Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft
File:                     BA632A9087D3F9A39D150D208B6706857AEB9D59.mft (raw, json)
Hash identifier:          FK8kdRjbjt1o3yqFoDH6crj2DZEPHZXh9X9k2bbQFvU=
Subject key identifier:   BC:B2:9F:62:D0:EB:7F:09:87:B9:4D:6F:11:DC:B5:3A:99:54:1E:60
Authority key identifier: BA:63:2A:90:87:D3:F9:A3:9D:15:0D:20:8B:67:06:85:7A:EB:9D:59
Certificate issuer:       /CN=BA632A9087D3F9A39D150D208B6706857AEB9D59
Certificate serial:       7CD6C0ED8F2B8F1D4FDCC4C382AF1F95B5A9AEB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft
Manifest number:          01C6
Signing time:             Fri 31 Jan 2025 03:04:00 +0000
Manifest this update:     Fri 31 Jan 2025 02:59:00 +0000
Manifest next update:     Sat 01 Feb 2025 03:04:00 +0000
Files and hashes:         1: BA632A9087D3F9A39D150D208B6706857AEB9D59.crl (hash: vFfvioeefjitvKE2kRHKCR+ZE5Pdb1vY1CnKsVW8KkI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d6:c0:ed:8f:2b:8f:1d:4f:dc:c4:c3:82:af:1f:95:b5:a9:ae:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA632A9087D3F9A39D150D208B6706857AEB9D59
        Validity
            Not Before: Jan 31 02:59:00 2025 GMT
            Not After : Feb  7 03:04:00 2025 GMT
        Subject: CN=3082010A0282010100C43051FD2D827CEB2E0B393F7E3A405EFE0ED4E0F7088971D034DC0BE25B12750E9DF8421CC4B246FCD0DEEA69B11B0E48A5E57E4BCED4F848B874C9A51522C11034C0B5B4D691C9D9D33AD7CE1F33F99B14D9A1B40A4507E3398E50EA69D96D5D07BDA3667138A939568A16BF1878C021D79DFFD0E3A0042D2116DB37AA27B9069BC09A38C291A87CF39C62D008A4338DA91A756E30CC4EA820F412CBD42CDB25EB754733CD92FACD1ECD0B0E4ED2E0DD345E315CF8777C24767DB9EA6E0BFB0556E9DB9951D318BF0B1111CE473B1BA102CDAF25CC61F7B2EE65E2A423541BEF91DBB00921725101AE6C03940A6AD00603BFAF17353A4286B21C10D9DBE12D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:51:fd:2d:82:7c:eb:2e:0b:39:3f:7e:3a:
                    40:5e:fe:0e:d4:e0:f7:08:89:71:d0:34:dc:0b:e2:
                    5b:12:75:0e:9d:f8:42:1c:c4:b2:46:fc:d0:de:ea:
                    69:b1:1b:0e:48:a5:e5:7e:4b:ce:d4:f8:48:b8:74:
                    c9:a5:15:22:c1:10:34:c0:b5:b4:d6:91:c9:d9:d3:
                    3a:d7:ce:1f:33:f9:9b:14:d9:a1:b4:0a:45:07:e3:
                    39:8e:50:ea:69:d9:6d:5d:07:bd:a3:66:71:38:a9:
                    39:56:8a:16:bf:18:78:c0:21:d7:9d:ff:d0:e3:a0:
                    04:2d:21:16:db:37:aa:27:b9:06:9b:c0:9a:38:c2:
                    91:a8:7c:f3:9c:62:d0:08:a4:33:8d:a9:1a:75:6e:
                    30:cc:4e:a8:20:f4:12:cb:d4:2c:db:25:eb:75:47:
                    33:cd:92:fa:cd:1e:cd:0b:0e:4e:d2:e0:dd:34:5e:
                    31:5c:f8:77:7c:24:76:7d:b9:ea:6e:0b:fb:05:56:
                    e9:db:99:51:d3:18:bf:0b:11:11:ce:47:3b:1b:a1:
                    02:cd:af:25:cc:61:f7:b2:ee:65:e2:a4:23:54:1b:
                    ef:91:db:b0:09:21:72:51:01:ae:6c:03:94:0a:6a:
                    d0:06:03:bf:af:17:35:3a:42:86:b2:1c:10:d9:db:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B2:9F:62:D0:EB:7F:09:87:B9:4D:6F:11:DC:B5:3A:99:54:1E:60
            X509v3 Authority Key Identifier:
                keyid:BA:63:2A:90:87:D3:F9:A3:9D:15:0D:20:8B:67:06:85:7A:EB:9D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/1/BA632A9087D3F9A39D150D208B6706857AEB9D59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:ff:cc:c9:a5:74:42:ee:d5:ef:58:8e:eb:73:fd:fe:b8:
         e3:6b:34:fd:5c:71:b3:e5:18:d4:83:85:ed:9b:de:28:c0:ff:
         9e:b7:77:03:cd:92:6b:37:44:86:7c:2f:a1:ff:ce:5b:2c:ea:
         75:a3:06:01:b5:3e:e8:68:f1:73:a0:af:d3:52:0a:b1:c6:0e:
         84:5f:07:e7:80:da:49:37:ec:c2:52:fc:08:c9:cd:98:48:2d:
         80:c3:7b:ea:88:55:62:66:3f:25:2d:65:17:e8:f0:42:93:66:
         70:58:8f:2d:68:ab:61:f2:d8:85:08:c3:db:27:2d:04:14:d9:
         71:a9:bc:51:bc:51:31:ec:a8:59:1b:5e:1b:8f:9e:1d:86:b6:
         43:e2:e8:14:c0:dc:01:71:5f:11:cd:fc:5f:2d:ad:aa:4c:d0:
         e9:62:2a:7a:f2:0f:96:92:42:76:d7:e8:ef:8e:f3:c0:02:03:
         5c:46:d0:85:11:0c:8b:8d:6c:2e:f4:5c:8b:07:40:9f:cc:df:
         84:a6:bc:3e:26:a9:56:e3:00:dd:e3:4d:c8:f9:d8:73:21:0b:
         f8:77:99:23:25:b6:77:c9:ea:57:5b:2f:34:cb:76:dd:15:1e:
         c8:a8:90:8a:02:ab:bc:56:bb:69:2a:13:c6:df:82:39:25:5c:
         59:0c:8a:92
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUfNbA7Y8rjx1P3MTDgq8flbWprrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE2MzJBOTA4N0QzRjlBMzlEMTUwRDIwOEI2NzA2ODU3
QUVCOUQ1OTAeFw0yNTAxMzEwMjU5MDBaFw0yNTAyMDcwMzA0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQzMDUxRkQyRDgyN0NFQjJF
MEIzOTNGN0UzQTQwNUVGRTBFRDRFMEY3MDg4OTcxRDAzNERDMEJFMjVCMTI3NTBF
OURGODQyMUNDNEIyNDZGQ0QwREVFQTY5QjExQjBFNDhBNUU1N0U0QkNFRDRGODQ4
Qjg3NEM5QTUxNTIyQzExMDM0QzBCNUI0RDY5MUM5RDlEMzNBRDdDRTFGMzNGOTlC
MTREOUExQjQwQTQ1MDdFMzM5OEU1MEVBNjlEOTZENUQwN0JEQTM2NjcxMzhBOTM5
NTY4QTE2QkYxODc4QzAyMUQ3OURGRkQwRTNBMDA0MkQyMTE2REIzN0FBMjdCOTA2
OUJDMDlBMzhDMjkxQTg3Q0YzOUM2MkQwMDhBNDMzOERBOTFBNzU2RTMwQ0M0RUE4
MjBGNDEyQ0JENDJDREIyNUVCNzU0NzMzQ0Q5MkZBQ0QxRUNEMEIwRTRFRDJFMERE
MzQ1RTMxNUNGODc3N0MyNDc2N0RCOUVBNkUwQkZCMDU1NkU5REI5OTUxRDMxOEJG
MEIxMTExQ0U0NzNCMUJBMTAyQ0RBRjI1Q0M2MUY3QjJFRTY1RTJBNDIzNTQxQkVG
OTFEQkIwMDkyMTcyNTEwMUFFNkMwMzk0MEE2QUQwMDYwM0JGQUYxNzM1M0E0Mjg2
QjIxQzEwRDlEQkUxMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxDBR/S2CfOsuCzk/fjpAXv4O1OD3CIlx0DTcC+JbEnUOnfhCHMSy
RvzQ3uppsRsOSKXlfkvO1PhIuHTJpRUiwRA0wLW01pHJ2dM6184fM/mbFNmhtApF
B+M5jlDqadltXQe9o2ZxOKk5VooWvxh4wCHXnf/Q46AELSEW2zeqJ7kGm8CaOMKR
qHzznGLQCKQzjakadW4wzE6oIPQSy9Qs2yXrdUczzZL6zR7NCw5O0uDdNF4xXPh3
fCR2fbnqbgv7BVbp25lR0xi/CxERzkc7G6ECza8lzGH3su5l4qQjVBvvkduwCSFy
UQGubAOUCmrQBgO/rxc1OkKGshwQ2dvhLQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FLyyn2LQ638Jh7lNbxHctTqZVB5gMB8GA1UdIwQYMBaAFLpjKpCH0/mjnRUNIItn
BoV6651ZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNZamQxelFxWm5zR3V0
QmQ3c1QxYnhRVGc0M3NObTFRNjh5QVR2ZTFRZWduLzEvQkE2MzJBOTA4N0QzRjlB
MzlEMTUwRDIwOEI2NzA2ODU3QUVCOUQ1OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CQTYzMkE5MDg3RDNGOUEzOUQxNTBEMjA4QjY3MDY4NTdBRUI5
RDU5LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNZamQxelFxWm5zR3V0QmQ3c1Qx
YnhRVGc0M3NObTFRNjh5QVR2ZTFRZWduLzEvQkE2MzJBOTA4N0QzRjlBMzlEMTUw
RDIwOEI2NzA2ODU3QUVCOUQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF8a/8zJpXRC7tXvWI7rc/3+
uONrNP1ccbPlGNSDhe2b3ijA/563dwPNkms3RIZ8L6H/zlss6nWjBgG1Puho8XOg
r9NSCrHGDoRfB+eA2kk37MJS/AjJzZhILYDDe+qIVWJmPyUtZRfo8EKTZnBYjy1o
q2Hy2IUIw9snLQQU2XGpvFG8UTHsqFkbXhuPnh2GtkPi6BTA3AFxXxHN/F8trapM
0OliKnryD5aSQnbX6O+O88ACA1xG0IURDIuNbC70XIsHQJ/M34SmvD4mqVbjAN3j
Tcj52HMhC/h3mSMltnfJ6ldbLzTLdt0VHsiokIoCq7xWu2kqE8bfgjklXFkMipI=
-----END CERTIFICATE-----