Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft
File:                     8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft (raw, json)
Hash identifier:          AltadRnX/NSKk/j9f2SM8R1TxRfUxLp8PME+hHFxZYo=
Subject key identifier:   60:BC:38:BB:59:94:10:D4:C7:03:A0:A5:63:65:70:B0:04:BF:CA:59
Authority key identifier: 8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5
Certificate issuer:       /CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
Certificate serial:       57BBB802F311E1B55D557633FF8DC7F5DD4D0703
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft
Manifest number:          01E2
Signing time:             Sat 29 Mar 2025 11:54:15 +0000
Manifest this update:     Sat 29 Mar 2025 11:49:15 +0000
Manifest next update:     Sun 30 Mar 2025 14:11:15 +0000
Files and hashes:         1: 323830343a343739303a3a2f33322d3438203d3e20323637303632.roa (hash: KcUZSmPuoo/2G8yAcpBb7cmuZGtvYyflQp41uitJEFw=)
                          2: 8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.crl (hash: cQRdnlmzpwdthkT+6VOtERsq41LG23PSEmIGNG7xsoc=)
                          3: 34352e3232382e382e302f32322d3332203d3e20323637303632.roa (hash: 3wQMCL0S9Yf+qCsjXnp4wgGhdiGDNEZSTWCI/5Vh3C4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bb:b8:02:f3:11:e1:b5:5d:55:76:33:ff:8d:c7:f5:dd:4d:07:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
        Validity
            Not Before: Mar 29 11:49:15 2025 GMT
            Not After : Mar 30 14:11:15 2025 GMT
        Subject: CN=60BC38BB599410D4C703A0A5636570B004BFCA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:ee:06:ca:69:cd:b7:80:66:cf:0c:ab:04:
                    c2:a9:d6:10:da:1a:78:ca:57:2f:a6:b7:75:53:c1:
                    b8:99:2b:46:23:04:4a:ca:e2:cb:74:69:29:95:df:
                    a7:3a:44:8b:3f:3b:5a:39:b8:83:76:9b:df:51:cd:
                    c3:b6:b5:be:9d:62:fb:e3:94:bd:3f:85:cb:c0:24:
                    d5:65:8e:5c:29:6e:d1:a7:17:ab:12:11:1e:6e:8d:
                    0d:63:3c:49:fb:2d:7d:19:3c:70:11:3c:da:2f:0a:
                    9c:bd:08:76:a7:70:41:31:2f:41:96:c9:14:0d:51:
                    b3:c4:97:34:ba:73:4b:90:f8:b3:e9:05:dc:fa:07:
                    b3:b9:17:76:2a:bf:b2:57:6b:97:bb:c0:86:16:69:
                    3a:03:4c:e9:d9:4f:66:c3:40:44:41:00:e1:30:58:
                    f3:c0:a6:25:5a:1b:c5:63:48:49:d0:15:07:a8:c5:
                    bc:88:ea:e1:c2:dc:9f:7e:9e:5c:43:cf:21:22:df:
                    99:ec:63:b9:49:31:d3:98:11:a0:13:27:c3:3f:9a:
                    87:a7:8e:e2:0e:e9:9e:71:20:02:2c:d7:bc:56:44:
                    6f:f6:f3:0d:de:c9:9d:0c:45:7c:9b:96:56:bf:95:
                    a2:a2:26:27:c1:b1:d3:83:c3:3b:35:c9:f9:06:be:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BC:38:BB:59:94:10:D4:C7:03:A0:A5:63:65:70:B0:04:BF:CA:59
            X509v3 Authority Key Identifier:
                keyid:8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:e2:22:81:f3:9c:41:c4:26:fe:69:4a:46:2e:50:c8:18:
         0f:7c:f6:28:a3:5f:db:56:de:dd:5c:4b:38:1f:0a:d7:64:aa:
         5e:3b:c2:06:7a:53:2a:d2:fe:d2:1f:23:2a:55:5c:6f:ff:3d:
         67:f1:08:fa:6a:81:ff:9e:af:44:70:a7:80:3a:c6:1c:f5:15:
         2b:9c:ac:38:e9:69:2c:37:60:91:af:48:3b:a0:da:92:31:fe:
         04:a2:56:7d:60:24:7c:6d:c6:6f:a4:4f:eb:ce:e5:f0:08:37:
         6a:59:32:55:a5:b6:1b:05:c2:40:ba:f0:ba:eb:38:21:3b:6c:
         ed:82:06:56:05:02:b5:9b:f2:24:f5:8a:33:94:47:42:d6:7a:
         93:3c:f3:68:d7:e6:e9:a9:26:30:e7:84:83:99:94:b2:7b:cb:
         0a:d8:d3:d0:ab:dd:29:fb:d0:92:59:86:61:14:36:8c:aa:66:
         2d:73:11:f7:87:3f:79:c0:a9:10:76:c3:ad:ac:8b:0c:1a:22:
         d3:3b:18:60:4f:de:81:b6:dd:e8:46:6b:c3:68:97:d5:d9:07:
         3e:e4:64:e0:d8:ef:87:62:b7:a4:0e:eb:5f:e2:93:bb:20:b1:
         17:c2:32:d1:6c:3d:05:26:08:16:3c:12:aa:76:9a:ff:11:a8:
         0d:a2:6c:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV7u4AvMR4bVdVXYz/43H9d1NBwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQxQUY5Qzk5MUYyNjY5N0NEQzRBMUNEQjVFNTM0MkJG
OUM4RTFDNTAeFw0yNTAzMjkxMTQ5MTVaFw0yNTAzMzAxNDExMTVaMDMxMTAvBgNV
BAMTKDYwQkMzOEJCNTk5NDEwRDRDNzAzQTBBNTYzNjU3MEIwMDRCRkNBNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNaO4GymnNt4BmzwyrBMKp1hDa
GnjKVy+mt3VTwbiZK0YjBErK4st0aSmV36c6RIs/O1o5uIN2m99RzcO2tb6dYvvj
lL0/hcvAJNVljlwpbtGnF6sSER5ujQ1jPEn7LX0ZPHARPNovCpy9CHancEExL0GW
yRQNUbPElzS6c0uQ+LPpBdz6B7O5F3Yqv7JXa5e7wIYWaToDTOnZT2bDQERBAOEw
WPPApiVaG8VjSEnQFQeoxbyI6uHC3J9+nlxDzyEi35nsY7lJMdOYEaATJ8M/moen
juIO6Z5xIAIs17xWRG/28w3eyZ0MRXyblla/laKiJifBsdODwzs1yfkGvgOnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYLw4u1mUENTHA6ClY2VwsAS/ylkwHwYDVR0j
BBgwFoAUjRr5yZHyZpfNxKHNteU0K/nI4cUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjM4SlZtekFaUGJ0bkhheDFFQ3ZDazVlWWdCZ2tHUzFxWWdCWFpkUFZ6
VXYvMS84RDFBRjlDOTkxRjI2Njk3Q0RDNEExQ0RCNUU1MzQyQkY5QzhFMUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMUFGOUM5OTFGMjY2OTdD
REM0QTFDREI1RTUzNDJCRjlDOEUxQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjM4SlZtekFaUGJ0bkhheDFFQ3ZDazVlWWdCZ2tHUzFxWWdCWFpkUFZ6VXYvMS84
RDFBRjlDOTkxRjI2Njk3Q0RDNEExQ0RCNUU1MzQyQkY5QzhFMUM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr53iIoHznEHEJv5pSkYuUMgYD3z2KKNf21be3VxLOB8K12SqXjvCBnpTKtL+
0h8jKlVcb/89Z/EI+mqB/56vRHCngDrGHPUVK5ysOOlpLDdgka9IO6DakjH+BKJW
fWAkfG3Gb6RP687l8Ag3alkyVaW2GwXCQLrwuus4ITts7YIGVgUCtZvyJPWKM5RH
QtZ6kzzzaNfm6akmMOeEg5mUsnvLCtjT0KvdKfvQklmGYRQ2jKpmLXMR94c/ecCp
EHbDrayLDBoi0zsYYE/egbbd6EZrw2iX1dkHPuRk4Njvh2K3pA7rX+KTuyCxF8Iy
0Ww9BSYIFjwSqnaa/xGoDaJsGw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 14:51:02 2025 by rpki-client on console.sobornost.net