Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/64DD83F92699F1FE6E92049BB0290C52C8B04D15.mft
File:                     64DD83F92699F1FE6E92049BB0290C52C8B04D15.mft (raw, json)
Hash identifier:          mDcvnRnLHR3XyTwe50iJj1+L05r7ttmHn73aCeBAbxo=
Subject key identifier:   51:0E:03:24:9C:9F:F8:61:0C:24:A3:F9:2C:40:18:9B:18:9D:44:B1
Authority key identifier: 64:DD:83:F9:26:99:F1:FE:6E:92:04:9B:B0:29:0C:52:C8:B0:4D:15
Certificate issuer:       /CN=64DD83F92699F1FE6E92049BB0290C52C8B04D15
Certificate serial:       1E16C0389A7B04E3F402A0AA69186A7433337558
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64DD83F92699F1FE6E92049BB0290C52C8B04D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/64DD83F92699F1FE6E92049BB0290C52C8B04D15.mft
Manifest number:          8D
Signing time:             Fri 28 Mar 2025 15:30:09 +0000
Manifest this update:     Fri 28 Mar 2025 15:25:09 +0000
Manifest next update:     Sat 29 Mar 2025 19:10:09 +0000
Files and hashes:         1: 34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa (hash: OGNUVN2NBS57PBJ5NH4JugXa7f8Yhi4Q64B+VP7n+CU=)
                          2: 3136382e3139372e302e302f32322d3234203d3e20323634343630.roa (hash: PpFoUrSq2DKIUu9+lE7rB0PyA1yZjBeSnshZCtZ8Mdk=)
                          3: 3133322e3235352e3130302e302f32322d3234203d3e20323634343630.roa (hash: z8XR9DW3aytegBQqHmCTIvcOU+fJzCVKmecVb1epgkc=)
                          4: 323830343a323030343a3a2f33322d3438203d3e20323634343630.roa (hash: oD5tAcM46t8wZkj5xrH4HyjU1d5rPCQHtGrJniOPfJI=)
                          5: 64DD83F92699F1FE6E92049BB0290C52C8B04D15.crl (hash: i6EhS3PDlnLGjZlQ2oe113vgtoEe6+3HlAWrO/vBh1g=)
                          6: 323830343a346133343a3a2f33322d3438203d3e20323637323234.roa (hash: G3fZ/3+pIkfLJuEgqO216iqufP7SHMhfzunzWWmLYa8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:16:c0:38:9a:7b:04:e3:f4:02:a0:aa:69:18:6a:74:33:33:75:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64DD83F92699F1FE6E92049BB0290C52C8B04D15
        Validity
            Not Before: Mar 28 15:25:09 2025 GMT
            Not After : Mar 29 19:10:09 2025 GMT
        Subject: CN=510E03249C9FF8610C24A3F92C40189B189D44B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:0f:cb:ee:7c:80:ec:60:f6:d2:68:9a:bf:
                    73:39:df:26:4c:3b:46:91:15:15:34:c0:66:33:48:
                    f2:6c:a6:1c:c1:69:91:0a:61:0b:ed:2b:2d:2f:64:
                    56:74:5f:ae:23:30:d1:9d:63:02:25:e3:bc:0e:aa:
                    f9:11:42:60:dc:3b:5d:f1:13:4c:94:36:a5:ae:ec:
                    f7:d5:9c:fd:03:79:0b:fd:cd:1d:d2:33:cd:00:58:
                    4f:44:8e:b1:66:dc:e1:32:48:5d:97:3e:83:e9:c5:
                    94:9e:4f:c7:40:40:3e:62:29:7a:c5:55:74:66:e9:
                    a7:91:a6:49:82:78:95:9b:56:41:77:e5:eb:89:5c:
                    07:d4:54:b1:9b:8e:1d:4b:e3:b5:03:31:de:cc:d4:
                    68:8e:b6:29:1d:76:81:28:36:93:74:52:aa:3b:db:
                    ee:b2:fc:57:44:8c:7a:1b:7b:f8:69:76:96:a5:44:
                    20:8d:dd:bd:c7:d4:4f:07:e1:26:71:9f:81:46:01:
                    95:85:89:2d:d5:87:09:6a:da:c8:24:6b:b9:e0:e6:
                    7c:2b:14:ef:09:0d:e0:1b:ae:97:10:93:77:c5:64:
                    15:be:2a:80:59:61:a6:e3:ed:f3:d7:53:05:93:77:
                    f2:30:09:06:86:38:a9:b0:35:fb:d2:78:90:ee:e9:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0E:03:24:9C:9F:F8:61:0C:24:A3:F9:2C:40:18:9B:18:9D:44:B1
            X509v3 Authority Key Identifier:
                keyid:64:DD:83:F9:26:99:F1:FE:6E:92:04:9B:B0:29:0C:52:C8:B0:4D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/64DD83F92699F1FE6E92049BB0290C52C8B04D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64DD83F92699F1FE6E92049BB0290C52C8B04D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/64DD83F92699F1FE6E92049BB0290C52C8B04D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:bf:8c:e5:7e:39:f9:7e:92:4f:3d:94:a1:22:ba:e4:d2:
         a6:64:32:8d:d2:9b:78:c4:8a:5b:ef:72:80:c9:0e:7f:16:65:
         1d:1c:af:52:81:9e:eb:fa:2a:d8:67:02:12:54:13:41:79:c1:
         33:0f:11:ae:40:a8:b8:7e:43:88:44:7c:e4:ed:4a:07:ab:f3:
         ad:0d:51:d1:b6:ea:ec:73:fa:2b:7d:b7:7d:0c:da:85:8e:67:
         98:7b:8a:10:0a:b0:21:24:d7:7a:a6:28:94:ef:3b:83:00:a0:
         a9:ea:80:eb:b3:41:eb:2a:08:4c:3e:5c:ea:bd:80:96:17:b9:
         db:19:a5:fe:e8:c0:ee:04:93:dd:a9:0b:26:7a:65:39:b4:5e:
         51:83:6a:e7:f7:8f:63:fe:b6:ec:fe:8f:18:f5:52:77:96:dc:
         20:3a:ed:84:0b:77:af:bd:04:5c:71:45:70:f6:a3:ba:e1:84:
         0e:46:fe:cb:a8:28:ec:df:d0:84:87:a1:af:2e:3d:18:bf:1f:
         c2:4a:cc:84:5b:9e:45:ec:5f:bb:87:7a:77:4c:ff:69:47:a3:
         43:82:c9:e9:5a:e9:57:14:5c:2d:51:ff:a0:22:87:79:d3:89:
         3f:0c:5a:8a:17:8a:f6:2e:54:f4:29:2c:79:a3:1f:30:b4:8f:
         99:30:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----