Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
File:                     24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft (raw, json)
Hash identifier:          14DTf7MbMd9I5xYZXpr/YX1ACx69+sgWT6SSs6VNoPU=
Subject key identifier:   36:20:B0:07:46:51:3A:8F:AF:DC:16:C5:66:0E:AD:D7:6E:08:91:90
Authority key identifier: 24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82
Certificate issuer:       /CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
Certificate serial:       278695E88CD1898DF50F7B4DEF3B85740A48163E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
Manifest number:          01E0
Signing time:             Sat 29 Mar 2025 08:57:26 +0000
Manifest this update:     Sat 29 Mar 2025 08:52:26 +0000
Manifest next update:     Sun 30 Mar 2025 09:19:26 +0000
Files and hashes:         1: 34352e3232352e382e302f32322d3234203d3e20323636393731.roa (hash: uPZ74WNs7i/D48VeCL29g9yLBvl339SYFjXLkrUuWbc=)
                          2: 24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl (hash: 4BKH8mbs6PXS489HtypPKu7/9sVu2HV166fDnwY5f/g=)
                          3: 323830343a343632343a3a2f33322d3438203d3e20323636393731.roa (hash: cor6E64IzNUhy3OaftzS60oWXlL2S0rew0Chj6bHbVU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:86:95:e8:8c:d1:89:8d:f5:0f:7b:4d:ef:3b:85:74:0a:48:16:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
        Validity
            Not Before: Mar 29 08:52:26 2025 GMT
            Not After : Mar 30 09:19:26 2025 GMT
        Subject: CN=3620B00746513A8FAFDC16C5660EADD76E089190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:1f:6c:04:16:c0:92:c9:33:69:40:32:83:
                    1e:cc:53:8c:8a:8b:c1:12:14:47:fe:3f:62:db:85:
                    74:4f:3a:5e:c4:94:07:e5:ed:21:6a:63:d1:3e:47:
                    8f:a6:f3:5d:09:18:2b:8f:0c:4c:98:dd:55:62:47:
                    07:bf:43:b6:17:43:20:d3:3f:51:a9:7f:c3:d5:a9:
                    34:3f:76:66:cb:fa:38:e0:27:e8:12:e0:91:52:d7:
                    61:0d:78:fb:85:e7:64:e0:78:1b:f6:bf:39:10:40:
                    ae:a9:a9:da:90:12:e7:4f:f1:6a:2d:38:95:54:be:
                    b6:cc:73:06:db:22:b7:b7:82:8f:37:ec:ed:3e:03:
                    53:9f:e4:16:3b:6d:e6:e8:6b:79:e4:81:00:29:6f:
                    81:fa:e5:c6:65:25:6c:4c:3b:31:c5:b1:41:61:1e:
                    98:d9:ac:fe:4e:04:9e:e3:9f:ec:eb:0f:38:ce:27:
                    f2:9a:9d:98:3c:cd:6c:4b:4c:52:49:56:41:c2:f9:
                    26:47:ca:4a:c7:13:9c:e5:fa:4e:be:c1:6b:d0:f8:
                    55:f2:d4:25:6c:0f:e2:7c:6a:f8:e1:7d:1f:28:f6:
                    67:1f:b3:c3:28:be:89:a6:aa:9f:e8:34:f5:10:a3:
                    9d:1e:9c:e3:3f:e1:0c:db:9f:4e:9a:0f:1d:0c:27:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:20:B0:07:46:51:3A:8F:AF:DC:16:C5:66:0E:AD:D7:6E:08:91:90
            X509v3 Authority Key Identifier:
                keyid:24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8f:72:fd:ee:11:77:b2:e1:34:22:85:a1:8a:0d:9f:1b:e1:
         76:d5:41:3c:c7:fe:70:dd:ff:e4:74:b3:6d:d4:e5:3e:8d:37:
         0b:8d:95:7f:f7:f1:49:16:2d:e6:04:7a:4b:bf:7c:1c:ab:3b:
         93:5d:b7:1f:01:71:2c:c1:6d:62:62:ea:b2:26:17:db:d1:cf:
         64:6e:f9:1c:8d:70:ba:78:69:14:06:12:c8:43:45:09:75:c6:
         58:86:d0:79:64:37:7e:cf:ff:e5:92:54:1a:7b:98:92:5b:ff:
         1e:1c:b4:95:fe:21:2e:9d:77:4d:c5:e8:eb:43:ad:58:5d:e5:
         b5:36:ee:20:da:be:61:68:8f:fc:b7:95:1a:a0:0e:68:74:bf:
         5b:34:98:0a:33:7c:61:f4:6a:ac:59:5b:23:23:0e:3b:e7:01:
         40:c8:9c:07:7f:44:58:40:53:d1:10:72:9f:01:36:d4:13:79:
         1d:65:11:c4:f7:30:91:51:9b:16:9d:ca:c2:a5:db:59:c7:9b:
         19:7a:2e:6e:41:44:bc:fa:67:38:67:13:a1:aa:66:18:11:4b:
         63:29:26:78:70:c9:b5:0d:60:46:9c:49:3e:4b:64:39:ab:5a:
         09:c4:0d:35:5a:e9:ed:eb:cb:a1:48:b5:c2:d4:b1:d5:69:34:
         ab:61:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----