Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/8351D68395C08BF478012D25B79F2499141C8F54.mft
File:                     8351D68395C08BF478012D25B79F2499141C8F54.mft (raw, json)
Hash identifier:          KKaDICXJs6nU/c3bHVjL1jgwv7plL5pyD19uUa8mqFI=
Subject key identifier:   94:6C:D2:1B:72:DD:53:EC:BC:49:39:32:0A:99:E7:A8:5D:5D:2F:FA
Authority key identifier: 83:51:D6:83:95:C0:8B:F4:78:01:2D:25:B7:9F:24:99:14:1C:8F:54
Certificate issuer:       /CN=8351D68395C08BF478012D25B79F2499141C8F54
Certificate serial:       29C4D0ED14CF13314ED240DCDEAC676E5C676F65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8351D68395C08BF478012D25B79F2499141C8F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/8351D68395C08BF478012D25B79F2499141C8F54.mft
Manifest number:          ED
Signing time:             Thu 10 Apr 2025 11:40:43 +0000
Manifest this update:     Thu 10 Apr 2025 11:35:43 +0000
Manifest next update:     Fri 11 Apr 2025 15:21:43 +0000
Files and hashes:         1: 3139322e3134312e3137322e302f32322d3332203d3e20323637343930.roa (hash: 4MhkNNPnRi0J0ZCK63C1ffDjB/6bSy5GGA1Q20lczLs=)
                          2: 8351D68395C08BF478012D25B79F2499141C8F54.crl (hash: zW7mlELV07qtpY7R4UQdXWRtn8h9NwX5nYWZRa9ctFw=)
                          3: 323830343a343234383a3a2f33322d313238203d3e20323637343930.roa (hash: tlJfwely8SrG46OeGhZ10by4+YU1lZmwGwe8548VKi0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c4:d0:ed:14:cf:13:31:4e:d2:40:dc:de:ac:67:6e:5c:67:6f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8351D68395C08BF478012D25B79F2499141C8F54
        Validity
            Not Before: Apr 10 11:35:43 2025 GMT
            Not After : Apr 11 15:21:43 2025 GMT
        Subject: CN=946CD21B72DD53ECBC4939320A99E7A85D5D2FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:d8:e7:83:77:d7:c6:d7:34:5f:e2:22:b9:
                    61:1c:76:8b:14:eb:15:8e:82:84:34:fc:a5:2b:22:
                    9f:b4:74:ab:89:2d:b9:1e:20:0d:11:97:80:88:19:
                    d9:27:da:a2:72:01:b9:2a:ca:35:4a:ca:33:09:b2:
                    c9:fa:7a:89:56:94:1c:4c:32:52:86:43:5b:54:08:
                    91:a8:c1:5f:ed:36:60:6d:3c:f1:d7:97:81:d2:26:
                    53:7f:4e:3f:6d:31:df:08:0e:5a:20:35:17:3e:4d:
                    ac:92:bc:19:a4:63:56:a0:68:25:0b:63:44:78:fe:
                    c3:15:80:c4:8f:9c:f9:1a:b8:ee:9e:32:c8:8b:04:
                    a1:70:a9:41:cd:61:51:b5:78:f8:83:59:df:81:53:
                    fb:a8:85:ec:22:ec:f0:33:bb:c7:32:38:d3:34:83:
                    1f:29:30:9b:c2:63:24:31:0d:75:34:05:f9:98:2d:
                    9e:26:fa:fb:6b:4b:93:47:21:a3:1f:b9:d8:37:6a:
                    c6:28:08:e1:3c:15:20:30:6a:d3:11:01:de:ba:d9:
                    66:d2:fa:c4:13:5f:04:99:ab:a8:49:91:7c:6b:20:
                    d1:54:62:97:91:b6:9b:08:9f:b3:38:09:68:a6:43:
                    be:ea:94:72:79:27:ee:48:4a:aa:9f:2f:bc:f0:38:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:D2:1B:72:DD:53:EC:BC:49:39:32:0A:99:E7:A8:5D:5D:2F:FA
            X509v3 Authority Key Identifier:
                keyid:83:51:D6:83:95:C0:8B:F4:78:01:2D:25:B7:9F:24:99:14:1C:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/8351D68395C08BF478012D25B79F2499141C8F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8351D68395C08BF478012D25B79F2499141C8F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/8351D68395C08BF478012D25B79F2499141C8F54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1c:92:2a:a4:3c:1e:fe:a7:09:cd:e2:d6:4d:6b:1d:30:35:
         e3:cf:43:87:e6:a8:43:ee:5b:fb:18:02:88:46:bb:d4:a5:75:
         9e:26:28:a6:44:93:62:20:41:fd:c3:cb:0f:15:5a:4e:81:29:
         2b:33:32:22:8b:aa:03:c7:38:14:ca:f6:dc:c0:54:8c:40:fc:
         bf:53:93:c8:b3:1c:89:49:2e:88:c0:91:13:82:fb:e2:e1:c3:
         0a:21:c7:2b:9f:e8:c7:f1:ea:85:b0:fe:53:df:9e:92:10:98:
         12:19:28:8e:73:56:33:21:cc:6f:42:c9:3d:04:cc:f4:40:db:
         9a:ed:75:b4:3a:ce:d2:b8:c8:5e:ba:34:c4:b2:2f:34:89:62:
         12:bc:68:d1:e4:ae:6a:4d:94:fc:b0:71:61:79:0e:b1:6a:de:
         31:11:16:14:c8:0e:27:f6:48:92:87:67:a3:6b:c3:6f:41:be:
         db:a5:73:58:79:45:2a:69:e8:2b:90:a8:7f:f1:2e:f8:5a:02:
         7f:6a:0c:b8:bc:56:ca:b4:33:4a:a5:c8:5f:e6:9f:86:7e:d0:
         02:46:15:01:86:a4:07:dc:fc:09:a8:30:55:e1:54:95:d7:9c:
         ad:00:85:0b:96:08:ae:d8:17:03:c5:48:6e:1c:51:c4:b6:3b:
         b8:ab:2f:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKcTQ7RTPEzFO0kDc3qxnblxnb2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM1MUQ2ODM5NUMwOEJGNDc4MDEyRDI1Qjc5RjI0OTkx
NDFDOEY1NDAeFw0yNTA0MTAxMTM1NDNaFw0yNTA0MTExNTIxNDNaMDMxMTAvBgNV
BAMTKDk0NkNEMjFCNzJERDUzRUNCQzQ5MzkzMjBBOTlFN0E4NUQ1RDJGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDdjng3fXxtc0X+IiuWEcdosU
6xWOgoQ0/KUrIp+0dKuJLbkeIA0Rl4CIGdkn2qJyAbkqyjVKyjMJssn6eolWlBxM
MlKGQ1tUCJGowV/tNmBtPPHXl4HSJlN/Tj9tMd8IDlogNRc+TaySvBmkY1agaCUL
Y0R4/sMVgMSPnPkauO6eMsiLBKFwqUHNYVG1ePiDWd+BU/uohewi7PAzu8cyONM0
gx8pMJvCYyQxDXU0BfmYLZ4m+vtrS5NHIaMfudg3asYoCOE8FSAwatMRAd662WbS
+sQTXwSZq6hJkXxrINFUYpeRtpsIn7M4CWimQ77qlHJ5J+5ISqqfL7zwOM1TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlGzSG3LdU+y8STkyCpnnqF1dL/owHwYDVR0j
BBgwFoAUg1HWg5XAi/R4AS0lt58kmRQcj1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RpVGVHVzVIR1h2OEV2eUxaZDFVTjl5dENiNUFDNXVIZkxlY3VvS0NT
S04vMC84MzUxRDY4Mzk1QzA4QkY0NzgwMTJEMjVCNzlGMjQ5OTE0MUM4RjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNTFENjgzOTVDMDhCRjQ3
ODAxMkQyNUI3OUYyNDk5MTQxQzhGNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3RpVGVHVzVIR1h2OEV2eUxaZDFVTjl5dENiNUFDNXVIZkxlY3VvS0NTS04vMC84
MzUxRDY4Mzk1QzA4QkY0NzgwMTJEMjVCNzlGMjQ5OTE0MUM4RjU0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMhySKqQ8Hv6nCc3i1k1rHTA1489Dh+aoQ+5b+xgCiEa71KV1niYopkSTYiBB
/cPLDxVaToEpKzMyIouqA8c4FMr23MBUjED8v1OTyLMciUkuiMCRE4L74uHDCiHH
K5/ox/HqhbD+U9+ekhCYEhkojnNWMyHMb0LJPQTM9EDbmu11tDrO0rjIXro0xLIv
NIliErxo0eSuak2U/LBxYXkOsWreMREWFMgOJ/ZIkodno2vDb0G+26VzWHlFKmno
K5Cof/Eu+FoCf2oMuLxWyrQzSqXIX+afhn7QAkYVAYakB9z8CagwVeFUldecrQCF
C5YIrtgXA8VIbhxRxLY7uKsvkA==
-----END CERTIFICATE-----