Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.mft
File:                     CCB3B2CED2C6B0381EE0E27042C658F4289239B8.mft (raw, json)
Hash identifier:          3JOPufBmTxwrkXNwqTqev3gM3TR4oBV6v+Gf3PBjgs4=
Subject key identifier:   A7:5F:FF:F3:24:0E:71:33:27:05:DA:50:2A:70:75:25:36:85:EA:C3
Authority key identifier: CC:B3:B2:CE:D2:C6:B0:38:1E:E0:E2:70:42:C6:58:F4:28:92:39:B8
Certificate issuer:       /CN=CCB3B2CED2C6B0381EE0E27042C658F4289239B8
Certificate serial:       04D478FB352FD9D2502DC61CB6B54EB8D4A1ABA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.mft
Manifest number:          91
Signing time:             Sat 05 Apr 2025 09:18:36 +0000
Manifest this update:     Sat 05 Apr 2025 09:13:36 +0000
Manifest next update:     Sun 06 Apr 2025 09:35:36 +0000
Files and hashes:         1: 323830343a356537383a3a2f33322d313238203d3e20323639303335.roa (hash: KzHhqUVb2WjmaQVMuKTHxaPP2QFEp8DGVHf+ZlMeXEw=)
                          2: CCB3B2CED2C6B0381EE0E27042C658F4289239B8.crl (hash: trmLwjdybtoa9E1tokwkY49tAipWGEDjjMmYfMxF0/Q=)
                          3: 34352e3137362e3131322e302f32322d3332203d3e20323639303335.roa (hash: luM9TW+Lb9C+JpEF47YWS+l4c8VYneu2ecf9lUMkjZo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d4:78:fb:35:2f:d9:d2:50:2d:c6:1c:b6:b5:4e:b8:d4:a1:ab:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB3B2CED2C6B0381EE0E27042C658F4289239B8
        Validity
            Not Before: Apr  5 09:13:36 2025 GMT
            Not After : Apr  6 09:35:36 2025 GMT
        Subject: CN=A75FFFF3240E71332705DA502A7075253685EAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:a2:a9:b0:e8:ca:e5:ae:cb:a2:57:24:e3:
                    6d:3f:b4:39:77:48:00:ea:d2:62:9d:80:7a:e6:09:
                    56:2f:d0:58:db:69:cf:75:a5:bf:98:5e:d0:61:5b:
                    23:72:9c:d4:b8:f2:f4:a6:b2:38:55:3c:fa:87:a1:
                    24:c5:db:83:47:60:aa:8f:8e:df:71:e4:75:8c:c5:
                    a5:b6:d3:92:5f:eb:01:6c:a8:c9:0d:18:b2:73:2d:
                    18:da:e9:c8:bf:56:bd:e6:31:ee:c8:f8:f3:a3:fc:
                    7b:c4:a2:b5:e8:53:09:b7:f1:1c:0f:e0:76:b2:56:
                    70:d4:87:8d:f2:23:b6:10:62:e4:8f:2f:32:7d:c6:
                    10:ec:b2:c8:88:a9:80:55:1c:29:9e:96:43:ce:42:
                    17:3b:c5:7c:d6:71:a9:fb:d7:e6:39:47:57:5f:e3:
                    b8:1b:13:52:7a:85:02:41:ee:cd:12:c7:2b:f5:b9:
                    7a:42:f2:3c:1c:1a:b5:13:f5:a4:4b:36:a1:53:30:
                    6f:b6:07:9b:91:ec:7b:21:cc:3a:6e:36:e5:0e:14:
                    7b:7e:11:35:c8:03:ca:97:4f:e0:74:e1:b0:91:ad:
                    b1:fa:44:9e:00:07:6b:35:ee:6b:f4:fc:1c:ce:61:
                    a4:f3:dc:d5:0d:19:ff:6a:74:69:fd:2b:fc:d1:05:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:FF:F3:24:0E:71:33:27:05:DA:50:2A:70:75:25:36:85:EA:C3
            X509v3 Authority Key Identifier:
                keyid:CC:B3:B2:CE:D2:C6:B0:38:1E:E0:E2:70:42:C6:58:F4:28:92:39:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:ad:8f:d4:be:31:4d:c2:18:a8:95:49:8c:a1:10:76:eb:
         54:fe:96:b5:88:33:67:48:b1:1f:50:f5:56:53:62:5d:9a:d1:
         e5:d9:aa:92:d7:04:11:15:e3:a9:3c:07:be:64:57:ec:a1:c0:
         b9:58:53:b9:9a:d3:89:b2:d8:8b:3f:44:88:6b:17:fa:99:b1:
         d4:77:bc:be:5e:0f:ff:95:7e:a5:68:97:87:d1:15:26:f3:63:
         0f:14:07:9c:0a:3f:a5:03:89:5f:a9:10:0a:39:cb:8e:97:f8:
         a6:ca:2a:8c:15:6e:aa:35:97:3c:5d:b6:b1:2e:72:82:8f:13:
         da:ee:a6:ad:a0:09:28:38:96:23:f2:f0:d1:08:ef:47:ea:36:
         d3:80:69:b3:84:ba:b4:ac:4e:98:36:b6:f5:2f:5f:4c:62:6c:
         14:70:ea:36:bb:4b:20:72:9d:b3:11:b3:24:d8:5e:c6:18:b3:
         4f:af:eb:03:97:f3:5c:c0:bb:dd:81:e1:f4:c6:96:25:93:21:
         fe:32:57:1e:96:40:89:1a:10:5d:ed:c4:a1:35:91:b3:e0:b3:
         72:ff:52:7c:1a:8f:15:a2:ca:96:82:e2:15:7a:24:52:64:5b:
         aa:d1:c8:43:52:fe:38:3b:dc:98:1b:1e:9b:fd:9a:2f:fc:3e:
         37:b2:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----