Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft
File:                     B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft (raw, json)
Hash identifier:          xZOT+S7F1vhBXiu3weDNDN2kYRxd3Wg+1nMwfJYl2Ko=
Subject key identifier:   DF:85:6C:C3:D1:11:AB:9E:E2:7C:65:03:2D:8C:48:77:1C:47:6F:FE
Authority key identifier: B9:C9:E4:CB:9E:4C:59:B2:8C:E8:A0:9B:5F:16:43:D7:13:0D:A6:D7
Certificate issuer:       /CN=B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7
Certificate serial:       139BBCA477CF5D1FBA8F0960986072C19CE94579
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft
Manifest number:          01A5
Signing time:             Thu 13 Feb 2025 01:30:00 +0000
Manifest this update:     Thu 13 Feb 2025 01:25:00 +0000
Manifest next update:     Fri 14 Feb 2025 03:42:00 +0000
Files and hashes:         1: B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.crl (hash: ZIWqcWW6hd/ANSogWKOqzPXwDtQxO+bdTdJ9YNwloro=)
                          2: 3138372e3132312e3135362e302f32332d3233203d3e20323730393138.roa (hash: atqzuGnGCf8VEQfdLCF7gj0j6UzzIH30tKkiLntKl2Y=)
                          3: 3138372e3132312e3135392e302f32342d3234203d3e20323730393138.roa (hash: g8YexcwsGHwQ8ZMVFu95daRqEE7knWs/x/BxB0HTCrE=)
                          4: 3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa (hash: cHfpF4wCWODJyZjEUQnAHdQkFrGxz+PJCLif2ZUohgU=)
                          5: 3138372e3132312e3135362e302f32342d3234203d3e20323730393138.roa (hash: boltoKBmCy0ItDoBO8hbjnmRJyXQ2AR5Zm2e4gRVxNM=)
                          6: 3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa (hash: nDy3TSnHlvdfqcIn2zhr3dNGb0hQFBIen594JBSLchg=)
                          7: 3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa (hash: Yg1i+J+gsbw+EXxmTjjVwwAIJLUuF4YlFjH2qPKXZPA=)
                          8: 3138372e3132312e3135362e302f32322d3232203d3e20323730393138.roa (hash: T6wfV2Cg6aNMC/V2g9COwsobf+d0peW/+8eiMI300y4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9b:bc:a4:77:cf:5d:1f:ba:8f:09:60:98:60:72:c1:9c:e9:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7
        Validity
            Not Before: Feb 13 01:25:00 2025 GMT
            Not After : Feb 14 03:42:00 2025 GMT
        Subject: CN=DF856CC3D111AB9EE27C65032D8C48771C476FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:97:e1:23:e2:b0:0c:35:bb:42:41:b4:68:
                    56:cf:ab:6b:55:67:85:e5:d4:cb:2e:fb:03:6e:c7:
                    62:6e:3f:89:c7:c8:a0:a7:79:92:94:3e:c6:57:9f:
                    25:7d:b1:e2:85:bb:2c:60:ae:e6:30:24:e2:b4:92:
                    bf:19:01:dd:68:d6:c6:18:63:2d:a4:65:fd:a8:19:
                    91:ba:ea:ae:9f:0a:3f:fc:11:85:a2:0b:07:72:e8:
                    2b:33:cb:52:b7:74:29:a9:b5:fd:be:92:15:e5:e6:
                    ae:a6:fd:3a:eb:d3:07:a9:f5:f7:5d:6e:8d:cf:ea:
                    0f:89:08:6d:1d:c9:12:2e:95:07:2c:f1:e9:75:48:
                    61:08:a7:8f:81:4e:af:5c:be:00:f1:5b:4e:d7:22:
                    64:e0:0d:fb:bb:b3:23:e7:e1:cc:38:0e:78:4a:2d:
                    d3:32:fb:9d:1d:7b:05:03:29:ee:3f:a1:6a:f4:a4:
                    78:c5:39:64:c5:80:aa:85:8c:f2:44:34:c1:d9:22:
                    62:b5:b6:3d:31:2f:8a:31:ea:1b:b2:eb:d4:7c:b2:
                    46:fb:79:6c:c5:36:90:c2:cc:13:e8:be:d8:0a:a9:
                    d5:74:f5:30:fe:80:fa:c0:fd:80:3b:1c:f9:49:04:
                    d3:65:03:a8:4a:fa:4f:4c:fd:e4:1b:8d:6c:01:0d:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:85:6C:C3:D1:11:AB:9E:E2:7C:65:03:2D:8C:48:77:1C:47:6F:FE
            X509v3 Authority Key Identifier:
                keyid:B9:C9:E4:CB:9E:4C:59:B2:8C:E8:A0:9B:5F:16:43:D7:13:0D:A6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:88:8b:97:65:c3:72:49:74:6d:26:c6:8a:6b:fc:bb:2d:
         dd:82:ab:d3:aa:1f:53:78:b5:cf:3f:1d:9d:11:45:c5:05:72:
         4a:55:44:82:b1:df:73:be:66:37:2f:8b:68:32:c1:5b:e4:fa:
         8d:35:65:bf:69:b8:02:c5:24:a0:4b:aa:71:ec:d0:39:ff:a8:
         6a:2b:2e:cc:e9:f5:4a:e3:f7:4d:13:02:51:f0:3f:11:57:af:
         fe:70:a7:a5:81:89:42:8b:4f:a9:7b:d4:c8:5d:79:e9:36:92:
         a1:aa:e4:de:fb:9a:73:2d:f7:81:38:73:3e:52:5c:df:24:f8:
         26:64:6e:53:81:8e:c8:c9:90:76:53:8f:2c:92:8c:03:b7:13:
         22:94:58:11:0d:99:0c:fe:8e:ba:94:68:1a:10:f9:51:91:a3:
         46:13:76:23:56:e3:f2:52:b8:ab:d1:d6:11:95:c3:66:75:b2:
         85:52:16:c1:0d:09:43:b6:e8:03:0a:c8:92:31:27:12:93:21:
         2e:55:a9:b2:bd:4f:ce:0a:96:64:cb:94:83:a1:65:24:d0:b5:
         2d:a9:73:d6:41:76:43:90:a8:e6:12:70:c0:08:3d:d9:7d:94:
         67:3d:51:17:d8:39:19:aa:16:f1:3e:72:50:25:2b:ca:5b:6f:
         8a:2b:b4:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUE5u8pHfPXR+6jwlgmGBywZzpRXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlDOUU0Q0I5RTRDNTlCMjhDRThBMDlCNUYxNjQzRDcx
MzBEQTZENzAeFw0yNTAyMTMwMTI1MDBaFw0yNTAyMTQwMzQyMDBaMDMxMTAvBgNV
BAMTKERGODU2Q0MzRDExMUFCOUVFMjdDNjUwMzJEOEM0ODc3MUM0NzZGRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQJfhI+KwDDW7QkG0aFbPq2tV
Z4Xl1Msu+wNux2JuP4nHyKCneZKUPsZXnyV9seKFuyxgruYwJOK0kr8ZAd1o1sYY
Yy2kZf2oGZG66q6fCj/8EYWiCwdy6Cszy1K3dCmptf2+khXl5q6m/Trr0wep9fdd
bo3P6g+JCG0dyRIulQcs8el1SGEIp4+BTq9cvgDxW07XImTgDfu7syPn4cw4DnhK
LdMy+50dewUDKe4/oWr0pHjFOWTFgKqFjPJENMHZImK1tj0xL4ox6huy69R8skb7
eWzFNpDCzBPovtgKqdV09TD+gPrA/YA7HPlJBNNlA6hK+k9M/eQbjWwBDSJ3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU34Vsw9ERq57ifGUDLYxIdxxHb/4wHwYDVR0j
BBgwFoAUucnky55MWbKM6KCbXxZD1xMNptcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkw4ZGJVeW5vdkpLcEVFRXR5NUhqbVJwZ2lHWXcyOWYxZ3M3S0VVaVJG
OGMvMS9COUM5RTRDQjlFNEM1OUIyOENFOEEwOUI1RjE2NDNENzEzMERBNkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5QzlFNENCOUU0QzU5QjI4
Q0U4QTA5QjVGMTY0M0Q3MTMwREE2RDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qkw4ZGJVeW5vdkpLcEVFRXR5NUhqbVJwZ2lHWXcyOWYxZ3M3S0VVaVJGOGMvMS9C
OUM5RTRDQjlFNEM1OUIyOENFOEEwOUI1RjE2NDNENzEzMERBNkQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKaiIi5dlw3JJdG0mxopr/Lst3YKr06ofU3i1zz8dnRFFxQVySlVEgrHfc75m
Ny+LaDLBW+T6jTVlv2m4AsUkoEuqcezQOf+oaisuzOn1SuP3TRMCUfA/EVev/nCn
pYGJQotPqXvUyF156TaSoark3vuacy33gThzPlJc3yT4JmRuU4GOyMmQdlOPLJKM
A7cTIpRYEQ2ZDP6OupRoGhD5UZGjRhN2I1bj8lK4q9HWEZXDZnWyhVIWwQ0JQ7bo
AwrIkjEnEpMhLlWpsr1PzgqWZMuUg6FlJNC1Lalz1kF2Q5Co5hJwwAg92X2UZz1R
F9g5GaoW8T5yUCUryltviiu0Fw==
-----END CERTIFICATE-----