Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft
File:                     60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft (raw, json)
Hash identifier:          Sv7bMCSvASC5ArcxLRlM55B45MFWpPbEYxRvLCd7ELY=
Subject key identifier:   33:00:A7:B9:3B:8D:5C:BE:E1:C3:EE:7A:CC:C8:93:39:E5:07:EA:3D
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Certificate issuer:       /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial:       2C3A9CC0F20C56E5B6C4D777FD3C099BA07212FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft
Manifest number:          8E
Signing time:             Sat 26 Apr 2025 06:58:49 +0000
Manifest this update:     Sat 26 Apr 2025 06:53:49 +0000
Manifest next update:     Sun 27 Apr 2025 07:10:49 +0000
Files and hashes:         1: 3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa (hash: zLjl60+lXq2npHXyyBT5UNGjUZU24ottDoexyuH2hHM=)
                          2: 3139382e35382e382e302f32322d3232203d3e20323633323536.roa (hash: p+9Pk1Jqbf1HMcF+ZwusZs1cGG+32elxLKnSBsLt+4w=)
                          3: 3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa (hash: WrJwC3g6tCQlD2xai/na3ofXDdZUlyIsD2eOKQjTFno=)
                          4: 60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl (hash: T8g/QrjL8kEFvoyUemS5ueZbSLW5MTF4/pWYMIKDyQQ=)
                          5: 323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa (hash: Z1z0NASbWdA2Cwvbp6c8kHxW/THF+wxaQSlKb14PvjA=)
                          6: 3137302e3234372e3230322e302f32342d3234203d3e20323633323536.roa (hash: F/6ub2uppGeTN4jsU83ToAQ8mMU9CAKo7hwjypNHKuw=)
                          7: 3139382e35382e31302e302f32332d3233203d3e20323633323536.roa (hash: JfECOfoVXO/lhwUjZgTZWh775j9tRkReSNvRIi3nIOI=)
                          8: 323830343a313765303a633030303a3a2f33342d3334203d3e20323633323536.roa (hash: mlRVuMskwDDLw28G2I/3Szxj/ROTbqJJcna0vatofIs=)
                          9: 3137302e3234372e3230332e302f32342d3234203d3e20323633323536.roa (hash: Jj2/JAQy0Dkah2L8VDgSHtctaG7tvgWadv6IsI3XH8Q=)
                          10: 323830343a313765303a3a2f33332d3333203d3e20323633323536.roa (hash: nY8pdbvi0m3pvt7Yjz68hxcrwuaVnFfkT1K/uwnJwyA=)
                          11: 3139382e35382e382e302f32332d3233203d3e20323633323536.roa (hash: pGs3DAQ7iJhXsJyVeoBVnoL5BtzZsmFkDBEbpcx9c1w=)
                          12: 3137302e3234372e3230322e302f32332d3233203d3e20323633323536.roa (hash: REPti9FtyY/mmGS2U+VAQ4RaTW93CNEpfK1/ddt6mS0=)
                          13: 3139382e35382e31302e302f32342d3234203d3e20323633323536.roa (hash: jWl+fmnuurP3kbGpp5BAA8XSZpgn+QhbYrURRGoN6uo=)
                          14: 323830343a313765303a3a2f33342d3334203d3e20323633323536.roa (hash: yEDoYms+zFqHv+L5kYE0o5J1SJA2pkoqTlCObOf93F8=)
                          15: 3139382e35382e382e302f32342d3234203d3e20323633323536.roa (hash: qbxrxc651hjrHtTFFq5MAH/DqsNan+W8TFjurOAex1U=)
                          16: 323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa (hash: pN5rU8bgMrtX000uWLBdPGIOnl9KGZr35GAhD62eTHI=)
                          17: 3137302e3234372e3230302e302f32342d3234203d3e20323633323536.roa (hash: yqQBZmWekhUyAOYkAxIBMTKCtNeXn7vwaeAiCdZ6VOI=)
                          18: 3137302e3234372e3230302e302f32322d3232203d3e20323633323536.roa (hash: FTgUNFfYyxnQ/l1/XJe5p4PRQkq4apZQZY3zqDexA+U=)
                          19: 3139382e35382e31312e302f32342d3234203d3e20323633323536.roa (hash: TcrMTvzOJcr6fmbQkQbQ8T1lk1IjZEgEvc6f4S9PXqc=)
                          20: 323830343a313765303a3a2f33322d3332203d3e20323633323536.roa (hash: tbpG0VQnTAX2JTYTV/zNdJZh0rL6DgDYod6z52l/Pgk=)
                          21: 323830343a313765303a343030303a3a2f33342d3334203d3e20323633323536.roa (hash: yLMv+opdX3OQkP42UgjpVsHgYIi2SNjbMuVD+IPqaBY=)
                          22: 3139382e35382e392e302f32342d3234203d3e20323633323536.roa (hash: Mzx5SzcSaK0NoJ+H7V6nlMvabbWeJkGH7c6YsIHtG4s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3a:9c:c0:f2:0c:56:e5:b6:c4:d7:77:fd:3c:09:9b:a0:72:12:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
        Validity
            Not Before: Apr 26 06:53:49 2025 GMT
            Not After : Apr 27 07:10:49 2025 GMT
        Subject: CN=3300A7B93B8D5CBEE1C3EE7ACCC89339E507EA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cf:7f:59:e3:d5:59:e9:b8:83:f1:c3:5f:a2:
                    b6:8c:bf:91:cb:e2:bd:47:c8:6e:18:80:7c:39:02:
                    de:80:19:10:d7:b0:ba:46:40:fa:42:63:13:5b:7d:
                    85:3e:3d:33:53:a6:9d:d9:bc:67:06:47:80:f1:cf:
                    a5:10:bd:49:58:73:55:b2:61:be:e6:15:69:a5:fd:
                    32:9f:b4:f9:e0:ff:18:7a:00:6c:09:db:5a:5e:7e:
                    aa:0e:1c:18:6c:11:24:b0:c9:c2:f3:fd:02:1b:aa:
                    61:5d:ed:cf:14:6a:49:2a:9e:94:54:de:d3:50:5b:
                    65:a3:21:ea:8e:22:15:af:0e:67:32:a4:61:72:f6:
                    47:a8:2f:4b:90:e6:86:10:36:b2:0a:a4:6d:20:b2:
                    be:83:e4:f7:72:d5:28:59:fa:1e:69:97:5e:ef:a3:
                    b4:c5:55:00:1a:46:46:b6:04:dd:67:1c:44:02:79:
                    af:4f:6f:5b:75:c3:56:f8:04:d4:a8:35:66:74:7a:
                    cb:ab:fe:81:0f:6e:20:02:5f:ff:60:78:f7:76:c5:
                    c6:4f:07:ba:4f:b9:2d:78:ee:04:d9:11:aa:49:8d:
                    a7:34:fd:86:de:3a:e8:f3:bd:47:15:0d:2e:d4:77:
                    19:89:a2:3e:d5:3e:12:6e:fe:d7:81:40:bc:27:90:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:A7:B9:3B:8D:5C:BE:E1:C3:EE:7A:CC:C8:93:39:E5:07:EA:3D
            X509v3 Authority Key Identifier:
                keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2f:d8:ad:5d:00:12:69:ab:a8:ae:24:76:9e:23:4d:4d:d6:
         75:e5:26:65:d7:76:0b:3f:cd:9b:63:b0:6e:c3:3e:1a:a1:3b:
         81:c7:24:54:c4:1d:72:5b:67:24:60:4d:f0:d8:c9:ee:68:e3:
         69:b7:c3:96:41:41:54:cc:ef:e1:bf:46:9f:62:c5:56:31:c0:
         ee:92:b5:bc:b4:87:90:0a:00:ed:03:df:70:db:d2:87:ac:44:
         61:a5:cb:bd:cd:8d:d2:b1:6c:be:df:b4:ac:37:11:c8:98:17:
         b4:79:3a:b3:92:23:c1:f5:06:5e:4e:b6:ee:6e:fe:67:54:11:
         2b:21:44:a1:b8:a7:47:8f:1e:c5:10:a9:3f:e1:bb:5e:d8:e3:
         fd:76:a8:d6:43:78:65:29:d5:db:08:ea:3e:f1:a3:a1:f2:dd:
         4c:e3:db:55:1c:f1:08:99:2e:dd:6e:12:10:b2:e1:8a:e3:82:
         f7:7a:96:3d:8a:95:f8:6c:68:d5:4e:80:63:58:1e:26:25:8d:
         96:d8:21:72:c6:7d:f4:c7:a4:9d:28:1b:48:a9:bb:d0:b1:6e:
         c1:61:04:c7:83:98:e3:55:9f:f2:3e:3c:04:9a:38:95:d3:9a:
         7f:d3:21:1b:84:8b:1d:d2:76:d5:53:19:ea:a0:48:fb:1e:28:
         9d:5c:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:54:18 2025 by rpki-client