Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft
File:                     CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft (raw, json)
Hash identifier:          +QTj+Z89pIslH/rkNqWslSu4NWgs8tvcTj5G3djxASs=
Subject key identifier:   ED:20:F3:39:F9:C2:9E:F3:E3:D0:08:22:5A:BE:AB:F1:DD:9C:CB:EF
Authority key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
Certificate issuer:       /CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Certificate serial:       23AA5F9D13962BC387CFCF61A5BC0449A91E65FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft
Manifest number:          022D
Signing time:             Wed 09 Jul 2025 04:03:02 +0000
Manifest this update:     Wed 09 Jul 2025 03:58:02 +0000
Manifest next update:     Thu 10 Jul 2025 05:56:02 +0000
Files and hashes:         1: 323830343a353434383a3a2f33322d3336203d3e20323638363430.roa (hash: 38oZ7qGP7oZFwjPXnHJH0jKBkkY+GIWZKLt9hNZqu60=)
                          2: 34352e3136342e3139362e302f32322d3234203d3e20323638363430.roa (hash: aURF8xV/1WfF2q4B+wUE+APyvcwke9zut2utOvhQT0Q=)
                          3: CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl (hash: woVGfpcW2JjKDQZOu2LA36lzkJ8d826849kV1Cu3rrk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:aa:5f:9d:13:96:2b:c3:87:cf:cf:61:a5:bc:04:49:a9:1e:65:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
        Validity
            Not Before: Jul  9 03:58:02 2025 GMT
            Not After : Jul 10 05:56:02 2025 GMT
        Subject: CN=ED20F339F9C29EF3E3D008225ABEABF1DD9CCBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:88:56:4a:d9:83:f7:39:f5:bd:1f:3d:07:
                    f6:03:97:dd:e1:ef:5c:18:97:dc:9d:8b:fb:64:d8:
                    69:9c:e2:4a:dd:09:c1:7f:56:6d:bd:ee:b7:ff:0e:
                    e8:91:c6:06:f4:14:75:e2:f1:70:31:46:df:eb:24:
                    e1:f3:70:e0:24:8b:ad:f2:5a:a4:72:fb:5f:96:1d:
                    84:b3:0f:65:19:85:7d:ee:63:11:a3:fc:2f:85:7e:
                    f3:53:75:1c:58:42:67:13:9a:fa:ce:cf:5a:45:36:
                    a7:45:33:89:43:27:5d:90:d1:45:fe:79:17:23:a2:
                    75:be:bc:1b:09:0a:87:f9:3a:b7:5e:c4:15:59:64:
                    66:84:22:3c:ab:5c:37:74:33:28:3e:6e:02:3b:d2:
                    6b:04:23:ac:65:26:b1:f7:29:93:fc:1e:5e:bf:0e:
                    20:48:61:54:ab:e8:e5:21:af:b2:52:23:e4:c0:b5:
                    3b:1e:a5:40:dc:5f:2e:29:52:12:b5:e7:64:5c:37:
                    df:63:76:e0:40:e9:22:32:e2:87:4c:b9:40:58:77:
                    75:5f:2e:05:21:a9:55:02:d9:b8:4c:b2:df:8d:84:
                    55:36:43:a0:db:7b:dd:fe:2d:a3:0e:78:a1:9a:33:
                    b4:d9:a1:48:0f:99:fd:0a:d5:dd:b4:14:6d:8d:59:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:20:F3:39:F9:C2:9E:F3:E3:D0:08:22:5A:BE:AB:F1:DD:9C:CB:EF
            X509v3 Authority Key Identifier:
                keyid:CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:29:27:f3:2b:bb:d0:92:af:e5:22:44:02:56:2d:94:b3:
         24:4e:a5:9a:75:3d:dd:7b:1f:bd:eb:e0:af:bf:d2:ce:c7:e9:
         76:bf:16:45:da:b7:b9:9b:53:20:1b:76:2a:02:97:54:72:8a:
         e6:4c:d7:30:4b:6b:42:e0:d2:7a:cb:1b:ba:32:d9:ad:56:9e:
         bb:54:1c:b8:42:4f:ad:2a:72:a9:2b:a8:60:72:1d:36:9e:86:
         9f:7e:f5:e7:c1:e2:94:9f:05:97:86:99:55:9d:35:77:25:f9:
         bf:74:1f:69:b3:54:ef:06:f2:6b:44:e2:39:71:d3:d3:6e:71:
         b5:44:11:0f:a3:bc:12:17:53:83:f6:84:ac:1a:1d:85:7c:71:
         dc:26:32:b9:d4:65:bf:59:8c:e8:64:bd:3a:ff:5d:cc:c2:7d:
         0e:8e:16:dc:2d:9a:a2:58:a9:b7:00:d8:3c:3f:8e:a5:f4:42:
         35:fd:70:2c:35:9e:da:63:6f:da:0a:7d:47:2d:d9:d0:4f:77:
         3f:4b:11:b4:15:40:4e:d1:dc:53:51:39:f9:e8:9a:d8:aa:4b:
         a8:61:a1:65:24:22:a8:cd:2d:18:a1:82:ba:46:51:c6:32:e4:
         42:a5:37:08:e5:3f:ee:73:e7:0c:cc:d8:b4:5a:2a:20:61:43:
         5a:c8:6a:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI6pfnROWK8OHz89hpbwESakeZfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JBNEFGREVGNTcwQjM0OUFGNjhFRTlBMEFEMDdCRERE
N0IyMzNFRjAeFw0yNTA3MDkwMzU4MDJaFw0yNTA3MTAwNTU2MDJaMDMxMTAvBgNV
BAMTKEVEMjBGMzM5RjlDMjlFRjNFM0QwMDgyMjVBQkVBQkYxREQ5Q0NCRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3P4hWStmD9zn1vR89B/YDl93h
71wYl9ydi/tk2Gmc4krdCcF/Vm297rf/DuiRxgb0FHXi8XAxRt/rJOHzcOAki63y
WqRy+1+WHYSzD2UZhX3uYxGj/C+FfvNTdRxYQmcTmvrOz1pFNqdFM4lDJ12Q0UX+
eRcjonW+vBsJCof5OrdexBVZZGaEIjyrXDd0Myg+bgI70msEI6xlJrH3KZP8Hl6/
DiBIYVSr6OUhr7JSI+TAtTsepUDcXy4pUhK152RcN99jduBA6SIy4odMuUBYd3Vf
LgUhqVUC2bhMst+NhFU2Q6Dbe93+LaMOeKGaM7TZoUgPmf0K1d20FG2NWcBJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7SDzOfnCnvPj0AgiWr6r8d2cy+8wHwYDVR0j
BBgwFoAUy6Sv3vVws0mvaO6aCtB73deyM+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40
Y3cvMC9DQkE0QUZERUY1NzBCMzQ5QUY2OEVFOUEwQUQwN0JEREQ3QjIzM0VGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQTRBRkRFRjU3MEIzNDlB
RjY4RUU5QTBBRDA3QkRERDdCMjMzRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40Y3cvMC9D
QkE0QUZERUY1NzBCMzQ5QUY2OEVFOUEwQUQwN0JEREQ3QjIzM0VGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANeMpJ/Mru9CSr+UiRAJWLZSzJE6lmnU93Xsfvevgr7/Szsfpdr8WRdq3uZtT
IBt2KgKXVHKK5kzXMEtrQuDSessbujLZrVaeu1QcuEJPrSpyqSuoYHIdNp6Gn371
58HilJ8Fl4aZVZ01dyX5v3QfabNU7wbya0TiOXHT025xtUQRD6O8EhdTg/aErBod
hXxx3CYyudRlv1mM6GS9Ov9dzMJ9Do4W3C2aoliptwDYPD+OpfRCNf1wLDWe2mNv
2gp9Ry3Z0E93P0sRtBVATtHcU1E5+eia2KpLqGGhZSQiqM0tGKGCukZRxjLkQqU3
COU/7nPnDMzYtFoqIGFDWshqiw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:14 2025 by rpki-client