Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
File:                     8C9489B5F162370B3CD6AE611F82567891AA2F79.mft (raw, json)
Hash identifier:          uqlEHk2y1KW1tRvwOQeKGyUzWVMNBbKJlhRgSpFnbyU=
Subject key identifier:   D7:20:FF:08:94:D0:D1:EE:14:83:D8:3A:23:57:F4:28:5E:3B:1C:B4
Authority key identifier: 8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
Certificate issuer:       /CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
Certificate serial:       1D37C909695E17786A5D2B9F6541C097A1ECA990
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
Manifest number:          4F
Signing time:             Fri 20 Jun 2025 11:20:41 +0000
Manifest this update:     Fri 20 Jun 2025 11:15:41 +0000
Manifest next update:     Sat 21 Jun 2025 14:31:41 +0000
Files and hashes:         1: 323830343a353239383a3a2f33322d3438203d3e20323638353238.roa (hash: npZtOWAX2jdEasirZhHJUpjOYx48/HGh96fzMy2npB8=)
                          2: 34352e3136322e3231382e302f32342d3234203d3e20323638353238.roa (hash: B/FW6NB9mbW4dLGdEb/iRIbaB2Z4d1Aejq3uYgvPCeA=)
                          3: 8C9489B5F162370B3CD6AE611F82567891AA2F79.crl (hash: s1rFWekBM5EI7fjXZhJMbrb9vMJyp+5LRAqkqnOEIaY=)
                          4: 34352e3136322e3231362e302f32332d3234203d3e20323638353238.roa (hash: iA+ldL/fGyDGB/XdXsXTUs22s5Gfxyq23UOMWKTack8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:37:c9:09:69:5e:17:78:6a:5d:2b:9f:65:41:c0:97:a1:ec:a9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
        Validity
            Not Before: Jun 20 11:15:41 2025 GMT
            Not After : Jun 21 14:31:41 2025 GMT
        Subject: CN=D720FF0894D0D1EE1483D83A2357F4285E3B1CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:06:5d:99:80:33:d3:97:9a:49:cd:4d:1b:
                    86:40:56:f0:b5:fc:7d:48:50:ed:8e:15:e2:32:9c:
                    e7:4e:c2:60:79:cf:57:b7:a7:23:a0:b1:ea:23:3e:
                    ef:93:cf:81:69:71:19:54:82:7c:35:9f:7f:c5:f6:
                    ce:c5:0d:7c:de:aa:6f:d3:73:04:db:d5:cb:20:63:
                    ef:c9:42:c8:76:b0:98:15:3d:98:a1:45:dc:30:4c:
                    e0:b1:94:59:6f:9d:e7:1d:92:0a:dc:ab:59:c2:52:
                    4f:6e:39:24:46:47:5d:f0:3d:e9:03:6a:fa:52:d7:
                    17:48:2a:4f:b5:bc:91:73:17:d3:f1:4f:c9:de:02:
                    87:8a:b5:ea:b2:9e:a0:26:a9:b3:d0:84:5c:8e:a2:
                    49:14:da:19:c8:6e:78:6f:8b:cb:72:04:88:16:06:
                    14:a2:b8:2e:c0:8d:43:9c:6e:7b:32:a4:8e:89:82:
                    0c:3d:a6:ed:f8:f8:6c:b8:88:9d:f9:d3:0a:a0:5b:
                    aa:7f:ff:e1:e0:24:d6:97:1a:d2:11:6a:8e:6d:c2:
                    83:35:99:87:fe:d9:b5:98:73:6c:74:c7:0d:0a:1a:
                    1d:19:df:85:98:69:27:fc:8c:5a:b0:79:70:0d:a8:
                    8d:63:f8:4e:ce:ec:6e:30:6b:aa:43:fd:42:af:70:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:20:FF:08:94:D0:D1:EE:14:83:D8:3A:23:57:F4:28:5E:3B:1C:B4
            X509v3 Authority Key Identifier:
                keyid:8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:91:3b:aa:38:59:68:71:5c:a0:52:65:35:ed:e5:38:ee:54:
         ca:f6:06:00:31:51:08:0f:ca:c9:0d:12:b8:dd:89:0b:bb:18:
         04:00:df:64:11:db:aa:1b:95:a8:49:ce:63:77:2c:85:1f:cd:
         f4:a2:b4:ea:a1:a5:28:02:5c:f0:f9:b2:59:98:41:e2:70:32:
         f2:7f:e4:00:7f:5e:e6:ef:97:84:51:c1:f5:97:c6:c8:d9:c1:
         d2:63:b8:4a:91:98:ec:ea:5e:4b:7e:39:ce:63:06:19:ad:f8:
         a0:87:47:95:d0:23:30:42:11:c6:8d:d6:5a:6e:98:2d:e4:dc:
         98:f9:22:10:0f:7d:38:ed:b9:be:a5:a6:23:72:c1:fc:c5:d3:
         74:62:2b:67:50:0b:4f:58:f8:4e:54:9f:fa:26:be:6f:b2:33:
         cb:b0:7e:98:f0:e2:c5:7c:00:97:8b:ff:5e:d6:2b:be:38:aa:
         41:69:be:cc:60:21:87:6b:86:81:f2:83:2e:a8:2c:30:61:c5:
         e6:f9:bf:de:c6:42:46:c5:da:c7:c4:55:0a:97:a1:01:88:7a:
         72:41:df:01:b7:be:06:7f:54:91:43:dc:fe:98:5a:d3:04:4a:
         53:3a:0b:9e:20:fe:50:8e:2e:57:74:b4:6d:58:ee:74:65:4d:
         0d:54:99:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHTfJCWleF3hqXSufZUHAl6HsqZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM5NDg5QjVGMTYyMzcwQjNDRDZBRTYxMUY4MjU2Nzg5
MUFBMkY3OTAeFw0yNTA2MjAxMTE1NDFaFw0yNTA2MjExNDMxNDFaMDMxMTAvBgNV
BAMTKEQ3MjBGRjA4OTREMEQxRUUxNDgzRDgzQTIzNTdGNDI4NUUzQjFDQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRQZdmYAz05eaSc1NG4ZAVvC1
/H1IUO2OFeIynOdOwmB5z1e3pyOgseojPu+Tz4FpcRlUgnw1n3/F9s7FDXzeqm/T
cwTb1csgY+/JQsh2sJgVPZihRdwwTOCxlFlvnecdkgrcq1nCUk9uOSRGR13wPekD
avpS1xdIKk+1vJFzF9PxT8neAoeKteqynqAmqbPQhFyOokkU2hnIbnhvi8tyBIgW
BhSiuC7AjUOcbnsypI6Jggw9pu34+Gy4iJ350wqgW6p//+HgJNaXGtIRao5twoM1
mYf+2bWYc2x0xw0KGh0Z34WYaSf8jFqweXANqI1j+E7O7G4wa6pD/UKvcDtxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1yD/CJTQ0e4Ug9g6I1f0KF47HLQwHwYDVR0j
BBgwFoAUjJSJtfFiNws81q5hH4JWeJGqL3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndlelBxQ3RwRlpFN1ZtcVJTeVBRRlBzTHc1Y1NKMm52UGlGMjlSQ0w0
OXYvMC84Qzk0ODlCNUYxNjIzNzBCM0NENkFFNjExRjgyNTY3ODkxQUEyRjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDOTQ4OUI1RjE2MjM3MEIz
Q0Q2QUU2MTFGODI1Njc4OTFBQTJGNzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QndlelBxQ3RwRlpFN1ZtcVJTeVBRRlBzTHc1Y1NKMm52UGlGMjlSQ0w0OXYvMC84
Qzk0ODlCNUYxNjIzNzBCM0NENkFFNjExRjgyNTY3ODkxQUEyRjc5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAJE7qjhZaHFcoFJlNe3lOO5UyvYGADFRCA/KyQ0SuN2JC7sYBADfZBHbqhuV
qEnOY3cshR/N9KK06qGlKAJc8PmyWZhB4nAy8n/kAH9e5u+XhFHB9ZfGyNnB0mO4
SpGY7OpeS345zmMGGa34oIdHldAjMEIRxo3WWm6YLeTcmPkiEA99OO25vqWmI3LB
/MXTdGIrZ1ALT1j4TlSf+ia+b7Izy7B+mPDixXwAl4v/XtYrvjiqQWm+zGAhh2uG
gfKDLqgsMGHF5vm/3sZCRsXax8RVCpehAYh6ckHfAbe+Bn9UkUPc/pha0wRKUzoL
niD+UI4uV3S0bVjudGVNDVSZfA==
-----END CERTIFICATE-----