Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.mft
File:                     5DE550D452A79633C6AEF9931F09B9424440FD65.mft (raw, json)
Hash identifier:          xyFH0vkEV2Jf8ep67X69r6xzlDMkW+MGY6Bs6icyffg=
Subject key identifier:   6D:74:E1:04:BA:A5:58:31:4D:D2:82:54:A7:77:1E:C5:21:D8:CE:DE
Authority key identifier: 5D:E5:50:D4:52:A7:96:33:C6:AE:F9:93:1F:09:B9:42:44:40:FD:65
Certificate issuer:       /CN=5DE550D452A79633C6AEF9931F09B9424440FD65
Certificate serial:       2A5AF36D1BC2F6968F359EDAEFDC341FF5438E5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DE550D452A79633C6AEF9931F09B9424440FD65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.mft
Manifest number:          01C3
Signing time:             Sat 29 Mar 2025 09:37:55 +0000
Manifest this update:     Sat 29 Mar 2025 09:32:55 +0000
Manifest next update:     Sun 30 Mar 2025 10:04:55 +0000
Files and hashes:         1: 3139302e38392e31382e302f32332d3234203d3e20323730343335.roa (hash: RE9sZ52tHfir5W76KgcBGYbka2+YAZuLGHSlKLj73GY=)
                          2: 5DE550D452A79633C6AEF9931F09B9424440FD65.crl (hash: ELsO6uJ2zyHS77dXuNznuZ82j2KC3O8vatsq1n93fHQ=)
                          3: 323830343a366266303a3a2f33322d3438203d3e20323730343335.roa (hash: wLUYKS8UL9XCU9ThmyIn6aGc3wP5TDcxuz784Qrdavc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5a:f3:6d:1b:c2:f6:96:8f:35:9e:da:ef:dc:34:1f:f5:43:8e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DE550D452A79633C6AEF9931F09B9424440FD65
        Validity
            Not Before: Mar 29 09:32:55 2025 GMT
            Not After : Mar 30 10:04:55 2025 GMT
        Subject: CN=6D74E104BAA558314DD28254A7771EC521D8CEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:ad:5e:7a:01:f6:6e:1c:c4:63:56:d0:b9:
                    73:ba:9b:e3:f1:c7:28:94:09:f1:58:ca:39:e4:b5:
                    4d:7c:ad:da:06:3a:70:21:4b:d4:dc:21:c2:a2:56:
                    8e:95:f9:62:25:44:cf:4b:c0:6b:3f:44:eb:3e:a8:
                    7e:10:78:17:4e:f5:a7:15:92:1c:55:7f:0a:f0:58:
                    7e:cc:e0:b5:bd:c4:f7:15:a4:c0:e2:82:fd:b6:1a:
                    ec:8b:3d:d9:27:e5:d1:d0:6e:5a:7e:c3:75:34:16:
                    86:41:1d:39:0b:52:23:e2:78:4c:23:38:87:9e:75:
                    f5:68:34:f6:c9:3c:b6:04:78:63:67:de:22:a3:af:
                    e4:55:f1:0e:de:99:c7:3e:72:a6:11:2d:c9:e9:be:
                    8c:a1:37:e7:af:de:35:03:fb:86:55:a1:88:34:69:
                    58:84:da:86:d0:9a:60:c7:98:18:78:b3:b7:7d:46:
                    72:10:3d:d5:88:c5:4f:a6:cf:58:68:82:fb:58:43:
                    7c:33:1f:29:ca:92:10:be:ea:f2:12:f7:18:f1:21:
                    9e:7a:41:2b:ef:2c:75:99:2d:0d:9d:ac:ea:01:2d:
                    36:25:e0:f4:09:e3:a6:79:6e:fd:b2:33:78:b7:29:
                    aa:8e:60:29:cc:4f:7d:6f:4b:7f:47:1a:ac:c8:e2:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:74:E1:04:BA:A5:58:31:4D:D2:82:54:A7:77:1E:C5:21:D8:CE:DE
            X509v3 Authority Key Identifier:
                keyid:5D:E5:50:D4:52:A7:96:33:C6:AE:F9:93:1F:09:B9:42:44:40:FD:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DE550D452A79633C6AEF9931F09B9424440FD65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:13:73:a8:54:fc:68:04:02:ed:ff:b1:98:8f:8c:02:52:b3:
         95:cb:60:7b:5f:c1:17:1e:71:f3:31:57:07:e7:df:84:ab:37:
         ed:ca:e0:12:aa:b8:cb:6a:5e:d6:63:bd:ca:4f:03:e3:f6:22:
         12:70:bd:fb:11:00:2f:5f:9c:ee:9e:83:9f:8f:c5:a9:1c:69:
         be:72:62:88:1c:ba:e7:5f:bc:47:59:cf:29:67:34:19:55:34:
         50:3d:73:4f:29:2b:21:e1:6a:4a:d4:8c:36:16:6d:28:b4:cf:
         d6:c0:aa:dd:f4:d7:6b:01:3a:34:dd:b4:ad:7e:08:36:5a:5b:
         9a:05:a7:01:c1:c0:43:a3:2a:48:e9:a8:5f:f0:ba:a4:d3:a6:
         23:d4:fb:94:7a:d3:24:ab:c4:05:20:1b:d6:b1:84:1b:4a:62:
         36:9c:04:d4:d5:16:0b:b8:43:2f:3c:a5:01:b1:ea:db:f3:0f:
         c0:c5:9a:09:6e:c7:ea:27:0c:09:1a:0c:c1:5f:f2:a2:ba:f6:
         0d:38:ec:0b:c4:79:2b:df:f7:4d:6d:cd:d5:cf:95:20:68:1c:
         60:2e:72:a3:ee:d5:e4:be:48:58:c5:c8:7d:34:7b:33:13:33:
         7c:41:99:30:a1:c9:ad:23:41:a3:69:eb:5c:45:a8:74:55:f2:
         b1:1a:a1:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKlrzbRvC9paPNZ7a79w0H/VDjlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURFNTUwRDQ1MkE3OTYzM0M2QUVGOTkzMUYwOUI5NDI0
NDQwRkQ2NTAeFw0yNTAzMjkwOTMyNTVaFw0yNTAzMzAxMDA0NTVaMDMxMTAvBgNV
BAMTKDZENzRFMTA0QkFBNTU4MzE0REQyODI1NEE3NzcxRUM1MjFEOENFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfa1eegH2bhzEY1bQuXO6m+Px
xyiUCfFYyjnktU18rdoGOnAhS9TcIcKiVo6V+WIlRM9LwGs/ROs+qH4QeBdO9acV
khxVfwrwWH7M4LW9xPcVpMDigv22GuyLPdkn5dHQblp+w3U0FoZBHTkLUiPieEwj
OIeedfVoNPbJPLYEeGNn3iKjr+RV8Q7emcc+cqYRLcnpvoyhN+ev3jUD+4ZVoYg0
aViE2obQmmDHmBh4s7d9RnIQPdWIxU+mz1hogvtYQ3wzHynKkhC+6vIS9xjxIZ56
QSvvLHWZLQ2drOoBLTYl4PQJ46Z5bv2yM3i3KaqOYCnMT31vS39HGqzI4qsZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbXThBLqlWDFN0oJUp3cexSHYzt4wHwYDVR0j
BBgwFoAUXeVQ1FKnljPGrvmTHwm5QkRA/WUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hpVTZqdFdYYzI3NDRVVVNnZVlROVdpdUtaNHR5bjNhZEQxc0pvRlNn
VnEvMC81REU1NTBENDUyQTc5NjMzQzZBRUY5OTMxRjA5Qjk0MjQ0NDBGRDY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVERTU1MEQ0NTJBNzk2MzND
NkFFRjk5MzFGMDlCOTQyNDQ0MEZENjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3hpVTZqdFdYYzI3NDRVVVNnZVlROVdpdUtaNHR5bjNhZEQxc0pvRlNnVnEvMC81
REU1NTBENDUyQTc5NjMzQzZBRUY5OTMxRjA5Qjk0MjQ0NDBGRDY1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmhNzqFT8aAQC7f+xmI+MAlKzlctge1/BFx5x8zFXB+ffhKs37crgEqq4y2pe
1mO9yk8D4/YiEnC9+xEAL1+c7p6Dn4/FqRxpvnJiiBy651+8R1nPKWc0GVU0UD1z
TykrIeFqStSMNhZtKLTP1sCq3fTXawE6NN20rX4INlpbmgWnAcHAQ6MqSOmoX/C6
pNOmI9T7lHrTJKvEBSAb1rGEG0piNpwE1NUWC7hDLzylAbHq2/MPwMWaCW7H6icM
CRoMwV/yorr2DTjsC8R5K9/3TW3N1c+VIGgcYC5yo+7V5L5IWMXIfTR7MxMzfEGZ
MKHJrSNBo2nrXEWodFXysRqhZA==
-----END CERTIFICATE-----