Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft
File:                     00398394BC116D8D01BE15C08D06060EF5755D29.mft (raw, json)
Hash identifier:          Yq2kfkOyUfoFOA3Uk6SKTZgTCz84F6ZYDtDrOKETUFE=
Subject key identifier:   AD:59:5C:B7:2B:EB:0F:67:87:3B:00:70:88:8A:DE:16:FA:5D:D5:93
Authority key identifier: 00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29
Certificate issuer:       /CN=00398394BC116D8D01BE15C08D06060EF5755D29
Certificate serial:       3DE540C58A9A52E99B372EA39B5E6018DEFEAC07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft
Manifest number:          41
Signing time:             Sat 29 Mar 2025 06:17:44 +0000
Manifest this update:     Sat 29 Mar 2025 06:12:44 +0000
Manifest next update:     Sun 30 Mar 2025 09:48:44 +0000
Files and hashes:         1: 3138392e33382e302e302f32302d3234203d3e203238333036.roa (hash: IVpomPYsstVgUrNlGGRSnV7BAHeBMDlsHxZbd71KgSo=)
                          2: 3138372e39342e38302e302f32302d3234203d3e203238333036.roa (hash: MaY/QGq1nFC3eJ4HpJqvVDH+fxkumlWAWv60xlPNEX0=)
                          3: 323830343a33343a3a2f33322d3438203d3e203238333036.roa (hash: 2bZm4vj15VHvPexCZ7bOxBFmJe9FFJyBZCYgQB+zAH0=)
                          4: 00398394BC116D8D01BE15C08D06060EF5755D29.crl (hash: lHgVYOr2Hh932hv3bF9i26mrfVQDNjQJQLSOJnA9p4c=)
                          5: 3137372e3230302e39362e302f32302d3234203d3e203238333036.roa (hash: I5QHxn84/SYLgq1w9iUv8TGCgXnHKh0qrKn3T6Mis3Q=)
                          6: 3137372e39312e3137362e302f32302d3234203d3e203238333036.roa (hash: k0Qp9OBBCyIDuweYwGmVIOMPBaMos5/4z4jDIiRZNq4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e5:40:c5:8a:9a:52:e9:9b:37:2e:a3:9b:5e:60:18:de:fe:ac:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00398394BC116D8D01BE15C08D06060EF5755D29
        Validity
            Not Before: Mar 29 06:12:44 2025 GMT
            Not After : Mar 30 09:48:44 2025 GMT
        Subject: CN=AD595CB72BEB0F67873B0070888ADE16FA5DD593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:31:a2:aa:46:d5:cc:d1:0c:c8:55:8b:ad:3f:
                    35:a1:46:e7:bb:12:1b:4f:01:c7:cb:48:46:bd:1e:
                    4f:92:c3:24:94:7a:ec:88:2a:55:6a:f6:e1:40:b0:
                    07:a5:08:da:83:0b:d8:b2:d5:8c:f6:ac:4c:5e:e6:
                    e8:22:e1:04:58:86:9c:17:04:f3:0e:bf:a7:e3:bc:
                    b8:4e:57:24:84:dd:a9:b4:2c:21:92:e1:1a:94:7d:
                    90:45:b6:97:7d:d8:35:64:e8:10:48:ba:96:2f:e9:
                    00:df:88:e5:61:34:b8:c5:ce:09:e0:c2:7d:3c:ac:
                    af:11:6b:5d:cc:51:8f:b0:58:55:59:63:cc:3b:6e:
                    81:c3:07:3a:5e:b7:22:56:61:a2:6d:d7:54:3b:63:
                    af:a9:8b:68:be:73:ec:9b:71:88:f5:cb:37:ed:ee:
                    d8:ce:e3:97:cc:f5:8d:a9:5f:0f:25:0a:07:90:c3:
                    0a:c5:3a:ed:22:70:e9:88:c2:bb:1f:86:00:1d:d1:
                    73:02:3f:f0:53:04:bf:7b:e6:c4:ae:d6:d4:21:62:
                    2a:b7:b9:6f:41:b7:cc:e1:8b:bc:2e:52:ef:cf:a6:
                    21:a5:1e:99:ed:ff:b6:5e:20:54:5c:db:4c:85:a4:
                    f5:af:2f:b9:4a:12:91:0c:90:60:0c:a1:02:ab:5f:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:59:5C:B7:2B:EB:0F:67:87:3B:00:70:88:8A:DE:16:FA:5D:D5:93
            X509v3 Authority Key Identifier:
                keyid:00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:a1:4a:4b:c9:d6:9f:cc:24:16:79:04:a7:f7:04:33:ff:
         1a:c0:bd:0d:f6:c4:5b:56:7e:99:76:76:8b:46:d1:5e:52:e3:
         96:25:f4:cf:56:3c:65:dc:8e:64:0e:17:47:d4:b8:24:23:52:
         91:88:f3:d2:dd:85:bc:04:0f:d1:78:5f:bf:c1:6b:e7:fa:18:
         3b:c4:4d:98:2b:49:46:7e:9d:cb:35:11:70:49:3a:e0:9a:bf:
         57:74:75:86:b8:94:1f:93:6c:3b:93:c0:47:ec:76:ea:98:6c:
         98:3a:7f:64:5a:5a:1e:6b:16:7f:f0:75:18:f0:9d:49:99:24:
         fb:1a:65:72:08:8f:4a:b8:50:78:bd:a1:cc:2b:39:03:0b:ee:
         1a:4b:4c:b4:3c:59:6b:33:1a:24:9d:63:6f:91:7f:a2:87:ba:
         9e:41:26:cd:29:5d:82:5b:6f:9b:61:ef:4c:a0:e7:95:8e:7b:
         f1:54:55:1f:17:c8:bd:7e:84:8a:70:0b:ea:13:8c:e5:f3:2c:
         46:57:9f:48:4e:67:04:23:d6:9e:5b:3d:58:d6:dc:61:b0:ea:
         9c:ad:19:a9:50:dc:0b:44:d4:65:00:d1:eb:29:57:bd:84:f5:
         cc:66:bf:34:d8:1e:81:5b:cc:c7:c0:8f:cf:36:15:34:a6:06:
         9a:35:0c:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPeVAxYqaUumbNy6jm15gGN7+rAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAzOTgzOTRCQzExNkQ4RDAxQkUxNUMwOEQwNjA2MEVG
NTc1NUQyOTAeFw0yNTAzMjkwNjEyNDRaFw0yNTAzMzAwOTQ4NDRaMDMxMTAvBgNV
BAMTKEFENTk1Q0I3MkJFQjBGNjc4NzNCMDA3MDg4OEFERTE2RkE1REQ1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwMaKqRtXM0QzIVYutPzWhRue7
EhtPAcfLSEa9Hk+SwySUeuyIKlVq9uFAsAelCNqDC9iy1Yz2rExe5ugi4QRYhpwX
BPMOv6fjvLhOVySE3am0LCGS4RqUfZBFtpd92DVk6BBIupYv6QDfiOVhNLjFzgng
wn08rK8Ra13MUY+wWFVZY8w7boHDBzpetyJWYaJt11Q7Y6+pi2i+c+ybcYj1yzft
7tjO45fM9Y2pXw8lCgeQwwrFOu0icOmIwrsfhgAd0XMCP/BTBL975sSu1tQhYiq3
uW9Bt8zhi7wuUu/PpiGlHpnt/7ZeIFRc20yFpPWvL7lKEpEMkGAMoQKrX0DfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrVlctyvrD2eHOwBwiIreFvpd1ZMwHwYDVR0j
BBgwFoAUADmDlLwRbY0BvhXAjQYGDvV1XSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC8wMDM5ODM5NEJDMTE2RDhEMDFCRTE1QzA4RDA2MDYwRUY1NzU1RDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMzk4Mzk0QkMxMTZEOEQw
MUJFMTVDMDhEMDYwNjBFRjU3NTVEMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5OdWcvMC8w
MDM5ODM5NEJDMTE2RDhEMDFCRTE1QzA4RDA2MDYwRUY1NzU1RDI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYI+hSkvJ1p/MJBZ5BKf3BDP/GsC9DfbEW1Z+mXZ2i0bRXlLjliX0z1Y8ZdyO
ZA4XR9S4JCNSkYjz0t2FvAQP0Xhfv8Fr5/oYO8RNmCtJRn6dyzURcEk64Jq/V3R1
hriUH5NsO5PAR+x26phsmDp/ZFpaHmsWf/B1GPCdSZkk+xplcgiPSrhQeL2hzCs5
AwvuGktMtDxZazMaJJ1jb5F/ooe6nkEmzSldgltvm2HvTKDnlY578VRVHxfIvX6E
inAL6hOM5fMsRlefSE5nBCPWnls9WNbcYbDqnK0ZqVDcC0TUZQDR6ylXvYT1zGa/
NNgegVvMx8CPzzYVNKYGmjUM1Q==
-----END CERTIFICATE-----