Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft
File:                     57DB3581E707C22BBA17B8AD12B81942965761D7.mft (raw, json)
Hash identifier:          CRS1gsB+in1zBUvoqdA0yibLvWUn4LwE906UqXYPX4I=
Subject key identifier:   6D:7E:A7:8B:A5:3E:E8:DC:A8:8E:32:DA:5A:25:F0:D0:98:03:99:19
Authority key identifier: 57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7
Certificate issuer:       /CN=57DB3581E707C22BBA17B8AD12B81942965761D7
Certificate serial:       62E9FAF06274C685F436110864585A0D07E5C516
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft
Manifest number:          0121
Signing time:             Sat 29 Mar 2025 09:03:48 +0000
Manifest this update:     Sat 29 Mar 2025 08:58:48 +0000
Manifest next update:     Sun 30 Mar 2025 12:43:48 +0000
Files and hashes:         1: 3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa (hash: +IHHFyZ4zEKtkT7FWPG7jzjG+2UrhR7Tp0NCvXX6+rc=)
                          2: 3138362e3233332e3132382e302f32312d3234203d3e20323635393733.roa (hash: daCZVYdQlVzFzisTkWPp9UI9qDeq4t4ouQfwqecELvU=)
                          3: 57DB3581E707C22BBA17B8AD12B81942965761D7.crl (hash: cGr1VOh+//XIy34/uQPDhaYBJPT9gN6zZC2rD4HrBeY=)
                          4: 323830343a343061383a3a2f33322d3438203d3e20323635393733.roa (hash: EnlWsydM3BoZMPkFufOzNgjBsHv7n2sE9rgeCUC8Jmc=)
                          5: 3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa (hash: ncFtCGjYfJJWh+Z0HuVW0mHfX/zo2zmjLKMww8T7y7c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:fa:f0:62:74:c6:85:f4:36:11:08:64:58:5a:0d:07:e5:c5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57DB3581E707C22BBA17B8AD12B81942965761D7
        Validity
            Not Before: Mar 29 08:58:48 2025 GMT
            Not After : Mar 30 12:43:48 2025 GMT
        Subject: CN=6D7EA78BA53EE8DCA88E32DA5A25F0D098039919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:ee:58:9b:06:23:20:d1:70:b7:db:72:b8:
                    d7:94:84:a8:55:e2:03:75:e4:5f:6c:79:89:79:6e:
                    3c:c4:a7:28:13:89:63:31:8b:37:fc:db:36:27:8e:
                    d5:79:64:05:0a:8f:a4:60:79:ac:08:d1:8b:26:9c:
                    c2:2d:28:b7:12:2a:bc:f8:9c:a2:06:c0:b3:ba:ec:
                    a4:5b:eb:4e:e6:9b:23:9e:be:0e:02:52:b8:81:78:
                    6e:69:39:26:89:0a:36:b2:ea:7e:97:63:84:6a:70:
                    a1:cb:ff:d8:92:2f:7e:b1:0d:90:35:47:63:b6:6f:
                    7d:83:91:7e:17:5c:36:13:ad:ea:6c:ab:bc:76:7f:
                    e0:9b:a5:a9:f9:76:79:9b:6c:d7:49:a6:d5:c6:cd:
                    82:ec:7d:5f:84:a5:6b:53:c5:11:b2:1b:3f:9e:64:
                    d2:80:6b:9d:13:6c:45:58:3e:f3:16:af:c4:15:76:
                    b4:64:75:64:3c:0d:d6:27:21:2f:22:07:62:62:94:
                    9d:da:7c:f6:e1:af:16:01:31:5f:27:8e:0c:7e:be:
                    9d:a3:16:7e:1e:3e:f3:5f:a2:4d:4d:de:81:4c:6d:
                    e2:24:dc:4a:de:7c:3b:af:92:76:53:6f:f8:19:42:
                    1c:02:cd:fc:5b:9a:6a:6d:2d:0b:76:41:2e:f5:42:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7E:A7:8B:A5:3E:E8:DC:A8:8E:32:DA:5A:25:F0:D0:98:03:99:19
            X509v3 Authority Key Identifier:
                keyid:57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f2:48:ee:57:01:c4:7b:41:1f:d4:3c:c1:f2:30:33:8b:a5:
         07:63:d3:0b:b1:5d:a4:d6:7e:e0:98:f4:92:d5:60:4c:e4:7f:
         7b:d1:70:30:34:45:90:da:81:7b:8f:f6:38:e4:82:dd:a9:b2:
         6d:75:d5:89:0f:b4:9e:87:3f:66:4e:d4:8a:4a:be:c3:5d:d3:
         a5:22:9f:1f:8e:6a:99:7c:ab:ee:fd:70:67:85:c8:7e:f5:96:
         c7:b4:67:60:22:c3:35:35:44:f4:b0:a9:76:de:2b:3a:e6:9c:
         2c:a4:89:a2:cb:ba:c1:db:43:21:69:f6:a2:9c:9d:dd:ea:75:
         b7:de:31:e2:5a:b8:26:7d:11:ca:0f:3c:11:49:92:ed:55:51:
         6e:f3:01:99:47:64:47:c1:34:ee:09:00:45:51:73:db:ac:b8:
         c4:4a:ad:c9:2a:39:56:51:14:dd:b1:c9:24:c5:8b:35:0c:48:
         e7:a9:23:a0:e4:8e:fc:2b:92:9f:6a:0f:7c:57:23:bc:24:18:
         84:40:53:8f:b9:69:cd:cd:53:e7:89:70:f3:10:f6:13:2f:4d:
         d4:6e:d2:d0:97:49:99:e3:c9:4a:3d:bc:ae:d5:4f:a5:70:bc:
         09:d6:78:84:af:48:41:cc:22:e1:97:23:64:c4:01:7c:8b:24:
         2a:81:07:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYun68GJ0xoX0NhEIZFhaDQflxRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdEQjM1ODFFNzA3QzIyQkJBMTdCOEFEMTJCODE5NDI5
NjU3NjFENzAeFw0yNTAzMjkwODU4NDhaFw0yNTAzMzAxMjQzNDhaMDMxMTAvBgNV
BAMTKDZEN0VBNzhCQTUzRUU4RENBODhFMzJEQTVBMjVGMEQwOTgwMzk5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSu5YmwYjINFwt9tyuNeUhKhV
4gN15F9seYl5bjzEpygTiWMxizf82zYnjtV5ZAUKj6RgeawI0YsmnMItKLcSKrz4
nKIGwLO67KRb607mmyOevg4CUriBeG5pOSaJCjay6n6XY4RqcKHL/9iSL36xDZA1
R2O2b32DkX4XXDYTrepsq7x2f+Cbpan5dnmbbNdJptXGzYLsfV+EpWtTxRGyGz+e
ZNKAa50TbEVYPvMWr8QVdrRkdWQ8DdYnIS8iB2JilJ3afPbhrxYBMV8njgx+vp2j
Fn4ePvNfok1N3oFMbeIk3ErefDuvknZTb/gZQhwCzfxbmmptLQt2QS71QnrNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbX6ni6U+6NyojjLaWiXw0JgDmRkwHwYDVR0j
BBgwFoAUV9s1gecHwiu6F7itErgZQpZXYdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVdVR3hjZVdpeVhiU3dCYmdudjV2RG5TN3BtNEhoQ25HSndmM2IyZUt6
ZTEvMC81N0RCMzU4MUU3MDdDMjJCQkExN0I4QUQxMkI4MTk0Mjk2NTc2MUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3REIzNTgxRTcwN0MyMkJC
QTE3QjhBRDEyQjgxOTQyOTY1NzYxRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVdVR3hjZVdpeVhiU3dCYmdudjV2RG5TN3BtNEhoQ25HSndmM2IyZUt6ZTEvMC81
N0RCMzU4MUU3MDdDMjJCQkExN0I4QUQxMkI4MTk0Mjk2NTc2MUQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQPJI7lcBxHtBH9Q8wfIwM4ulB2PTC7FdpNZ+4Jj0ktVgTOR/e9FwMDRFkNqB
e4/2OOSC3amybXXViQ+0noc/Zk7Uikq+w13TpSKfH45qmXyr7v1wZ4XIfvWWx7Rn
YCLDNTVE9LCpdt4rOuacLKSJosu6wdtDIWn2opyd3ep1t94x4lq4Jn0Ryg88EUmS
7VVRbvMBmUdkR8E07gkARVFz26y4xEqtySo5VlEU3bHJJMWLNQxI56kjoOSO/CuS
n2oPfFcjvCQYhEBTj7lpzc1T54lw8xD2Ey9N1G7S0JdJmePJSj28rtVPpXC8CdZ4
hK9IQcwi4ZcjZMQBfIskKoEHOA==
-----END CERTIFICATE-----