Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.mft
File:                     64F34AAEF7C614E665668431B50EB7B1981EDD37.mft (raw, json)
Hash identifier:          8ch6Xd0QhTGqNqhaFGiXDwlWb/Pb0yHHY/Zu7XMHuOU=
Subject key identifier:   9E:65:5F:31:6E:CA:41:5A:41:BE:48:8B:62:D9:78:E6:09:D1:DC:04
Authority key identifier: 64:F3:4A:AE:F7:C6:14:E6:65:66:84:31:B5:0E:B7:B1:98:1E:DD:37
Certificate issuer:       /CN=64F34AAEF7C614E665668431B50EB7B1981EDD37
Certificate serial:       3869FFA4F7457351DFF605944892F45409430F22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F34AAEF7C614E665668431B50EB7B1981EDD37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.mft
Manifest number:          B3
Signing time:             Mon 19 May 2025 12:44:30 +0000
Manifest this update:     Mon 19 May 2025 12:39:30 +0000
Manifest next update:     Tue 20 May 2025 14:26:30 +0000
Files and hashes:         1: 323830343a383332343a383030303a3a2f33332d3333203d3e20323732313739.roa (hash: 4XLSk1H8Zs3/2iEP/S1r7T3cG8H3qUHWpWL596XBV1Y=)
                          2: 34352e3138322e36332e302f32342d3234203d3e20323732313739.roa (hash: TI3JxV6cLJKajrIsVu3n4xt8NDpYndh9fu8abeSU6hM=)
                          3: 64F34AAEF7C614E665668431B50EB7B1981EDD37.crl (hash: yEkoNJ7r5owbEIYptgrUyPLBFStBeNEfoOoR53G/Pm4=)
                          4: 323830343a383332343a3a2f33332d3333203d3e20323732313739.roa (hash: I44JAhFd3swIh0q1PEX6uOoB3bBkpAEoQodWf0o2G2c=)
                          5: 323830343a383332343a3a2f33322d3332203d3e20323732313739.roa (hash: Wy0m0f/evgk3fJawzx51x88qnvg12nCoBLfjPRQ0ABY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:69:ff:a4:f7:45:73:51:df:f6:05:94:48:92:f4:54:09:43:0f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F34AAEF7C614E665668431B50EB7B1981EDD37
        Validity
            Not Before: May 19 12:39:30 2025 GMT
            Not After : May 20 14:26:30 2025 GMT
        Subject: CN=9E655F316ECA415A41BE488B62D978E609D1DC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:59:76:94:d8:f3:03:74:c6:6f:a0:13:8a:
                    5c:e6:36:aa:97:39:43:ac:eb:40:2a:9f:ec:08:1c:
                    36:26:d2:8e:26:0f:8e:71:55:1d:b2:5e:bf:d1:fc:
                    c9:9b:93:6f:c3:1b:47:a0:dc:af:ca:94:20:7b:22:
                    02:4a:78:91:7b:52:14:23:e4:73:74:f3:0a:4e:1a:
                    83:c0:89:30:de:94:65:d2:c5:89:ae:b5:b5:09:3e:
                    77:5b:69:7f:28:17:54:46:49:b9:90:d0:4c:79:e8:
                    49:66:71:95:40:48:de:8e:78:85:43:fd:68:0f:cc:
                    16:52:40:7b:3a:d1:c7:23:28:5c:5c:6d:04:b7:97:
                    b6:a9:79:12:5d:c0:6c:cb:35:80:00:74:f7:be:4d:
                    37:2a:1c:5a:8f:99:c8:74:9f:50:3d:dc:f2:dc:1f:
                    71:a2:c3:88:c4:3c:75:ee:49:b8:32:ec:c4:f9:9b:
                    83:03:6f:3f:fe:21:bf:25:63:b1:e8:cd:0f:45:65:
                    f7:25:9b:88:a9:bf:2a:d1:4e:0c:69:3c:7f:1a:0a:
                    bc:54:0f:a0:d2:b5:ac:b1:5d:62:b9:42:35:88:6e:
                    9f:ac:45:38:81:6a:c0:25:93:52:9e:12:c4:2b:a8:
                    6d:ec:e8:36:ef:eb:72:65:bb:bc:db:34:3f:05:26:
                    61:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:5F:31:6E:CA:41:5A:41:BE:48:8B:62:D9:78:E6:09:D1:DC:04
            X509v3 Authority Key Identifier:
                keyid:64:F3:4A:AE:F7:C6:14:E6:65:66:84:31:B5:0E:B7:B1:98:1E:DD:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F34AAEF7C614E665668431B50EB7B1981EDD37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:de:5a:dd:6b:ce:c7:fd:9a:c1:de:02:a4:fe:78:00:f9:7f:
         40:ca:ea:1a:d7:47:b4:02:2e:7d:e9:1a:b7:49:ee:38:03:96:
         1a:d9:3f:0f:dd:58:5e:99:b0:90:c3:ea:a3:e4:82:df:1b:42:
         f1:df:ab:52:31:e0:56:78:57:9f:54:d0:3f:eb:79:c1:a2:6c:
         47:29:a8:29:54:df:77:02:34:63:64:e3:11:df:bb:a8:4d:51:
         85:8e:21:44:6d:aa:57:9b:d0:ad:9b:d6:5e:f2:88:d9:7f:96:
         28:c5:45:b0:06:cd:a1:56:ae:e4:50:cd:b2:26:a6:23:00:66:
         cc:95:ef:07:35:dc:96:11:ec:06:a3:14:23:92:c6:7c:6a:a9:
         dd:5e:e0:4c:49:8b:4d:f7:90:2f:99:29:93:f6:74:50:61:39:
         72:0e:06:3d:5b:91:21:b7:d8:af:c7:77:69:df:9e:b4:7a:b5:
         4f:a3:ca:8a:5f:f1:75:4d:7f:db:53:ea:4e:3a:41:d2:7d:23:
         a5:4a:20:c3:05:35:cc:a2:a0:c1:06:f9:c9:83:a4:27:3c:3b:
         56:7a:77:ca:f6:81:1f:9c:12:09:0e:48:02:d3:f4:16:32:68:
         83:c5:42:e8:09:72:f8:93:0f:b7:c0:57:6a:5c:9b:d4:46:23:
         8f:a1:d1:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOGn/pPdFc1Hf9gWUSJL0VAlDDyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRGMzRBQUVGN0M2MTRFNjY1NjY4NDMxQjUwRUI3QjE5
ODFFREQzNzAeFw0yNTA1MTkxMjM5MzBaFw0yNTA1MjAxNDI2MzBaMDMxMTAvBgNV
BAMTKDlFNjU1RjMxNkVDQTQxNUE0MUJFNDg4QjYyRDk3OEU2MDlEMURDMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJN1l2lNjzA3TGb6ATilzmNqqX
OUOs60Aqn+wIHDYm0o4mD45xVR2yXr/R/Mmbk2/DG0eg3K/KlCB7IgJKeJF7UhQj
5HN08wpOGoPAiTDelGXSxYmutbUJPndbaX8oF1RGSbmQ0Ex56ElmcZVASN6OeIVD
/WgPzBZSQHs60ccjKFxcbQS3l7apeRJdwGzLNYAAdPe+TTcqHFqPmch0n1A93PLc
H3Giw4jEPHXuSbgy7MT5m4MDbz/+Ib8lY7HozQ9FZfclm4ipvyrRTgxpPH8aCrxU
D6DStayxXWK5QjWIbp+sRTiBasAlk1KeEsQrqG3s6Dbv63Jlu7zbND8FJmEDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnmVfMW7KQVpBvkiLYtl45gnR3AQwHwYDVR0j
BBgwFoAUZPNKrvfGFOZlZoQxtQ63sZge3TcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhSU0xTdFBwVUF4anJRQjdUZEhoU1VmOXVTdTFLQ1VBMk1MaW1HckhU
dmYvMC82NEYzNEFBRUY3QzYxNEU2NjU2Njg0MzFCNTBFQjdCMTk4MUVERDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RjM0QUFFRjdDNjE0RTY2
NTY2ODQzMUI1MEVCN0IxOTgxRUREMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGhSU0xTdFBwVUF4anJRQjdUZEhoU1VmOXVTdTFLQ1VBMk1MaW1HckhUdmYvMC82
NEYzNEFBRUY3QzYxNEU2NjU2Njg0MzFCNTBFQjdCMTk4MUVERDM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAct5a3WvOx/2awd4CpP54APl/QMrqGtdHtAIufekat0nuOAOWGtk/D91YXpmw
kMPqo+SC3xtC8d+rUjHgVnhXn1TQP+t5waJsRymoKVTfdwI0Y2TjEd+7qE1RhY4h
RG2qV5vQrZvWXvKI2X+WKMVFsAbNoVau5FDNsiamIwBmzJXvBzXclhHsBqMUI5LG
fGqp3V7gTEmLTfeQL5kpk/Z0UGE5cg4GPVuRIbfYr8d3ad+etHq1T6PKil/xdU1/
21PqTjpB0n0jpUogwwU1zKKgwQb5yYOkJzw7Vnp3yvaBH5wSCQ5IAtP0FjJog8VC
6Aly+JMPt8BXalyb1EYjj6HRWA==
-----END CERTIFICATE-----