Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
File:                     3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json)
Hash identifier:          oZR0r50ewM57AJ0+R7Assk21GTM6huIluH/qDRgDMsI=
Subject key identifier:   B1:30:1B:22:35:4A:EA:82:36:C4:DC:60:26:E2:B6:26:63:6D:D8:51
Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
Certificate issuer:       /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Certificate serial:       0AA035EC85D9843BC8A6293FF1E3E6163DC679AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
Manifest number:          21
Signing time:             Sat 29 Mar 2025 04:46:17 +0000
Manifest this update:     Sat 29 Mar 2025 04:41:17 +0000
Manifest next update:     Sun 30 Mar 2025 07:06:17 +0000
Files and hashes:         1: 3230302e362e3132382e302f32322d3332203d3e203532363934.roa (hash: cmMBAa8apGKZWHWfvXo7rXbYWd2EI5yW46+IKqeCJjo=)
                          2: 3137372e37332e33362e302f32322d3332203d3e203532363934.roa (hash: OGK41uRpAQwllRubLCRfh+WKpYG39IFoFH08wloP1PA=)
                          3: 323830343a6335383a3a2f33322d313238203d3e203532363934.roa (hash: 9O2EZ1ZOA5SxIxzwzkyeRpvslbdGVqnJeJ0v8OoeGGs=)
                          4: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: 1N7kCnCv216pFCty9CNvdmfafjSo8qIeQSA1wwdKsGA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a0:35:ec:85:d9:84:3b:c8:a6:29:3f:f1:e3:e6:16:3d:c6:79:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
        Validity
            Not Before: Mar 29 04:41:17 2025 GMT
            Not After : Mar 30 07:06:17 2025 GMT
        Subject: CN=B1301B22354AEA8236C4DC6026E2B626636DD851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:eb:a6:0e:90:3a:2a:f1:46:5d:3b:4b:e4:
                    7c:d5:d5:e7:37:b4:e7:47:bd:ba:25:fc:43:29:ad:
                    d5:38:ea:5d:79:0c:25:a2:cb:3a:46:0a:65:62:d7:
                    b5:fd:90:a0:2c:7c:24:76:16:2c:9f:9f:2d:2d:f5:
                    cf:c1:f3:cc:8a:bd:db:8a:d1:44:59:67:82:8a:dd:
                    94:77:42:b0:cc:18:2e:88:66:d4:b5:57:ca:f2:ab:
                    60:43:d0:e3:09:10:f1:d7:01:e4:05:da:77:04:a4:
                    e0:67:f6:73:a7:5c:fb:fc:f7:76:b7:f4:9c:0f:dc:
                    19:07:d8:7b:cb:ac:9f:99:7a:15:d1:dc:f3:50:ab:
                    98:38:c7:b1:7a:c6:77:29:0d:cd:e9:0b:14:79:0e:
                    a7:cf:9f:03:c6:16:1a:ab:0b:22:ac:6c:bd:c1:3b:
                    ff:00:6b:54:08:85:23:d9:46:5d:b5:32:73:c5:97:
                    b4:55:3b:68:7b:3d:3f:bb:cf:19:5a:67:64:1b:9e:
                    16:9a:25:82:a6:93:01:e8:26:f7:f8:77:67:05:7f:
                    6d:ee:eb:ec:41:b6:89:e8:1e:d5:20:6d:f3:df:a0:
                    20:3e:ab:17:25:8d:d0:2c:a8:82:c5:6b:78:d5:78:
                    1d:50:2c:59:14:6a:67:99:ea:eb:5f:ba:0d:10:a7:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:1B:22:35:4A:EA:82:36:C4:DC:60:26:E2:B6:26:63:6D:D8:51
            X509v3 Authority Key Identifier:
                keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:3d:59:57:1f:57:b6:d6:6e:53:0a:6f:16:c1:ab:99:ab:
         6d:84:63:17:fd:61:06:d6:78:a6:34:96:54:0f:e6:b0:e4:e9:
         88:6b:29:9a:31:d6:da:84:ce:36:51:ab:1e:76:aa:1b:41:e9:
         0c:f8:e5:09:92:de:57:4a:61:2b:15:e2:fc:27:ec:08:73:c3:
         c9:b9:7e:d3:3e:d6:bc:78:b8:78:e1:34:25:1f:12:db:c2:d1:
         78:7c:3c:75:37:bc:5f:1f:a1:6e:24:f1:b3:08:a3:99:22:18:
         d5:86:ff:ef:b7:44:41:eb:ef:1b:65:30:f7:40:68:7a:86:a1:
         83:f7:da:bb:5b:5a:0a:cf:1a:a5:8f:03:04:db:87:d6:0b:77:
         98:30:c2:62:b7:92:3b:6e:dd:0d:1d:84:19:86:ef:69:93:9b:
         7a:47:b4:b4:24:9e:6a:af:81:ce:fd:c1:8f:d5:d8:18:e7:db:
         60:b2:d4:8a:ba:21:38:24:82:7d:93:a5:5f:22:89:b2:95:f3:
         d5:7d:e7:28:96:24:5b:4a:53:eb:42:41:94:3c:30:6c:31:74:
         ea:d5:88:1b:aa:7d:5a:ca:de:a9:d7:6d:bb:21:cb:b8:b5:10:
         0b:bd:f1:ff:f1:e2:0e:b0:88:cb:a9:b9:a9:68:c1:fe:a5:7a:
         b0:9d:c6:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCqA17IXZhDvIpik/8ePmFj3Gea8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB
NzNENzAwNzAeFw0yNTAzMjkwNDQxMTdaFw0yNTAzMzAwNzA2MTdaMDMxMTAvBgNV
BAMTKEIxMzAxQjIyMzU0QUVBODIzNkM0REM2MDI2RTJCNjI2NjM2REQ4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUOumDpA6KvFGXTtL5HzV1ec3
tOdHvbol/EMprdU46l15DCWiyzpGCmVi17X9kKAsfCR2Fiyfny0t9c/B88yKvduK
0URZZ4KK3ZR3QrDMGC6IZtS1V8ryq2BD0OMJEPHXAeQF2ncEpOBn9nOnXPv893a3
9JwP3BkH2HvLrJ+ZehXR3PNQq5g4x7F6xncpDc3pCxR5DqfPnwPGFhqrCyKsbL3B
O/8Aa1QIhSPZRl21MnPFl7RVO2h7PT+7zxlaZ2QbnhaaJYKmkwHoJvf4d2cFf23u
6+xBtonoHtUgbfPfoCA+qxcljdAsqILFa3jVeB1QLFkUameZ6utfug0Qp4BbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsTAbIjVK6oI2xNxgJuK2JmNt2FEwHwYDVR0j
BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3
cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz
ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z
REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfD89WVcfV7bWblMKbxbBq5mrbYRjF/1hBtZ4pjSWVA/msOTpiGspmjHW2oTO
NlGrHnaqG0HpDPjlCZLeV0phKxXi/CfsCHPDybl+0z7WvHi4eOE0JR8S28LReHw8
dTe8Xx+hbiTxswijmSIY1Yb/77dEQevvG2Uw90Boeoahg/fau1taCs8apY8DBNuH
1gt3mDDCYreSO27dDR2EGYbvaZObeke0tCSeaq+Bzv3Bj9XYGOfbYLLUirohOCSC
fZOlXyKJspXz1X3nKJYkW0pT60JBlDwwbDF06tWIG6p9WsreqddtuyHLuLUQC73x
//HiDrCIy6m5qWjB/qV6sJ3GbA==
-----END CERTIFICATE-----