Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft
File:                     9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft (raw, json)
Hash identifier:          pPp9JYHhbXwCv0h9JtGerXqK8hFuZH2rh7KWk52paoE=
Subject key identifier:   56:D3:14:74:48:94:23:4E:F7:D1:94:FF:54:0D:AA:58:D7:8B:63:E1
Authority key identifier: 9E:9E:5E:57:D5:BE:23:95:1A:4F:4F:E4:7E:8B:61:F4:3D:5A:FF:AF
Certificate issuer:       /CN=9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF
Certificate serial:       702B08AFE6546333247C95BCC0F34D310D59255A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft
Manifest number:          0109
Signing time:             Fri 28 Mar 2025 23:51:23 +0000
Manifest this update:     Fri 28 Mar 2025 23:46:23 +0000
Manifest next update:     Sun 30 Mar 2025 02:36:23 +0000
Files and hashes:         1: 323830343a313535343a3a2f33322d313238203d3e20323633333834.roa (hash: ApaGC5AuOAFde9Oq93leIV3se7PNiBa3JeV6SkkY67U=)
                          2: 3137372e38372e32382e302f32322d3332203d3e20323633333834.roa (hash: wPAPW/9soS0HPzpOZph0RVXfe/GT1hQ+I7gMMRgzuE4=)
                          3: 9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.crl (hash: H/NE4cFChNIKfASp4j2DxYBAGFSwhGT5HEd3la7YEdw=)
                          4: 3133382e3138352e34302e302f32322d3332203d3e20323633333834.roa (hash: FG5aLxh1P/3sid4mIj0hL/Vnb3T5xPdB9NRMxkJF5sI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2b:08:af:e6:54:63:33:24:7c:95:bc:c0:f3:4d:31:0d:59:25:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF
        Validity
            Not Before: Mar 28 23:46:23 2025 GMT
            Not After : Mar 30 02:36:23 2025 GMT
        Subject: CN=56D314744894234EF7D194FF540DAA58D78B63E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:1f:92:29:79:02:03:aa:78:bc:c3:6f:6c:
                    22:f8:98:60:02:92:a8:07:9a:24:1c:55:74:22:d0:
                    e1:ac:ee:0b:8d:14:5d:77:65:02:e5:55:21:16:de:
                    8a:65:b0:d5:76:5b:5a:6e:f3:46:bf:7c:6a:0b:c0:
                    3a:78:2e:aa:14:af:72:dd:0f:fb:11:43:85:67:f6:
                    d8:4e:2b:7b:b3:4a:ca:e2:3d:70:46:ab:f6:71:ee:
                    90:3e:1a:a0:a7:0b:60:15:df:27:7e:f9:a6:74:3d:
                    a0:49:3e:8e:fd:80:76:30:7d:36:a1:42:43:e9:79:
                    cb:a9:66:18:80:77:0a:66:db:da:a3:7b:79:34:98:
                    07:48:26:f9:85:55:09:1d:1f:97:d4:aa:d9:ed:c3:
                    e4:70:8e:98:25:56:6a:8c:e1:cb:7f:d6:24:08:7b:
                    f5:a3:f0:74:a0:b1:51:6d:1a:82:99:47:99:58:33:
                    92:e9:bc:c9:2e:5d:be:1f:9d:1e:26:26:20:6a:86:
                    43:11:0a:29:3d:c1:1d:15:6b:62:86:6f:c6:0d:2f:
                    a9:13:82:12:e1:92:c9:3b:ef:aa:eb:90:26:52:c5:
                    fb:89:e0:58:90:8a:ed:06:3c:f0:94:a9:5f:2d:ae:
                    ee:11:d5:9b:05:9a:17:64:d5:2d:18:67:0b:6e:53:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D3:14:74:48:94:23:4E:F7:D1:94:FF:54:0D:AA:58:D7:8B:63:E1
            X509v3 Authority Key Identifier:
                keyid:9E:9E:5E:57:D5:BE:23:95:1A:4F:4F:E4:7E:8B:61:F4:3D:5A:FF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:e3:14:c0:f0:04:c0:0f:fc:33:db:8e:32:15:17:66:f2:
         38:d5:a3:d6:6d:68:dd:c5:92:43:cc:73:60:69:c5:e8:5f:51:
         82:69:49:1d:9d:dc:65:bc:44:31:c6:7c:30:43:65:04:46:31:
         db:e5:cf:60:e6:60:9e:15:8c:15:2e:6b:63:aa:c7:aa:83:21:
         3f:f5:7c:31:26:0f:8d:e1:c0:37:93:a6:45:b0:21:85:4c:1c:
         5b:ac:46:52:ea:37:0d:02:d9:60:32:08:09:55:d9:e6:1e:bd:
         01:dd:db:3b:40:a7:b7:63:72:7a:86:51:14:a9:25:78:2a:90:
         95:6c:d3:47:48:74:ab:a7:30:ff:de:43:9e:c8:b8:6f:00:92:
         be:02:56:80:0b:ab:47:e0:99:66:8e:ae:d5:e8:d3:45:65:e8:
         27:62:6b:ea:c1:84:1b:54:22:1f:06:f7:70:38:0e:6f:12:66:
         88:78:b7:71:89:b2:76:fe:3f:12:9b:ff:e8:6c:db:ec:e6:d4:
         de:ff:7b:a5:d5:d6:9c:27:2c:69:04:f5:76:5a:b2:6e:b7:7c:
         14:48:ac:b4:68:c5:aa:85:7d:bd:9b:31:47:88:d0:a0:67:63:
         3f:1b:9b:18:ba:8f:ef:b4:f2:96:21:2f:38:3c:a1:1c:c4:f0:
         08:1c:c3:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcCsIr+ZUYzMkfJW8wPNNMQ1ZJVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU5RTVFNTdENUJFMjM5NTFBNEY0RkU0N0U4QjYxRjQz
RDVBRkZBRjAeFw0yNTAzMjgyMzQ2MjNaFw0yNTAzMzAwMjM2MjNaMDMxMTAvBgNV
BAMTKDU2RDMxNDc0NDg5NDIzNEVGN0QxOTRGRjU0MERBQTU4RDc4QjYzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwh+SKXkCA6p4vMNvbCL4mGAC
kqgHmiQcVXQi0OGs7guNFF13ZQLlVSEW3oplsNV2W1pu80a/fGoLwDp4LqoUr3Ld
D/sRQ4Vn9thOK3uzSsriPXBGq/Zx7pA+GqCnC2AV3yd++aZ0PaBJPo79gHYwfTah
QkPpecupZhiAdwpm29qje3k0mAdIJvmFVQkdH5fUqtntw+RwjpglVmqM4ct/1iQI
e/Wj8HSgsVFtGoKZR5lYM5LpvMkuXb4fnR4mJiBqhkMRCik9wR0Va2KGb8YNL6kT
ghLhksk776rrkCZSxfuJ4FiQiu0GPPCUqV8tru4R1ZsFmhdk1S0YZwtuUww5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVtMUdEiUI0730ZT/VA2qWNeLY+EwHwYDVR0j
BBgwFoAUnp5eV9W+I5UaT0/kfoth9D1a/68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMC85RTlFNUU1N0Q1QkUyMzk1MUE0RjRGRTQ3RThCNjFGNDNENUFGRkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOUU1RTU3RDVCRTIzOTUx
QTRGNEZFNDdFOEI2MUY0M0Q1QUZGQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlIQTEvMC85
RTlFNUU1N0Q1QkUyMzk1MUE0RjRGRTQ3RThCNjFGNDNENUFGRkFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMK7jFMDwBMAP/DPbjjIVF2byONWj1m1o3cWSQ8xzYGnF6F9RgmlJHZ3cZbxE
McZ8MENlBEYx2+XPYOZgnhWMFS5rY6rHqoMhP/V8MSYPjeHAN5OmRbAhhUwcW6xG
Uuo3DQLZYDIICVXZ5h69Ad3bO0Cnt2NyeoZRFKkleCqQlWzTR0h0q6cw/95Dnsi4
bwCSvgJWgAurR+CZZo6u1ejTRWXoJ2Jr6sGEG1QiHwb3cDgObxJmiHi3cYmydv4/
Epv/6Gzb7ObU3v97pdXWnCcsaQT1dlqybrd8FEistGjFqoV9vZsxR4jQoGdjPxub
GLqP77TyliEvODyhHMTwCBzDHw==
-----END CERTIFICATE-----