Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/590BED1D9DB8B5BDD35016684EF2758BB291A716.mft
File:                     590BED1D9DB8B5BDD35016684EF2758BB291A716.mft (raw, json)
Hash identifier:          gaUhuzn1PoG8HkKQXq6FgnD44hfZRkjumZ75t7Rw6To=
Subject key identifier:   60:91:67:61:0C:BF:35:9F:97:67:BB:CE:46:BD:3C:0C:60:1F:C1:47
Authority key identifier: 59:0B:ED:1D:9D:B8:B5:BD:D3:50:16:68:4E:F2:75:8B:B2:91:A7:16
Certificate issuer:       /CN=590BED1D9DB8B5BDD35016684EF2758BB291A716
Certificate serial:       3EA9AD83278A9407C878A510E13D8F87670DCB1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/590BED1D9DB8B5BDD35016684EF2758BB291A716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/590BED1D9DB8B5BDD35016684EF2758BB291A716.mft
Manifest number:          0145
Signing time:             Fri 28 Mar 2025 20:05:46 +0000
Manifest this update:     Fri 28 Mar 2025 20:00:46 +0000
Manifest next update:     Sat 29 Mar 2025 21:21:46 +0000
Files and hashes:         1: 590BED1D9DB8B5BDD35016684EF2758BB291A716.crl (hash: LeFbjKEIQ88EFM9VSZ80E16s03SH68y2utLlEheT1Cc=)
                          2: 323830343a373261303a3a2f33322d313238203d3e20323730383635.roa (hash: POKSPEYfquYfZz2Vq1sCtzN0mc7y/D1M6O+K7Te8xSM=)
                          3: 3137372e35332e32382e302f32322d3332203d3e20323730383635.roa (hash: juLhzNx95Qead+3vCB6VDvQy2zrEo2/5Fdixalwb010=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a9:ad:83:27:8a:94:07:c8:78:a5:10:e1:3d:8f:87:67:0d:cb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590BED1D9DB8B5BDD35016684EF2758BB291A716
        Validity
            Not Before: Mar 28 20:00:46 2025 GMT
            Not After : Mar 29 21:21:46 2025 GMT
        Subject: CN=609167610CBF359F9767BBCE46BD3C0C601FC147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:39:03:47:29:6a:75:93:95:ed:77:8c:d7:
                    fe:83:e7:fe:07:fc:18:ce:3b:7a:10:c2:bd:48:f0:
                    6f:33:fb:c3:dc:ee:e2:25:3d:47:f1:5e:74:25:27:
                    10:a2:fe:08:fe:67:db:56:83:44:81:04:fe:33:2b:
                    e3:2a:9b:d3:35:3f:21:6f:f4:2c:45:f9:3e:71:83:
                    15:37:98:bc:25:40:d5:68:89:46:a8:0f:64:9a:c4:
                    24:ee:23:94:55:cf:7f:fa:48:bb:76:84:f3:15:c2:
                    6b:ba:34:3a:fe:dc:51:d0:df:86:23:00:dd:6b:a4:
                    08:ec:27:6a:13:36:c0:ee:b4:e1:b2:78:a5:c2:bb:
                    77:ec:2a:70:f5:fd:f6:a0:03:df:43:49:20:ca:ea:
                    75:c6:89:61:86:1b:5a:69:d8:0b:07:92:ef:ad:2b:
                    50:6c:64:dc:16:60:c7:83:7e:70:67:02:67:17:d0:
                    a3:1f:65:fa:62:64:0e:a7:6d:8f:0c:11:4e:de:d8:
                    96:82:67:07:9b:37:bd:71:cf:83:31:2e:d1:57:54:
                    c7:e2:1b:39:2b:72:5a:21:4a:39:c1:14:bc:81:2e:
                    95:98:e3:8a:c0:00:d5:57:b5:bf:97:ec:fe:40:7f:
                    dc:b5:91:42:a3:02:2f:c0:31:6c:18:2a:15:94:3c:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:91:67:61:0C:BF:35:9F:97:67:BB:CE:46:BD:3C:0C:60:1F:C1:47
            X509v3 Authority Key Identifier:
                keyid:59:0B:ED:1D:9D:B8:B5:BD:D3:50:16:68:4E:F2:75:8B:B2:91:A7:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/590BED1D9DB8B5BDD35016684EF2758BB291A716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/590BED1D9DB8B5BDD35016684EF2758BB291A716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/590BED1D9DB8B5BDD35016684EF2758BB291A716.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:9a:12:4f:42:8b:fd:01:44:e2:1b:8f:4f:b6:06:89:af:
         25:59:f5:29:1c:96:b7:f0:84:b6:ad:ba:c9:53:77:ae:60:30:
         20:f9:6e:f5:14:74:00:e6:74:da:03:69:a2:3d:7c:4e:93:d9:
         ba:9d:54:36:89:ca:73:83:fa:c2:ae:e6:b9:7c:96:10:cb:8a:
         d5:c6:51:dc:82:6f:a0:f3:a7:2f:ad:08:84:26:1d:7f:cf:d3:
         aa:64:9e:bd:fc:9c:98:df:63:17:eb:d0:a6:92:ad:5a:42:cf:
         76:d0:e9:1e:82:84:72:c7:1d:01:d0:71:c1:fa:f5:26:c0:a1:
         76:fc:23:91:9b:f2:6b:f8:7c:19:43:aa:59:88:77:79:98:7d:
         5b:af:09:62:8e:54:eb:06:4a:ed:c3:c0:01:6d:03:8b:69:15:
         59:fc:84:cc:e6:d5:38:82:a4:3b:70:f7:62:53:9e:c3:a2:d4:
         00:11:1d:46:a8:81:a1:68:af:74:d9:b6:4a:db:4a:69:e8:62:
         95:87:4e:65:57:38:25:3c:fe:a6:68:5a:f7:d8:89:10:7d:f5:
         f1:0b:59:d5:9e:76:0a:9e:5d:43:89:5f:b0:3d:1c:9c:37:cd:
         87:ea:dc:14:04:a7:ef:44:7b:c2:12:5a:13:7d:8e:4d:54:47:
         e0:ce:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----