Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
File:                     9A8CDCA9443D140D02860AA0070928656A172CE1.mft (raw, json)
Hash identifier:          prDzKrTtGQSca4frm13taODsgAKvvShzWC8rsbjCnHM=
Subject key identifier:   44:A8:4F:B4:F8:BA:4A:6A:B7:37:99:BE:2F:39:F9:1A:7D:4E:67:0A
Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1
Certificate issuer:       /CN=9A8CDCA9443D140D02860AA0070928656A172CE1
Certificate serial:       5C885CEBE4F6BDB4D771C9C859F921289AE76108
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 08:16:22 +0000
Manifest this update:     Fri 31 Jan 2025 08:11:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:44:22 +0000
Files and hashes:         1: 9A8CDCA9443D140D02860AA0070928656A172CE1.crl (hash: FRd0VoUmOCKxbDq0uFUlHd+ovGabcNnGRSy5iFU9q3Y=)
                          2: 323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (hash: IKv4DZ5iqVJrVFNHkOq10njWF7vCTpZuyI7ACW+Hovo=)
                          3: 34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (hash: Q5YY1ZQ6uM872/zujTZWapCPEIvtTz6hJ3sGkH1CyMg=)
                          4: 3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (hash: qsavBE+daTF/mHc4l8sMwjCbYnRHsO32rXXwUMpS8EA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:88:5c:eb:e4:f6:bd:b4:d7:71:c9:c8:59:f9:21:28:9a:e7:61:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1
        Validity
            Not Before: Jan 31 08:11:22 2025 GMT
            Not After : Feb  1 10:44:22 2025 GMT
        Subject: CN=44A84FB4F8BA4A6AB73799BE2F39F91A7D4E670A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:60:87:85:44:7c:ff:c3:24:82:a1:51:02:
                    81:8d:ec:6c:15:02:87:a6:8a:57:af:8c:9a:b8:7e:
                    3d:71:84:d9:bb:ef:b1:b3:65:42:d0:3e:57:e3:6a:
                    68:10:fd:17:9c:3b:75:19:1e:a5:f2:cd:45:4a:54:
                    64:99:7d:60:8c:6f:41:46:aa:ef:f1:45:f4:70:30:
                    21:81:65:55:cf:d0:a0:b7:04:8a:aa:eb:b7:0a:c7:
                    0f:d8:5c:c4:74:c1:63:0a:57:ae:b5:dd:f1:38:63:
                    ba:51:96:1a:ce:01:cf:d8:a2:d0:9c:14:ab:9f:ec:
                    c3:87:b3:26:ee:c8:cb:e9:79:12:71:e8:05:5d:63:
                    68:87:08:c3:52:0d:18:f7:0f:52:ed:74:23:12:96:
                    2f:40:57:3f:89:a5:2e:de:37:76:2e:70:c8:2b:c6:
                    b2:3f:2b:dc:78:eb:8f:d6:9e:5b:2c:64:a6:21:85:
                    f6:66:11:4b:c4:59:cd:1c:67:f9:26:36:92:98:c7:
                    c4:37:9e:5f:83:dc:49:26:3d:a3:16:57:0a:f2:db:
                    35:b6:a3:6b:84:1b:1a:a0:db:64:d6:f7:c2:09:4f:
                    57:96:55:9f:6f:e9:61:b2:ce:16:09:ab:a4:ff:9f:
                    e8:c3:cb:8d:f9:56:fb:f8:15:07:b4:ba:3f:38:22:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:4F:B4:F8:BA:4A:6A:B7:37:99:BE:2F:39:F9:1A:7D:4E:67:0A
            X509v3 Authority Key Identifier:
                keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:bd:b7:31:4f:c9:a0:15:3d:83:f3:31:7d:75:be:f4:29:
         86:e8:5a:b7:c1:eb:d2:72:2e:e1:bb:cc:11:f2:12:02:a3:dd:
         dc:c8:76:c3:68:6f:91:4e:85:6f:54:6b:74:82:70:41:5e:23:
         b1:74:55:70:0f:bd:73:cf:b9:fd:03:bf:17:8f:cb:45:53:fc:
         19:1b:77:85:cd:b9:6d:0c:fe:f9:23:03:2b:33:91:a4:b2:29:
         fb:51:5f:75:41:bf:79:02:ec:bf:e8:ca:11:6e:38:7f:ec:4d:
         ae:cb:df:11:a8:e2:a6:e4:ac:c8:79:7c:66:db:38:43:3c:6c:
         7e:cb:c4:fb:44:2e:32:cb:18:55:59:c1:e9:2a:ba:94:07:23:
         49:6c:d8:3e:a7:3c:f1:55:15:c9:0a:7a:6e:7a:6f:d9:d2:62:
         99:4f:c1:18:ab:e0:25:7f:93:bd:38:d8:aa:2c:6d:16:37:fb:
         ca:11:7e:e0:d0:fb:32:d6:46:ed:9a:7c:cf:d5:75:d0:de:d1:
         9b:8e:a3:29:3b:de:34:9d:f9:e7:79:d8:3d:05:26:74:66:15:
         70:e0:e3:38:2f:1e:7d:9d:c4:0c:a1:38:9c:ec:60:0a:12:4f:
         07:26:6f:94:5e:ea:36:a6:df:a1:75:eb:e5:b6:62:e8:de:f7:
         cc:b8:65:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXIhc6+T2vbTXccnIWfkhKJrnYQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE4Q0RDQTk0NDNEMTQwRDAyODYwQUEwMDcwOTI4NjU2
QTE3MkNFMTAeFw0yNTAxMzEwODExMjJaFw0yNTAyMDExMDQ0MjJaMDMxMTAvBgNV
BAMTKDQ0QTg0RkI0RjhCQTRBNkFCNzM3OTlCRTJGMzlGOTFBN0Q0RTY3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZDGCHhUR8/8MkgqFRAoGN7GwV
AoemilevjJq4fj1xhNm777GzZULQPlfjamgQ/RecO3UZHqXyzUVKVGSZfWCMb0FG
qu/xRfRwMCGBZVXP0KC3BIqq67cKxw/YXMR0wWMKV6613fE4Y7pRlhrOAc/YotCc
FKuf7MOHsybuyMvpeRJx6AVdY2iHCMNSDRj3D1LtdCMSli9AVz+JpS7eN3YucMgr
xrI/K9x464/WnlssZKYhhfZmEUvEWc0cZ/kmNpKYx8Q3nl+D3EkmPaMWVwry2zW2
o2uEGxqg22TW98IJT1eWVZ9v6WGyzhYJq6T/n+jDy435Vvv4FQe0uj84IgeRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURKhPtPi6Smq3N5m+Lzn5Gn1OZwowHwYDVR0j
BBgwFoAUmozcqUQ9FA0ChgqgBwkoZWoXLOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlC
VW0vMS85QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBOENEQ0E5NDQzRDE0MEQw
Mjg2MEFBMDA3MDkyODY1NkExNzJDRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85
QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAALW9tzFPyaAVPYPzMX11vvQphuhat8Hr0nIu4bvMEfISAqPd3Mh2w2hvkU6F
b1RrdIJwQV4jsXRVcA+9c8+5/QO/F4/LRVP8GRt3hc25bQz++SMDKzORpLIp+1Ff
dUG/eQLsv+jKEW44f+xNrsvfEajipuSsyHl8Zts4QzxsfsvE+0QuMssYVVnB6Sq6
lAcjSWzYPqc88VUVyQp6bnpv2dJimU/BGKvgJX+TvTjYqixtFjf7yhF+4ND7MtZG
7Zp8z9V10N7Rm46jKTveNJ3553nYPQUmdGYVcODjOC8efZ3EDKE4nOxgChJPByZv
lF7qNqbfoXXr5bZi6N73zLhlsw==
-----END CERTIFICATE-----