Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
File:                     D23AEA3BF9686D794967BECAC226FA9648876870.mft (raw, json)
Hash identifier:          plZDTytA5xcybOJJb5vSXVhxkoVXWQTmrCJS6qRbSZE=
Subject key identifier:   EA:D7:E5:1F:F6:2E:FC:82:9B:EC:40:01:8B:DF:75:A5:88:E3:D6:26
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       32DF57D236804D2DE3BDA897C9838A5F458DDEA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
Manifest number:          01DD
Signing time:             Fri 28 Mar 2025 16:21:52 +0000
Manifest this update:     Fri 28 Mar 2025 16:16:52 +0000
Manifest next update:     Sat 29 Mar 2025 19:58:52 +0000
Files and hashes:         1: 323830343a366266383a3a2f33322d3332203d3e20323730343337.roa (hash: N21bgywY1x4r1vLZaPh96X/eWqYiw39UYsCfaNuehUU=)
                          2: 3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa (hash: mylTXmhuTTm2hr4D6b5vfiKs8MjHwQHS8CbX1aJ8+DQ=)
                          3: D23AEA3BF9686D794967BECAC226FA9648876870.crl (hash: tzEirng2hDDTMIm68lwUnpP1tcKPD96xZz2/C6JVlFw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:df:57:d2:36:80:4d:2d:e3:bd:a8:97:c9:83:8a:5f:45:8d:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Mar 28 16:16:52 2025 GMT
            Not After : Mar 29 19:58:52 2025 GMT
        Subject: CN=EAD7E51FF62EFC829BEC40018BDF75A588E3D626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:3b:a9:20:f7:f9:54:8e:79:73:d9:8e:d9:
                    a5:d1:bd:f5:aa:7f:eb:8e:35:e6:b5:fb:a4:03:1d:
                    b0:ac:ca:4d:ee:3a:3b:eb:65:07:ab:2b:03:7b:e0:
                    08:17:5c:40:7f:80:e1:12:ee:e8:43:ee:b9:ee:66:
                    b1:24:e5:ec:f1:02:e5:a4:2f:6f:f1:8a:f5:2d:d1:
                    da:d4:aa:4a:86:f1:06:be:3a:eb:46:e2:ba:c6:1c:
                    e9:7a:d4:d0:ec:00:68:d0:bb:06:55:93:97:f4:1d:
                    68:92:56:f7:95:a3:3b:36:e9:57:a7:c4:5f:f0:35:
                    3f:7e:54:b0:1d:8f:49:6c:db:04:f0:37:b9:7c:6c:
                    71:0c:c4:00:dc:75:a5:c3:01:a7:06:5a:37:92:eb:
                    aa:28:1d:2c:86:4c:c2:5f:0e:64:19:3c:26:c9:ba:
                    59:0b:86:39:56:4d:bf:98:73:57:ba:1d:c8:31:3e:
                    c9:4a:36:84:41:01:74:bd:c8:b2:f5:95:09:4f:dc:
                    05:6d:96:2d:10:a6:c2:00:a2:f4:d3:f6:01:bd:b7:
                    5d:af:d8:5d:b1:7d:ae:99:8a:9f:3d:ef:a4:89:83:
                    44:f2:bf:b7:30:a0:40:6a:a4:95:7e:8d:7b:93:a0:
                    41:62:95:09:d0:96:22:f3:f3:19:71:a2:44:8d:2a:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:E5:1F:F6:2E:FC:82:9B:EC:40:01:8B:DF:75:A5:88:E3:D6:26
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3b:45:81:c4:01:53:dd:95:94:4b:07:97:9e:59:94:dc:f7:
         e2:9f:b3:1a:d6:82:d1:cc:c4:df:13:f1:23:fb:24:90:4c:d9:
         02:dc:00:2b:bd:4f:d5:1b:1a:17:b0:a4:4d:d2:e1:58:7b:7d:
         4c:2d:d2:64:0f:27:09:8c:06:53:96:cd:4f:b0:f5:4c:93:7b:
         d0:58:2c:27:a7:00:2d:8c:e5:81:2a:be:44:c3:39:68:74:4b:
         9b:73:b9:25:86:66:b3:6e:77:fc:5c:bd:78:9e:cb:60:05:99:
         ef:7f:f3:38:b4:1f:94:d8:6f:e9:d7:17:73:34:3b:6e:15:2e:
         35:3a:c1:e5:a8:dc:cc:5a:d3:2d:9f:b0:81:c2:fc:85:bd:ae:
         48:b2:2f:82:6c:0c:96:c9:18:23:e2:7b:d3:8c:73:6a:96:ab:
         43:4e:14:41:0b:bc:ba:b6:53:16:8c:33:22:c8:94:bf:c3:8d:
         7e:73:93:0c:4c:97:6f:5d:e9:81:e1:86:b1:d7:23:77:56:e9:
         78:a2:59:57:d3:99:fc:a7:36:30:84:03:0e:91:97:d4:25:c8:
         62:38:e4:5c:78:6a:f9:93:2f:28:9c:ca:bd:24:49:47:23:44:
         89:2b:ff:c0:7c:21:19:a3:24:f1:52:33:51:92:f4:30:72:1a:
         bb:74:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----