Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
File:                     D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft (raw, json)
Hash identifier:          hbuowFOxsC0k7qsjWXkV41ngGYp9KQ+bs+QWQ38pIrg=
Subject key identifier:   D5:11:B3:53:5D:02:D1:9F:6A:0A:FA:AD:61:6D:E7:9A:2E:F0:DB:B6
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       1E5953EBF5615A383F63EFD49A8C1F323C5392B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
Manifest number:          0221
Signing time:             Sat 29 Mar 2025 07:12:00 +0000
Manifest this update:     Sat 29 Mar 2025 07:07:00 +0000
Manifest next update:     Sun 30 Mar 2025 07:12:00 +0000
Files and hashes:         1: 323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa (hash: WHK0L+8/j8fX4GE34xUk4/na45+6+SFtRCZgnlusW94=)
                          2: 34352e3137332e33382e302f32342d3234203d3e20323638373930.roa (hash: J51LwV7pELREOS75iJQ3thhFeRmo0fkcKk36PHsrW+E=)
                          3: 323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa (hash: AmXlf5Zv7sEgGGlVWsIy9Xt7/JBJWq71U81mrqgeH38=)
                          4: 323830343a356162343a343030303a3a2f33342d3334203d3e20323638373930.roa (hash: cWUeP6MPhJ/b0VwXmCT5djuhF00veCb3TWUOtbTdHnk=)
                          5: 34352e3137332e33392e302f32342d3234203d3e20323638373930.roa (hash: nQl2CFS20ZskN6Qa1gesg674KXJzN04H1J0om5naKeM=)
                          6: 34352e3137332e33372e302f32342d3234203d3e20323638373930.roa (hash: yFjDc8qx8yOimmy60VvUNgoloxtie9UZoWvMmOjpFCs=)
                          7: 323830343a356162343a3a2f33342d3334203d3e20323638373930.roa (hash: 3DYycFudg9z6oy3gmnuPACqMikuevH1EFgw4N0pcANU=)
                          8: 323830343a356162343a633030303a3a2f33342d3334203d3e20323638373930.roa (hash: sPofzSuJ39vfU+SW3RO8LKJT81x7kNnnoHPfB6u4ylA=)
                          9: 323830343a356162343a3a2f33322d3332203d3e20323638373930.roa (hash: iLKOFDYOGIxvJxYtfGZxzEtcz1sg9Mg3VjnVHDDJIls=)
                          10: 34352e3137332e33362e302f32342d3234203d3e20323638373930.roa (hash: qO1MZdp6sjZiER2s99YpS6d5YmlIi7LwtzdmsNxMv6w=)
                          11: D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl (hash: LKCI0zkLnPdqmuUT8ipzu3tUCO2XJHRtNxgrZvca9X4=)
                          12: 323830343a356162343a3a2f33332d3333203d3e20323638373930.roa (hash: dUAVWisXgvlaX6VcPlh8cD81LXa9MxmzSOYOOnqjlkM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:59:53:eb:f5:61:5a:38:3f:63:ef:d4:9a:8c:1f:32:3c:53:92:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Mar 29 07:07:00 2025 GMT
            Not After : Apr  5 07:12:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:be:32:9f:10:83:99:4e:67:9c:34:f4:67:
                    7f:b0:bd:69:d0:0f:dc:89:c3:2b:38:99:dd:1f:39:
                    6c:9a:3f:58:8e:ad:0f:1a:87:7d:8e:ea:45:51:f0:
                    9b:9d:ef:3b:4d:87:72:b1:3d:5d:fb:9f:be:fc:c6:
                    c5:d8:41:8e:7b:be:53:d8:26:c8:99:a7:0b:18:7d:
                    08:b3:8e:62:c6:c4:fd:97:43:2d:cf:ad:f6:71:21:
                    45:fd:ae:07:ea:ff:a2:0e:e8:33:2d:31:f3:2d:3e:
                    e4:50:d3:41:e0:8c:75:f7:0a:1e:9c:cb:5b:ca:82:
                    c2:74:83:54:41:bb:94:7d:ec:55:37:a8:d0:f5:55:
                    b0:d4:a7:e4:ed:ec:63:93:70:9f:60:95:1c:b0:36:
                    33:a6:e4:9a:9b:9e:37:9a:d7:5d:2d:cb:3e:37:79:
                    2c:71:6e:01:b2:09:47:ce:7c:32:b0:b8:e8:e7:e3:
                    42:99:de:14:76:84:06:41:29:c1:e9:31:7f:43:9b:
                    cc:95:ae:f5:36:2d:5b:a5:51:9a:bd:99:e6:2c:78:
                    9b:07:ce:02:60:14:ab:9c:86:35:0b:73:e0:f0:f2:
                    6c:3c:20:0c:27:3e:85:56:23:86:9b:a1:3b:f8:ca:
                    d1:07:7f:e2:69:ce:1e:01:04:e2:96:2d:eb:50:7a:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:B3:53:5D:02:D1:9F:6A:0A:FA:AD:61:6D:E7:9A:2E:F0:DB:B6
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cb:30:7c:1f:10:0d:2b:0e:0e:2a:97:df:20:5d:5a:7d:b2:
         e4:9e:48:73:5c:20:bd:dc:53:56:c9:df:7f:11:2e:73:1e:35:
         af:36:63:a1:e9:91:44:b5:f5:15:ac:95:47:86:26:62:77:73:
         50:34:ba:4b:de:0c:35:ee:da:b5:87:cd:f6:4b:6e:ea:48:f5:
         e1:af:6b:88:5a:4b:68:ad:d5:86:fd:f3:0e:12:64:ce:f9:90:
         94:f7:b9:3e:ee:ce:ee:6f:c6:bc:2e:a1:3f:c0:d1:fc:7e:9a:
         fd:ee:33:91:e9:80:25:15:8a:ea:10:5a:f9:53:8c:d0:01:f4:
         dc:39:eb:61:7c:0a:0f:7b:b5:64:b2:6b:c2:cb:37:17:f5:e9:
         13:9c:04:1c:c5:9d:94:b7:38:41:2f:1f:9a:7d:e3:4a:f9:13:
         87:be:4e:95:42:78:6d:78:4b:25:16:a3:34:62:c7:6f:9a:ae:
         7d:0d:03:81:06:95:a4:2d:1b:13:ff:71:54:eb:e7:7d:34:09:
         c3:76:f7:64:0d:3d:ea:02:77:98:89:25:72:ab:8c:10:24:0f:
         a7:e6:29:86:34:8e:b5:4e:a2:a6:29:85:18:e4:ff:9a:20:83:
         0b:26:55:8e:b9:35:78:a2:0d:b5:78:cd:45:17:04:f3:f3:90:
         ec:58:bc:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----