Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
File:                     749E21CDD000362F14CB5C6E5B975EFE08776886.mft (raw, json)
Hash identifier:          myIZJ8J+ub//ODXTnwQAJJ+KLoRn+CmMfmIr79Kaq74=
Subject key identifier:   27:C4:26:4C:1A:BC:59:15:88:66:74:74:72:03:73:09:99:31:A9:B7
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       36A30F5DC575A85545D98FB8D0565E608A0F55E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
Manifest number:          E4
Signing time:             Sat 29 Mar 2025 03:07:19 +0000
Manifest this update:     Sat 29 Mar 2025 03:02:19 +0000
Manifest next update:     Sun 30 Mar 2025 03:43:19 +0000
Files and hashes:         1: 323830343a333736633a3a2f33322d3336203d3e203631363138.roa (hash: xzhEcXGQJVwlTNmeF/fyjjcaWGad5tJ1S0avFU9J9ag=)
                          2: 749E21CDD000362F14CB5C6E5B975EFE08776886.crl (hash: +eAAiHr4UxRIsWa9CJoJw+AF0uapzgQ4qAaRH2BgcK8=)
                          3: 3137302e38312e3130302e302f32322d3234203d3e203631363138.roa (hash: CjBAsoD6tLi86lyVM17mTiaPQvDLC4/m36CHcpPA5GQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a3:0f:5d:c5:75:a8:55:45:d9:8f:b8:d0:56:5e:60:8a:0f:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Mar 29 03:02:19 2025 GMT
            Not After : Mar 30 03:43:19 2025 GMT
        Subject: CN=27C4264C1ABC591588667474720373099931A9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:77:a3:58:41:8a:54:bf:2a:23:14:1a:15:
                    86:05:d9:ce:aa:95:0c:f9:95:ab:8d:8c:26:c0:58:
                    90:bb:67:2b:20:9e:01:9e:ca:79:a5:22:1c:64:b8:
                    e1:fd:a5:ef:b9:9e:07:50:59:ad:85:d4:de:5b:7d:
                    59:89:01:36:ba:30:54:8b:2b:e4:9d:a3:9d:69:f4:
                    6a:60:26:ef:22:20:f7:de:cd:03:6d:c0:39:bb:fa:
                    ae:32:4b:22:65:09:90:2b:48:6b:30:89:ec:fa:f5:
                    f3:a4:05:41:8f:c4:c9:20:27:7d:d6:ea:d0:5c:03:
                    b3:10:0f:44:14:4a:d0:08:a9:7d:8d:7b:1a:25:d4:
                    09:69:62:72:b8:15:e2:92:c8:f5:23:ad:d2:c2:bf:
                    87:a8:21:80:e5:c2:98:22:fe:92:49:18:f5:ea:5d:
                    bb:50:f4:7f:a8:74:44:96:5d:61:0a:e0:6b:cb:c9:
                    1c:08:dd:86:32:16:b0:07:3a:5f:64:ee:f8:54:ec:
                    08:9d:2d:b5:5a:f3:00:0e:b4:7c:18:f6:df:85:b8:
                    55:3b:18:0d:23:82:d5:62:42:f0:77:25:e1:53:49:
                    aa:58:00:56:b7:24:fd:2c:fa:95:4a:65:57:ee:fb:
                    d5:8c:36:2b:be:a6:f2:78:7e:bb:f1:88:16:1d:96:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C4:26:4C:1A:BC:59:15:88:66:74:74:72:03:73:09:99:31:A9:B7
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:50:22:61:c6:04:88:21:75:c2:28:d1:33:9c:9f:5b:fd:57:
         b1:38:cf:db:6e:c6:60:53:18:d8:9c:e4:dc:15:34:48:bf:f4:
         41:8b:ea:fd:60:18:73:87:e1:47:15:22:41:99:50:81:25:a9:
         91:fe:08:b4:c4:27:b5:9d:7a:34:41:33:e6:36:e8:51:19:e1:
         29:ca:56:6d:68:4e:b8:9d:bc:41:38:4c:22:a8:76:1d:5e:24:
         ba:1d:fe:f4:ce:6f:d3:74:2b:2d:8d:15:41:c0:6f:35:b5:77:
         1a:29:81:ae:59:73:80:42:90:87:39:3d:1a:a6:38:f9:2c:c0:
         a4:a1:a1:e1:49:ef:3b:c3:eb:2b:dc:85:f2:4d:f3:7a:8f:16:
         fc:d4:11:4b:70:4a:56:93:ae:7e:3b:cf:8b:80:53:71:83:46:
         d9:4c:5e:24:a2:82:b9:67:40:24:45:cf:d1:33:5a:39:18:e9:
         bd:f6:57:a1:23:6b:d0:72:bb:85:b6:a4:42:62:44:7e:91:59:
         26:03:e8:74:4f:75:f8:ec:3c:fa:b3:7b:c1:de:9b:6b:13:6b:
         30:9c:dd:a5:de:49:81:10:b9:ca:cb:79:0b:79:80:ec:25:45:
         73:f5:ac:bb:fc:25:fa:34:15:96:d2:ac:30:2d:26:ee:4c:e9:
         78:21:d9:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNqMPXcV1qFVF2Y+40FZeYIoPVeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ5RTIxQ0REMDAwMzYyRjE0Q0I1QzZFNUI5NzVFRkUw
ODc3Njg4NjAeFw0yNTAzMjkwMzAyMTlaFw0yNTAzMzAwMzQzMTlaMDMxMTAvBgNV
BAMTKDI3QzQyNjRDMUFCQzU5MTU4ODY2NzQ3NDcyMDM3MzA5OTkzMUE5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiGHejWEGKVL8qIxQaFYYF2c6q
lQz5lauNjCbAWJC7ZysgngGeynmlIhxkuOH9pe+5ngdQWa2F1N5bfVmJATa6MFSL
K+Sdo51p9GpgJu8iIPfezQNtwDm7+q4ySyJlCZArSGswiez69fOkBUGPxMkgJ33W
6tBcA7MQD0QUStAIqX2Nexol1AlpYnK4FeKSyPUjrdLCv4eoIYDlwpgi/pJJGPXq
XbtQ9H+odESWXWEK4GvLyRwI3YYyFrAHOl9k7vhU7AidLbVa8wAOtHwY9t+FuFU7
GA0jgtViQvB3JeFTSapYAFa3JP0s+pVKZVfu+9WMNiu+pvJ4frvxiBYdlh+vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJ8QmTBq8WRWIZnR0cgNzCZkxqbcwHwYDVR0j
BBgwFoAUdJ4hzdAANi8Uy1xuW5de/gh3aIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3g4OUtxOWpMMVdvZGg4c0hTQkdpUGVZZ21YVFdqUlhId0NNTmNBR3lm
RGcvMC83NDlFMjFDREQwMDAzNjJGMTRDQjVDNkU1Qjk3NUVGRTA4Nzc2ODg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0OUUyMUNERDAwMDM2MkYx
NENCNUM2RTVCOTc1RUZFMDg3NzY4ODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3g4OUtxOWpMMVdvZGg4c0hTQkdpUGVZZ21YVFdqUlhId0NNTmNBR3lmRGcvMC83
NDlFMjFDREQwMDAzNjJGMTRDQjVDNkU1Qjk3NUVGRTA4Nzc2ODg2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApVAiYcYEiCF1wijRM5yfW/1XsTjP227GYFMY2Jzk3BU0SL/0QYvq/WAYc4fh
RxUiQZlQgSWpkf4ItMQntZ16NEEz5jboURnhKcpWbWhOuJ28QThMIqh2HV4kuh3+
9M5v03QrLY0VQcBvNbV3GimBrllzgEKQhzk9GqY4+SzApKGh4UnvO8PrK9yF8k3z
eo8W/NQRS3BKVpOufjvPi4BTcYNG2UxeJKKCuWdAJEXP0TNaORjpvfZXoSNr0HK7
hbakQmJEfpFZJgPodE91+Ow8+rN7wd6baxNrMJzdpd5JgRC5yst5C3mA7CVFc/Ws
u/wl+jQVltKsMC0m7kzpeCHZ4w==
-----END CERTIFICATE-----