Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
File:                     8204A8F62764E655E183BB09417B0875F11B3A7D.mft (raw, json)
Hash identifier:          UhLYbjHYz0nbh/eJbUoouSRfUWXWJrGl3GnzZOeJojQ=
Subject key identifier:   63:BA:21:53:17:DF:42:45:ED:8A:C2:F7:7C:2C:D5:BF:45:6A:72:70
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       655C6D7CF93186220AEC127C589A36C4B8BD2283
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
Manifest number:          0294
Signing time:             Fri 01 Aug 2025 15:27:26 +0000
Manifest this update:     Fri 01 Aug 2025 15:22:26 +0000
Manifest next update:     Sat 02 Aug 2025 18:44:26 +0000
Files and hashes:         1: 3137302e3135302e37362e302f32322d3234203d3e203532393133.roa (hash: 0arN7mTxC+femsr+qJoXzx7w67KLc6hvBkwe3aPa7es=)
                          2: 3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa (hash: R0L4zMoCzJms1YK3JxIET0vc/j1jFMjQqVfs6zcYcmk=)
                          3: 323830343a313038383a3a2f33322d3438203d3e203532393133.roa (hash: GwPm2g2MNZjdOqx6Lcw+CEjGDtw0uvGi9kDqotISbMA=)
                          4: 3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (hash: cnXFFjteLwxFJzW5tJDRUpxoZcspHKMllIxuDdVkNFI=)
                          5: 3136372e3234392e342e302f32322d3234203d3e203532393133.roa (hash: zP9yhC3Qt7EQWFv+OYnhs4gTVLpF8pr3SnXMGPpjQZ8=)
                          6: 3137372e32332e3136382e302f32312d3234203d3e203532393133.roa (hash: T/SpWSzWq/EKwVb72W4louC31Dw+ByGimjZONGUb+w4=)
                          7: 8204A8F62764E655E183BB09417B0875F11B3A7D.crl (hash: 6FSYVAP3ePAlAA7xv4za3nWY0NGvsrgNV5TSk90P6gg=)
                          8: 3137392e3132372e34302e302f32312d3234203d3e203532393133.roa (hash: vmcXxKuONvDttff4UVitpw8WaYSJUZMmP7VKmelSv2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5c:6d:7c:f9:31:86:22:0a:ec:12:7c:58:9a:36:c4:b8:bd:22:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Aug  1 15:22:26 2025 GMT
            Not After : Aug  2 18:44:26 2025 GMT
        Subject: CN=63BA215317DF4245ED8AC2F77C2CD5BF456A7270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:f6:41:16:fb:8d:fd:99:f3:da:51:d9:6d:
                    d4:8a:1f:10:f0:c1:25:fb:e5:5f:8a:48:61:9c:b0:
                    ca:ad:01:ac:d8:4a:12:68:cf:73:24:42:e6:d9:c4:
                    76:79:7c:a2:6f:2c:c6:20:3d:93:d5:e3:d3:c8:1e:
                    50:c9:67:9d:3e:8b:00:1a:c6:80:67:64:cc:fc:73:
                    14:63:9c:5a:af:b3:76:85:f5:64:28:a5:46:0c:d9:
                    ad:7e:42:1c:c6:59:8b:1c:65:e4:bc:d3:c3:e2:84:
                    29:de:e6:0e:fc:75:b1:a8:f1:db:0b:d9:06:54:49:
                    70:40:58:21:1b:7b:09:54:5a:e2:25:08:27:b3:96:
                    95:3e:dd:87:a5:d3:1c:e2:ce:5b:be:f8:19:3d:97:
                    cd:cf:71:25:1d:52:29:10:24:f8:ef:1c:dd:93:83:
                    42:f3:65:3a:eb:a7:ba:b7:5c:13:e5:e4:3a:79:50:
                    ba:ab:d6:9d:cd:f5:a4:93:ac:cd:3a:8d:47:b2:64:
                    2f:ac:6f:c0:c9:50:f5:b8:1a:1a:bd:3f:62:8b:b2:
                    1c:1a:b3:b3:84:4f:02:f5:07:66:eb:95:a6:c1:7b:
                    b7:ba:c2:69:df:d0:de:d6:00:23:7a:2a:bc:96:ca:
                    52:fe:56:ef:4b:5b:ec:8d:12:de:43:ae:07:6f:a1:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:21:53:17:DF:42:45:ED:8A:C2:F7:7C:2C:D5:BF:45:6A:72:70
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:af:38:52:93:3b:c9:88:37:58:02:33:33:cb:fe:58:04:d5:
         2d:dc:d3:07:78:6d:e5:c7:5d:d5:b3:aa:e3:78:a0:d2:91:1f:
         18:26:d9:9b:06:be:10:d9:b7:2f:7b:b2:cb:af:54:41:41:50:
         21:97:93:fe:fc:a1:0a:f3:96:ab:62:27:9c:a1:c5:32:c1:60:
         08:dc:b0:45:a7:d5:39:52:96:67:fb:77:47:b8:06:ba:f0:27:
         9c:de:e8:f8:7c:97:13:17:b6:30:06:81:4b:b2:48:e6:0e:a3:
         4b:f3:b4:d1:98:95:05:f5:b8:87:0a:81:32:29:c2:da:5c:de:
         0d:95:44:ac:af:35:fe:8a:32:aa:22:39:6d:d4:a3:31:43:91:
         71:ff:cf:af:d2:f9:c1:c4:b6:4f:43:ca:86:19:79:59:a9:82:
         f0:f8:83:d6:46:1e:d0:ed:87:c3:81:1f:3a:a9:18:77:bf:49:
         cb:40:8b:c9:c0:72:bd:66:48:e2:11:ae:10:5c:78:60:df:f2:
         cf:e7:da:2f:60:6b:70:27:95:64:01:ea:9b:83:5c:90:c8:84:
         a2:53:3b:3f:c5:c8:7d:fa:9e:76:45:d6:88:55:d9:22:02:7b:
         86:ec:43:e0:9b:00:49:10:99:4e:cf:07:be:0a:6c:fe:e9:24:
         4c:22:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:14 2025 by rpki-client