Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.mft
File:                     BFDBD735371A4093C08BE20ED8C03701114BA75E.mft (raw, json)
Hash identifier:          ijFe8yDVL+1NUgj+ZYRvY6zx2gXnVzBv3LSWIPBvKBY=
Subject key identifier:   65:92:57:01:2E:AE:11:C7:75:FB:5B:91:3D:A0:B9:59:4F:EF:30:32
Authority key identifier: BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E
Certificate issuer:       /CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
Certificate serial:       4C46A00A76DBD0FAAEFFAF61FB2210E9B8F675EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.mft
Manifest number:          1A
Signing time:             Mon 17 Feb 2025 19:15:06 +0000
Manifest this update:     Mon 17 Feb 2025 19:10:06 +0000
Manifest next update:     Tue 18 Feb 2025 22:04:06 +0000
Files and hashes:         1: 323830343a313639383a383030303a3a2f33332d3333203d3e20323633323935.roa (hash: fPj7rg7fZc0ufuW37UUqQ7tQMzP+c37sSLxXLXuCFbE=)
                          2: 3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa (hash: SV4Ikc+BF008nXvQNGgwZ+NQxBdRuoz/+tubA3Jd1sw=)
                          3: 3137372e39312e3134332e302f32342d3234203d3e20323633323935.roa (hash: Tgm+F99rwULx01hLT5265aYzFgjMeo6D52JkDceb1Zs=)
                          4: 323830343a313639383a3a2f33332d3333203d3e20323633323935.roa (hash: XTLItNVgJvvctiyzNO0IF6rIWSSiH4USE5jURMUztWM=)
                          5: 3137372e39312e3134302e302f32342d3234203d3e20323633323935.roa (hash: IW47Ic/hai7mwVBl7wplwS67b0QK+R4/q0xcNbkF+U8=)
                          6: 3137372e39312e3134322e302f32342d3234203d3e20323633323935.roa (hash: Y5ohGlrLeZNYJAkPJKx42Um7ku95w++ukHn40xXvwDU=)
                          7: 3137372e39312e3134322e302f32332d3233203d3e20323633323935.roa (hash: vuXsjZ6MpkeMVlh22mWplGx2SmpZi83sA12r1HHzhkE=)
                          8: BFDBD735371A4093C08BE20ED8C03701114BA75E.crl (hash: PbGS9/KAXWAAJeDx2zIt/n6eOzP0NYXkUZKRYXcWWkQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:46:a0:0a:76:db:d0:fa:ae:ff:af:61:fb:22:10:e9:b8:f6:75:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
        Validity
            Not Before: Feb 17 19:10:06 2025 GMT
            Not After : Feb 18 22:04:06 2025 GMT
        Subject: CN=659257012EAE11C775FB5B913DA0B9594FEF3032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:6d:ee:e1:05:ad:88:b1:a7:9c:f4:5d:f9:
                    ac:df:66:76:aa:9d:02:3b:bf:8d:e3:eb:47:96:e2:
                    58:be:fb:0c:88:ed:67:9b:30:ff:ea:57:c8:54:d2:
                    ca:1c:d3:18:e9:e8:13:cd:d7:61:9e:66:9e:16:50:
                    de:6c:88:1c:57:ae:80:80:32:76:2d:a1:8a:7f:d8:
                    ca:b8:31:f8:12:ff:58:23:8f:7f:6b:43:a2:5a:66:
                    3e:19:30:7f:2d:e7:10:d7:9d:0b:71:27:61:e2:60:
                    c0:be:c4:6f:ed:86:c1:77:b6:65:16:19:f0:b7:e4:
                    e7:8d:4f:88:9f:5a:b8:8c:24:29:7e:87:54:6c:ff:
                    48:42:88:2f:1e:cb:12:a4:d9:5e:2c:98:ee:18:0b:
                    1e:ad:df:69:e1:16:33:75:ed:5a:0f:03:66:42:f6:
                    ba:05:dd:82:a0:be:5c:e4:70:29:da:c4:78:f4:cb:
                    83:99:68:82:4b:e3:ba:ad:c7:f1:6e:df:23:bc:90:
                    6d:5d:57:4f:0c:6f:84:02:5a:0a:79:cb:0c:6e:f7:
                    91:52:61:ab:a8:7a:7f:1f:2c:7a:74:18:dd:73:86:
                    4f:57:cf:01:b2:27:12:3d:cb:50:80:41:03:23:62:
                    bf:66:c7:a6:e4:87:e1:84:e2:fa:88:5f:1b:dd:f2:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:92:57:01:2E:AE:11:C7:75:FB:5B:91:3D:A0:B9:59:4F:EF:30:32
            X509v3 Authority Key Identifier:
                keyid:BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:85:26:b6:2d:a3:72:64:2c:5f:0f:ca:ab:7d:c6:0c:c9:0c:
         6e:cb:75:10:93:7a:78:e9:e7:39:7b:28:76:eb:ff:d3:a8:c3:
         ce:96:e9:32:79:9b:07:35:8a:6f:4b:fd:02:35:fd:d6:cb:13:
         6b:29:72:4c:9f:58:61:d8:6f:1f:7d:a6:d9:ed:2d:72:49:16:
         f8:e2:d8:78:ee:3d:2a:f2:b3:a6:e0:f2:9f:47:19:70:68:fb:
         17:ac:cc:53:4a:76:a3:99:4a:e9:a3:ec:29:ca:ea:29:01:de:
         dd:74:4d:c2:88:f4:a1:6b:af:de:ef:f0:52:c3:4b:dd:7c:a7:
         36:44:c9:7d:98:7b:9e:9c:f5:5c:35:6d:ac:8f:70:cd:6a:eb:
         b4:71:36:4f:ab:b2:b6:91:a2:ba:6e:5e:73:d4:60:86:85:8d:
         2c:8f:88:ea:69:5f:5c:80:a4:19:63:74:3a:63:ef:05:ea:b8:
         f6:c5:38:b7:f8:d1:19:f6:1f:b6:85:a3:ed:ff:05:c2:85:ee:
         ce:63:33:3e:46:58:18:e4:fa:01:93:81:5b:10:17:bb:32:ac:
         43:b5:96:78:bf:b5:b1:45:d2:56:f3:41:0f:26:0c:c6:30:de:
         53:79:d4:22:d9:3b:c4:09:d6:fe:f0:f9:0a:7f:c2:5c:b1:95:
         04:47:ed:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTEagCnbb0Pqu/69h+yIQ6bj2dewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZEQkQ3MzUzNzFBNDA5M0MwOEJFMjBFRDhDMDM3MDEx
MTRCQTc1RTAeFw0yNTAyMTcxOTEwMDZaFw0yNTAyMTgyMjA0MDZaMDMxMTAvBgNV
BAMTKDY1OTI1NzAxMkVBRTExQzc3NUZCNUI5MTNEQTBCOTU5NEZFRjMwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdh23u4QWtiLGnnPRd+azfZnaq
nQI7v43j60eW4li++wyI7WebMP/qV8hU0soc0xjp6BPN12GeZp4WUN5siBxXroCA
MnYtoYp/2Mq4MfgS/1gjj39rQ6JaZj4ZMH8t5xDXnQtxJ2HiYMC+xG/thsF3tmUW
GfC35OeNT4ifWriMJCl+h1Rs/0hCiC8eyxKk2V4smO4YCx6t32nhFjN17VoPA2ZC
9roF3YKgvlzkcCnaxHj0y4OZaIJL47qtx/Fu3yO8kG1dV08Mb4QCWgp5ywxu95FS
Yauoen8fLHp0GN1zhk9XzwGyJxI9y1CAQQMjYr9mx6bkh+GE4vqIXxvd8kQDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZZJXAS6uEcd1+1uRPaC5WU/vMDIwHwYDVR0j
BBgwFoAUv9vXNTcaQJPAi+IO2MA3ARFLp14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEIzNEZiekRjRkpXemVaOUVDWDlRSHhmNzdtTDlITU1tZDliQXBodlV0
ZE4vMC9CRkRCRDczNTM3MUE0MDkzQzA4QkUyMEVEOEMwMzcwMTExNEJBNzVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGREJENzM1MzcxQTQwOTND
MDhCRTIwRUQ4QzAzNzAxMTE0QkE3NUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEIzNEZiekRjRkpXemVaOUVDWDlRSHhmNzdtTDlITU1tZDliQXBodlV0ZE4vMC9C
RkRCRDczNTM3MUE0MDkzQzA4QkUyMEVEOEMwMzcwMTExNEJBNzVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcoUmti2jcmQsXw/Kq33GDMkMbst1EJN6eOnnOXsoduv/06jDzpbpMnmbBzWK
b0v9AjX91ssTaylyTJ9YYdhvH32m2e0tckkW+OLYeO49KvKzpuDyn0cZcGj7F6zM
U0p2o5lK6aPsKcrqKQHe3XRNwoj0oWuv3u/wUsNL3XynNkTJfZh7npz1XDVtrI9w
zWrrtHE2T6uytpGium5ec9RghoWNLI+I6mlfXICkGWN0OmPvBeq49sU4t/jRGfYf
toWj7f8FwoXuzmMzPkZYGOT6AZOBWxAXuzKsQ7WWeL+1sUXSVvNBDyYMxjDeU3nU
Itk7xAnW/vD5Cn/CXLGVBEft9g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:10:34 2025 by rpki-client