Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.mft
File:                     502D57718548660D155175A249B0597C56E1D390.mft (raw, json)
Hash identifier:          Z8V9oOGpZlC8+t3WeBeUVyodsYmwP7L4zIMLpLHomII=
Subject key identifier:   B5:5B:1E:4E:E1:B1:92:E7:15:B9:97:F4:49:FF:40:82:FD:86:DC:22
Authority key identifier: 50:2D:57:71:85:48:66:0D:15:51:75:A2:49:B0:59:7C:56:E1:D3:90
Certificate issuer:       /CN=502D57718548660D155175A249B0597C56E1D390
Certificate serial:       5A6F81E5F0FD8E86485ADB2B00F9A4F49891D02C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502D57718548660D155175A249B0597C56E1D390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.mft
Manifest number:          70
Signing time:             Sat 29 Mar 2025 04:53:07 +0000
Manifest this update:     Sat 29 Mar 2025 04:48:07 +0000
Manifest next update:     Sun 30 Mar 2025 06:39:07 +0000
Files and hashes:         1: 3136382e3139342e3132382e302f32322d3234203d3e20323635343034.roa (hash: MpSUAEuosZsDHKLJxaP8SCr4OX2wtQSTZZ6zatS0ZNA=)
                          2: 502D57718548660D155175A249B0597C56E1D390.crl (hash: V2p+evej5cDaNaWbDWblqGeKpJsBCxBuHzth21cvbmo=)
                          3: 323830343a333339303a3a2f33322d313238203d3e20323635343034.roa (hash: 2uQ5+LaOkoRWYWsJbv8N+61d31ijLIMWqkPF1el7zRo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6f:81:e5:f0:fd:8e:86:48:5a:db:2b:00:f9:a4:f4:98:91:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502D57718548660D155175A249B0597C56E1D390
        Validity
            Not Before: Mar 29 04:48:07 2025 GMT
            Not After : Mar 30 06:39:07 2025 GMT
        Subject: CN=B55B1E4EE1B192E715B997F449FF4082FD86DC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a5:13:bf:9c:95:95:d8:fb:32:41:43:b3:1f:
                    5f:1a:05:a1:96:27:e3:21:3d:46:e2:b9:04:87:71:
                    b9:d9:e7:fb:1f:b0:e9:37:41:0b:e2:67:74:54:c9:
                    8d:93:ab:0b:69:26:42:b7:c9:85:8c:39:d8:d0:ac:
                    8a:2f:95:f5:ef:9c:de:f7:86:06:a0:a4:06:6f:e6:
                    47:e6:27:72:2e:c2:b3:bb:73:82:5d:59:e0:b8:9e:
                    ef:55:89:c1:1a:c7:f2:5c:f3:c9:3f:0a:fa:0a:e5:
                    30:d2:96:79:0b:5e:ba:84:f4:45:1a:1c:95:51:c8:
                    b4:d8:fa:61:4a:e6:b9:87:a3:72:48:c5:6d:21:91:
                    6d:2d:ac:a4:88:63:75:7e:57:6e:c5:a1:90:79:a4:
                    45:c3:a1:4c:b9:41:01:fc:1b:a9:3f:c8:5c:c7:4d:
                    b7:47:01:fc:30:f1:89:06:07:d8:9c:84:95:ba:63:
                    3f:c2:55:9e:27:b3:04:cd:66:7f:99:a4:64:91:06:
                    22:bc:99:c2:00:48:cb:0f:2d:03:9f:8b:cd:37:a0:
                    cf:d5:34:83:0f:a8:6a:61:e1:3e:f4:f2:ff:20:35:
                    69:12:97:cc:2e:17:bb:00:c4:88:58:fc:7d:c3:90:
                    bf:d8:99:12:a7:ae:ea:b2:9a:0e:dc:3b:4e:43:59:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5B:1E:4E:E1:B1:92:E7:15:B9:97:F4:49:FF:40:82:FD:86:DC:22
            X509v3 Authority Key Identifier:
                keyid:50:2D:57:71:85:48:66:0D:15:51:75:A2:49:B0:59:7C:56:E1:D3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502D57718548660D155175A249B0597C56E1D390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:53:64:62:43:54:4a:f0:e6:44:7d:86:93:1e:eb:04:dc:23:
         65:1f:cd:18:fa:d1:78:ce:11:4e:0b:5c:f8:82:0d:31:a3:da:
         dd:71:86:b2:37:a6:03:3e:9c:28:ae:39:b4:33:ef:24:ee:5f:
         41:4c:b0:69:6a:f6:10:12:48:7c:42:8f:3e:3d:09:19:66:b4:
         a9:02:08:5b:8a:93:3f:d5:f6:a8:24:fc:46:fd:3c:ab:69:44:
         c7:cf:5e:0d:71:9b:4a:19:fb:2a:44:e0:de:7a:2b:ab:76:a1:
         f3:58:c3:5b:bd:be:77:f1:00:31:7b:50:ac:ff:43:b5:be:2a:
         ad:e8:84:59:1d:a4:b8:e4:6a:0d:70:ab:2d:82:9d:9b:c4:62:
         93:93:a2:d6:fb:01:12:79:e8:7e:47:9a:82:83:13:7d:d7:46:
         75:c5:3f:66:e9:2e:9f:a9:1f:34:06:2a:66:69:27:48:59:10:
         e7:fa:1a:09:1e:97:8b:98:a5:c3:97:d4:10:54:f4:55:cd:ab:
         c4:92:a8:a7:dc:6a:7a:7c:8b:a1:b9:57:4d:e4:3a:16:86:11:
         89:9e:f8:54:55:da:3e:74:23:96:80:0a:85:e6:e0:7b:1f:54:
         2e:4e:37:12:a0:a3:38:d2:22:60:fd:0c:bc:a3:28:ca:26:cd:
         7c:2d:73:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWm+B5fD9joZIWtsrAPmk9JiR0CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAyRDU3NzE4NTQ4NjYwRDE1NTE3NUEyNDlCMDU5N0M1
NkUxRDM5MDAeFw0yNTAzMjkwNDQ4MDdaFw0yNTAzMzAwNjM5MDdaMDMxMTAvBgNV
BAMTKEI1NUIxRTRFRTFCMTkyRTcxNUI5OTdGNDQ5RkY0MDgyRkQ4NkRDMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnpRO/nJWV2PsyQUOzH18aBaGW
J+MhPUbiuQSHcbnZ5/sfsOk3QQviZ3RUyY2TqwtpJkK3yYWMOdjQrIovlfXvnN73
hgagpAZv5kfmJ3IuwrO7c4JdWeC4nu9VicEax/Jc88k/CvoK5TDSlnkLXrqE9EUa
HJVRyLTY+mFK5rmHo3JIxW0hkW0trKSIY3V+V27FoZB5pEXDoUy5QQH8G6k/yFzH
TbdHAfww8YkGB9ichJW6Yz/CVZ4nswTNZn+ZpGSRBiK8mcIASMsPLQOfi803oM/V
NIMPqGph4T708v8gNWkSl8wuF7sAxIhY/H3DkL/YmRKnruqymg7cO05DWSs9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtVseTuGxkucVuZf0Sf9Agv2G3CIwHwYDVR0j
BBgwFoAUUC1XcYVIZg0VUXWiSbBZfFbh05AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFRYUw2cU1zdXNqaHEyZnZmS2p0VnFaMnd5c3NDUktXZWlGU214bWVj
NWMvMC81MDJENTc3MTg1NDg2NjBEMTU1MTc1QTI0OUIwNTk3QzU2RTFEMzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMkQ1NzcxODU0ODY2MEQx
NTUxNzVBMjQ5QjA1OTdDNTZFMUQzOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnFRYUw2cU1zdXNqaHEyZnZmS2p0VnFaMnd5c3NDUktXZWlGU214bWVjNWMvMC81
MDJENTc3MTg1NDg2NjBEMTU1MTc1QTI0OUIwNTk3QzU2RTFEMzkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANlNkYkNUSvDmRH2Gkx7rBNwjZR/NGPrReM4RTgtc+IINMaPa3XGGsjemAz6c
KK45tDPvJO5fQUywaWr2EBJIfEKPPj0JGWa0qQIIW4qTP9X2qCT8Rv08q2lEx89e
DXGbShn7KkTg3norq3ah81jDW72+d/EAMXtQrP9Dtb4qreiEWR2kuORqDXCrLYKd
m8Rik5Oi1vsBEnnofkeagoMTfddGdcU/Zukun6kfNAYqZmknSFkQ5/oaCR6Xi5il
w5fUEFT0Vc2rxJKop9xqenyLoblXTeQ6FoYRiZ74VFXaPnQjloAKhebgex9ULk43
EqCjONIiYP0MvKMoyibNfC1z5A==
-----END CERTIFICATE-----