Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft
File:                     7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft (raw, json)
Hash identifier:          EOdZWuftMtwUNoREwME8RHIuwL2bB6RBqNkp3BjTmBU=
Subject key identifier:   DA:E3:4D:1D:F3:BC:FD:1E:DE:FC:33:E0:E6:59:01:67:CC:5F:B2:D9
Authority key identifier: 7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6
Certificate issuer:       /CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6
Certificate serial:       4B195B559701706FD328A69908E4A2FD14B8D268
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft
Manifest number:          0158
Signing time:             Fri 25 Jul 2025 16:45:51 +0000
Manifest this update:     Fri 25 Jul 2025 16:40:51 +0000
Manifest next update:     Sat 26 Jul 2025 20:13:51 +0000
Files and hashes:         1: 3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (hash: 0P7iD2hXXk4qUK7tK9OJ9KHe5Yp/FRtXioFvVUvwsJo=)
                          2: 7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl (hash: V+I/Ho90K2Fp3qxJnft5rt4fc5i5CDbR+8PNs7mryno=)
                          3: 3139312e372e302e302f32332d3332203d3e20323733343331.roa (hash: 4uWIjjkzu/S9R++2NeybgQIf5elNz0cMMX4WwUGI0Zg=)
                          4: 323830343a386538343a3a2f33322d313238203d3e20323733343331.roa (hash: AvVcTCA+lyIraklGxLPxL94UnxVE9Ct0Fzl5yeIwNOQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:19:5b:55:97:01:70:6f:d3:28:a6:99:08:e4:a2:fd:14:b8:d2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6
        Validity
            Not Before: Jul 25 16:40:51 2025 GMT
            Not After : Jul 26 20:13:51 2025 GMT
        Subject: CN=DAE34D1DF3BCFD1EDEFC33E0E6590167CC5FB2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:07:8a:3f:69:fd:78:d8:58:2c:46:56:c0:
                    c1:32:e7:d3:40:21:8a:ac:a6:8f:d4:c6:9f:bf:7f:
                    06:17:43:80:4a:6c:99:10:a2:25:e3:6c:78:90:56:
                    f0:7c:79:d3:c6:32:eb:51:c3:5c:ac:9f:c5:7e:b9:
                    97:32:63:76:ea:e0:d8:6b:43:a3:ba:b4:3c:78:f8:
                    cb:7c:a7:0c:2a:3b:33:e5:f0:cf:0f:73:f3:93:96:
                    42:99:f1:70:d8:ac:ae:5c:76:1a:df:08:5e:27:33:
                    a4:74:50:42:ab:a3:f1:0e:31:4e:70:a9:33:9b:8e:
                    f0:af:3d:fe:fe:de:b7:83:61:c4:49:41:e0:b7:2c:
                    81:7f:08:25:c4:c0:1d:51:33:b9:d5:5d:5e:9c:c7:
                    64:d7:54:da:4e:4f:da:53:6b:8e:72:e1:dc:59:74:
                    56:77:3d:83:a4:1f:60:c0:6c:bd:f3:f8:98:54:0a:
                    81:bd:16:08:7c:24:aa:e7:e2:6d:1a:62:f0:02:64:
                    dd:cb:73:b0:54:86:38:9b:4d:ae:e2:fa:fd:6e:e4:
                    91:dd:31:2a:c4:65:37:cb:31:b8:f6:8d:bc:06:36:
                    4d:f2:b5:b1:5f:5d:13:27:77:61:da:b8:2c:9a:79:
                    ea:69:4d:1f:b1:51:9f:76:48:7e:32:4a:41:b7:6c:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E3:4D:1D:F3:BC:FD:1E:DE:FC:33:E0:E6:59:01:67:CC:5F:B2:D9
            X509v3 Authority Key Identifier:
                keyid:7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cb:20:f2:58:1c:89:be:e6:d1:ca:6f:8f:18:b4:5f:76:bc:
         9b:49:81:5d:64:4f:75:6c:5b:0c:30:0f:df:03:29:a8:32:70:
         96:14:62:99:e2:31:d9:45:9a:23:89:f5:0d:6a:14:1e:e6:00:
         12:ae:f7:73:69:ae:17:e2:cb:c7:ab:74:b1:0d:26:ee:de:bd:
         16:1e:9c:80:fc:d4:7a:a4:81:16:74:96:c6:db:e2:69:da:3d:
         80:53:bd:6e:c0:4d:07:f7:85:8b:cf:56:82:d1:78:78:e4:cc:
         6c:db:65:90:40:da:c4:57:6e:28:a3:b4:0d:13:aa:6b:30:54:
         65:20:02:81:a3:2b:0c:37:5d:30:74:c8:18:4c:7e:6e:72:f2:
         18:95:44:53:f4:d9:d9:ef:c5:13:e1:ee:e1:f0:43:be:3c:60:
         f7:2f:6e:c1:77:6c:e2:b3:fc:07:dc:07:61:65:e7:8a:c8:8f:
         87:50:49:91:b2:c1:53:14:f5:8f:53:7a:b7:af:4b:2e:33:7d:
         63:1d:57:17:07:aa:70:ab:98:cd:83:55:66:77:77:e0:50:b8:
         6d:22:bd:e1:f6:fd:c7:7c:d5:8a:f8:1a:3c:65:60:0a:da:0d:
         68:7f:f6:37:b1:31:c1:f4:5a:96:f0:5c:2f:40:b1:3a:e5:22:
         bf:55:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----