Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
File:                     F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json)
Hash identifier:          4rJcoDU4OyhUq/dpOdZPKVc7+gaUtXC0rAeTTi2jhoI=
Subject key identifier:   54:C0:05:23:D6:97:15:28:9B:E8:0B:FB:E9:78:1B:30:EE:8D:6A:ED
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Certificate issuer:       /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial:       6CC110A59DEFAEC2BC6DD21D046AC599C3C50959
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
Manifest number:          01DE
Signing time:             Fri 28 Mar 2025 20:12:00 +0000
Manifest this update:     Fri 28 Mar 2025 20:07:00 +0000
Manifest next update:     Sat 29 Mar 2025 21:48:00 +0000
Files and hashes:         1: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: VwYe9ge1h9i5u0j1Gkpn69h9+0qfMTwcFyzZtvk3uKM=)
                          2: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: 2eoHsGZC/f5pfiPZAhTbGjdm+WkaHXe+5/KpYRgbwYk=)
                          3: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c1:10:a5:9d:ef:ae:c2:bc:6d:d2:1d:04:6a:c5:99:c3:c5:09:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
        Validity
            Not Before: Mar 28 20:07:00 2025 GMT
            Not After : Mar 29 21:48:00 2025 GMT
        Subject: CN=54C00523D69715289BE80BFBE9781B30EE8D6AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:cd:74:ef:a9:d5:73:bb:14:f2:b9:e0:21:
                    d7:7a:ee:f2:c2:86:6c:06:cc:65:de:6e:b7:5a:34:
                    f1:8b:b9:af:1a:5b:df:3e:12:ef:5f:ee:8e:09:73:
                    22:45:69:5f:80:af:f9:12:c7:35:ff:32:6e:2f:b2:
                    6a:e3:fd:f3:98:8c:0e:74:a9:f9:e6:0e:fb:08:c8:
                    e7:52:cb:ff:dc:02:2f:18:ed:d7:25:91:b1:ec:17:
                    c6:92:f4:f8:04:da:e8:fb:f1:4f:c7:ca:87:4f:9c:
                    64:07:7e:80:47:15:61:c7:a5:87:ba:f9:3b:6d:ce:
                    86:65:22:ca:b9:a8:28:4a:d8:16:c9:fd:f0:60:99:
                    a6:e1:53:6d:94:d8:ca:39:1a:e5:7f:3c:8d:b3:2f:
                    b5:e9:70:67:3a:e7:ec:d4:3d:1a:20:3d:9a:83:d2:
                    f7:20:60:9d:9b:2b:79:1f:ad:c1:14:2d:8d:5f:22:
                    6b:41:dc:c0:de:96:50:bb:13:d2:11:39:52:88:84:
                    84:ef:75:ef:a4:a6:6f:84:fb:d9:d8:1f:37:f4:33:
                    b4:5d:58:f6:10:45:4c:cb:19:1b:3f:5c:df:f1:e1:
                    a1:50:d5:d3:93:ae:e7:01:a6:fd:9e:18:73:cd:24:
                    36:07:b6:0a:b9:b2:82:24:84:d4:e4:51:b8:9d:b6:
                    41:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C0:05:23:D6:97:15:28:9B:E8:0B:FB:E9:78:1B:30:EE:8D:6A:ED
            X509v3 Authority Key Identifier:
                keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:4e:d1:a1:40:7e:4d:33:53:f5:89:e9:3d:c1:e7:79:62:
         00:b3:42:6d:3f:77:19:ec:5b:52:db:e8:43:e0:1b:da:19:83:
         99:e7:9f:c6:d1:60:f9:64:60:af:09:fb:65:a8:6f:73:b3:21:
         04:d8:62:45:69:b0:fb:b3:c3:f4:f0:c1:96:3f:7d:a4:07:8d:
         c9:77:39:0f:63:fb:bc:40:95:08:8c:c5:90:d5:cd:a8:65:86:
         04:0a:6c:ab:b0:3c:ce:5d:d6:69:c6:8e:9f:d3:34:d2:60:6b:
         f4:ca:e8:b5:55:57:c0:2d:8a:71:2b:00:23:fb:d3:7a:a5:b8:
         9c:34:70:10:13:85:37:d7:c1:f3:bc:86:bd:33:3a:c8:57:e1:
         24:66:a3:15:e9:18:f8:89:66:20:d1:66:e5:6e:c7:7e:1c:18:
         18:7b:c7:9d:29:51:cb:ee:46:fa:47:e6:d8:51:e9:a0:6f:e4:
         4f:51:47:1e:d8:24:d9:db:7f:09:ec:ca:c2:e3:ff:95:21:2b:
         54:33:17:33:58:23:d6:95:59:4b:96:bd:fd:b4:e1:a2:21:66:
         f9:cc:25:35:7a:e2:8d:5f:6b:2e:bd:d7:48:dd:b8:0d:0b:73:
         9d:a2:84:8b:3c:6d:8a:83:e2:e7:4b:b5:0d:b6:03:bb:eb:be:
         b2:99:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----