Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.mft
File:                     E4B9E904C3F25D4723B3E8679E422C8F20C7117B.mft (raw, json)
Hash identifier:          5JeiGTCg9tyqXp0F/XKhj5x6SAI/+K+5hP7e9bWKLbU=
Subject key identifier:   1B:45:88:B9:C4:51:1C:98:94:0A:DA:5D:83:D4:E5:C6:9F:C3:95:0E
Authority key identifier: E4:B9:E9:04:C3:F2:5D:47:23:B3:E8:67:9E:42:2C:8F:20:C7:11:7B
Certificate issuer:       /CN=E4B9E904C3F25D4723B3E8679E422C8F20C7117B
Certificate serial:       22402A0009B23C74FDCEFB87FE7241A633DEF27F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.mft
Manifest number:          23
Signing time:             Sat 29 Mar 2025 09:28:11 +0000
Manifest this update:     Sat 29 Mar 2025 09:23:11 +0000
Manifest next update:     Sun 30 Mar 2025 10:32:11 +0000
Files and hashes:         1: E4B9E904C3F25D4723B3E8679E422C8F20C7117B.crl (hash: TIRklLDgZHwvGz7v2FeWJ+DhG6EVi7Zpv3dYKUa+BvM=)
                          2: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: TX1nl329PFYoblIYAA8rtzyIE8CjbDky729k5TUqma4=)
                          3: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: lBH1FxH8bvnjW6ICwqPaSRr6hN77mRplln45Y3jcQt0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:40:2a:00:09:b2:3c:74:fd:ce:fb:87:fe:72:41:a6:33:de:f2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B9E904C3F25D4723B3E8679E422C8F20C7117B
        Validity
            Not Before: Mar 29 09:23:11 2025 GMT
            Not After : Mar 30 10:32:11 2025 GMT
        Subject: CN=1B4588B9C4511C98940ADA5D83D4E5C69FC3950E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:d7:e5:a7:8f:1b:c5:5d:d1:33:e4:85:57:
                    9c:96:fd:b1:a5:44:b2:6f:4e:f3:11:a8:bb:9b:f4:
                    bb:7d:a6:de:c4:fa:31:bb:c7:8e:51:d9:0f:a3:b6:
                    bf:8f:16:48:70:ff:f7:a7:f1:c8:79:e5:18:7d:42:
                    67:0c:da:03:ed:3f:53:91:5f:86:3e:06:f3:32:cc:
                    98:e4:32:de:9b:13:2c:62:04:a2:2d:0e:fc:a6:d4:
                    03:af:89:83:a0:60:4a:d7:4b:d1:8d:05:b8:e6:38:
                    e1:fd:1d:9b:9b:3a:8e:93:b1:6b:83:37:a1:3c:24:
                    b3:87:d4:b8:e3:4b:67:b8:70:0c:4c:32:25:82:8a:
                    90:13:1a:26:06:09:bc:9f:2f:bf:37:fd:c5:b6:d6:
                    6d:83:50:ff:4f:5d:a3:94:1e:c9:e8:7e:76:6c:c3:
                    dd:84:91:0d:99:38:49:64:4b:db:5a:9a:f3:fe:4e:
                    e7:53:36:07:49:cc:42:8f:05:e1:e4:3a:9b:69:bd:
                    0d:cc:66:9d:ab:9a:45:55:d7:1f:47:1e:9d:3f:29:
                    f9:68:63:4d:b0:46:ba:2c:5b:f8:7d:dc:50:87:96:
                    bb:7b:81:db:44:e3:c4:42:12:28:35:72:7a:5f:bb:
                    94:6c:75:b6:0c:79:32:ed:16:e0:28:01:78:e2:de:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:45:88:B9:C4:51:1C:98:94:0A:DA:5D:83:D4:E5:C6:9F:C3:95:0E
            X509v3 Authority Key Identifier:
                keyid:E4:B9:E9:04:C3:F2:5D:47:23:B3:E8:67:9E:42:2C:8F:20:C7:11:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3a:64:d7:d3:d7:2f:30:04:e4:1c:51:22:d2:a1:7f:fd:18:
         01:93:2f:b2:45:f1:57:45:2c:a2:a8:4a:94:a2:55:1d:a5:80:
         f5:49:49:5d:85:23:5b:25:fa:26:77:c9:29:19:84:ae:dd:56:
         f8:30:bb:7e:e3:3b:df:0a:bd:f3:fe:2c:07:8d:07:cc:66:a8:
         5c:92:eb:ed:17:7e:57:f8:bf:cd:11:fd:38:7f:27:cf:db:47:
         52:dd:a8:46:c8:08:4c:fa:9b:99:da:92:bd:66:6e:0c:12:5c:
         44:27:e8:de:46:c1:1f:7c:41:e5:ad:35:81:08:43:16:3c:38:
         3e:a2:e4:29:90:60:3b:9d:cb:77:07:99:da:29:07:25:e1:cc:
         cb:d5:ac:49:01:8f:f1:af:c4:ab:a4:a0:b3:34:6a:68:76:91:
         54:13:d0:a8:fb:bc:aa:b1:0b:58:72:8c:2d:7d:55:57:6f:dc:
         4b:88:a8:ec:8c:76:32:7d:9b:1a:dd:f1:cd:cb:ca:2f:e1:ec:
         ef:44:f1:c4:73:66:f0:32:2a:dd:d7:10:f9:f2:74:3e:2c:70:
         1f:d8:d5:d0:66:30:17:cd:81:54:7c:0c:7a:62:3a:ec:a2:d0:
         d3:85:67:a3:ad:1f:37:d5:e0:11:07:54:c0:4e:59:c8:56:f7:
         99:96:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----