Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft
File:                     8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft (raw, json)
Hash identifier:          JKa0mFSHMux0zWLVyq1g1bfT7GaS29aHTmBqg7weq80=
Subject key identifier:   95:44:A7:27:85:59:FF:C4:D7:5E:4F:56:4B:E9:13:72:A4:B0:C0:CF
Authority key identifier: 8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
Certificate issuer:       /CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
Certificate serial:       2C6DF70E2FA607D5DAF1E920FAF5F599658878BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft
Manifest number:          4A
Signing time:             Mon 24 Mar 2025 11:23:29 +0000
Manifest this update:     Mon 24 Mar 2025 11:18:29 +0000
Manifest next update:     Tue 25 Mar 2025 11:40:29 +0000
Files and hashes:         1: 8CE0D131E429E2C41648BC875D900D7A21A1F1C3.crl (hash: xu1dkomAD+CAP6YofaEyP5UkXPmQWpVgVt78pQXazpg=)
                          2: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: 0vNFsYvMvFJJcCAKJ8FiERbDz24QTy45zq2tH42NpcI=)
                          3: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: /2/9Yd3eXpWjyVvNt7pMpiiLBSQsoJQudEUU0FUchBQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6d:f7:0e:2f:a6:07:d5:da:f1:e9:20:fa:f5:f5:99:65:88:78:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
        Validity
            Not Before: Mar 24 11:18:29 2025 GMT
            Not After : Mar 25 11:40:29 2025 GMT
        Subject: CN=9544A7278559FFC4D75E4F564BE91372A4B0C0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:cc:16:5d:45:11:6e:e5:09:12:54:40:46:
                    0b:b6:e7:a3:01:4d:a5:ae:98:56:e2:ef:b7:6d:a7:
                    e1:82:b8:9c:4b:e6:98:96:52:34:a6:34:86:64:9c:
                    1c:4e:a1:72:34:d5:ff:60:7b:1a:d7:a4:f6:de:67:
                    a8:0d:97:40:f2:80:3c:a8:0b:9d:cc:9e:d1:41:a2:
                    b6:d0:64:ee:26:2b:7c:3c:0b:89:52:0d:68:ba:9d:
                    0d:0a:a5:8c:10:36:4e:33:8e:a6:44:cf:be:e0:b8:
                    f6:17:e8:f7:21:41:9f:f8:35:30:3f:e6:f5:26:4a:
                    c0:5d:7e:e8:bb:9b:c2:dc:52:42:10:9f:aa:82:23:
                    d2:75:aa:d2:30:0e:42:41:ad:8d:c3:5d:64:a6:ba:
                    da:71:4b:54:e3:d0:6a:7a:2a:c1:66:9f:42:a1:f3:
                    b1:1c:d1:9f:78:a5:30:47:7b:72:79:c9:2b:0e:ee:
                    51:0a:8a:3e:69:49:a6:11:2e:16:e7:26:55:c4:e8:
                    2c:37:16:3a:ac:f4:13:3d:c9:36:9e:c2:a4:db:af:
                    25:45:98:bd:4f:e9:16:55:72:8a:f1:b6:06:19:28:
                    ac:a1:0c:1f:a3:ea:76:5d:56:67:9c:e7:4a:51:2f:
                    58:76:f1:d5:09:82:fe:5a:05:a6:97:1e:d5:98:eb:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:A7:27:85:59:FF:C4:D7:5E:4F:56:4B:E9:13:72:A4:B0:C0:CF
            X509v3 Authority Key Identifier:
                keyid:8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:da:2a:19:4e:91:cd:dc:9e:1a:74:5c:94:4a:e7:e6:5f:
         4d:7c:78:24:dd:0e:ae:3e:f3:01:8d:4c:b5:36:24:cb:17:92:
         36:cc:1e:18:e9:e8:91:b7:79:3d:53:51:79:9a:59:89:a0:a0:
         45:58:41:b5:fb:f6:0e:45:17:82:34:b0:96:6e:b2:ed:15:0f:
         9f:72:f4:41:5c:23:89:ca:24:28:82:9f:39:67:83:e6:25:84:
         61:89:4f:42:8a:35:a1:c4:c7:62:50:7f:f9:90:31:5d:96:8b:
         3a:b5:fd:05:90:94:0f:9a:c6:87:88:bf:1e:6c:df:b6:b9:0f:
         00:b9:6a:ff:95:05:c7:2b:84:0c:6c:dd:13:13:ab:f1:41:6e:
         49:cd:38:b1:ba:55:f1:12:71:aa:e5:de:51:b1:66:d2:9b:8a:
         6c:95:64:ab:74:f3:c4:62:bd:ce:e9:05:38:2d:49:7d:36:f9:
         4d:2d:5b:c6:3c:c9:63:f9:41:cb:fa:36:97:67:3d:94:3c:5f:
         27:ad:ab:52:1b:90:5f:2b:a9:bd:50:4c:ce:c0:4d:7f:30:b6:
         4c:74:53:8c:1c:0e:fc:8f:13:a3:e0:0a:24:6d:61:d3:95:f7:
         d5:6a:d8:f8:63:9b:35:c4:5e:1b:10:1c:d6:68:25:84:cb:f8:
         91:e2:3b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----