Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.mft
File:                     00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.mft (raw, json)
Hash identifier:          QLgjpF1plxZa+t3x1Vdxe/DO5g3j5G+YghMLFoJyqlg=
Subject key identifier:   E7:91:0C:8E:EA:5B:F9:45:78:9A:A4:0C:1D:89:04:AF:2E:19:2A:4A
Authority key identifier: 00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC
Certificate issuer:       /CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
Certificate serial:       4BD5B0F8474824F1069A9C063F01F0A89E359835
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 13:41:44 +0000
Manifest this update:     Fri 31 Jan 2025 13:36:44 +0000
Manifest next update:     Sat 01 Feb 2025 16:46:44 +0000
Files and hashes:         1: 3137302e37392e3136342e302f32322d3332203d3e203532393531.roa (hash: v6dCbg85csNG6jPypynYyG+GiVq06Bl0ce8J4mVsSXM=)
                          2: 3134332e302e3230342e302f32322d3332203d3e203532393531.roa (hash: 0XCDCV1P4jnoMoO69/5apozEuijbtcE41emlBNarD5c=)
                          3: 3137372e31312e3137362e302f32312d3332203d3e203532393531.roa (hash: Hm0VkcZvPCXOsmGsYX0YXs1rF3gzE319Bpgx2K13kE4=)
                          4: 00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl (hash: JV01Kdy48m4GHWuN2YiwCjyJh3QxTczNceFFU7u2T48=)
                          5: 3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa (hash: jY2lLnrdkovEWUKGqvCVfao5g2CfLdcTGWwRDBI7nfQ=)
                          6: 323830343a323932383a3a2f33322d313238203d3e203532393531.roa (hash: /nDfUSIGt3w2qb8cIyd9zG13Ny+L6QSrLCgYOgOkVf8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:b0:f8:47:48:24:f1:06:9a:9c:06:3f:01:f0:a8:9e:35:98:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
        Validity
            Not Before: Jan 31 13:36:44 2025 GMT
            Not After : Feb  1 16:46:44 2025 GMT
        Subject: CN=E7910C8EEA5BF945789AA40C1D8904AF2E192A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:b8:84:9f:5f:fc:8c:8e:2a:df:e1:90:c8:
                    7b:ba:05:07:d6:ff:dc:62:d9:ad:4f:24:23:66:0c:
                    90:5f:0f:66:2b:0d:b0:de:c8:1c:b7:50:73:d7:2c:
                    35:ba:c0:dc:82:a9:91:51:e1:74:bf:fe:e4:cf:e8:
                    eb:02:36:7b:60:96:93:48:5a:6e:55:49:00:34:b4:
                    0b:0e:c1:22:06:21:8d:a8:fe:37:13:8d:4f:d6:c5:
                    51:09:c1:72:78:f4:f8:52:df:7b:a0:2d:9f:f0:a2:
                    be:63:97:12:ff:47:66:9a:bc:0a:58:76:04:44:62:
                    93:29:ff:62:79:e5:67:84:ce:f3:23:17:ab:45:d5:
                    86:f2:c7:5f:8c:fb:ce:e7:18:7c:25:eb:c4:79:b1:
                    af:2d:28:27:b7:ee:61:84:94:ef:93:83:3e:9c:a7:
                    9a:fc:c5:06:9c:73:51:82:00:dc:5e:8f:f9:95:26:
                    bd:9f:51:84:9e:32:97:ea:31:96:e2:05:fd:27:05:
                    b6:a6:c7:86:78:47:1e:f1:a0:85:5a:cb:02:48:fd:
                    f1:51:6f:9a:85:2f:91:e0:e0:3a:80:43:44:d4:cd:
                    b6:1a:1d:e1:1c:d4:f6:1f:4e:0f:17:3d:18:d0:f1:
                    ae:e0:64:ac:ea:c5:81:5d:a1:43:d5:72:84:45:74:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:0C:8E:EA:5B:F9:45:78:9A:A4:0C:1D:89:04:AF:2E:19:2A:4A
            X509v3 Authority Key Identifier:
                keyid:00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f7:b4:1f:71:11:5c:e5:04:e4:0b:fc:6c:62:ed:5a:16:c5:
         37:32:08:2e:f0:7a:18:e9:e1:4e:01:a8:37:02:4d:f0:25:c2:
         76:87:6b:09:47:c8:d1:af:30:5d:5e:c3:cd:29:91:e3:9c:48:
         29:24:d9:dd:a1:c8:6a:b5:cb:48:0d:bd:36:ac:31:73:52:12:
         42:58:9a:dc:96:a0:e9:1d:70:f9:d9:91:29:8f:78:2b:c3:4a:
         ea:0a:b6:64:bc:b3:5f:a3:bd:78:2f:fb:3f:8c:77:2f:c3:19:
         aa:2e:19:78:be:a7:1f:41:23:3a:83:ef:8e:0b:7a:81:d6:57:
         2a:81:06:3d:da:55:cd:fe:30:7e:05:b6:8e:5a:22:a2:d7:d8:
         0b:b5:38:bd:19:2a:e1:06:f8:26:d3:0e:e2:77:fe:99:72:4f:
         df:00:73:9f:94:ed:22:95:4f:9a:d0:f4:ad:6c:32:7c:9d:2d:
         c8:fe:a8:73:90:3e:b3:a8:73:1b:5b:56:58:5e:8f:3e:b7:85:
         09:07:2b:bd:da:46:b8:7f:f1:3b:78:19:9f:50:40:09:51:76:
         75:0e:ae:67:8d:d9:12:e0:b0:2a:45:16:e7:49:dd:9d:19:93:
         25:01:12:70:35:b0:e7:0f:1f:0a:9b:4b:56:93:df:12:2f:c2:
         e8:4d:0d:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS9Ww+EdIJPEGmpwGPwHwqJ41mDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBCQkIzNTY4NjVFRTNFNUU3MzM5RDRENjMzQURFNjNC
NUVBNkFCQzAeFw0yNTAxMzExMzM2NDRaFw0yNTAyMDExNjQ2NDRaMDMxMTAvBgNV
BAMTKEU3OTEwQzhFRUE1QkY5NDU3ODlBQTQwQzFEODkwNEFGMkUxOTJBNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxI7iEn1/8jI4q3+GQyHu6BQfW
/9xi2a1PJCNmDJBfD2YrDbDeyBy3UHPXLDW6wNyCqZFR4XS//uTP6OsCNntglpNI
Wm5VSQA0tAsOwSIGIY2o/jcTjU/WxVEJwXJ49PhS33ugLZ/wor5jlxL/R2aavApY
dgREYpMp/2J55WeEzvMjF6tF1Ybyx1+M+87nGHwl68R5sa8tKCe37mGElO+Tgz6c
p5r8xQacc1GCANxej/mVJr2fUYSeMpfqMZbiBf0nBbamx4Z4Rx7xoIVaywJI/fFR
b5qFL5Hg4DqAQ0TUzbYaHeEc1PYfTg8XPRjQ8a7gZKzqxYFdoUPVcoRFdKy5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU55EMjupb+UV4mqQMHYkEry4ZKkowHwYDVR0j
BBgwFoAUALuzVoZe4+XnM51NYzreY7XqarwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXU4Nld0N0IycWhtOVB4ZHdreWF4Q25YQzhxMktnS0MycHJScWkzNURZ
WWMvMS8wMEJCQjM1Njg2NUVFM0U1RTczMzlENEQ2MzNBREU2M0I1RUE2QUJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQkJCMzU2ODY1RUUzRTVF
NzMzOUQ0RDYzM0FERTYzQjVFQTZBQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXU4Nld0N0IycWhtOVB4ZHdreWF4Q25YQzhxMktnS0MycHJScWkzNURZWWMvMS8w
MEJCQjM1Njg2NUVFM0U1RTczMzlENEQ2MzNBREU2M0I1RUE2QUJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtfe0H3ERXOUE5Av8bGLtWhbFNzIILvB6GOnhTgGoNwJN8CXCdodrCUfI0a8w
XV7DzSmR45xIKSTZ3aHIarXLSA29Nqwxc1ISQlia3Jag6R1w+dmRKY94K8NK6gq2
ZLyzX6O9eC/7P4x3L8MZqi4ZeL6nH0EjOoPvjgt6gdZXKoEGPdpVzf4wfgW2jloi
otfYC7U4vRkq4Qb4JtMO4nf+mXJP3wBzn5TtIpVPmtD0rWwyfJ0tyP6oc5A+s6hz
G1tWWF6PPreFCQcrvdpGuH/xO3gZn1BACVF2dQ6uZ43ZEuCwKkUW50ndnRmTJQES
cDWw5w8fCptLVpPfEi/C6E0N/Q==
-----END CERTIFICATE-----