Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft
File:                     71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft (raw, json)
Hash identifier:          B7UAX8xjZOKWWnW/gZVUg++s4iqQoVzVoFapDaEanNU=
Subject key identifier:   10:6A:6C:BA:1A:ED:76:0B:F7:C8:29:4D:DB:AE:25:01:B7:F9:E7:95
Authority key identifier: 71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70
Certificate issuer:       /CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570
Certificate serial:       7E06FBB1925AFF7F04FA2BB3C59EB9BB130776DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft
Manifest number:          7D
Signing time:             Thu 17 Jul 2025 16:34:24 +0000
Manifest this update:     Thu 17 Jul 2025 16:29:24 +0000
Manifest next update:     Fri 18 Jul 2025 19:18:24 +0000
Files and hashes:         1: 3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (hash: 9BoeCVg5vcg0/gLeGBtgYnvonPaqfp1IXhF41+TABUc=)
                          2: 323830343a393063303a3a2f33322d3438203d3e203532383535.roa (hash: bFr144qNXiJnjjBqpVx2Hs1FVhxY1dhQgugWIFI/8tA=)
                          3: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl (hash: ae9PkPJ1XofyNJ1vNp6DYHp6vw++fqJw88Lrg/zyj64=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:06:fb:b1:92:5a:ff:7f:04:fa:2b:b3:c5:9e:b9:bb:13:07:76:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570
        Validity
            Not Before: Jul 17 16:29:24 2025 GMT
            Not After : Jul 18 19:18:24 2025 GMT
        Subject: CN=106A6CBA1AED760BF7C8294DDBAE2501B7F9E795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:f5:23:87:aa:54:ff:96:5f:fb:d8:30:23:
                    23:18:79:0e:3b:e3:a2:2b:52:a5:5c:a7:64:a7:ad:
                    c9:79:a9:98:97:ec:80:b3:3d:f2:1b:a0:e9:d9:47:
                    15:f7:e0:ec:ee:98:b9:81:7c:a2:5a:52:aa:da:54:
                    fe:62:0a:f5:f4:8e:9d:06:75:ba:3a:90:b0:2b:45:
                    38:4e:64:ed:3a:60:48:b8:1f:ef:4b:f2:f5:05:d6:
                    c8:8f:87:f9:b8:79:39:b0:26:30:17:5d:85:66:da:
                    4e:a1:24:28:7a:be:d0:cb:e2:dc:57:99:30:c5:28:
                    aa:0c:8f:de:db:5d:3c:31:95:f4:ea:c9:79:3c:20:
                    cf:73:81:10:46:40:44:46:1e:38:de:2c:a9:a8:5b:
                    93:68:b9:7a:4a:86:e3:c0:37:e1:4b:63:d9:ad:35:
                    2a:fb:d3:a1:4e:0d:04:5d:6b:cc:a0:a9:93:d2:44:
                    f4:87:eb:1a:c3:1a:1e:2f:5f:6d:01:76:2c:0a:d7:
                    13:8d:cd:90:db:17:29:c1:9b:09:6e:a3:66:1e:41:
                    31:d6:9c:cf:4b:c8:d4:9a:96:08:13:c5:6f:9e:af:
                    66:57:c4:e3:b5:c3:bc:80:6e:0a:b4:e4:60:35:3e:
                    d6:a5:13:d0:42:3e:73:0f:70:47:84:95:ed:8b:fd:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6A:6C:BA:1A:ED:76:0B:F7:C8:29:4D:DB:AE:25:01:B7:F9:E7:95
            X509v3 Authority Key Identifier:
                keyid:71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:ff:96:d0:d4:37:68:dc:f1:cd:9f:94:ba:41:3d:4f:fe:
         c5:ee:b5:fb:37:56:11:84:4b:66:a9:d9:58:51:b7:68:b1:f5:
         b3:2d:74:bd:0a:f8:e5:c2:66:7a:18:4e:c1:99:92:8e:04:1c:
         03:5d:93:d9:e3:b1:29:4b:6e:4d:f3:8e:3f:19:04:12:8b:c2:
         3f:0b:94:72:5a:76:a6:e8:57:26:df:7f:36:02:f9:7e:11:d7:
         39:c1:0e:35:a1:55:b7:1c:63:fa:a8:7c:d9:be:88:f6:13:1c:
         63:65:65:24:a2:d8:cb:7b:2f:b1:1a:94:aa:fc:89:73:74:b2:
         91:7d:c5:a3:7d:8b:c6:c4:53:1b:48:bb:c5:07:50:17:24:a0:
         55:63:ac:a0:c0:fd:e4:c3:54:6f:71:85:f3:58:b7:5f:21:7c:
         1c:fb:43:80:f7:02:20:f1:96:41:d2:fc:8a:9c:37:7c:57:22:
         1a:9a:fd:fd:9e:1a:d7:c9:02:5f:aa:1e:2f:29:1e:4d:21:ae:
         e4:ab:04:39:14:83:d1:e2:47:2a:e1:fd:13:cc:68:c9:eb:b9:
         bc:65:f3:c1:05:7d:ca:e1:ae:c3:ee:8f:54:83:c3:95:de:7c:
         a5:32:fa:26:fc:c3:3e:81:cc:78:af:28:da:8e:30:20:f8:13:
         1f:73:0c:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfgb7sZJa/38E+iuzxZ65uxMHdtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBQzgxN0YxQjBGRkZBMTc0QUNBRTM4QUM0MTgwQUJF
REU0NTU3MDAeFw0yNTA3MTcxNjI5MjRaFw0yNTA3MTgxOTE4MjRaMDMxMTAvBgNV
BAMTKDEwNkE2Q0JBMUFFRDc2MEJGN0M4Mjk0RERCQUUyNTAxQjdGOUU3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3b/Ujh6pU/5Zf+9gwIyMYeQ47
46IrUqVcp2Snrcl5qZiX7ICzPfIboOnZRxX34OzumLmBfKJaUqraVP5iCvX0jp0G
dbo6kLArRThOZO06YEi4H+9L8vUF1siPh/m4eTmwJjAXXYVm2k6hJCh6vtDL4txX
mTDFKKoMj97bXTwxlfTqyXk8IM9zgRBGQERGHjjeLKmoW5NouXpKhuPAN+FLY9mt
NSr706FODQRda8ygqZPSRPSH6xrDGh4vX20BdiwK1xONzZDbFynBmwluo2YeQTHW
nM9LyNSalggTxW+er2ZXxOO1w7yAbgq05GA1PtalE9BCPnMPcEeEle2L/S8TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEGpsuhrtdgv3yClN264lAbf555UwHwYDVR0j
BBgwFoAUcayBfxsP/6F0rK44rEGAq+3kVXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VC
VFAvMC83MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQUM4MTdGMUIwRkZGQTE3
NEFDQUUzOEFDNDE4MEFCRURFNDU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VCVFAvMC83
MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAvb/ltDUN2jc8c2flLpBPU/+xe61+zdWEYRLZqnZWFG3aLH1sy10vQr45cJm
ehhOwZmSjgQcA12T2eOxKUtuTfOOPxkEEovCPwuUclp2puhXJt9/NgL5fhHXOcEO
NaFVtxxj+qh82b6I9hMcY2VlJKLYy3svsRqUqvyJc3SykX3Fo32LxsRTG0i7xQdQ
FySgVWOsoMD95MNUb3GF81i3XyF8HPtDgPcCIPGWQdL8ipw3fFciGpr9/Z4a18kC
X6oeLykeTSGu5KsEORSD0eJHKuH9E8xoyeu5vGXzwQV9yuGuw+6PVIPDld58pTL6
JvzDPoHMeK8o2o4wIPgTH3MMcA==
-----END CERTIFICATE-----