Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.mft
File:                     AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.mft (raw, json)
Hash identifier:          LZMvOSEDXg6a66wTAJIDAnV1BWjXMxwD66oxHv1QUwQ=
Subject key identifier:   E4:4B:D9:43:77:BA:FB:23:3E:94:28:2E:53:75:1D:90:AC:EA:16:9F
Authority key identifier: AE:BB:CB:B7:EF:CC:7F:ED:03:3C:BF:3F:33:3F:E9:C8:0B:28:FF:DD
Certificate issuer:       /CN=AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD
Certificate serial:       06CF204A83848EF0809BCA45B9610B66610EF421
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.mft
Manifest number:          FF
Signing time:             Fri 31 Jan 2025 14:02:49 +0000
Manifest this update:     Fri 31 Jan 2025 13:57:49 +0000
Manifest next update:     Sat 01 Feb 2025 17:03:49 +0000
Files and hashes:         1: 323830343a343933633a3a2f33322d3332203d3e20323637313732.roa (hash: pDisvlHvg/YmESEmNA+TTV1L0KCR24/n6pwuamk3v/8=)
                          2: AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.crl (hash: eDl8HCEyvMN3B+bFuPP20+yjVUE8WPTku0/2ja/h/vc=)
                          3: 34352e3233302e3134302e302f32322d3234203d3e20323637313732.roa (hash: JetYyw+9H/pLeTyDbsvHzz3liRxNuIEPhpXcBFfMiw8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cf:20:4a:83:84:8e:f0:80:9b:ca:45:b9:61:0b:66:61:0e:f4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD
        Validity
            Not Before: Jan 31 13:57:49 2025 GMT
            Not After : Feb  1 17:03:49 2025 GMT
        Subject: CN=E44BD94377BAFB233E94282E53751D90ACEA169F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:b8:df:5b:52:1a:8c:9f:05:e8:99:e3:4a:
                    0e:5c:39:4b:66:f2:03:e7:25:69:80:98:1d:c4:d1:
                    d9:0d:8e:9c:d8:f1:9a:1f:2c:58:8a:12:48:48:d8:
                    ed:35:ed:ae:85:69:41:a2:a4:4d:6d:ea:c2:3c:67:
                    38:ff:4a:c2:02:de:2a:aa:45:a1:3a:27:d1:40:99:
                    73:0f:cf:97:49:e4:75:9f:77:03:2e:99:07:5e:51:
                    ac:78:ae:89:92:7e:cd:74:78:3c:3f:09:11:9e:9d:
                    fb:83:4c:61:c6:ab:d3:eb:2b:18:fc:5e:d2:07:de:
                    2c:16:98:b6:d0:0d:96:a7:9a:30:8e:40:89:b4:b8:
                    78:e2:49:a3:16:48:1f:a0:ab:62:d6:74:ee:b0:1f:
                    fb:37:34:14:7f:80:67:e0:28:b1:4f:4f:72:20:d5:
                    29:b5:ec:e4:b7:00:20:fc:f4:d9:67:03:fd:f3:8b:
                    f7:7d:a5:1b:cb:9d:b9:c8:40:70:32:5f:b2:54:1b:
                    b0:4e:e8:58:73:61:6a:fe:b2:15:84:0a:1f:5b:ad:
                    fe:e4:71:20:4e:c8:68:5b:73:3a:d7:35:c8:ab:2d:
                    ae:cb:19:06:5f:de:df:13:48:d9:5f:1a:73:bb:11:
                    92:38:f9:b4:94:e0:39:d5:6d:54:18:08:43:00:ff:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4B:D9:43:77:BA:FB:23:3E:94:28:2E:53:75:1D:90:AC:EA:16:9F
            X509v3 Authority Key Identifier:
                keyid:AE:BB:CB:B7:EF:CC:7F:ED:03:3C:BF:3F:33:3F:E9:C8:0B:28:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c7:8e:5f:d8:2d:a1:12:b6:c8:ed:e2:46:f0:fc:87:f9:3f:
         ed:55:67:52:41:74:17:50:89:9f:b1:0c:8e:5e:0b:85:eb:89:
         c4:24:b9:ce:78:90:8b:a0:68:0d:c7:75:15:2c:bb:33:0f:70:
         82:79:3c:13:fc:ec:8a:c6:ae:4d:7d:24:1c:5d:ee:31:fc:4e:
         d7:35:24:49:e5:74:29:a4:6f:f3:67:95:31:3a:ab:52:4e:26:
         63:79:5b:64:d9:f7:fa:61:85:b8:2d:c6:cc:31:eb:29:ac:f7:
         56:70:2c:ef:b9:2d:aa:29:37:ee:a2:3d:da:fa:39:c4:64:81:
         6a:85:2e:d3:41:bb:46:d6:f9:bf:77:b7:23:70:2c:9d:1e:19:
         bf:29:4c:a9:05:11:2f:e9:80:98:71:8d:29:8c:1b:9c:e1:60:
         3a:d1:ac:82:b2:62:12:30:3e:cd:65:16:d8:c3:28:f0:b5:90:
         62:89:44:94:08:b7:b6:81:1c:59:dd:8d:d8:13:46:87:34:2c:
         7d:fc:01:f2:13:dd:45:85:27:37:78:29:95:a2:3d:74:24:8a:
         cc:93:32:28:c6:12:16:77:d0:73:a9:3f:9d:21:00:2c:d7:fb:
         50:f5:b0:65:77:d8:2a:80:6c:ab:aa:03:6e:68:24:89:20:50:
         59:72:12:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBs8gSoOEjvCAm8pFuWELZmEO9CEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCQkNCQjdFRkNDN0ZFRDAzM0NCRjNGMzMzRkU5Qzgw
QjI4RkZERDAeFw0yNTAxMzExMzU3NDlaFw0yNTAyMDExNzAzNDlaMDMxMTAvBgNV
BAMTKEU0NEJEOTQzNzdCQUZCMjMzRTk0MjgyRTUzNzUxRDkwQUNFQTE2OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtrjfW1IajJ8F6JnjSg5cOUtm
8gPnJWmAmB3E0dkNjpzY8ZofLFiKEkhI2O017a6FaUGipE1t6sI8Zzj/SsIC3iqq
RaE6J9FAmXMPz5dJ5HWfdwMumQdeUax4romSfs10eDw/CRGenfuDTGHGq9PrKxj8
XtIH3iwWmLbQDZanmjCOQIm0uHjiSaMWSB+gq2LWdO6wH/s3NBR/gGfgKLFPT3Ig
1Sm17OS3ACD89NlnA/3zi/d9pRvLnbnIQHAyX7JUG7BO6FhzYWr+shWECh9brf7k
cSBOyGhbczrXNcirLa7LGQZf3t8TSNlfGnO7EZI4+bSU4DnVbVQYCEMA/6rlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5EvZQ3e6+yM+lCguU3UdkKzqFp8wHwYDVR0j
BBgwFoAUrrvLt+/Mf+0DPL8/Mz/pyAso/90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWs2ODJETmNVdlVvakdvTWJ6ZWpCalVjS2c0RUo0YUExeWFYWHZEQURi
Y0IvMC9BRUJCQ0JCN0VGQ0M3RkVEMDMzQ0JGM0YzMzNGRTlDODBCMjhGRkRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFQkJDQkI3RUZDQzdGRUQw
MzNDQkYzRjMzM0ZFOUM4MEIyOEZGREQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWs2ODJETmNVdlVvakdvTWJ6ZWpCalVjS2c0RUo0YUExeWFYWHZEQURiY0IvMC9B
RUJCQ0JCN0VGQ0M3RkVEMDMzQ0JGM0YzMzNGRTlDODBCMjhGRkRELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMceOX9gtoRK2yO3iRvD8h/k/7VVnUkF0F1CJn7EMjl4LheuJxCS5zniQi6Bo
Dcd1FSy7Mw9wgnk8E/zsisauTX0kHF3uMfxO1zUkSeV0KaRv82eVMTqrUk4mY3lb
ZNn3+mGFuC3GzDHrKaz3VnAs77ktqik37qI92vo5xGSBaoUu00G7Rtb5v3e3I3As
nR4ZvylMqQURL+mAmHGNKYwbnOFgOtGsgrJiEjA+zWUW2MMo8LWQYolElAi3toEc
Wd2N2BNGhzQsffwB8hPdRYUnN3gplaI9dCSKzJMyKMYSFnfQc6k/nSEALNf7UPWw
ZXfYKoBsq6oDbmgkiSBQWXISNw==
-----END CERTIFICATE-----