Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft
File:                     BF858D763EACB66391C131531036E078E22F45D5.mft (raw, json)
Hash identifier:          SzUS4ERQ5a8geU0Ye3DOHmHCngVA5JiLgraVvEyUYJs=
Subject key identifier:   47:26:24:BD:4E:37:50:C4:96:3D:8F:89:12:D3:D9:84:D4:29:CD:7B
Authority key identifier: BF:85:8D:76:3E:AC:B6:63:91:C1:31:53:10:36:E0:78:E2:2F:45:D5
Certificate issuer:       /CN=BF858D763EACB66391C131531036E078E22F45D5
Certificate serial:       33EC4582F351BDA25E62ACBE314B6E5BA5D4AE05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF858D763EACB66391C131531036E078E22F45D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft
Manifest number:          78
Signing time:             Tue 01 Apr 2025 08:15:58 +0000
Manifest this update:     Tue 01 Apr 2025 08:10:58 +0000
Manifest next update:     Wed 02 Apr 2025 11:06:58 +0000
Files and hashes:         1: BF858D763EACB66391C131531036E078E22F45D5.crl (hash: oyaJOr49tTi7+0EZxwD3A38TXamU7z1r64rvPXIEyU4=)
                          2: 323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (hash: GrK1Bg3DWvX2hUFTTrQTferad9zq+Y7z1zxAD1x+JHw=)
                          3: 3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (hash: AsQR1xL063fQ5oPesbqAY+mOv+UrbzaYsJQw3qOsOYs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ec:45:82:f3:51:bd:a2:5e:62:ac:be:31:4b:6e:5b:a5:d4:ae:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF858D763EACB66391C131531036E078E22F45D5
        Validity
            Not Before: Apr  1 08:10:58 2025 GMT
            Not After : Apr  2 11:06:58 2025 GMT
        Subject: CN=472624BD4E3750C4963D8F8912D3D984D429CD7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:90:a3:dd:70:9c:85:0e:79:4b:bf:44:b2:07:
                    53:91:b1:33:84:43:48:73:27:83:76:0f:8f:21:6e:
                    59:06:ae:07:16:f5:14:f9:ea:3f:e3:20:99:b0:17:
                    67:f8:6a:53:60:d4:7a:ea:7d:97:53:2a:95:af:2d:
                    ab:94:25:73:cb:e0:00:ac:d8:c9:a1:4e:ab:ef:57:
                    c0:7f:ef:b4:a3:70:11:c5:28:20:c6:91:a2:e8:a6:
                    20:3e:30:60:b1:70:11:88:fe:bc:ae:41:d9:dd:20:
                    93:32:f1:32:c5:cf:6d:a8:a1:d4:c7:28:6c:b6:22:
                    96:22:d1:7e:19:6c:47:e8:e4:cc:b3:c9:0f:f9:7a:
                    fd:6e:6a:49:d3:d1:e8:e7:a3:43:50:cb:8a:1f:00:
                    4b:00:45:5d:dc:e9:f2:62:d3:2a:2a:91:76:4d:ee:
                    f9:83:ff:bf:11:fc:59:fa:2f:e0:c8:2c:be:96:6c:
                    09:08:3b:7e:0f:80:98:1e:2c:be:d3:d2:de:21:0f:
                    58:10:93:a4:75:74:e1:1b:63:a7:bd:0d:e6:4e:fa:
                    41:08:80:78:55:fd:2a:7a:ae:a0:29:81:c5:91:3b:
                    e8:c1:b1:35:f3:c9:d6:48:a7:52:b9:e8:0a:33:4f:
                    1e:33:db:0c:1e:84:17:b3:d7:1a:25:b6:c9:e6:be:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:26:24:BD:4E:37:50:C4:96:3D:8F:89:12:D3:D9:84:D4:29:CD:7B
            X509v3 Authority Key Identifier:
                keyid:BF:85:8D:76:3E:AC:B6:63:91:C1:31:53:10:36:E0:78:E2:2F:45:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF858D763EACB66391C131531036E078E22F45D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:48:ce:47:16:ea:7b:63:7a:3e:99:2b:fa:bc:4f:15:db:58:
         27:3f:76:77:84:c0:36:14:5f:cb:9b:66:54:ef:86:3f:79:57:
         1b:b7:ab:7a:ec:f6:c4:2a:8e:dd:8e:6b:e2:7f:2b:92:87:19:
         24:44:91:5a:c2:d9:a1:26:f4:0e:c1:23:85:ac:0e:b4:b9:d4:
         d6:1c:89:a8:c9:38:10:60:6e:2e:27:72:ba:ab:08:71:7e:66:
         e7:85:95:24:22:4b:65:26:8a:33:88:54:e8:fa:bf:d3:50:1f:
         2d:2d:ee:75:90:d9:b3:5b:6d:4a:60:25:01:85:53:d3:cf:45:
         82:4d:2f:91:a5:4d:05:fb:3e:25:f8:c2:73:e2:4e:b8:40:b5:
         29:a2:90:ef:7f:13:6a:1d:64:b9:b2:22:73:b4:d5:e3:f5:a2:
         b3:2a:5b:bc:8c:0f:76:b4:54:7e:c4:0b:ee:6d:4c:2f:34:ac:
         d9:20:47:49:05:f1:ad:be:49:e6:c6:1d:4d:6e:ba:55:d0:70:
         35:05:29:27:32:c3:f9:3d:30:76:7c:2a:79:0a:34:5a:eb:83:
         1c:a3:80:5d:bb:28:4e:81:13:48:bc:13:2f:4f:47:35:fe:61:
         a8:65:99:7d:58:ff:52:05:30:32:b7:de:4c:cf:f8:c7:c0:32:
         2d:b6:c4:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM+xFgvNRvaJeYqy+MUtuW6XUrgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY4NThENzYzRUFDQjY2MzkxQzEzMTUzMTAzNkUwNzhF
MjJGNDVENTAeFw0yNTA0MDEwODEwNThaFw0yNTA0MDIxMTA2NThaMDMxMTAvBgNV
BAMTKDQ3MjYyNEJENEUzNzUwQzQ5NjNEOEY4OTEyRDNEOTg0RDQyOUNEN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkKPdcJyFDnlLv0SyB1ORsTOE
Q0hzJ4N2D48hblkGrgcW9RT56j/jIJmwF2f4alNg1HrqfZdTKpWvLauUJXPL4ACs
2MmhTqvvV8B/77SjcBHFKCDGkaLopiA+MGCxcBGI/ryuQdndIJMy8TLFz22oodTH
KGy2IpYi0X4ZbEfo5MyzyQ/5ev1uaknT0ejno0NQy4ofAEsARV3c6fJi0yoqkXZN
7vmD/78R/Fn6L+DILL6WbAkIO34PgJgeLL7T0t4hD1gQk6R1dOEbY6e9DeZO+kEI
gHhV/Sp6rqApgcWRO+jBsTXzydZIp1K56AozTx4z2wwehBez1xoltsnmvs/BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURyYkvU43UMSWPY+JEtPZhNQpzXswHwYDVR0j
BBgwFoAUv4WNdj6stmORwTFTEDbgeOIvRdUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFn
aW8vMC9CRjg1OEQ3NjNFQUNCNjYzOTFDMTMxNTMxMDM2RTA3OEUyMkY0NUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGODU4RDc2M0VBQ0I2NjM5
MUMxMzE1MzEwMzZFMDc4RTIyRjQ1RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFnaW8vMC9C
Rjg1OEQ3NjNFQUNCNjYzOTFDMTMxNTMxMDM2RTA3OEUyMkY0NUQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABUjORxbqe2N6Ppkr+rxPFdtYJz92d4TANhRfy5tmVO+GP3lXG7ereuz2xCqO
3Y5r4n8rkocZJESRWsLZoSb0DsEjhawOtLnU1hyJqMk4EGBuLidyuqsIcX5m54WV
JCJLZSaKM4hU6Pq/01AfLS3udZDZs1ttSmAlAYVT089Fgk0vkaVNBfs+JfjCc+JO
uEC1KaKQ738Tah1kubIic7TV4/WisypbvIwPdrRUfsQL7m1MLzSs2SBHSQXxrb5J
5sYdTW66VdBwNQUpJzLD+T0wdnwqeQo0WuuDHKOAXbsoToETSLwTL09HNf5hqGWZ
fVj/UgUwMrfeTM/4x8AyLbbEug==
-----END CERTIFICATE-----
Generated at Fri Jun 20 07:19:18 2025 by rpki-client