Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft
File:                     25F750CC8B097F02421DA84CAA0417DC66A794EE.mft (raw, json)
Hash identifier:          fOrni8LIvxnmcufXjEF2NGXao4yphlN2CvL9cTgCpyc=
Subject key identifier:   B6:EC:97:FD:BF:28:2B:F2:AD:AC:84:D2:28:BF:11:EE:80:69:D3:63
Authority key identifier: 25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
Certificate issuer:       /CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
Certificate serial:       32E808F23767D1C8C806E5D337A567BC69426B73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft
Manifest number:          01E2
Signing time:             Fri 28 Mar 2025 03:20:00 +0000
Manifest this update:     Fri 28 Mar 2025 03:15:00 +0000
Manifest next update:     Sat 29 Mar 2025 06:40:00 +0000
Files and hashes:         1: 3137372e34372e3232342e302f32302d3234203d3e203532393935.roa (hash: 3DLfprOdZ1wyHD26Em42hRYvUsSCIOtDO1JJemeKeyA=)
                          2: 3137372e39332e3234382e302f32312d3234203d3e203532393935.roa (hash: uTppqmiWEjgWW7jvrG1udTf7RgcmN1mfxu05b0psK6A=)
                          3: 25F750CC8B097F02421DA84CAA0417DC66A794EE.crl (hash: JNmfUrLM+uQP+KOzVbGMsMWshF0kwb3q7UWJG3rVn0s=)
                          4: 323830343a3464383a3a2f33322d3332203d3e203532393935.roa (hash: tipdpbnsl3L6sx86gYxtO3JT8glKCmWTaIzZ9dI4wwI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e8:08:f2:37:67:d1:c8:c8:06:e5:d3:37:a5:67:bc:69:42:6b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
        Validity
            Not Before: Mar 28 03:15:00 2025 GMT
            Not After : Mar 29 06:40:00 2025 GMT
        Subject: CN=B6EC97FDBF282BF2ADAC84D228BF11EE8069D363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ba:cf:de:70:25:e6:82:05:cd:9d:51:cd:dc:
                    65:15:48:b0:01:9c:52:4c:f1:fa:29:db:80:1b:27:
                    7a:94:e7:e4:4c:a8:2e:e8:1a:6d:fc:d7:5b:26:94:
                    81:d9:b6:95:59:90:6d:93:13:a5:74:a6:00:bb:9d:
                    dc:5a:51:c4:b9:bc:75:58:b9:76:00:94:a3:c6:39:
                    d7:7e:dd:e2:9e:b6:fb:bb:b1:b8:b6:ef:db:d3:92:
                    02:24:98:e7:3a:d6:1c:7c:75:98:91:73:fe:6e:44:
                    11:83:d3:ee:62:9c:60:c3:53:76:ea:6b:56:af:c9:
                    2c:f8:16:4d:de:e1:70:be:c7:5a:76:92:fc:39:d0:
                    a2:78:8a:1c:9e:fa:3a:51:4a:3e:cc:99:3e:27:85:
                    b7:1a:ec:c9:1a:38:72:c5:35:a4:84:76:05:9c:73:
                    24:13:38:29:cd:d4:ff:52:25:4a:43:87:db:50:7d:
                    c3:86:a6:01:f7:a1:f0:c7:d4:b4:9a:39:f7:f7:74:
                    de:c8:bf:74:9e:9c:ab:c8:cd:dd:9d:44:d2:20:58:
                    06:14:68:27:03:18:58:d0:5e:a5:17:3d:5b:28:c6:
                    fe:4a:5c:3d:6e:1e:e0:ae:e0:69:22:c7:9b:50:13:
                    0b:34:23:b0:e1:13:eb:2e:7b:8a:52:fa:0b:a2:77:
                    f5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:97:FD:BF:28:2B:F2:AD:AC:84:D2:28:BF:11:EE:80:69:D3:63
            X509v3 Authority Key Identifier:
                keyid:25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:a8:2b:1b:ed:1f:20:9f:23:01:42:a0:fb:ea:d0:1b:91:
         3f:35:22:dc:29:85:0f:a5:21:44:8a:d0:9c:ac:fc:45:d3:ae:
         0e:4e:eb:36:e3:4a:e7:5a:03:31:d1:23:7b:29:b3:ce:55:8a:
         c8:e9:d5:20:d9:b1:dd:23:df:3d:71:10:d6:76:a1:67:02:65:
         c2:41:92:05:18:5a:89:bf:4f:d2:6d:5f:49:52:dc:f7:56:07:
         ad:54:89:11:13:52:b7:11:6f:08:94:8d:6b:37:06:f3:4f:c8:
         45:38:f6:65:c4:ae:d8:13:29:df:3f:1d:ad:b4:bf:08:80:4e:
         02:15:78:80:c2:49:6d:3e:26:5e:78:ad:36:f4:b8:2e:f2:83:
         a5:a4:ac:61:22:1d:29:e9:f1:60:5c:f9:02:85:8a:a8:98:f1:
         c2:89:fa:a1:4a:25:a6:ed:f1:f6:94:b0:56:18:bf:d6:d5:54:
         67:13:1b:e8:74:e8:ee:3d:8f:3a:e0:30:70:25:5f:7f:c1:14:
         ae:1e:ad:ef:b3:b1:3f:a5:ae:ca:ed:08:61:52:f7:98:eb:4d:
         5d:86:a2:53:d2:c0:c7:d8:3f:e8:25:06:c8:b1:5b:73:4b:87:
         bc:d0:d9:df:5a:f5:99:f9:ea:15:36:b1:06:93:61:83:a4:6c:
         d1:1e:a7:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMugI8jdn0cjIBuXTN6VnvGlCa3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVGNzUwQ0M4QjA5N0YwMjQyMURBODRDQUEwNDE3REM2
NkE3OTRFRTAeFw0yNTAzMjgwMzE1MDBaFw0yNTAzMjkwNjQwMDBaMDMxMTAvBgNV
BAMTKEI2RUM5N0ZEQkYyODJCRjJBREFDODREMjI4QkYxMUVFODA2OUQzNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgus/ecCXmggXNnVHN3GUVSLAB
nFJM8fop24AbJ3qU5+RMqC7oGm3811smlIHZtpVZkG2TE6V0pgC7ndxaUcS5vHVY
uXYAlKPGOdd+3eKetvu7sbi279vTkgIkmOc61hx8dZiRc/5uRBGD0+5inGDDU3bq
a1avySz4Fk3e4XC+x1p2kvw50KJ4ihye+jpRSj7MmT4nhbca7MkaOHLFNaSEdgWc
cyQTOCnN1P9SJUpDh9tQfcOGpgH3ofDH1LSaOff3dN7Iv3SenKvIzd2dRNIgWAYU
aCcDGFjQXqUXPVsoxv5KXD1uHuCu4Gkix5tQEws0I7DhE+sue4pS+guid/XzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtuyX/b8oK/KtrITSKL8R7oBp02MwHwYDVR0j
BBgwFoAUJfdQzIsJfwJCHahMqgQX3GanlO4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VwUDlGUTU4YUc4QjExd01kS1IyZmVIUXdVMkNiUWVyZnZoUFdDYmJo
dTMvMS8yNUY3NTBDQzhCMDk3RjAyNDIxREE4NENBQTA0MTdEQzY2QTc5NEVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1Rjc1MENDOEIwOTdGMDI0
MjFEQTg0Q0FBMDQxN0RDNjZBNzk0RUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3VwUDlGUTU4YUc4QjExd01kS1IyZmVIUXdVMkNiUWVyZnZoUFdDYmJodTMvMS8y
NUY3NTBDQzhCMDk3RjAyNDIxREE4NENBQTA0MTdEQzY2QTc5NEVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkcKoKxvtHyCfIwFCoPvq0BuRPzUi3CmFD6UhRIrQnKz8RdOuDk7rNuNK51oD
MdEjeymzzlWKyOnVINmx3SPfPXEQ1nahZwJlwkGSBRhaib9P0m1fSVLc91YHrVSJ
ERNStxFvCJSNazcG80/IRTj2ZcSu2BMp3z8drbS/CIBOAhV4gMJJbT4mXnitNvS4
LvKDpaSsYSIdKenxYFz5AoWKqJjxwon6oUolpu3x9pSwVhi/1tVUZxMb6HTo7j2P
OuAwcCVff8EUrh6t77OxP6Wuyu0IYVL3mOtNXYaiU9LAx9g/6CUGyLFbc0uHvNDZ
31r1mfnqFTaxBpNhg6Rs0R6nUw==
-----END CERTIFICATE-----