Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft
File:                     8013DE498C2B907A3EF2E48332493039E7A2F953.mft (raw, json)
Hash identifier:          HlvyRRw0lUhij7HL57LqDhYGQGh+q0GxTCl0sbMVCGc=
Subject key identifier:   6D:B7:51:1E:70:22:37:8B:04:77:D2:24:2C:41:B4:18:3B:8E:FE:44
Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53
Certificate issuer:       /CN=8013DE498C2B907A3EF2E48332493039E7A2F953
Certificate serial:       04FF781434CF0F064CD10E336CDDCA8AB2AB1029
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft
Manifest number:          DC
Signing time:             Sat 29 Mar 2025 00:40:11 +0000
Manifest this update:     Sat 29 Mar 2025 00:35:11 +0000
Manifest next update:     Sun 30 Mar 2025 02:25:11 +0000
Files and hashes:         1: 34352e3232342e3138372e302f32342d3234203d3e20323637363730.roa (hash: l9yWCd/pjyuJABxFiVXdl4lyno3VoXEL7hL/eJbCOVQ=)
                          2: 323830343a343531303a3a2f33322d3332203d3e20323637363730.roa (hash: h88mpkh7qxBNgN9HD7X4gl7QQ9E2VicVIuavbpmWbrg=)
                          3: 8013DE498C2B907A3EF2E48332493039E7A2F953.crl (hash: xG+MVdJjeQJLvfRfsRK59laD3l3vuNvCOmT/drK1kX8=)
                          4: 34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa (hash: EtPGuSZH3vRBmX/qwPL6+UH0DlEpBn2eWiAs0yBsA2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ff:78:14:34:cf:0f:06:4c:d1:0e:33:6c:dd:ca:8a:b2:ab:10:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953
        Validity
            Not Before: Mar 29 00:35:11 2025 GMT
            Not After : Mar 30 02:25:11 2025 GMT
        Subject: CN=6DB7511E7022378B0477D2242C41B4183B8EFE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:28:c3:01:c3:6d:f8:55:35:66:4b:48:03:
                    7a:56:99:fe:19:d1:23:85:a4:fe:ab:ff:b2:57:cf:
                    b9:fd:ba:36:1d:21:b0:1a:4f:1e:8a:f8:5c:67:be:
                    52:54:f4:98:7f:22:f7:7e:d4:af:27:b7:9c:93:27:
                    62:38:2c:d4:25:9c:56:4c:27:5f:99:30:47:d3:0b:
                    81:c9:1d:ae:39:f5:bc:21:2b:9f:4c:13:97:0f:83:
                    35:97:08:49:0b:53:05:6f:5d:55:9b:92:e7:f1:f2:
                    3f:2a:ec:13:6f:f7:25:60:dc:39:de:99:a6:d5:37:
                    c1:a6:ff:9c:9e:c8:b0:f6:15:3d:07:1e:3e:0a:50:
                    9b:01:19:7b:22:47:03:ed:5c:32:5c:12:4f:84:4f:
                    57:9f:16:12:5d:fb:bf:3c:d0:17:49:c5:a5:6c:17:
                    7a:69:c2:d1:c0:b5:af:d0:1d:85:33:3f:f7:fc:5e:
                    c6:f5:dd:e3:98:f6:21:ec:ed:9a:d5:e4:02:84:ed:
                    f5:f4:de:91:2d:90:50:1f:07:c8:75:dc:e5:22:6e:
                    a4:10:45:7f:16:a2:78:07:06:c6:24:9e:e2:73:79:
                    5e:9e:c3:0c:42:c9:33:e4:34:31:b7:f3:44:4d:82:
                    16:41:63:8d:c7:9f:b6:1a:e7:2c:2e:33:88:a0:5d:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B7:51:1E:70:22:37:8B:04:77:D2:24:2C:41:B4:18:3B:8E:FE:44
            X509v3 Authority Key Identifier:
                keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e1:59:ad:17:3f:31:08:f2:3a:f9:1c:5b:c1:b4:e1:3f:55:
         cc:5b:ed:2d:70:63:62:56:f7:e9:ed:37:cf:f6:e3:d5:58:ea:
         4d:8b:09:05:c6:2d:20:33:03:b6:a6:21:1f:fe:6f:6d:81:9e:
         1c:83:93:2d:5a:bd:0f:91:52:0e:3d:ec:fe:c6:4f:77:ac:6f:
         5c:09:1f:0c:fa:36:fb:42:0a:7d:53:08:d9:f3:4a:13:8d:74:
         48:26:11:56:8e:66:df:d3:75:65:de:12:68:67:67:6e:2c:b4:
         d0:f2:74:17:1e:50:7d:3e:c6:18:22:bb:82:d1:f5:18:7d:5c:
         97:4a:91:85:93:2c:2b:fd:1f:cd:3c:b9:54:d8:9f:b5:d1:01:
         71:58:a2:c3:88:ee:b4:60:09:21:e4:25:b0:df:fc:9e:f9:b7:
         b2:93:15:b5:a3:ff:28:2a:34:7c:b0:3d:46:1a:34:0a:7c:46:
         ad:78:83:ba:6c:c8:45:fc:bd:0e:84:e4:11:bf:45:59:61:3b:
         79:41:7c:29:d6:25:ca:d3:5a:60:28:b0:b8:b3:42:9c:63:3b:
         24:cf:0e:c1:df:b5:5e:26:f9:31:20:e3:9b:75:26:4f:68:c6:
         91:e3:b7:87:f6:b7:f4:6b:6f:c3:49:2e:d7:c4:d2:7d:94:dc:
         a2:8c:49:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBP94FDTPDwZM0Q4zbN3KirKrECkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxM0RFNDk4QzJCOTA3QTNFRjJFNDgzMzI0OTMwMzlF
N0EyRjk1MzAeFw0yNTAzMjkwMDM1MTFaFw0yNTAzMzAwMjI1MTFaMDMxMTAvBgNV
BAMTKDZEQjc1MTFFNzAyMjM3OEIwNDc3RDIyNDJDNDFCNDE4M0I4RUZFNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmSjDAcNt+FU1ZktIA3pWmf4Z
0SOFpP6r/7JXz7n9ujYdIbAaTx6K+FxnvlJU9Jh/Ivd+1K8nt5yTJ2I4LNQlnFZM
J1+ZMEfTC4HJHa459bwhK59ME5cPgzWXCEkLUwVvXVWbkufx8j8q7BNv9yVg3Dne
mabVN8Gm/5yeyLD2FT0HHj4KUJsBGXsiRwPtXDJcEk+ET1efFhJd+7880BdJxaVs
F3ppwtHAta/QHYUzP/f8Xsb13eOY9iHs7ZrV5AKE7fX03pEtkFAfB8h13OUibqQQ
RX8WongHBsYknuJzeV6ewwxCyTPkNDG380RNghZBY43Hn7Ya5ywuM4igXayRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbbdRHnAiN4sEd9IkLEG0GDuO/kQwHwYDVR0j
BBgwFoAUgBPeSYwrkHo+8uSDMkkwOeei+VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNu
Z2ovMS84MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMTNERTQ5OEMyQjkwN0Ez
RUYyRTQ4MzMyNDkzMDM5RTdBMkY5NTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNuZ2ovMS84
MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiuFZrRc/MQjyOvkcW8G04T9VzFvtLXBjYlb36e03z/bj1VjqTYsJBcYtIDMD
tqYhH/5vbYGeHIOTLVq9D5FSDj3s/sZPd6xvXAkfDPo2+0IKfVMI2fNKE410SCYR
Vo5m39N1Zd4SaGdnbiy00PJ0Fx5QfT7GGCK7gtH1GH1cl0qRhZMsK/0fzTy5VNif
tdEBcViiw4jutGAJIeQlsN/8nvm3spMVtaP/KCo0fLA9Rho0CnxGrXiDumzIRfy9
DoTkEb9FWWE7eUF8KdYlytNaYCiwuLNCnGM7JM8Owd+1Xib5MSDjm3UmT2jGkeO3
h/a39Gtvw0ku18TSfZTcooxJfg==
-----END CERTIFICATE-----