Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.mft
File:                     02CB202EE7C41540BCFD281A5726F4BB2FACE50F.mft (raw, json)
Hash identifier:          mr1cceUW1yTaUC+UsxBe9Lk8kpo1ucjRN1PDwIwucRU=
Subject key identifier:   65:84:C2:E6:BD:DA:05:AE:B0:65:5C:6D:E6:4E:84:13:57:60:23:B9
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Certificate issuer:       /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial:       35FF561CAFC9C1D2093FB1A09C5E54D321F92AE6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.mft
Manifest number:          A4
Signing time:             Thu 22 May 2025 03:37:21 +0000
Manifest this update:     Thu 22 May 2025 03:32:21 +0000
Manifest next update:     Fri 23 May 2025 04:00:21 +0000
Files and hashes:         1: 323830343a316564633a3a2f33322d313238203d3e20323634343530.roa (hash: qmZ8k+YsAPbLlBbEC1YfgyNwDKBhpqWSHLFQ3iu+V98=)
                          2: 02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl (hash: lbZgkeBrsEEMOfAJnhfoB3WMlyKRscuITVCye3yDZV4=)
                          3: 3133312e3235352e33362e302f32322d3332203d3e20323634343530.roa (hash: jEhYBJOWIAdnaCsDVdSqqB4Lzzi5Z9RP6lJ7+vO8PQQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ff:56:1c:af:c9:c1:d2:09:3f:b1:a0:9c:5e:54:d3:21:f9:2a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
        Validity
            Not Before: May 22 03:32:21 2025 GMT
            Not After : May 23 04:00:21 2025 GMT
        Subject: CN=6584C2E6BDDA05AEB0655C6DE64E8413576023B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:91:d7:8f:0e:a6:3e:11:4c:03:e6:32:9d:
                    57:69:0e:60:23:d3:8f:5f:35:80:f5:0a:ec:f0:fe:
                    40:c4:1b:ea:cf:1c:24:f0:d7:7f:8d:2e:ae:43:a7:
                    bf:59:37:6e:3b:4c:89:35:20:5e:97:ee:7d:ab:9f:
                    ca:5f:e7:c8:81:40:af:38:99:60:a4:18:92:7b:a1:
                    c5:31:56:37:2f:2f:9e:58:58:36:23:66:47:1e:c4:
                    3d:b1:a2:09:89:23:6e:9e:4b:23:d7:be:0d:3b:c5:
                    58:03:15:b1:66:43:ed:23:b2:62:50:b1:18:ff:4f:
                    59:88:9c:02:92:c6:03:04:a9:15:22:6e:a8:9f:d6:
                    f5:06:0c:e7:ae:4a:c7:a7:c0:75:1e:70:fd:12:a8:
                    14:cf:91:92:b1:20:a2:9c:ed:81:9a:f0:c4:e4:ef:
                    9e:91:64:ff:a7:28:72:bd:ee:29:b3:f9:a9:a2:69:
                    dc:f8:23:ae:6d:25:6b:ec:79:94:7a:93:02:ce:d0:
                    18:82:b3:dd:d4:83:a6:8a:01:52:5e:86:00:7e:67:
                    ca:96:6a:6e:6e:db:e7:77:55:3a:ca:e4:db:a5:08:
                    2a:b1:d1:ac:55:b0:b7:39:8b:b6:2c:75:cf:7e:4c:
                    56:ec:2c:bd:1b:9a:07:a3:90:f6:53:a8:42:1d:5c:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:84:C2:E6:BD:DA:05:AE:B0:65:5C:6D:E6:4E:84:13:57:60:23:B9
            X509v3 Authority Key Identifier:
                keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:8b:78:88:61:a3:00:c6:79:9e:4d:53:12:b4:74:09:2d:
         e2:79:fb:75:66:4d:dc:88:00:29:06:77:91:6e:53:87:2d:5c:
         2a:19:15:7b:d7:18:a5:92:39:14:7b:4a:5f:0a:cd:17:cb:10:
         85:05:c3:6b:1f:7e:03:e0:57:99:13:e3:bd:6b:a9:63:5c:34:
         40:96:a3:03:0d:e7:3d:f4:97:49:d0:d0:b0:46:f7:39:ff:32:
         35:3a:47:c7:07:3c:99:4a:50:62:22:fe:b5:72:7c:0d:0e:45:
         92:97:32:d8:0c:f3:9d:52:c3:da:92:6c:a0:4a:01:19:21:e6:
         49:be:9b:51:1b:77:9d:f7:be:6f:76:c1:52:44:b3:d4:8b:13:
         89:d8:b0:a4:62:2c:9d:a7:da:01:d7:27:46:45:23:e6:64:b3:
         be:b1:69:49:97:e7:52:65:9e:70:73:3b:ae:c7:73:50:da:19:
         a0:81:7d:55:7c:d7:f7:4a:91:c9:0a:a7:78:42:91:59:cb:a0:
         fd:67:95:b1:f0:5e:ae:aa:08:b6:82:00:fd:71:90:18:29:a9:
         67:75:bf:32:c7:d7:ed:c9:35:4c:af:59:49:f9:b3:f2:48:95:
         25:5d:b7:b1:42:5d:ff:f8:13:e1:d6:fc:36:b4:79:ec:b0:96:
         5d:c7:ea:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNf9WHK/JwdIJP7GgnF5U0yH5KuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJDQjIwMkVFN0M0MTU0MEJDRkQyODFBNTcyNkY0QkIy
RkFDRTUwRjAeFw0yNTA1MjIwMzMyMjFaFw0yNTA1MjMwNDAwMjFaMDMxMTAvBgNV
BAMTKDY1ODRDMkU2QkREQTA1QUVCMDY1NUM2REU2NEU4NDEzNTc2MDIzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3JHXjw6mPhFMA+YynVdpDmAj
049fNYD1Cuzw/kDEG+rPHCTw13+NLq5Dp79ZN247TIk1IF6X7n2rn8pf58iBQK84
mWCkGJJ7ocUxVjcvL55YWDYjZkcexD2xogmJI26eSyPXvg07xVgDFbFmQ+0jsmJQ
sRj/T1mInAKSxgMEqRUibqif1vUGDOeuSsenwHUecP0SqBTPkZKxIKKc7YGa8MTk
756RZP+nKHK97imz+amiadz4I65tJWvseZR6kwLO0BiCs93Ug6aKAVJehgB+Z8qW
am5u2+d3VTrK5NulCCqx0axVsLc5i7Ysdc9+TFbsLL0bmgejkPZTqEIdXLZ1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZYTC5r3aBa6wZVxt5k6EE1dgI7kwHwYDVR0j
BBgwFoAUAssgLufEFUC8/SgaVyb0uy+s5Q8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC8wMkNCMjAyRUU3QzQxNTQwQkNGRDI4MUE1NzI2RjRCQjJGQUNFNTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0IyMDJFRTdDNDE1NDBC
Q0ZEMjgxQTU3MjZGNEJCMkZBQ0U1MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVVb1kvMC8w
MkNCMjAyRUU3QzQxNTQwQkNGRDI4MUE1NzI2RjRCQjJGQUNFNTBGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHtOLeIhhowDGeZ5NUxK0dAkt4nn7dWZN3IgAKQZ3kW5Thy1cKhkVe9cYpZI5
FHtKXwrNF8sQhQXDax9+A+BXmRPjvWupY1w0QJajAw3nPfSXSdDQsEb3Of8yNTpH
xwc8mUpQYiL+tXJ8DQ5Fkpcy2AzznVLD2pJsoEoBGSHmSb6bURt3nfe+b3bBUkSz
1IsTidiwpGIsnafaAdcnRkUj5mSzvrFpSZfnUmWecHM7rsdzUNoZoIF9VXzX90qR
yQqneEKRWcug/WeVsfBerqoItoIA/XGQGCmpZ3W/MsfX7ck1TK9ZSfmz8kiVJV23
sUJd//gT4db8NrR57LCWXcfqwg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:26:19 2025 by rpki-client