Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft
File:                     1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft (raw, json)
Hash identifier:          fi5Q2fZhWzhCFZASfCw0qztQrgQnDKGlseJLdQX0zdk=
Subject key identifier:   EE:05:FC:0E:81:09:0D:7F:A1:A4:00:B9:CF:69:DE:FD:F4:FA:15:F5
Authority key identifier: 1B:AB:08:E1:3B:91:F3:47:E4:AF:C0:D4:E0:DA:28:75:4B:FA:E4:FB
Certificate issuer:       /CN=1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB
Certificate serial:       376DD4057867E7C56BCDB2CAE2D60EE21E5B60D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft
Manifest number:          9F
Signing time:             Sat 29 Mar 2025 08:40:28 +0000
Manifest this update:     Sat 29 Mar 2025 08:35:28 +0000
Manifest next update:     Sun 30 Mar 2025 11:11:28 +0000
Files and hashes:         1: 1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.crl (hash: r2nL39L6Joaa3ge/fZso4CmqlfABHYeRM6DoPOfCRRk=)
                          2: 3230302e3139342e3138302e302f32322d3332203d3e20323731363433.roa (hash: Stcwo5DEidu0DgvdDeH5pw7giQNIdS2u8VDEVZ9vkUg=)
                          3: 323830343a376562383a3a2f33322d313238203d3e20323731363433.roa (hash: 7Jq3UGJkgMep+No6gWY9KriYKBMRwSlBFLtQat9fYDo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6d:d4:05:78:67:e7:c5:6b:cd:b2:ca:e2:d6:0e:e2:1e:5b:60:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB
        Validity
            Not Before: Mar 29 08:35:28 2025 GMT
            Not After : Mar 30 11:11:28 2025 GMT
        Subject: CN=EE05FC0E81090D7FA1A400B9CF69DEFDF4FA15F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:01:88:d1:0e:04:19:c8:2c:5a:ca:3b:7e:
                    1b:3e:ae:84:a4:d6:84:f9:52:5b:e7:27:63:fa:f9:
                    0f:76:30:fe:6a:9b:5b:64:7a:57:0b:de:49:f4:9a:
                    4e:94:e5:5e:2d:7e:4f:81:20:2e:e0:f9:ac:74:af:
                    79:c9:cd:ea:7a:18:99:68:5e:ab:c7:ac:5c:3b:08:
                    be:ff:66:7a:cd:12:7d:8a:5b:b8:87:ef:98:ac:cd:
                    b2:66:b7:01:43:9c:4c:79:70:8e:bf:77:0a:28:87:
                    c0:4c:ea:f9:b3:1a:c1:f3:4f:61:ab:e4:c7:a3:3d:
                    35:77:02:05:8c:90:19:38:75:9a:cc:ba:3b:dc:d3:
                    00:55:a9:34:7e:53:4b:6f:b1:9c:58:e9:02:79:0d:
                    d1:44:fc:f1:84:ae:16:b1:0d:51:fd:a8:b4:8d:4f:
                    21:d6:d4:3a:45:1c:71:45:3f:7f:fb:a9:f7:6c:06:
                    e5:38:4b:5f:28:61:b7:1a:ee:ec:31:02:56:8b:8a:
                    97:f0:44:de:80:09:07:34:b3:a3:0e:ce:32:d5:d7:
                    f4:fc:33:2c:35:88:83:94:39:c9:11:79:31:ca:75:
                    22:90:d8:b5:55:68:17:05:2d:e6:38:37:ee:0c:79:
                    13:f9:42:02:46:09:cd:89:6b:20:a0:5f:83:d0:c6:
                    c6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:05:FC:0E:81:09:0D:7F:A1:A4:00:B9:CF:69:DE:FD:F4:FA:15:F5
            X509v3 Authority Key Identifier:
                keyid:1B:AB:08:E1:3B:91:F3:47:E4:AF:C0:D4:E0:DA:28:75:4B:FA:E4:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f1:e4:36:98:70:20:c0:ab:90:57:06:49:18:0d:c5:6e:fd:
         1c:d7:86:f9:0d:30:63:e6:56:7e:03:d5:b6:a2:0b:92:93:46:
         9f:fe:cc:ff:2a:a1:1e:f8:34:dd:44:de:08:25:b3:b4:0e:66:
         38:7b:36:1e:ef:99:40:ce:c2:19:a8:b4:ee:97:c0:7f:57:3f:
         19:83:e7:1a:34:ed:c8:da:09:2a:82:e7:18:ff:af:8b:ef:23:
         0e:15:cd:8b:91:4f:a8:97:98:d6:8d:a7:a4:4c:64:47:bd:02:
         f2:fa:24:b6:bd:e9:6c:6a:09:82:8c:00:06:0b:d3:6e:15:2c:
         c0:b1:b1:d3:7a:34:f8:01:d1:eb:53:43:f3:58:cc:de:ab:20:
         57:d7:11:f4:0d:2c:b6:6f:e2:59:49:e5:31:cd:41:8e:f5:b0:
         71:b9:c9:67:a0:2e:54:4e:06:a0:dc:2d:41:c9:80:46:7d:9d:
         6a:90:0b:0a:42:7c:d4:72:8b:b0:d9:af:ee:6c:7f:db:a9:4f:
         5a:d2:01:82:24:0e:d2:1a:4d:d4:7c:bc:80:49:4b:3c:99:b9:
         10:9f:dd:ad:52:e0:69:bf:a4:71:bb:30:ab:fe:6d:e6:b8:fd:
         3c:f3:50:db:7b:d5:79:1b:a0:ee:b2:b2:b3:13:9b:14:94:d9:
         e5:f2:a4:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN23UBXhn58VrzbLK4tYO4h5bYNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJBQjA4RTEzQjkxRjM0N0U0QUZDMEQ0RTBEQTI4NzU0
QkZBRTRGQjAeFw0yNTAzMjkwODM1MjhaFw0yNTAzMzAxMTExMjhaMDMxMTAvBgNV
BAMTKEVFMDVGQzBFODEwOTBEN0ZBMUE0MDBCOUNGNjlERUZERjRGQTE1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEQGI0Q4EGcgsWso7fhs+roSk
1oT5UlvnJ2P6+Q92MP5qm1tkelcL3kn0mk6U5V4tfk+BIC7g+ax0r3nJzep6GJlo
XqvHrFw7CL7/ZnrNEn2KW7iH75iszbJmtwFDnEx5cI6/dwooh8BM6vmzGsHzT2Gr
5MejPTV3AgWMkBk4dZrMujvc0wBVqTR+U0tvsZxY6QJ5DdFE/PGErhaxDVH9qLSN
TyHW1DpFHHFFP3/7qfdsBuU4S18oYbca7uwxAlaLipfwRN6ACQc0s6MOzjLV1/T8
Myw1iIOUOckReTHKdSKQ2LVVaBcFLeY4N+4MeRP5QgJGCc2JayCgX4PQxsa9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7gX8DoEJDX+hpAC5z2ne/fT6FfUwHwYDVR0j
BBgwFoAUG6sI4TuR80fkr8DU4NoodUv65PswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3Z4YlBqVnM1UmtISjZQVjJMQkhHemhtVWFCWWpyQ3B0UEtSSHJKQ01F
SnUvMC8xQkFCMDhFMTNCOTFGMzQ3RTRBRkMwRDRFMERBMjg3NTRCRkFFNEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQUIwOEUxM0I5MUYzNDdF
NEFGQzBENEUwREEyODc1NEJGQUU0RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3Z4YlBqVnM1UmtISjZQVjJMQkhHemhtVWFCWWpyQ3B0UEtSSHJKQ01FSnUvMC8x
QkFCMDhFMTNCOTFGMzQ3RTRBRkMwRDRFMERBMjg3NTRCRkFFNEZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnfHkNphwIMCrkFcGSRgNxW79HNeG+Q0wY+ZWfgPVtqILkpNGn/7M/yqhHvg0
3UTeCCWztA5mOHs2Hu+ZQM7CGai07pfAf1c/GYPnGjTtyNoJKoLnGP+vi+8jDhXN
i5FPqJeY1o2npExkR70C8voktr3pbGoJgowABgvTbhUswLGx03o0+AHR61ND81jM
3qsgV9cR9A0stm/iWUnlMc1BjvWwcbnJZ6AuVE4GoNwtQcmARn2dapALCkJ81HKL
sNmv7mx/26lPWtIBgiQO0hpN1Hy8gElLPJm5EJ/drVLgab+kcbswq/5t5rj9PPNQ
23vVeRug7rKysxObFJTZ5fKksA==
-----END CERTIFICATE-----