Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.mft
File:                     35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.mft (raw, json)
Hash identifier:          JF/K0xkQs4c4S49mj1ffbX0Sbv7gNdGE6H6WEOfYa5I=
Subject key identifier:   BC:87:69:6F:B3:85:BD:2A:58:65:58:D3:75:C8:26:E6:34:70:64:76
Authority key identifier: 35:D4:CF:6A:90:41:F5:3C:30:68:E2:1E:AE:DA:C0:AC:9C:48:C7:30
Certificate issuer:       /CN=35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730
Certificate serial:       777870321F9EF3C5A7A6E24D34CB08F12CDDD395
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.mft
Manifest number:          013D
Signing time:             Fri 03 Jul 2026 14:23:31 +0000
Manifest this update:     Fri 03 Jul 2026 14:18:31 +0000
Manifest next update:     Sat 04 Jul 2026 17:06:31 +0000
Files and hashes:         1: 35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.crl (hash: +Knnu81w+mJPI1BlmNXtusOJgAJrc75QO+eg62gD84w=)
                          2: 3133382e3230342e37362e302f32322d3332203d3e20323633383739.roa (hash: RBWA0DttCBheUahPHI7Grx0i0emmO+yvUfbknZ//MRY=)
                          3: 323830343a323732343a3a2f33322d313238203d3e20323633383739.roa (hash: 7JKp04dPKGWe2D1zJV6dOcOogeHmVtwDr1woriUaHa4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:78:70:32:1f:9e:f3:c5:a7:a6:e2:4d:34:cb:08:f1:2c:dd:d3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730
        Validity
            Not Before: Jul  3 14:18:31 2026 GMT
            Not After : Jul  4 17:06:31 2026 GMT
        Subject: CN=BC87696FB385BD2A586558D375C826E634706476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:a0:b6:8a:4c:23:7c:b0:3c:bd:19:94:67:
                    af:c3:ca:7d:ee:b5:05:4e:9d:cc:2d:40:b0:d0:6b:
                    9b:42:80:6e:e5:89:23:63:51:2e:c5:61:ba:b0:ea:
                    6f:95:45:e9:13:b5:8d:a6:1d:fe:f0:2b:fe:77:6d:
                    ea:a9:0f:4c:c2:2c:1a:65:60:e9:75:73:ce:57:7f:
                    56:0d:09:8b:5a:68:23:ac:1d:52:a4:0e:1a:54:ee:
                    64:db:f0:64:63:ba:9e:95:70:f0:cc:af:9e:32:d2:
                    b2:8e:d5:92:39:13:3f:b3:57:cb:57:68:cc:ef:36:
                    ab:dc:4a:95:70:c9:81:8f:89:4f:78:76:9d:91:bf:
                    bd:c9:f4:e6:db:af:89:1a:7d:80:ee:7d:91:87:56:
                    81:49:4c:31:91:08:1e:f5:ba:2c:7d:37:1e:0f:63:
                    2a:28:6c:bc:6d:fe:0c:f3:8f:70:65:54:93:b7:cc:
                    20:d7:2d:0b:2b:83:6d:e8:94:86:07:45:b1:bf:4a:
                    33:d4:d6:68:eb:9b:4d:ab:48:5e:4c:5a:e3:02:1b:
                    e7:4b:a8:4e:59:34:8f:cd:ac:84:9f:89:9d:5e:6e:
                    da:91:54:d9:4b:a1:8e:69:d3:62:30:3c:ad:4f:a1:
                    0d:2a:58:7d:d8:53:1b:7d:de:ae:41:4d:b2:64:9b:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:87:69:6F:B3:85:BD:2A:58:65:58:D3:75:C8:26:E6:34:70:64:76
            X509v3 Authority Key Identifier:
                keyid:35:D4:CF:6A:90:41:F5:3C:30:68:E2:1E:AE:DA:C0:AC:9C:48:C7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:61:89:ac:65:9a:04:e3:0d:4b:0c:8d:94:65:8e:16:9a:b4:
         7d:79:e4:07:42:32:da:21:bf:8c:f3:69:58:05:e2:b9:3b:53:
         e2:8e:69:e4:d1:53:f2:fa:19:ea:64:54:09:3c:c1:2a:c9:ee:
         15:a6:ef:ee:e2:41:2d:f3:ce:35:e2:cc:28:5c:26:cb:a2:91:
         ea:2d:c7:26:ae:2f:9e:98:1a:05:42:7c:e2:4f:72:d1:89:03:
         fe:1c:e8:9e:0e:90:f5:82:ca:fc:7b:92:b0:8f:25:86:db:10:
         d0:44:60:a1:22:7d:98:c0:7b:ff:19:a4:1e:8d:20:1a:dd:29:
         6e:84:a3:89:b9:fa:8e:ba:a0:5c:67:8f:03:65:7f:c1:e6:50:
         50:5c:ef:83:a3:43:92:39:43:13:bc:8a:3c:e1:51:56:39:0a:
         16:58:9a:64:11:33:16:64:f0:36:ec:6d:1e:19:30:c2:3d:42:
         56:04:70:46:1c:9d:fc:cb:73:f5:df:d6:a7:80:ca:e1:27:f7:
         41:05:d7:65:9e:88:3d:87:8a:33:c9:d3:40:fe:84:bc:a5:4b:
         1c:9f:3d:e6:ab:52:f0:d8:d8:2a:6c:89:05:41:b7:d5:1b:c6:
         f5:e3:16:93:80:de:1e:05:2e:ad:58:0c:4e:ee:a7:ef:c1:45:
         1d:e5:1c:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd3hwMh+e88WnpuJNNMsI8Szd05UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVENENGNkE5MDQxRjUzQzMwNjhFMjFFQUVEQUMwQUM5
QzQ4QzczMDAeFw0yNjA3MDMxNDE4MzFaFw0yNjA3MDQxNzA2MzFaMDMxMTAvBgNV
BAMTKEJDODc2OTZGQjM4NUJEMkE1ODY1NThEMzc1QzgyNkU2MzQ3MDY0NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEaC2ikwjfLA8vRmUZ6/Dyn3u
tQVOncwtQLDQa5tCgG7liSNjUS7FYbqw6m+VRekTtY2mHf7wK/53beqpD0zCLBpl
YOl1c85Xf1YNCYtaaCOsHVKkDhpU7mTb8GRjup6VcPDMr54y0rKO1ZI5Ez+zV8tX
aMzvNqvcSpVwyYGPiU94dp2Rv73J9Obbr4kafYDufZGHVoFJTDGRCB71uix9Nx4P
YyoobLxt/gzzj3BlVJO3zCDXLQsrg23olIYHRbG/SjPU1mjrm02rSF5MWuMCG+dL
qE5ZNI/NrISfiZ1ebtqRVNlLoY5p02IwPK1PoQ0qWH3YUxt93q5BTbJkm1ZvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvIdpb7OFvSpYZVjTdcgm5jRwZHYwHwYDVR0j
BBgwFoAUNdTPapBB9TwwaOIertrArJxIxzAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjR0TTFHMml2TFVXdnQ2aEVBd0ZRYk5UWjRWaFRGY2ExSGptOGtHd3R5
aWMvMC8zNUQ0Q0Y2QTkwNDFGNTNDMzA2OEUyMUVBRURBQzBBQzlDNDhDNzMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1RDRDRjZBOTA0MUY1M0Mz
MDY4RTIxRUFFREFDMEFDOUM0OEM3MzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjR0TTFHMml2TFVXdnQ2aEVBd0ZRYk5UWjRWaFRGY2ExSGptOGtHd3R5aWMvMC8z
NUQ0Q0Y2QTkwNDFGNTNDMzA2OEUyMUVBRURBQzBBQzlDNDhDNzMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE2GJrGWaBOMNSwyNlGWOFpq0fXnkB0Iy2iG/jPNpWAXiuTtT4o5p5NFT8voZ
6mRUCTzBKsnuFabv7uJBLfPONeLMKFwmy6KR6i3HJq4vnpgaBUJ84k9y0YkD/hzo
ng6Q9YLK/HuSsI8lhtsQ0ERgoSJ9mMB7/xmkHo0gGt0pboSjibn6jrqgXGePA2V/
weZQUFzvg6NDkjlDE7yKPOFRVjkKFliaZBEzFmTwNuxtHhkwwj1CVgRwRhyd/Mtz
9d/Wp4DK4Sf3QQXXZZ6IPYeKM8nTQP6EvKVLHJ895qtS8NjYKmyJBUG31RvG9eMW
k4DeHgUurVgMTu6n78FFHeUczg==
-----END CERTIFICATE-----