Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
File:                     DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json)
Hash identifier:          nxnKx+Jbrw397fZUwF32wJTTEsc6StdVlK3zrOhbMnI=
Subject key identifier:   02:65:38:39:B3:1D:E9:44:46:7F:B5:76:52:AF:14:0B:21:CC:6D:FA
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Certificate issuer:       /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial:       015109CD0152AFDBF9FA452F4DC79301449347CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
Manifest number:          01AD
Signing time:             Sat 29 Mar 2025 02:38:45 +0000
Manifest this update:     Sat 29 Mar 2025 02:33:45 +0000
Manifest next update:     Sun 30 Mar 2025 04:26:45 +0000
Files and hashes:         1: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: mS3dzyzuh09vfaUo1SquHXUMhXVEOsmXQp2uVB1G+fA=)
                          2: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: 7kcQz0m5+IfOz1LmqbPSGB/aKuGJEK9tWyoeFIxvS64=)
                          3: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: 5tfOBrygOXAVeXG5prlZAYljjLnFL4xsQWQCoQKIEPg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:51:09:cd:01:52:af:db:f9:fa:45:2f:4d:c7:93:01:44:93:47:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
        Validity
            Not Before: Mar 29 02:33:45 2025 GMT
            Not After : Mar 30 04:26:45 2025 GMT
        Subject: CN=02653839B31DE944467FB57652AF140B21CC6DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:56:5e:e5:f8:bd:90:c9:7e:36:6c:f0:5a:a3:
                    ff:3e:0d:83:8c:4a:f8:aa:a5:af:ff:1c:91:8c:ba:
                    33:d5:82:95:40:b8:d1:6f:89:b4:60:57:48:5b:7f:
                    e1:2b:78:ad:9c:16:a7:29:ab:cc:1a:02:20:9e:91:
                    f7:76:fe:05:65:e6:a2:f3:53:4c:5d:9c:64:39:8a:
                    b2:74:88:2f:7e:69:9f:77:2a:8d:38:d9:10:ce:5d:
                    78:23:5e:16:d3:eb:45:b6:82:f6:a3:ba:28:88:0b:
                    43:a2:f1:db:97:03:d0:6e:ba:6f:44:ae:4b:90:37:
                    6f:e4:02:0c:3d:50:08:53:0c:5c:c1:8f:e9:e5:da:
                    04:7f:d6:b2:b0:6c:7a:0c:68:dc:0e:06:0e:d0:59:
                    61:ce:b0:8b:7d:0d:40:56:3f:21:4d:f8:0c:90:9d:
                    09:18:5f:b9:b9:53:fc:4c:d2:a7:6b:8f:ca:35:78:
                    c5:c1:52:f5:8a:30:9a:94:6c:48:81:0b:fa:29:4f:
                    53:fb:2e:24:74:95:f6:7d:51:4c:91:21:70:97:38:
                    47:47:3c:77:aa:aa:b4:b4:7e:64:21:d4:14:8d:a4:
                    90:5f:ef:af:d7:0a:f0:00:ef:69:d1:aa:46:60:90:
                    5a:c1:aa:2b:b5:7e:4c:aa:61:01:bf:29:3c:f5:43:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:65:38:39:B3:1D:E9:44:46:7F:B5:76:52:AF:14:0B:21:CC:6D:FA
            X509v3 Authority Key Identifier:
                keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:ce:f6:fd:34:75:49:ab:ff:94:a0:55:25:18:03:c2:83:
         d2:c5:5a:85:17:36:c1:85:3d:30:44:1e:2c:39:73:2c:a9:0e:
         f1:c4:5d:73:a0:59:a5:7a:38:97:3f:ff:73:8a:87:c4:4e:d1:
         60:66:4c:44:40:2c:f9:0c:86:76:bc:00:3e:d6:86:5a:fb:e5:
         fa:8a:06:5e:e2:a6:1e:fb:27:a8:d4:fc:e2:76:24:25:8e:d4:
         d3:67:b3:7a:26:79:ee:31:34:cc:fe:8e:b7:e8:5a:20:7c:d3:
         ef:bd:7b:99:96:e3:83:3a:e4:9f:f5:60:af:d7:92:0b:a3:df:
         41:7e:e8:fa:64:d5:e7:6f:3c:f3:6a:f1:a6:25:55:2a:08:4b:
         94:f8:08:a8:08:31:d6:df:82:4c:d9:83:0f:b0:c6:85:d3:2b:
         92:4b:b4:aa:0b:fa:ef:75:00:98:b8:4f:21:af:ef:3f:7d:2b:
         d9:7a:d8:d2:69:20:9d:77:65:ce:33:d6:c2:81:7d:fb:37:c6:
         b4:6c:b6:99:65:e3:1f:43:79:d3:18:9b:e1:39:fc:37:e3:85:
         72:c0:aa:bc:9b:ef:f1:ac:42:03:51:d5:0d:36:d1:d3:df:45:
         ca:d0:c9:ae:eb:c7:28:65:8d:94:a0:00:4b:bf:73:3f:8f:7a:
         8c:35:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----