Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.mft
File:                     9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.mft (raw, json)
Hash identifier:          vqAI5QmwsTK54jURwxRINVR8ZlAb0DDyVZ1RPNSZZiI=
Subject key identifier:   E5:50:16:82:F0:2D:68:4A:45:1E:FC:42:9E:AA:52:4D:31:B1:3A:2F
Authority key identifier: 9A:99:69:2F:68:60:66:16:2D:6A:71:BA:5B:0D:D6:0A:F8:E9:C6:AD
Certificate issuer:       /CN=9A99692F686066162D6A71BA5B0DD60AF8E9C6AD
Certificate serial:       75728102ACA4C9DFB116DFB8FCB57A2B89E0D8C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.mft
Manifest number:          01DD
Signing time:             Fri 28 Mar 2025 16:22:27 +0000
Manifest this update:     Fri 28 Mar 2025 16:17:27 +0000
Manifest next update:     Sat 29 Mar 2025 19:30:27 +0000
Files and hashes:         1: 3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa (hash: gP3Ug+SNpbGWFVxHmvTh5mpAQK2tgfozjUW5+vyZAbo=)
                          2: 9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.crl (hash: SmAeTkYm2ZtXZDXAiMClDK3SXl9pbCAcqJGoxDN0760=)
                          3: 323830343a333764383a3a2f33322d3337203d3e20323636343339.roa (hash: /tKYT+FOkZcSKarSGADmd5fSrkb4utrrqP3hn7LNQEo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:72:81:02:ac:a4:c9:df:b1:16:df:b8:fc:b5:7a:2b:89:e0:d8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A99692F686066162D6A71BA5B0DD60AF8E9C6AD
        Validity
            Not Before: Mar 28 16:17:27 2025 GMT
            Not After : Mar 29 19:30:27 2025 GMT
        Subject: CN=E5501682F02D684A451EFC429EAA524D31B13A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:f7:62:1c:50:6a:f4:7f:b0:96:78:73:08:
                    9f:45:07:8b:31:0b:f0:ee:41:5a:01:dd:4c:fa:fa:
                    42:ec:b6:37:7b:62:c0:28:8a:e1:7a:12:eb:32:81:
                    1d:0e:58:4f:e3:f3:fc:d2:2d:91:5a:b6:73:68:fe:
                    fe:d9:c1:9f:17:85:ea:87:82:c5:b8:31:99:f3:60:
                    9f:b3:d1:0b:35:9e:d9:5c:14:03:44:ca:ce:8e:7a:
                    a5:8a:34:99:80:27:73:e6:4a:ef:09:3f:15:94:dc:
                    40:ef:92:88:53:7f:33:60:a3:41:1a:c6:d8:6e:21:
                    b9:56:d2:16:f3:25:62:68:12:d7:91:a8:0d:94:cb:
                    d4:ac:84:fb:61:fb:24:0f:29:a8:56:68:86:e1:8f:
                    21:dd:7f:33:3c:d6:46:fa:c2:57:8b:52:84:0b:04:
                    51:f9:de:b8:91:d4:10:ac:6e:1d:42:2b:a1:28:d4:
                    95:e9:36:5d:be:da:3f:8d:a4:16:2c:6d:d6:d0:d4:
                    65:f1:1b:67:3c:e7:95:1f:b1:53:36:b5:96:0c:a5:
                    e1:42:39:9f:13:ba:e2:bb:93:c5:ff:0e:84:96:b3:
                    d4:8f:9a:19:3d:b9:5b:d6:ce:44:60:ac:17:11:ca:
                    c1:f6:74:d2:bb:91:c9:c9:76:e2:4f:b6:69:41:81:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:50:16:82:F0:2D:68:4A:45:1E:FC:42:9E:AA:52:4D:31:B1:3A:2F
            X509v3 Authority Key Identifier:
                keyid:9A:99:69:2F:68:60:66:16:2D:6A:71:BA:5B:0D:D6:0A:F8:E9:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9d:85:4a:b2:56:ad:0b:d9:48:24:ec:e9:5a:f3:7f:45:11:
         27:1c:d6:c4:db:34:c3:27:50:c9:f3:5b:87:93:4c:6b:c9:2b:
         64:d1:69:08:16:ce:12:16:84:a7:5f:9c:de:33:76:69:b1:0a:
         29:4b:4a:80:a7:28:0d:f2:6c:97:c2:21:f2:cd:ae:e9:f4:8a:
         79:23:a9:49:b9:8f:80:9f:f9:c7:5f:fc:89:d0:96:43:85:be:
         fc:6a:f5:de:66:b8:26:08:35:bb:1b:24:dd:b4:46:4b:7b:1d:
         58:5c:18:19:45:d4:86:7f:9d:b0:09:81:43:5c:40:aa:5c:93:
         66:ba:39:f5:eb:bf:79:20:ee:f9:10:e0:9c:b8:e6:ee:51:e8:
         eb:f7:1b:4b:15:a9:86:43:f8:94:64:36:2f:6c:42:f1:4d:e6:
         a5:dd:44:e6:aa:de:ba:87:3e:d5:c2:fe:66:e0:1c:0e:81:ec:
         ea:ea:4e:0b:44:06:cf:5c:91:75:59:da:9c:4c:7d:c4:d0:a2:
         3e:a7:93:2f:e6:ee:94:c9:fa:81:48:00:54:50:bc:9f:a2:26:
         0f:16:b4:45:2d:cd:f7:64:77:b6:92:9d:c2:29:1a:92:0e:79:
         c7:ae:17:f9:10:74:58:f9:4c:fa:8c:f9:f9:bd:ec:b8:b6:44:
         d5:1e:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----