Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.mft
File:                     39B45C4B950BA846649D6FB0A3CB544BA12A9D95.mft (raw, json)
Hash identifier:          /OwWqZN7PkCh+d6MRfB8ztFwYcMd+grx4T/BtS+tyYY=
Subject key identifier:   0B:3D:8C:4B:2F:6E:BD:F2:17:D5:4D:BF:63:5B:02:6B:9E:14:58:D7
Authority key identifier: 39:B4:5C:4B:95:0B:A8:46:64:9D:6F:B0:A3:CB:54:4B:A1:2A:9D:95
Certificate issuer:       /CN=39B45C4B950BA846649D6FB0A3CB544BA12A9D95
Certificate serial:       74B4E39BA5FB52A0ED826A8C1C777DDC91E784C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.mft
Manifest number:          33
Signing time:             Fri 18 Apr 2025 08:33:38 +0000
Manifest this update:     Fri 18 Apr 2025 08:28:38 +0000
Manifest next update:     Sat 19 Apr 2025 10:19:38 +0000
Files and hashes:         1: 323830343a356362343a3a2f33322d3438203d3e20323638393235.roa (hash: idBMTObHIUQXTWkbqJVFghsJUEL6M9oRWC2kEo3gZ8g=)
                          2: 39B45C4B950BA846649D6FB0A3CB544BA12A9D95.crl (hash: jFTXPn6tDJ4tiG8bBdteMUo1oe6+ofhYG6aDHNadfvY=)
                          3: 34352e3137362e342e302f32322d3234203d3e20323638393235.roa (hash: lTMFOvcm3PqeMFA2Yy8Sp/IjARUjjKFFHgo/M2i9Y2s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b4:e3:9b:a5:fb:52:a0:ed:82:6a:8c:1c:77:7d:dc:91:e7:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B45C4B950BA846649D6FB0A3CB544BA12A9D95
        Validity
            Not Before: Apr 18 08:28:38 2025 GMT
            Not After : Apr 19 10:19:38 2025 GMT
        Subject: CN=0B3D8C4B2F6EBDF217D54DBF635B026B9E1458D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:5b:66:7d:ad:ff:c0:20:ba:8f:8b:b4:2d:
                    ff:8a:7e:f7:3f:69:fb:cf:f2:4d:7b:71:1f:0f:ee:
                    a5:aa:16:57:a1:c8:ff:25:27:a4:d3:9f:66:f1:7b:
                    cc:a9:b3:c5:d8:7d:6d:64:79:f8:f7:9b:19:a1:7c:
                    e8:3a:d3:c4:84:5a:16:d9:07:c4:58:21:23:5e:41:
                    26:6e:be:67:16:ac:0d:ac:7b:e6:3a:76:7b:6d:9f:
                    df:3e:fb:ec:71:6a:c1:58:07:b4:a2:2a:e8:09:93:
                    50:b6:6e:34:1c:1c:2d:72:e9:2e:58:a6:ca:f4:a7:
                    2d:2e:2e:c7:61:a2:be:32:ac:51:80:0f:28:4c:dc:
                    93:0b:3f:99:9f:3e:cf:6e:5e:60:22:38:5c:0f:5b:
                    16:f3:6c:4e:e7:67:a8:55:cd:a5:f8:9c:52:34:26:
                    33:36:9f:f8:ad:b4:89:d1:47:1e:ca:1e:7c:fc:35:
                    4f:45:4b:cf:04:e5:ce:ce:93:18:16:ac:cf:ee:bb:
                    2d:02:21:6a:d4:70:83:a2:ec:7b:8e:be:9a:53:ed:
                    fa:48:49:54:b1:3e:6c:51:e3:8b:0b:a1:6a:83:33:
                    66:30:4f:f8:42:78:f9:62:e1:5e:2f:b7:df:84:85:
                    ae:90:d3:99:d6:ca:63:22:99:02:b0:90:e4:37:68:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3D:8C:4B:2F:6E:BD:F2:17:D5:4D:BF:63:5B:02:6B:9E:14:58:D7
            X509v3 Authority Key Identifier:
                keyid:39:B4:5C:4B:95:0B:A8:46:64:9D:6F:B0:A3:CB:54:4B:A1:2A:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:f8:ba:60:9c:be:b7:5c:07:41:58:2b:5d:fe:94:20:43:
         d5:20:d3:19:08:7a:00:de:a9:86:56:5d:8e:f7:93:6e:67:4b:
         cc:59:0f:e7:9b:2a:c7:51:c8:ca:2d:f0:a4:56:8c:7f:82:d3:
         f0:49:fd:ab:6b:b2:ba:98:57:ba:f6:4f:60:43:90:7b:ff:4a:
         24:94:be:28:6e:7b:8d:8c:0e:7d:77:9b:e1:c9:a6:52:e1:8e:
         c9:fc:8d:b8:98:5e:55:52:c2:fe:e2:02:ea:35:36:82:ef:cc:
         fa:ff:4b:71:91:b2:18:5a:65:3d:bc:80:b6:b9:3c:f2:c6:0b:
         11:68:3e:a5:61:e1:0e:45:e5:66:08:2a:60:31:5b:e2:b1:ba:
         36:ae:ce:b5:e9:02:40:a8:1e:ea:2b:45:ce:12:ed:cc:4f:4e:
         d4:3d:71:92:1d:52:35:2f:c1:5d:24:06:9c:61:37:56:88:70:
         bb:06:9d:e4:a9:53:5d:29:b8:80:fa:29:42:22:26:a8:aa:23:
         ca:dc:07:52:ab:52:00:e5:c9:42:94:2a:f2:06:df:02:3b:7e:
         82:09:7e:9b:15:ae:a9:30:c7:47:0a:e4:65:46:ee:7d:f9:d0:
         96:32:2d:6e:c6:3e:87:53:7a:aa:cb:52:6c:e1:68:74:0b:6e:
         c4:5a:ca:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdLTjm6X7UqDtgmqMHHd93JHnhMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlCNDVDNEI5NTBCQTg0NjY0OUQ2RkIwQTNDQjU0NEJB
MTJBOUQ5NTAeFw0yNTA0MTgwODI4MzhaFw0yNTA0MTkxMDE5MzhaMDMxMTAvBgNV
BAMTKDBCM0Q4QzRCMkY2RUJERjIxN0Q1NERCRjYzNUIwMjZCOUUxNDU4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZFtmfa3/wCC6j4u0Lf+Kfvc/
afvP8k17cR8P7qWqFlehyP8lJ6TTn2bxe8yps8XYfW1kefj3mxmhfOg608SEWhbZ
B8RYISNeQSZuvmcWrA2se+Y6dnttn98+++xxasFYB7SiKugJk1C2bjQcHC1y6S5Y
psr0py0uLsdhor4yrFGADyhM3JMLP5mfPs9uXmAiOFwPWxbzbE7nZ6hVzaX4nFI0
JjM2n/ittInRRx7KHnz8NU9FS88E5c7OkxgWrM/uuy0CIWrUcIOi7HuOvppT7fpI
SVSxPmxR44sLoWqDM2YwT/hCePli4V4vt9+Eha6Q05nWymMimQKwkOQ3aOPjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCz2MSy9uvfIX1U2/Y1sCa54UWNcwHwYDVR0j
BBgwFoAUObRcS5ULqEZknW+wo8tUS6EqnZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1l
S3QvMC8zOUI0NUM0Qjk1MEJBODQ2NjQ5RDZGQjBBM0NCNTQ0QkExMkE5RDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5QjQ1QzRCOTUwQkE4NDY2
NDlENkZCMEEzQ0I1NDRCQTEyQTlEOTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1lS3QvMC8z
OUI0NUM0Qjk1MEJBODQ2NjQ5RDZGQjBBM0NCNTQ0QkExMkE5RDk1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAavb4umCcvrdcB0FYK13+lCBD1SDTGQh6AN6phlZdjveTbmdLzFkP55sqx1HI
yi3wpFaMf4LT8En9q2uyuphXuvZPYEOQe/9KJJS+KG57jYwOfXeb4cmmUuGOyfyN
uJheVVLC/uIC6jU2gu/M+v9LcZGyGFplPbyAtrk88sYLEWg+pWHhDkXlZggqYDFb
4rG6Nq7OtekCQKge6itFzhLtzE9O1D1xkh1SNS/BXSQGnGE3Vohwuwad5KlTXSm4
gPopQiImqKojytwHUqtSAOXJQpQq8gbfAjt+ggl+mxWuqTDHRwrkZUbuffnQljIt
bsY+h1N6qstSbOFodAtuxFrKBg==
-----END CERTIFICATE-----