Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.mft
File:                     558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.mft (raw, json)
Hash identifier:          3V9IN1ChSrh4Ku2Ah++z0WxWt5x18HkitNb2I+3rnM0=
Subject key identifier:   3F:9A:CF:48:86:F2:30:2A:94:C2:07:D9:C5:E7:F7:61:5B:AB:C9:6A
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       78F194CCFF28CB33DB9CC93955F2298D298DDD69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.mft
Manifest number:          01E8
Signing time:             Fri 28 Mar 2025 19:04:57 +0000
Manifest this update:     Fri 28 Mar 2025 18:59:57 +0000
Manifest next update:     Sat 29 Mar 2025 20:01:57 +0000
Files and hashes:         1: 3137302e3234372e3130382e302f32342d3234203d3e20323732313933.roa (hash: k4yWrbYYpJaGJlOCVtvTkROrgcWeEvoT1oguJh4uNx8=)
                          2: 3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa (hash: KFhbQ7Y4aEKpjOgA/JOF2CXcsRcjYhh0mJKY3V4cwzk=)
                          3: 323830343a383335633a3a2f33322d3438203d3e20323732313933.roa (hash: 6Jj4kOGi9sKDPTpmOPI6ZbEorh7D3WxxayaR9b5lu08=)
                          4: 3137302e3234372e3131302e302f32342d3234203d3e20323732313933.roa (hash: TDjjEdU8HcdagL6tjdSPku+t1M/18nyLrKmYXDTFUbM=)
                          5: 558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl (hash: ZaQGxfdzvv8TQfGO12A5jcA/7J7JJWV+JcF7ks7/T1k=)
                          6: 3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa (hash: RZQSj0NGs5FAgG7/VNOKXxWotBBqDhobniklikkF76I=)
                          7: 3137302e3234372e3130392e302f32342d3234203d3e20323732313933.roa (hash: 9DvWO2Ts8zl1kF3k19Uw+E+eTbfME+Gu7+LkWFIQNZo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f1:94:cc:ff:28:cb:33:db:9c:c9:39:55:f2:29:8d:29:8d:dd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Mar 28 18:59:57 2025 GMT
            Not After : Mar 29 20:01:57 2025 GMT
        Subject: CN=3F9ACF4886F2302A94C207D9C5E7F7615BABC96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:a3:73:ea:72:44:24:a8:ba:95:4d:71:18:
                    be:f5:10:4d:de:ea:37:a1:08:65:19:ca:2f:63:79:
                    90:4f:fa:79:1b:71:aa:1c:7a:02:0d:f8:d3:db:c9:
                    38:56:b7:17:3e:a6:67:25:e3:3c:b6:30:26:f5:c0:
                    d6:9e:cb:95:b9:dc:12:28:7a:48:e3:fe:77:3c:c0:
                    5a:8b:b6:2e:d8:c7:a2:2c:fe:e9:ba:b0:e2:fe:5c:
                    22:6b:ec:69:96:63:3a:37:79:a5:2c:b9:34:0f:e7:
                    f8:a4:b6:21:c0:63:f8:2b:7f:3c:e5:60:98:42:58:
                    32:88:e1:0a:9a:65:f6:07:42:c7:d7:49:69:62:83:
                    a0:d3:79:c6:53:60:b6:87:34:1b:9b:3a:92:4e:fa:
                    35:8b:d6:9c:ae:b5:47:b0:6f:82:a3:cc:9f:b0:ab:
                    d8:12:ca:96:5b:9d:f4:1d:9c:d9:28:e4:ca:a1:84:
                    4e:51:e9:8c:c0:01:a7:37:aa:f6:e2:bb:ee:c2:63:
                    e8:74:5c:e9:d0:13:16:bc:a3:21:bc:77:f0:78:7f:
                    d5:05:0b:f2:c0:f4:ef:cd:52:ca:87:f5:a2:26:6c:
                    3d:70:aa:bd:6f:67:97:bc:89:aa:fc:fb:40:0f:45:
                    aa:ba:6e:f3:3d:e5:3f:21:fa:84:ea:17:01:38:4f:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:CF:48:86:F2:30:2A:94:C2:07:D9:C5:E7:F7:61:5B:AB:C9:6A
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:b5:84:ba:60:2f:06:b7:24:f8:c6:b0:22:9d:22:7a:81:
         9e:e4:61:ac:2c:77:cf:cb:40:28:2f:05:b2:73:22:fa:cc:28:
         f2:08:d5:c6:3a:6e:5b:e8:6f:f1:d0:55:81:4f:3f:ca:47:8e:
         54:aa:8e:b1:cc:45:62:da:a4:f5:28:03:64:93:f6:ca:97:85:
         f1:46:4c:2d:d4:2c:d3:1b:d5:3e:2a:98:a7:5d:58:72:65:ed:
         d2:35:1d:ed:5a:c9:69:2d:4e:90:23:15:ef:58:e6:4e:61:8d:
         a1:1d:a7:ec:0a:bd:49:15:f8:76:91:1c:11:66:95:bf:96:21:
         e6:b7:97:a7:8f:43:9b:93:64:21:fb:ba:d9:7f:1e:e9:42:51:
         cd:11:01:3e:dd:c9:f2:5d:29:60:e2:d7:e8:56:47:3c:e5:d3:
         f3:16:2c:ad:0d:52:4f:2a:06:1d:cb:e4:f3:39:ae:b6:ec:da:
         1f:06:46:21:91:da:05:ad:d4:0b:f1:1a:0f:de:53:71:81:a2:
         57:ae:f0:af:c3:94:79:8b:78:8d:8b:66:40:99:09:a7:f4:e0:
         ad:60:ab:e6:81:57:dc:05:86:56:fb:9e:b0:67:9a:98:c1:13:
         22:f1:85:23:7b:5c:4a:ab:78:b1:35:0e:a5:73:b3:36:cc:7e:
         81:3f:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----