Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft
File:                     BF858D763EACB66391C131531036E078E22F45D5.mft (raw, json)
Hash identifier:          l4vsu09/IWApstUIvToP45PdSwzDLmDUm8x1TxKZLuI=
Subject key identifier:   1A:CA:EB:6B:5F:7F:19:6D:F4:78:CA:8B:57:48:EE:68:ED:F3:EC:EF
Authority key identifier: BF:85:8D:76:3E:AC:B6:63:91:C1:31:53:10:36:E0:78:E2:2F:45:D5
Certificate issuer:       /CN=BF858D763EACB66391C131531036E078E22F45D5
Certificate serial:       6FC856C83A9690E8B8C8BF5423505F32F9704DA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF858D763EACB66391C131531036E078E22F45D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft
Manifest number:          74
Signing time:             Sat 29 Mar 2025 10:27:25 +0000
Manifest this update:     Sat 29 Mar 2025 10:22:25 +0000
Manifest next update:     Sun 30 Mar 2025 11:10:25 +0000
Files and hashes:         1: 3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (hash: AsQR1xL063fQ5oPesbqAY+mOv+UrbzaYsJQw3qOsOYs=)
                          2: BF858D763EACB66391C131531036E078E22F45D5.crl (hash: bXyFfSQVwjXscV1spkWJOmcKivlBKht/uQ3aE6sM2rE=)
                          3: 323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (hash: GrK1Bg3DWvX2hUFTTrQTferad9zq+Y7z1zxAD1x+JHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:56:c8:3a:96:90:e8:b8:c8:bf:54:23:50:5f:32:f9:70:4d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF858D763EACB66391C131531036E078E22F45D5
        Validity
            Not Before: Mar 29 10:22:25 2025 GMT
            Not After : Mar 30 11:10:25 2025 GMT
        Subject: CN=1ACAEB6B5F7F196DF478CA8B5748EE68EDF3ECEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:e5:6c:21:cc:75:9e:70:31:9d:b8:99:1f:
                    c3:fe:75:9e:22:09:7f:89:a6:11:33:da:b1:9f:0a:
                    5a:cf:50:5a:b5:9a:61:17:cd:81:46:1a:e5:93:b6:
                    12:60:9b:ce:26:11:8c:8f:83:6c:e9:6e:4c:f5:8c:
                    29:66:c1:82:3c:61:9a:2c:d3:ba:b3:8e:55:a7:4a:
                    71:e5:77:49:25:c2:00:46:30:8f:50:1c:95:fa:bd:
                    a9:f9:9b:cc:c8:41:77:d2:82:df:79:42:4f:a8:5e:
                    01:6d:c7:5a:11:67:65:d8:1b:92:08:77:97:12:0c:
                    8a:da:99:5a:29:cf:ce:a2:76:a0:85:f7:bf:c5:3f:
                    87:c9:4f:30:09:9d:1f:ea:f6:d1:c2:49:46:32:06:
                    09:cb:59:8c:1c:af:a9:10:39:e5:20:0e:d0:e5:5f:
                    48:fa:a0:f4:9f:0a:66:dd:dc:42:68:f4:e2:33:55:
                    1a:d0:98:69:56:5a:1c:75:05:3c:27:29:7c:47:7f:
                    d2:e5:a2:fb:db:11:83:cd:ca:a9:73:9c:34:15:e7:
                    bb:3e:57:2a:e9:eb:04:3b:7d:38:fb:5e:fc:e2:fe:
                    1f:4b:12:db:42:88:a5:83:c8:5c:47:09:e2:a3:4a:
                    ad:de:96:ae:fe:d2:4b:88:94:14:5a:cc:5a:8f:dd:
                    d7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CA:EB:6B:5F:7F:19:6D:F4:78:CA:8B:57:48:EE:68:ED:F3:EC:EF
            X509v3 Authority Key Identifier:
                keyid:BF:85:8D:76:3E:AC:B6:63:91:C1:31:53:10:36:E0:78:E2:2F:45:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF858D763EACB66391C131531036E078E22F45D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c3:32:0f:2f:21:9f:8d:4d:d9:d2:26:9c:87:bb:3c:3c:c2:
         fb:f3:12:d7:48:bc:a6:df:81:73:d4:4d:8c:45:0e:48:f5:b0:
         9d:a4:7e:e7:59:58:9b:7f:28:af:8f:45:1c:a1:90:6e:4a:1c:
         f6:e0:0f:e8:d8:8b:a7:f1:ff:42:3a:ea:d4:88:73:5c:86:e6:
         83:2d:a7:ca:ef:5d:7f:ec:e2:9e:e4:11:51:f5:53:33:67:9f:
         46:a8:1f:91:6e:25:0d:05:b1:5f:de:0e:d0:3e:47:d2:8e:fc:
         13:6c:26:f6:35:49:b6:35:8f:64:3c:4e:c2:fe:42:a4:c2:d2:
         e0:49:06:3c:1d:aa:ef:e3:2f:33:de:ce:b9:b7:88:cd:c4:0c:
         5c:26:23:fb:81:2b:fa:35:7a:18:cb:8b:a3:b8:4b:25:0f:f7:
         cf:0e:b6:64:e1:87:2d:84:49:43:38:31:60:2b:1f:1e:3d:cd:
         51:63:57:ed:8b:2e:b0:06:71:49:46:ac:5f:aa:09:41:3e:cb:
         d2:34:3b:ba:55:a2:9c:58:11:27:74:09:52:f9:75:e9:70:8d:
         ca:41:37:b3:d3:e8:7b:69:66:3d:e9:bb:6d:5f:6b:b8:9c:7c:
         70:07:c9:fc:30:3e:c1:5e:9c:5f:46:12:85:a9:d1:74:4a:fe:
         6d:b8:f5:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUb8hWyDqWkOi4yL9UI1BfMvlwTakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY4NThENzYzRUFDQjY2MzkxQzEzMTUzMTAzNkUwNzhF
MjJGNDVENTAeFw0yNTAzMjkxMDIyMjVaFw0yNTAzMzAxMTEwMjVaMDMxMTAvBgNV
BAMTKDFBQ0FFQjZCNUY3RjE5NkRGNDc4Q0E4QjU3NDhFRTY4RURGM0VDRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SuVsIcx1nnAxnbiZH8P+dZ4i
CX+JphEz2rGfClrPUFq1mmEXzYFGGuWTthJgm84mEYyPg2zpbkz1jClmwYI8YZos
07qzjlWnSnHld0klwgBGMI9QHJX6van5m8zIQXfSgt95Qk+oXgFtx1oRZ2XYG5II
d5cSDIramVopz86idqCF97/FP4fJTzAJnR/q9tHCSUYyBgnLWYwcr6kQOeUgDtDl
X0j6oPSfCmbd3EJo9OIzVRrQmGlWWhx1BTwnKXxHf9LlovvbEYPNyqlznDQV57s+
Vyrp6wQ7fTj7Xvzi/h9LEttCiKWDyFxHCeKjSq3elq7+0kuIlBRazFqP3dcrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGsrra19/GW30eMqLV0juaO3z7O8wHwYDVR0j
BBgwFoAUv4WNdj6stmORwTFTEDbgeOIvRdUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFn
aW8vMC9CRjg1OEQ3NjNFQUNCNjYzOTFDMTMxNTMxMDM2RTA3OEUyMkY0NUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGODU4RDc2M0VBQ0I2NjM5
MUMxMzE1MzEwMzZFMDc4RTIyRjQ1RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFnaW8vMC9C
Rjg1OEQ3NjNFQUNCNjYzOTFDMTMxNTMxMDM2RTA3OEUyMkY0NUQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlMMyDy8hn41N2dImnIe7PDzC+/MS10i8pt+Bc9RNjEUOSPWwnaR+51lYm38o
r49FHKGQbkoc9uAP6NiLp/H/Qjrq1IhzXIbmgy2nyu9df+zinuQRUfVTM2efRqgf
kW4lDQWxX94O0D5H0o78E2wm9jVJtjWPZDxOwv5CpMLS4EkGPB2q7+MvM97OubeI
zcQMXCYj+4Er+jV6GMuLo7hLJQ/3zw62ZOGHLYRJQzgxYCsfHj3NUWNX7YsusAZx
SUasX6oJQT7L0jQ7ulWinFgRJ3QJUvl16XCNykE3s9Poe2lmPem7bV9ruJx8cAfJ
/DA+wV6cX0YShanRdEr+bbj1Yw==
-----END CERTIFICATE-----