Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
File:                     DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json)
Hash identifier:          cBysMFezUn6+RDxL7N6FhvIr3kd8Bm9CMH52JazuPR0=
Subject key identifier:   50:60:94:FB:F6:88:B6:4A:B0:93:BB:FB:82:7E:94:EC:7B:AE:20:2A
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       2E28A710CC875391B1FB3CE4AE3E3ACB25849C14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
Manifest number:          01DA
Signing time:             Sat 29 Mar 2025 03:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 02:56:12 +0000
Manifest next update:     Sun 30 Mar 2025 06:59:12 +0000
Files and hashes:         1: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: wNMrZaU8aUZouPKty7zWuzFcAqfI9Vza8zAIQ/rQ9/g=)
                          2: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: DzRsY8gKF0BWS3fC42Y03Map2xKST/W63/0XfL2297o=)
                          3: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: LALs/iCUqn090gzfcVYGk9YnxNfbaRSdM11W6r+CWsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:28:a7:10:cc:87:53:91:b1:fb:3c:e4:ae:3e:3a:cb:25:84:9c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Mar 29 02:56:12 2025 GMT
            Not After : Mar 30 06:59:12 2025 GMT
        Subject: CN=506094FBF688B64AB093BBFB827E94EC7BAE202A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:6d:7c:ff:71:6d:2a:45:da:18:f7:76:79:
                    d0:17:f5:9e:98:cf:21:13:6a:1b:e5:a1:da:82:dc:
                    e4:27:86:39:fe:63:7a:78:e1:46:01:2a:88:0d:86:
                    a4:c3:09:1f:cd:03:83:85:66:7a:cd:c0:a3:9a:71:
                    d6:b7:58:f9:5a:39:1b:e9:8e:66:10:42:ec:92:2c:
                    f1:74:b3:47:16:b9:eb:de:0e:1f:42:4f:8b:4b:7a:
                    dd:08:30:7f:c8:bc:7c:26:08:a3:28:c5:1d:ad:3c:
                    7c:32:28:4c:6c:b1:ed:3b:5a:4b:88:82:ed:83:16:
                    a1:aa:e5:41:49:f4:84:d6:2a:cf:4b:eb:19:03:5a:
                    e7:c0:f3:05:9d:b3:ad:7b:c5:37:c1:44:a3:d8:08:
                    92:cc:21:83:06:58:b0:d7:e2:29:87:08:bb:f3:e6:
                    f4:c9:c7:c2:be:37:e8:6b:a4:36:ae:60:40:73:60:
                    e2:ec:97:6a:5b:a0:26:b2:29:d1:d8:e5:bc:ce:53:
                    a8:2f:c1:3f:61:cf:ca:20:5a:86:d5:d2:2b:3f:7b:
                    74:30:0e:36:a0:df:07:d7:86:93:31:06:4e:22:1f:
                    64:80:38:8a:2f:d2:2a:58:f4:44:bf:ef:3e:2e:04:
                    cc:8a:04:8d:f5:33:8d:6c:f6:bf:e2:00:c9:0e:38:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:60:94:FB:F6:88:B6:4A:B0:93:BB:FB:82:7E:94:EC:7B:AE:20:2A
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:a4:9f:1a:d5:82:17:0d:1b:bf:b9:e9:89:cd:db:33:72:
         cc:09:fb:24:b7:f4:2b:3d:94:c8:c3:28:7b:7a:be:f6:b4:97:
         12:52:d1:bd:b7:d9:7f:47:c7:93:5c:23:78:af:ec:f1:56:b2:
         36:e2:45:07:fd:38:f7:08:b4:84:65:06:ce:65:e3:ce:a8:f3:
         00:bd:9e:eb:86:3b:71:33:2f:8b:bb:46:80:32:21:8c:4c:05:
         69:59:0c:3b:c8:4c:d9:58:47:1b:39:ea:82:3f:45:98:79:46:
         7b:de:b5:c2:27:44:80:2e:44:42:09:02:ba:a5:ea:74:e7:89:
         00:a4:8f:86:ca:f0:bd:5a:5d:6b:8c:21:57:85:29:9d:f8:30:
         b6:b3:4e:e5:1f:4b:41:2f:be:3a:7f:17:17:32:c4:72:b1:93:
         b4:68:3f:37:98:04:c1:ec:95:36:be:5e:27:68:ea:46:e3:4b:
         5b:c3:28:4e:7f:29:c0:20:04:59:1f:cd:8e:57:73:03:79:44:
         5d:e8:8b:10:d9:4d:f2:a0:d9:10:d5:87:5e:38:2a:5a:e1:d1:
         fd:f5:9d:fa:20:73:e8:b4:4f:bf:23:00:59:de:e0:2e:08:24:
         9d:28:e9:a1:ba:fd:4c:c0:cc:47:83:5b:a1:9f:3e:70:86:80:
         49:df:27:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULiinEMyHU5Gx+zzkrj46yyWEnBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD
RDhBMjIzRjAeFw0yNTAzMjkwMjU2MTJaFw0yNTAzMzAwNjU5MTJaMDMxMTAvBgNV
BAMTKDUwNjA5NEZCRjY4OEI2NEFCMDkzQkJGQjgyN0U5NEVDN0JBRTIwMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDG18/3FtKkXaGPd2edAX9Z6Y
zyETahvlodqC3OQnhjn+Y3p44UYBKogNhqTDCR/NA4OFZnrNwKOacda3WPlaORvp
jmYQQuySLPF0s0cWueveDh9CT4tLet0IMH/IvHwmCKMoxR2tPHwyKExsse07WkuI
gu2DFqGq5UFJ9ITWKs9L6xkDWufA8wWds617xTfBRKPYCJLMIYMGWLDX4imHCLvz
5vTJx8K+N+hrpDauYEBzYOLsl2pboCayKdHY5bzOU6gvwT9hz8ogWobV0is/e3Qw
Djag3wfXhpMxBk4iH2SAOIov0ipY9ES/7z4uBMyKBI31M41s9r/iAMkOOM05AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUGCU+/aItkqwk7v7gn6U7HuuICowHwYDVR0j
BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo
TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1
Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9E
QTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnquknxrVghcNG7+56YnN2zNyzAn7JLf0Kz2UyMMoe3q+9rSXElLRvbfZf0fH
k1wjeK/s8VayNuJFB/049wi0hGUGzmXjzqjzAL2e64Y7cTMvi7tGgDIhjEwFaVkM
O8hM2VhHGznqgj9FmHlGe961widEgC5EQgkCuqXqdOeJAKSPhsrwvVpda4whV4Up
nfgwtrNO5R9LQS++On8XFzLEcrGTtGg/N5gEweyVNr5eJ2jqRuNLW8MoTn8pwCAE
WR/NjldzA3lEXeiLENlN8qDZENWHXjgqWuHR/fWd+iBz6LRPvyMAWd7gLggknSjp
obr9TMDMR4NboZ8+cIaASd8nQQ==
-----END CERTIFICATE-----