Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/038E843DA67D9D86E76155AF03BE38C0832E4900.mft
File:                     038E843DA67D9D86E76155AF03BE38C0832E4900.mft (raw, json)
Hash identifier:          3SOiZWSIKFlHoIKIHgZjA8I8oGy4bD6FmNnFRIZ21jw=
Subject key identifier:   E8:0E:27:DE:B8:E8:A6:F5:B1:77:86:C5:0C:1F:77:8D:97:A8:4C:FA
Authority key identifier: 03:8E:84:3D:A6:7D:9D:86:E7:61:55:AF:03:BE:38:C0:83:2E:49:00
Certificate issuer:       /CN=038E843DA67D9D86E76155AF03BE38C0832E4900
Certificate serial:       729DDA77A9712C1C4CD43DBEB33517254F0E8A92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038E843DA67D9D86E76155AF03BE38C0832E4900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/038E843DA67D9D86E76155AF03BE38C0832E4900.mft
Manifest number:          0133
Signing time:             Tue 14 Oct 2025 08:15:51 +0000
Manifest this update:     Tue 14 Oct 2025 08:10:51 +0000
Manifest next update:     Wed 15 Oct 2025 11:23:51 +0000
Files and hashes:         1: 323830343a373764383a3a2f33322d313238203d3e20323731323033.roa (hash: +V7rbP/8v1gTe8jLaQ0hHIg2c923FSd32YO9V450rt8=)
                          2: 038E843DA67D9D86E76155AF03BE38C0832E4900.crl (hash: wgm35+iWhj7C1gm1mAXN3AlAeFPpsiqHddw7dXJNS7E=)
                          3: 3137392e34392e3137362e302f32322d3332203d3e20323731323033.roa (hash: L+vJj+VRIp5+PPY/tOlS2UqyatbIVayX+5cJytwidiU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9d:da:77:a9:71:2c:1c:4c:d4:3d:be:b3:35:17:25:4f:0e:8a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038E843DA67D9D86E76155AF03BE38C0832E4900
        Validity
            Not Before: Oct 14 08:10:51 2025 GMT
            Not After : Oct 15 11:23:51 2025 GMT
        Subject: CN=E80E27DEB8E8A6F5B17786C50C1F778D97A84CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:fd:fa:96:5d:21:0e:6d:08:4c:32:c3:95:
                    83:4c:a7:71:d3:2c:56:8d:05:60:32:c2:b2:1f:e2:
                    f9:a3:8e:44:fe:2b:1f:19:24:12:f4:f7:7c:9a:fa:
                    5d:5f:8b:00:47:32:fd:ab:a0:ba:c2:82:88:fe:d9:
                    ee:a2:9e:1e:83:18:ea:df:f3:69:44:f4:56:80:61:
                    ee:1a:47:03:89:06:8c:d9:97:8f:3a:af:1a:67:94:
                    cb:e2:80:99:2a:1b:11:39:9b:37:72:cd:8c:f0:18:
                    26:87:1d:eb:88:5b:d8:7a:48:5a:e7:30:6d:fc:62:
                    03:48:cb:f6:b8:6a:05:7f:0b:a6:6b:27:55:8e:9b:
                    52:65:96:7d:64:5c:64:a9:27:26:47:f4:d7:02:63:
                    18:40:42:ea:89:a8:65:83:bb:8b:c1:a9:a9:52:66:
                    eb:d7:eb:0f:e3:7f:96:83:30:b5:28:42:f4:0d:19:
                    12:8d:2e:d0:dd:62:78:4c:d0:2f:f3:4f:e8:25:72:
                    61:15:ba:87:95:4f:42:7d:c8:19:a5:01:e2:3c:20:
                    a0:be:db:3a:eb:48:87:d7:4d:f4:f1:ba:19:4f:a2:
                    84:f2:17:22:80:3b:95:11:48:e7:9b:10:96:cc:02:
                    e1:fd:fa:0e:03:3f:67:a3:d9:07:ee:47:04:f8:79:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0E:27:DE:B8:E8:A6:F5:B1:77:86:C5:0C:1F:77:8D:97:A8:4C:FA
            X509v3 Authority Key Identifier:
                keyid:03:8E:84:3D:A6:7D:9D:86:E7:61:55:AF:03:BE:38:C0:83:2E:49:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/038E843DA67D9D86E76155AF03BE38C0832E4900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038E843DA67D9D86E76155AF03BE38C0832E4900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/038E843DA67D9D86E76155AF03BE38C0832E4900.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:6b:57:8a:03:f1:ae:a9:a6:64:3c:f8:2a:c9:20:dd:df:
         6d:b6:5d:0d:9b:4f:f7:b6:2a:c0:3a:4d:2c:9a:08:79:7e:ab:
         dc:a8:43:2c:72:e9:73:de:c9:25:9f:61:0a:b6:00:bd:cf:08:
         b0:66:60:e7:a5:9d:f3:be:c2:a5:04:a0:be:41:7a:0c:f1:c3:
         df:34:01:33:02:b7:d7:ac:01:28:cc:13:64:e1:e9:21:e8:56:
         98:2f:a8:d1:dc:34:6b:92:97:08:4a:30:e3:f3:aa:70:1c:db:
         68:82:86:23:21:7f:b2:37:82:b7:d1:c0:0c:04:fd:e4:ac:d7:
         a4:a1:3a:46:4b:82:d7:ec:ba:c1:b1:71:ff:d7:97:60:d3:8f:
         7b:b5:f5:37:97:2f:bb:51:e9:6d:a5:d4:95:57:55:01:4b:aa:
         57:a1:6d:8e:95:2b:5d:cd:06:3c:d1:7b:2d:17:75:16:ad:c9:
         68:b4:5c:25:b4:07:d0:30:a0:46:57:30:44:d1:d9:e1:c3:39:
         04:28:a4:4f:fb:d5:19:84:53:1d:7a:50:57:9b:5e:da:ca:b8:
         88:07:0e:e4:24:e0:e7:3f:ef:a3:e9:68:2c:47:df:e9:0e:4b:
         8a:56:f8:8e:26:57:fa:fc:41:bf:07:46:20:70:cf:e7:87:fc:
         31:cb:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----