Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
File:                     FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft (raw, json)
Hash identifier:          XI5hvuUtSLWuC6zvV0nKwilrRuTQP/YJg6oPE36YTDI=
Subject key identifier:   5D:D8:F7:96:45:7F:4A:5F:BC:AE:40:92:73:EF:B4:DC:75:B5:1C:63
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       02A215C1EB9CA9B4F1707DD5DA7138F6DC781B08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
Manifest number:          01DF
Signing time:             Sat 29 Mar 2025 04:20:00 +0000
Manifest this update:     Sat 29 Mar 2025 04:15:00 +0000
Manifest next update:     Sun 30 Mar 2025 06:41:00 +0000
Files and hashes:         1: 3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (hash: ssF7lgdVeYo4WoEu0Et1cOFiGEBQ1Y4fCwwN0djQC5c=)
                          2: 3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa (hash: MuxS4BnEz3OAvZyyhAb2CZ4pf0m9nzjE5a7zG2BLklI=)
                          3: FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl (hash: dWocCJPVZcj57sVeQv6b1/xpQk35q+KRAajgay/XTUo=)
                          4: 3137372e38372e38382e302f32322d3234203d3e203238333334.roa (hash: e64n4sLZBtLeJPeUzLEY+EYUZXoppfs/ossgmDdTEPQ=)
                          5: 323830343a316235633a3a2f33322d3438203d3e203238333334.roa (hash: OjmYpyPCNRdUo3HTUoQwsotpmoD6ojtzqY9oBeEsPlE=)
                          6: 3138392e35302e3232342e302f31392d3234203d3e203238333334.roa (hash: 0oCO5z3FprGuhSLc5dn263bOouL+eHY+61Llwm2MUbY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a2:15:c1:eb:9c:a9:b4:f1:70:7d:d5:da:71:38:f6:dc:78:1b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Mar 29 04:15:00 2025 GMT
            Not After : Mar 30 06:41:00 2025 GMT
        Subject: CN=5DD8F796457F4A5FBCAE409273EFB4DC75B51C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:03:32:2a:53:ce:08:4d:52:5e:ef:40:62:
                    29:35:06:ac:b9:e8:b6:ad:90:50:55:6e:5b:83:f6:
                    29:9a:53:ba:87:73:0f:87:02:4f:f8:21:80:a3:39:
                    55:75:c1:c0:6a:b9:f0:1e:44:a6:2e:dd:49:ef:5c:
                    99:85:f9:81:4b:b1:7d:63:5a:44:df:b3:bc:4d:a9:
                    99:16:8b:c6:73:6c:1b:c3:4a:9d:d0:c0:e3:eb:17:
                    82:c3:3f:0c:f1:f9:40:d2:2b:e1:98:e3:92:07:98:
                    52:a3:d6:e1:ce:39:92:ee:24:08:25:15:36:7f:78:
                    f3:a5:67:d6:be:81:c2:1f:ce:2c:52:86:a6:a4:be:
                    ed:e9:d1:9f:7c:6b:bb:0e:fe:24:54:bb:09:bc:82:
                    8e:46:94:e7:07:c7:0c:6b:c8:8a:70:a8:02:06:5f:
                    ec:2c:94:3d:a6:58:57:9f:d4:c6:c4:1a:45:ae:13:
                    52:02:df:e2:4a:13:e6:03:84:e4:07:65:3a:ea:f2:
                    f4:78:2e:63:94:6a:29:35:ff:27:b5:00:7c:a1:d2:
                    9b:17:95:df:5e:04:81:ad:43:d4:c5:0f:ad:40:c0:
                    53:c1:76:b9:56:e8:e6:a5:24:f7:44:ee:5a:89:9c:
                    9d:a2:00:9e:eb:9b:15:55:6c:43:7c:7c:8d:37:44:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D8:F7:96:45:7F:4A:5F:BC:AE:40:92:73:EF:B4:DC:75:B5:1C:63
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:26:4c:41:8a:dd:62:92:d4:9f:b4:63:c3:e2:de:a7:64:
         47:a2:c5:29:fe:8f:52:25:c6:11:9b:99:e1:2c:c1:a6:e8:4c:
         ea:07:dd:4b:1f:2b:5f:60:5c:b1:49:2a:86:ae:93:ea:a6:5d:
         db:ad:24:d1:79:1c:86:49:bf:79:b5:ec:f4:c2:22:f3:1c:34:
         ce:c7:05:3a:a2:0e:d5:dc:19:87:0b:07:33:16:29:0d:a4:84:
         f7:99:89:da:73:37:7a:25:d6:70:6b:a0:af:3d:9d:ba:d8:98:
         75:68:df:52:b3:23:2b:6b:fa:ef:ec:44:e0:62:68:b0:73:c6:
         9e:ed:94:16:15:5f:70:66:4f:ae:71:99:a5:43:23:f1:e7:19:
         3d:69:a9:41:0f:b3:c1:be:bf:53:7b:4d:fb:05:52:b7:bc:5d:
         58:2b:42:6a:18:35:96:8f:74:3d:bd:d8:57:37:8c:09:e6:6e:
         bf:58:14:3b:b1:3b:9c:30:2c:bc:e4:ae:19:b7:39:bd:ec:a7:
         7a:7b:8e:3a:1b:67:83:82:3b:87:b0:b5:eb:a9:13:97:0b:62:
         ba:35:14:32:fc:23:61:80:bc:cf:92:77:38:38:1a:34:c7:e2:
         25:d9:62:a9:b8:ec:b3:d2:59:15:f6:5a:d7:95:09:f8:9a:8f:
         cb:7e:dc:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAqIVweucqbTxcH3V2nE49tx4GwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0NDUxRUZGOUQxQTc0RjJCQTZDMzdDRTYwOUU3MTYy
Q0M0NzZFMTAeFw0yNTAzMjkwNDE1MDBaFw0yNTAzMzAwNjQxMDBaMDMxMTAvBgNV
BAMTKDVERDhGNzk2NDU3RjRBNUZCQ0FFNDA5MjczRUZCNERDNzVCNTFDNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqGAMyKlPOCE1SXu9AYik1Bqy5
6LatkFBVbluD9imaU7qHcw+HAk/4IYCjOVV1wcBqufAeRKYu3UnvXJmF+YFLsX1j
WkTfs7xNqZkWi8ZzbBvDSp3QwOPrF4LDPwzx+UDSK+GY45IHmFKj1uHOOZLuJAgl
FTZ/ePOlZ9a+gcIfzixShqakvu3p0Z98a7sO/iRUuwm8go5GlOcHxwxryIpwqAIG
X+wslD2mWFef1MbEGkWuE1IC3+JKE+YDhOQHZTrq8vR4LmOUaik1/ye1AHyh0psX
ld9eBIGtQ9TFD61AwFPBdrlW6OalJPdE7lqJnJ2iAJ7rmxVVbEN8fI03RKnbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXdj3lkV/Sl+8rkCSc++03HW1HGMwHwYDVR0j
BBgwFoAU+0RR7/nRp08rpsN85gnnFizEduEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo
UjUvMS9GQjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDQ1MUVGRjlEMUE3NEYy
QkE2QzM3Q0U2MDlFNzE2MkNDNDc2RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVoUjUvMS9G
QjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX2gmTEGK3WKS1J+0Y8Pi3qdkR6LFKf6PUiXGEZuZ4SzBpuhM6gfdSx8rX2Bc
sUkqhq6T6qZd260k0Xkchkm/ebXs9MIi8xw0zscFOqIO1dwZhwsHMxYpDaSE95mJ
2nM3eiXWcGugrz2dutiYdWjfUrMjK2v67+xE4GJosHPGnu2UFhVfcGZPrnGZpUMj
8ecZPWmpQQ+zwb6/U3tN+wVSt7xdWCtCahg1lo90Pb3YVzeMCeZuv1gUO7E7nDAs
vOSuGbc5veynenuOOhtng4I7h7C166kTlwtiujUUMvwjYYC8z5J3ODgaNMfiJdli
qbjss9JZFfZa15UJ+JqPy37c4w==
-----END CERTIFICATE-----