Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
File:                     653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json)
Hash identifier:          KYwvhvcNNX8bxsVLbscQ1u3KmDS8Fou+VnDrFP7ax/Y=
Subject key identifier:   8B:E7:E1:A4:77:AB:E3:41:A6:4C:2E:DA:A8:AA:6F:7A:0C:AD:37:F6
Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
Certificate issuer:       /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Certificate serial:       095FE75664A95BECA2E51309A1679F04C185D93D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
Manifest number:          01A7
Signing time:             Fri 28 Mar 2025 22:48:46 +0000
Manifest this update:     Fri 28 Mar 2025 22:43:46 +0000
Manifest next update:     Sun 30 Mar 2025 02:18:46 +0000
Files and hashes:         1: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: e6a/BoLfrHfeS1OiqUq2zHYK5wNcIPZC2ryUBctgsf4=)
                          2: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: e9Wnk1dipuYL7+ESiV4wX9rEj08r/iEn1Idl74okZN4=)
                          3: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: QjRttNmqUPaK2KnTPeAU0bHlEH3tU0dixEi9W/TbZwQ=)
                          4: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: gK2srHy8W9JA/fGxTJnkfzJkKKeOHjlQECkHtlXCqj8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:e7:56:64:a9:5b:ec:a2:e5:13:09:a1:67:9f:04:c1:85:d9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
        Validity
            Not Before: Mar 28 22:43:46 2025 GMT
            Not After : Mar 30 02:18:46 2025 GMT
        Subject: CN=8BE7E1A477ABE341A64C2EDAA8AA6F7A0CAD37F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:7b:93:40:b2:7c:0a:ee:a7:a7:62:0f:69:
                    f0:0f:3d:a7:eb:4f:1b:4c:4f:f6:96:19:2b:d9:0e:
                    af:d9:34:25:94:d1:86:3b:65:c6:8e:2b:d9:0f:52:
                    2d:a9:ea:4f:5e:d3:ff:a6:78:98:e6:64:b3:35:f8:
                    a9:69:ff:79:6c:1b:96:88:5b:89:9f:20:2f:d7:23:
                    7f:c6:c3:18:b4:fc:b3:95:03:30:3e:f8:77:0d:a3:
                    83:8e:d5:7b:30:bf:49:01:11:a7:a4:54:1f:11:e1:
                    22:82:0a:f1:fb:67:08:23:79:a4:fa:e0:c7:46:4e:
                    40:96:53:d5:1e:67:61:b9:91:c5:18:10:4d:86:ca:
                    bd:bc:2b:7b:18:2f:30:c3:0e:e7:a6:60:f0:2b:f2:
                    8b:ba:fd:3a:8f:cd:30:0a:d9:ea:f5:30:7d:71:68:
                    a7:b3:d8:da:74:3a:4e:f7:b2:5d:82:e9:a2:08:aa:
                    8a:92:9e:4a:f5:59:8a:fc:6a:22:3f:1c:5a:84:a1:
                    18:7d:cc:83:1d:26:31:57:b3:39:89:33:bf:75:6a:
                    5d:b2:e5:a4:b8:65:a5:c1:16:ac:5c:6b:3c:96:c6:
                    35:cf:f6:7f:91:ad:c3:c5:d5:7b:a4:0c:a0:26:be:
                    45:08:83:9f:6e:69:8e:2d:d5:e7:ff:ea:15:73:9c:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E7:E1:A4:77:AB:E3:41:A6:4C:2E:DA:A8:AA:6F:7A:0C:AD:37:F6
            X509v3 Authority Key Identifier:
                keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e2:a2:7f:d5:3a:fa:94:9f:bc:fd:07:9e:1a:bf:a1:74:b8:
         d2:1e:5b:11:81:62:00:9c:84:b7:02:e4:b1:19:a3:4c:0f:fd:
         b0:e0:a5:8a:f8:80:eb:9c:7f:35:99:00:b7:98:a5:a2:37:46:
         0e:25:92:af:08:32:ca:cd:2a:b4:da:ad:36:18:5e:2f:f0:3e:
         40:8f:e3:93:6e:1e:cd:e6:7b:ef:ea:54:1a:b5:11:bb:b3:8d:
         66:96:10:84:71:3a:ef:00:32:b8:91:b3:e1:e8:a9:60:64:e0:
         b5:d9:02:ac:72:33:02:db:86:b7:1e:a7:9d:ca:01:08:a1:2c:
         c4:00:ab:dc:7c:0f:1b:d5:e2:80:23:2e:30:03:27:5c:90:2e:
         5d:ab:45:6a:c0:85:50:45:43:f8:6a:fb:25:da:83:b5:48:8f:
         2b:9d:f7:64:e7:13:27:37:56:cc:e3:b7:ed:48:48:ea:9b:aa:
         8f:a9:b1:5e:7d:48:e7:ec:47:30:c3:09:fd:32:bf:34:62:9d:
         ca:a1:17:1d:71:90:10:32:ca:95:ad:53:dc:33:9b:84:5c:09:
         6a:2e:85:d3:74:c9:8b:f5:6c:62:b2:be:aa:f3:c7:ce:dd:d4:
         38:71:4e:6a:0d:34:cb:7b:d3:17:ec:20:d1:22:af:43:8e:cf:
         b4:04:59:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCV/nVmSpW+yi5RMJoWefBMGF2T0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF
MDZBMjdFMjAeFw0yNTAzMjgyMjQzNDZaFw0yNTAzMzAwMjE4NDZaMDMxMTAvBgNV
BAMTKDhCRTdFMUE0NzdBQkUzNDFBNjRDMkVEQUE4QUE2RjdBMENBRDM3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLHuTQLJ8Cu6np2IPafAPPafr
TxtMT/aWGSvZDq/ZNCWU0YY7ZcaOK9kPUi2p6k9e0/+meJjmZLM1+Klp/3lsG5aI
W4mfIC/XI3/Gwxi0/LOVAzA++HcNo4OO1Xswv0kBEaekVB8R4SKCCvH7ZwgjeaT6
4MdGTkCWU9UeZ2G5kcUYEE2Gyr28K3sYLzDDDuemYPAr8ou6/TqPzTAK2er1MH1x
aKez2Np0Ok73sl2C6aIIqoqSnkr1WYr8aiI/HFqEoRh9zIMdJjFXszmJM791al2y
5aS4ZaXBFqxcazyWxjXP9n+RrcPF1XukDKAmvkUIg59uaY4t1ef/6hVznJs5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUi+fhpHer40GmTC7aqKpvegytN/YwHwYDVR0j
BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl
UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0
NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82
NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc+Kif9U6+pSfvP0Hnhq/oXS40h5bEYFiAJyEtwLksRmjTA/9sOCliviA65x/
NZkAt5ilojdGDiWSrwgyys0qtNqtNhheL/A+QI/jk24ezeZ77+pUGrURu7ONZpYQ
hHE67wAyuJGz4eipYGTgtdkCrHIzAtuGtx6nncoBCKEsxACr3HwPG9XigCMuMAMn
XJAuXatFasCFUEVD+Gr7JdqDtUiPK533ZOcTJzdWzOO37UhI6puqj6mxXn1I5+xH
MMMJ/TK/NGKdyqEXHXGQEDLKla1T3DObhFwJai6F03TJi/VsYrK+qvPHzt3UOHFO
ag00y3vTF+wg0SKvQ47PtARZ5w==
-----END CERTIFICATE-----