Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.mft
File:                     57D626EF55C34DCC2CFD920E4CD90D504B1A471C.mft (raw, json)
Hash identifier:          7uJ/kAB0wOyzhnONf7EXuhLwdN5lh5xxNjpt/86/0pc=
Subject key identifier:   5E:FC:8E:52:2A:52:C5:87:60:A7:1B:C8:10:1B:A3:9F:14:CF:EC:A0
Authority key identifier: 57:D6:26:EF:55:C3:4D:CC:2C:FD:92:0E:4C:D9:0D:50:4B:1A:47:1C
Certificate issuer:       /CN=57D626EF55C34DCC2CFD920E4CD90D504B1A471C
Certificate serial:       13AE285941A1D4BB94128CCE58F5BAF6C8E1F4E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.mft
Manifest number:          BA
Signing time:             Sat 29 Mar 2025 07:35:51 +0000
Manifest this update:     Sat 29 Mar 2025 07:30:51 +0000
Manifest next update:     Sun 30 Mar 2025 08:10:51 +0000
Files and hashes:         1: 34352e3138382e36382e302f32322d3234203d3e20323639353233.roa (hash: 5w+opQuStNm9q9lmoUcX3pjWyKEf4zR4dNBCdJ0+6/A=)
                          2: 323830343a363565633a3a2f33322d3336203d3e20323639353233.roa (hash: hxfq9P+U24yRmfoJYQWtd8XESrsgu3R+lJf51ErT2jU=)
                          3: 57D626EF55C34DCC2CFD920E4CD90D504B1A471C.crl (hash: xAYuYN3yKBcI+itTvAmVIM5HsAfuZ7G5uevud+VsOLI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ae:28:59:41:a1:d4:bb:94:12:8c:ce:58:f5:ba:f6:c8:e1:f4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D626EF55C34DCC2CFD920E4CD90D504B1A471C
        Validity
            Not Before: Mar 29 07:30:51 2025 GMT
            Not After : Mar 30 08:10:51 2025 GMT
        Subject: CN=5EFC8E522A52C58760A71BC8101BA39F14CFECA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:f7:e6:93:83:a4:08:1c:89:86:c5:94:72:
                    7d:49:e9:8d:b6:08:8c:f2:3b:72:43:71:98:51:fa:
                    13:b7:41:28:ed:eb:77:5c:cc:4b:5d:db:01:85:51:
                    9e:f5:ff:5b:dd:76:d6:72:c8:7c:34:a6:55:42:13:
                    67:ac:40:c6:18:c6:f9:64:b6:5b:46:0f:7b:31:73:
                    5e:9d:7e:c1:da:8b:b1:cd:f2:44:f3:6f:33:f5:00:
                    61:3f:fa:64:c7:55:67:0f:21:24:0b:1f:dc:e5:47:
                    5c:34:68:d5:10:4d:32:4d:22:64:7a:4b:1e:b5:d4:
                    dd:81:57:03:b7:9e:65:bb:8a:77:68:60:27:6a:90:
                    f2:49:8e:24:12:2c:f1:84:8e:02:60:90:5a:2e:a6:
                    b4:62:a6:7b:09:05:bc:42:db:89:93:47:00:e9:4e:
                    5a:8d:68:cc:d6:f8:c4:d2:2a:f1:40:39:1c:c8:4c:
                    a6:48:a1:e4:4f:30:c8:e9:64:a5:d6:e0:71:b8:91:
                    3e:1a:05:f2:d2:68:66:6e:47:ce:7f:01:b7:64:60:
                    bb:4a:39:e3:94:d9:57:8b:71:a3:45:1a:09:df:66:
                    4e:46:bb:8e:f2:1d:c1:2d:8a:01:10:3c:d7:73:34:
                    8c:14:70:2b:6c:96:5b:83:24:54:36:29:3f:a2:5f:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FC:8E:52:2A:52:C5:87:60:A7:1B:C8:10:1B:A3:9F:14:CF:EC:A0
            X509v3 Authority Key Identifier:
                keyid:57:D6:26:EF:55:C3:4D:CC:2C:FD:92:0E:4C:D9:0D:50:4B:1A:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8d:2f:89:6e:69:5e:11:37:fc:3f:65:82:b6:6b:5c:7f:69:
         ee:dd:8e:e2:7d:87:86:bb:a2:1d:59:62:dc:59:c0:2c:f8:fb:
         fb:fe:43:28:e3:bb:cc:a5:d9:5f:fb:4d:c2:b8:82:c9:8e:42:
         7a:71:4b:5d:99:b8:ce:29:3f:41:b1:86:38:23:33:4a:e9:3d:
         48:3a:fc:9e:74:07:39:ef:3e:bf:be:e6:ce:00:88:d7:51:80:
         db:de:c8:8b:fe:2a:4a:75:15:29:02:e9:d4:c6:2b:c1:3e:e5:
         eb:39:f7:3c:97:39:d0:09:95:b7:cf:fd:c7:aa:6b:b1:c0:07:
         aa:fc:db:f3:bd:1d:7f:bd:8d:88:f2:75:70:bc:18:13:15:fe:
         11:f0:fb:c4:e8:d8:87:27:65:d1:37:9b:b6:9e:99:e4:78:53:
         ef:0a:32:f9:6c:20:e8:ce:a2:3a:db:a2:4d:fc:b8:da:e0:0c:
         45:17:12:7c:1e:ac:dd:e9:ec:de:d0:83:64:0c:5d:54:72:59:
         29:5f:b9:18:4e:4c:d5:6e:e6:fd:0e:c7:dc:f4:4f:bd:b4:af:
         d3:26:aa:b4:90:bc:d6:f2:85:7e:fc:91:e5:2f:4c:f6:19:f6:
         3c:87:19:0d:78:35:3e:9b:c9:2a:37:83:d2:fa:68:d2:ee:13:
         11:4f:f0:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUE64oWUGh1LuUEozOWPW69sjh9OQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdENjI2RUY1NUMzNERDQzJDRkQ5MjBFNENEOTBENTA0
QjFBNDcxQzAeFw0yNTAzMjkwNzMwNTFaFw0yNTAzMzAwODEwNTFaMDMxMTAvBgNV
BAMTKDVFRkM4RTUyMkE1MkM1ODc2MEE3MUJDODEwMUJBMzlGMTRDRkVDQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPL/fmk4OkCByJhsWUcn1J6Y22
CIzyO3JDcZhR+hO3QSjt63dczEtd2wGFUZ71/1vddtZyyHw0plVCE2esQMYYxvlk
tltGD3sxc16dfsHai7HN8kTzbzP1AGE/+mTHVWcPISQLH9zlR1w0aNUQTTJNImR6
Sx611N2BVwO3nmW7indoYCdqkPJJjiQSLPGEjgJgkFouprRipnsJBbxC24mTRwDp
TlqNaMzW+MTSKvFAORzITKZIoeRPMMjpZKXW4HG4kT4aBfLSaGZuR85/AbdkYLtK
OeOU2VeLcaNFGgnfZk5Gu47yHcEtigEQPNdzNIwUcCtslluDJFQ2KT+iX0irAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXvyOUipSxYdgpxvIEBujnxTP7KAwHwYDVR0j
BBgwFoAUV9Ym71XDTcws/ZIOTNkNUEsaRxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkF0SHk5NFBaeGV1SDk4Sk54RHpydHV3cDdMNEhXSnBQMUM0NGduZnVF
UXQvMC81N0Q2MjZFRjU1QzM0RENDMkNGRDkyMEU0Q0Q5MEQ1MDRCMUE0NzFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3RDYyNkVGNTVDMzREQ0My
Q0ZEOTIwRTRDRDkwRDUwNEIxQTQ3MUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkF0SHk5NFBaeGV1SDk4Sk54RHpydHV3cDdMNEhXSnBQMUM0NGduZnVFUXQvMC81
N0Q2MjZFRjU1QzM0RENDMkNGRDkyMEU0Q0Q5MEQ1MDRCMUE0NzFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKo0viW5pXhE3/D9lgrZrXH9p7t2O4n2HhruiHVli3FnALPj7+/5DKOO7zKXZ
X/tNwriCyY5CenFLXZm4zik/QbGGOCMzSuk9SDr8nnQHOe8+v77mzgCI11GA297I
i/4qSnUVKQLp1MYrwT7l6zn3PJc50AmVt8/9x6prscAHqvzb870df72NiPJ1cLwY
ExX+EfD7xOjYhydl0Tebtp6Z5HhT7woy+Wwg6M6iOtuiTfy42uAMRRcSfB6s3ens
3tCDZAxdVHJZKV+5GE5M1W7m/Q7H3PRPvbSv0yaqtJC81vKFfvyR5S9M9hn2PIcZ
DXg1PpvJKjeD0vpo0u4TEU/wJQ==
-----END CERTIFICATE-----