e302f32322d3234203d3e20323637313631.roa (hash: jtFElTz8oytUM7g/88+s3Odz8MbeYH/AwCbCTYqnAQ8=)
                          3: E312F825223DA5B1F75598C00FD0F34488E55230.crl (hash: y7Wa5OUT94oKdq81aZ+4I2VT0XXHumnWVY28cgFlkO8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:16:29:5b:c0:db:89:f2:04:52:3c:9a:e5:7a:ec:a0:4f:2c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E312F825223DA5B1F75598C00FD0F34488E55230
        Validity
            Not Before: Apr 17 08:36:00 2025 GMT
            Not After : Apr 18 11:02:00 2025 GMT
        Subject: CN=8236C133EA3A4482E74FB728461AB40699A5137E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f4:cd:d6:30:2d:3b:a3:4a:38:7f:06:1f:a1:
                    1b:06:f6:28:15:77:2e:7d:5a:89:1b:a8:ba:45:e9:
                    7f:48:e7:11:03:a4:71:52:28:53:ae:c7:3b:0d:e2:
                    a0:94:26:8e:40:72:16:a6:0c:ce:67:bc:c2:8a:44:
                    70:85:fa:20:fd:46:74:9a:b0:91:0b:0d:97:a6:fb:
                    24:cb:b1:0e:4e:76:8d:96:a0:2d:97:04:f7:5f:4f:
                    e8:d1:a5:e8:99:cb:b4:c2:2e:18:11:e4:8c:5a:55:
                    0d:fb:82:01:13:b8:76:0f:b0:fd:5c:82:04:7a:3e:
                    7a:22:37:ea:f8:38:e3:d7:a7:da:08:d2:b4:a2:e0:
                    57:4d:fa:1d:d5:e9:36:e2:2d:3c:86:63:6a:e9:bf:
                    b3:2b:a5:01:31:f1:79:ce:8f:c2:09:20:ef:28:49:
                    95:e4:df:20:7d:06:e0:b2:77:04:8c:15:af:78:08:
                    e3:99:81:e2:87:3c:d8:1b:91:e9:48:44:76:b1:a9:
                    b1:7e:56:e1:d9:a6:5e:53:f1:5d:07:d8:8f:ca:d7:
                    bb:dc:47:d2:22:dd:a8:12:df:a1:4d:f7:41:dc:7a:
                    9a:36:9c:db:1b:48:c0:40:53:3c:b2:1f:22:72:f1:
                    9b:d5:55:ad:8a:ad:c2:ea:63:49:f2:94:52:23:31:
                    f4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:36:C1:33:EA:3A:44:82:E7:4F:B7:28:46:1A:B4:06:99:A5:13:7E
            X509v3 Authority Key Identifier:
                keyid:E3:12:F8:25:22:3D:A5:B1:F7:55:98:C0:0F:D0:F3:44:88:E5:52:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/E312F825223DA5B1F75598C00FD0F34488E55230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E312F825223DA5B1F75598C00FD0F34488E55230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/E312F825223DA5B1F75598C00FD0F34488E55230.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3f:1d:3b:67:43:37:47:4c:e1:8e:a9:f8:58:f4:76:44:74:
         5a:ec:a8:d3:23:6e:b0:a0:91:2f:1d:d1:13:3b:c3:5a:92:b6:
         bb:6d:28:7d:a7:e6:cd:22:30:9c:5e:f2:01:7d:e7:c4:be:3c:
         2d:66:e9:5d:14:c2:35:3a:28:59:cc:5c:cf:d1:a2:9a:80:70:
         cc:1e:a2:b9:82:53:c0:c8:f6:9a:d2:ff:6a:1b:ae:9e:ea:79:
         e7:75:cc:53:fd:d6:e9:52:17:a8:71:68:03:e8:09:58:19:3a:
         50:61:60:24:44:1d:b4:15:e2:10:b5:66:e5:6b:03:cb:eb:0f:
         f5:7f:5c:83:a5:cb:48:28:70:d3:5d:ba:03:59:76:09:27:99:
         05:c0:70:b9:90:8b:02:75:dd:32:0c:9e:c3:4d:d0:71:54:0f:
         d4:4b:d7:31:88:8e:b8:64:b4:9a:64:e5:3c:a2:e3:6c:c9:7f:
         54:12:e1:31:1d:db:60:31:37:e1:0d:eb:0a:42:9c:1b:1e:0a:
         f7:e2:c1:7b:67:06:a5:0b:c6:a1:ee:87:05:05:43:21:02:c3:
         e5:31:7d:08:3e:bf:94:b8:f2:ae:4f:e2:23:f3:c7:af:a1:0e:
         c5:fb:d1:2e:0f:a1:ec:33:b6:60:59:1b:71:07:af:9a:b7:fe:
         e8:a0:89:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZYkWKVvA24nyBFI8muV67KBPLLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMxMkY4MjUyMjNEQTVCMUY3NTU5OEMwMEZEMEYzNDQ4
OEU1NTIzMDAeFw0yNTA0MTcwODM2MDBaFw0yNTA0MTgxMTAyMDBaMDMxMTAvBgNV
BAMTKDgyMzZDMTMzRUEzQTQ0ODJFNzRGQjcyODQ2MUFCNDA2OTlBNTEzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9M3WMC07o0o4fwYfoRsG9igV
dy59WokbqLpF6X9I5xEDpHFSKFOuxzsN4qCUJo5AchamDM5nvMKKRHCF+iD9RnSa
sJELDZem+yTLsQ5Odo2WoC2XBPdfT+jRpeiZy7TCLhgR5IxaVQ37ggETuHYPsP1c
ggR6PnoiN+r4OOPXp9oI0rSi4FdN+h3V6TbiLTyGY2rpv7MrpQEx8XnOj8IJIO8o
SZXk3yB9BuCydwSMFa94COOZgeKHPNgbkelIRHaxqbF+VuHZpl5T8V0H2I/K17vc
R9Ii3agS36FN90Hcepo2nNsbSMBAUzyyHyJy8ZvVVa2KrcLqY0nylFIjMfR1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgjbBM+o6RILnT7coRhq0BpmlE34wHwYDVR0j
BBgwFoAU4xL4JSI9pbH3VZjAD9DzRIjlUjAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2gzVDg3OTV5Nm5TUnRWdW1BVTNKblpzQmJocTdDN3lRcVBwZ1I3VGc3
elkvMC9FMzEyRjgyNTIyM0RBNUIxRjc1NTk4QzAwRkQwRjM0NDg4RTU1MjMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMTJGODI1MjIzREE1QjFG
NzU1OThDMDBGRDBGMzQ0ODhFNTUyMzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2gzVDg3OTV5Nm5TUnRWdW1BVTNKblpzQmJocTdDN3lRcVBwZ1I3VGc3elkvMC9F
MzEyRjgyNTIyM0RBNUIxRjc1NTk4QzAwRkQwRjM0NDg4RTU1MjMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATT8dO2dDN0dM4Y6p+Fj0dkR0Wuyo0yNusKCRLx3REzvDWpK2u20ofafmzSIw
nF7yAX3nxL48LWbpXRTCNTooWcxcz9GimoBwzB6iuYJTwMj2mtL/ahuunup553XM
U/3W6VIXqHFoA+gJWBk6UGFgJEQdtBXiELVm5WsDy+sP9X9cg6XLSChw0126A1l2
CSeZBcBwuZCLAnXdMgyew03QcVQP1EvXMYiOuGS0mmTlPKLjbMl/VBLhMR3bYDE3
4Q3rCkKcGx4K9+LBe2cGpQvGoe6HBQVDIQLD5TF9CD6/lLjyrk/iI/PHr6EOxfvR
Lg+h7DO2YFkbcQevmrf+6KCJzA==
-----END CERTIFICATE-----
Generated at Mon May 5 15:28:36 2025 by rpki-client