Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.mft
File:                     D0A1149273197F052C828789EFA0AE353109D430.mft (raw, json)
Hash identifier:          L+h6Ekje2S2L9AhGSXAur8ncLb4S9KOGPpKIKEnoi6E=
Subject key identifier:   02:C3:90:AB:A7:69:79:2E:C5:C9:79:3A:47:EA:15:28:AA:F9:50:DD
Authority key identifier: D0:A1:14:92:73:19:7F:05:2C:82:87:89:EF:A0:AE:35:31:09:D4:30
Certificate issuer:       /CN=D0A1149273197F052C828789EFA0AE353109D430
Certificate serial:       4F16B68953F0229E616818FBE956EA63652C5C57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.mft
Manifest number:          01EC
Signing time:             Sat 12 Apr 2025 19:06:53 +0000
Manifest this update:     Sat 12 Apr 2025 19:01:53 +0000
Manifest next update:     Sun 13 Apr 2025 19:35:53 +0000
Files and hashes:         1: 323830343a383833383a3a2f33322d3334203d3e20323633303237.roa (hash: yLwqeETyei+PFQOm8CnaXk3uxq9WWe/52oucl6Z9UsQ=)
                          2: 3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa (hash: WwcDuCD7uWMpF9Sbfr1Je7U/ApOhXAU2mca8b97svMA=)
                          3: D0A1149273197F052C828789EFA0AE353109D430.crl (hash: N3HtrcA8CgHvCZzLuMO0bfbNsGBeIWjUknD2tf+OBHU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:16:b6:89:53:f0:22:9e:61:68:18:fb:e9:56:ea:63:65:2c:5c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1149273197F052C828789EFA0AE353109D430
        Validity
            Not Before: Apr 12 19:01:53 2025 GMT
            Not After : Apr 13 19:35:53 2025 GMT
        Subject: CN=02C390ABA769792EC5C9793A47EA1528AAF950DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:f3:64:2d:75:16:f1:cb:03:1b:da:56:15:
                    4b:38:d4:91:1b:82:56:58:00:09:1f:03:c1:c1:97:
                    5d:fc:19:1c:1f:da:97:45:67:70:c3:a6:f7:6f:8a:
                    95:fb:d3:04:5f:35:1e:36:70:21:60:38:18:ab:2a:
                    82:05:3e:aa:df:f5:36:fb:de:4a:c4:8c:8e:d4:d5:
                    4a:03:e1:8a:f1:97:88:b3:90:53:86:90:f5:7a:dc:
                    76:73:be:33:73:ad:14:aa:6f:ec:88:34:6e:20:9a:
                    2e:bb:2a:3c:01:dd:4c:0c:f5:d6:6d:88:25:ee:f7:
                    d1:8f:81:0a:28:38:a6:84:6f:e4:5a:1a:97:0b:60:
                    a8:c8:0b:f3:d6:19:32:43:b2:82:2c:bb:78:29:29:
                    6e:b2:81:7f:61:85:47:d1:10:11:bf:eb:6e:09:90:
                    de:73:67:42:0e:9c:19:64:82:3e:51:e6:f7:87:d3:
                    5b:7f:98:c4:59:a9:51:f7:29:3e:ca:c8:fb:af:8e:
                    6e:48:2f:72:de:4b:40:2f:55:ff:a8:be:55:41:c9:
                    b2:af:f3:29:e6:80:22:18:8c:17:7a:16:1c:6d:a7:
                    c3:55:b4:cc:ed:2a:88:58:c0:53:e7:0d:16:ce:13:
                    f8:50:9a:a9:30:09:21:a6:3d:58:a5:ad:89:fd:45:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:90:AB:A7:69:79:2E:C5:C9:79:3A:47:EA:15:28:AA:F9:50:DD
            X509v3 Authority Key Identifier:
                keyid:D0:A1:14:92:73:19:7F:05:2C:82:87:89:EF:A0:AE:35:31:09:D4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:36:f2:f2:da:d6:fc:6e:a2:3a:7c:99:e8:54:4a:56:bd:f9:
         57:2d:93:16:3b:66:a1:28:41:a4:12:6c:a0:d3:e3:fb:37:fd:
         a1:58:09:c7:83:e7:a9:23:8d:03:16:c9:54:1e:52:f5:64:33:
         c5:1a:01:ec:ac:0c:a9:01:a3:6a:29:0c:4e:2c:04:95:64:82:
         b3:83:24:fa:78:7a:b2:d5:5c:43:c1:c0:cb:95:02:f1:54:47:
         cf:66:fb:79:e0:1b:a2:89:64:d7:bc:38:ce:62:4f:7d:4e:1a:
         8c:b5:cb:22:82:e4:91:67:a3:79:54:cc:ae:10:8d:c7:75:ee:
         4b:16:b7:ab:5f:f5:ea:71:f0:e3:ed:5e:1f:5e:a1:eb:22:25:
         98:ac:02:c2:13:d0:19:16:b5:bb:d3:a3:62:e7:eb:e1:58:37:
         11:83:75:ee:10:c3:3e:c9:8c:18:3f:7e:57:49:32:c4:e2:b9:
         04:b9:fe:b7:3c:b2:c8:9d:3e:5c:40:87:64:64:66:77:2f:da:
         77:c0:6d:a8:a7:9d:1c:10:2c:3a:b4:44:e1:b9:f0:e9:87:fd:
         4e:f7:a7:6a:90:b5:28:d5:0e:b1:a1:6d:2f:fc:0f:bc:16:dc:
         54:29:d3:46:fd:65:11:6b:68:30:36:1e:f5:1b:94:75:44:ec:
         85:bf:b0:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTxa2iVPwIp5haBj76VbqY2UsXFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBBMTE0OTI3MzE5N0YwNTJDODI4Nzg5RUZBMEFFMzUz
MTA5RDQzMDAeFw0yNTA0MTIxOTAxNTNaFw0yNTA0MTMxOTM1NTNaMDMxMTAvBgNV
BAMTKDAyQzM5MEFCQTc2OTc5MkVDNUM5NzkzQTQ3RUExNTI4QUFGOTUwREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrivNkLXUW8csDG9pWFUs41JEb
glZYAAkfA8HBl138GRwf2pdFZ3DDpvdvipX70wRfNR42cCFgOBirKoIFPqrf9Tb7
3krEjI7U1UoD4Yrxl4izkFOGkPV63HZzvjNzrRSqb+yING4gmi67KjwB3UwM9dZt
iCXu99GPgQooOKaEb+RaGpcLYKjIC/PWGTJDsoIsu3gpKW6ygX9hhUfREBG/624J
kN5zZ0IOnBlkgj5R5veH01t/mMRZqVH3KT7KyPuvjm5IL3LeS0AvVf+ovlVBybKv
8ynmgCIYjBd6Fhxtp8NVtMztKohYwFPnDRbOE/hQmqkwCSGmPVilrYn9RYvJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAsOQq6dpeS7FyXk6R+oVKKr5UN0wHwYDVR0j
BBgwFoAU0KEUknMZfwUsgoeJ76CuNTEJ1DAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZrY0FaZ2RzQWNYU2N2dWlqSGduNHlaZFVKNEZ1VENlZTlXRjRhUmcy
Q2ovMS9EMEExMTQ5MjczMTk3RjA1MkM4Mjg3ODlFRkEwQUUzNTMxMDlENDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQTExNDkyNzMxOTdGMDUy
QzgyODc4OUVGQTBBRTM1MzEwOUQ0MzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3ZrY0FaZ2RzQWNYU2N2dWlqSGduNHlaZFVKNEZ1VENlZTlXRjRhUmcyQ2ovMS9E
MEExMTQ5MjczMTk3RjA1MkM4Mjg3ODlFRkEwQUUzNTMxMDlENDMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhjby8trW/G6iOnyZ6FRKVr35Vy2TFjtmoShBpBJsoNPj+zf9oVgJx4PnqSON
AxbJVB5S9WQzxRoB7KwMqQGjaikMTiwElWSCs4Mk+nh6stVcQ8HAy5UC8VRHz2b7
eeAboolk17w4zmJPfU4ajLXLIoLkkWejeVTMrhCNx3XuSxa3q1/16nHw4+1eH16h
6yIlmKwCwhPQGRa1u9OjYufr4Vg3EYN17hDDPsmMGD9+V0kyxOK5BLn+tzyyyJ0+
XECHZGRmdy/ad8BtqKedHBAsOrRE4bnw6Yf9TvenapC1KNUOsaFtL/wPvBbcVCnT
Rv1lEWtoMDYe9RuUdUTshb+wZw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:28:36 2025 by rpki-client