Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
File:                     7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft (raw, json)
Hash identifier:          DyZbLQ+t2usq2vWf6JQTQcAeRJSc4i3AfD9ctJYeuWA=
Subject key identifier:   D7:82:13:7C:B8:C5:55:6C:47:DC:06:FD:63:16:20:71:C5:4D:62:02
Authority key identifier: 7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D
Certificate issuer:       /CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
Certificate serial:       154BFE20C3A56E3273CB12CE674173B02DEEAA49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
Manifest number:          01DE
Signing time:             Fri 28 Mar 2025 18:05:51 +0000
Manifest this update:     Fri 28 Mar 2025 18:00:51 +0000
Manifest next update:     Sat 29 Mar 2025 21:36:51 +0000
Files and hashes:         1: 7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl (hash: r6BnGiTAWaVOjL/RZvL72TyLUUJYkq8I5XcUuWUgvTg=)
                          2: 323830343a353764343a3a2f33322d3438203d3e20323638303839.roa (hash: U6egeYeFYsR6dbvMtpyDJyz1Ypey0XnQvbDPgnkbwTg=)
                          3: 34352e3136382e3138382e302f32322d3234203d3e20323638303839.roa (hash: 0hBMG5jz0Qc2i2kqjeRr3rCIwiJ1x6hHbJ3ZzlEXxJw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4b:fe:20:c3:a5:6e:32:73:cb:12:ce:67:41:73:b0:2d:ee:aa:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
        Validity
            Not Before: Mar 28 18:00:51 2025 GMT
            Not After : Mar 29 21:36:51 2025 GMT
        Subject: CN=D782137CB8C5556C47DC06FD63162071C54D6202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:d2:ff:9a:c2:00:98:15:52:93:37:fb:bf:
                    78:52:cf:ed:4e:90:5f:7b:03:d5:b0:7d:76:af:95:
                    bf:99:29:bd:ba:42:a0:bc:66:cd:64:31:7e:e4:df:
                    bf:de:fc:6a:c0:cc:07:84:d6:8e:7d:d7:10:49:69:
                    62:5a:a3:97:9d:11:17:93:82:50:6a:db:7a:d7:fa:
                    f6:74:df:7d:6b:f1:b1:5c:0f:95:38:79:7b:3a:cc:
                    f9:8a:a0:c3:ef:9c:1a:41:60:48:92:ad:34:7d:51:
                    bb:0c:bc:8e:fb:14:40:60:e8:6a:ac:64:f2:75:16:
                    b4:9b:d5:08:a8:36:d5:5d:a1:4a:50:a0:80:13:41:
                    d4:44:6a:02:16:87:27:9c:95:86:42:21:94:78:06:
                    ed:83:29:84:fa:06:16:ef:69:85:6e:e9:d8:75:34:
                    8b:a3:68:92:5d:25:db:52:8f:ac:ba:0c:9b:7e:f6:
                    c3:86:f1:98:07:e3:4e:fe:e1:1d:52:b0:f8:cc:d3:
                    67:d0:db:6b:3d:20:6b:9b:93:d7:c4:49:38:72:b1:
                    0f:7d:cd:da:ca:ab:7a:5c:c6:d0:9a:65:ec:9e:5f:
                    56:cc:01:00:9f:9d:f3:f2:a2:d5:4b:8d:54:a2:09:
                    ef:49:b1:8a:9b:1f:ad:1b:d1:d6:64:f3:a4:3a:06:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:13:7C:B8:C5:55:6C:47:DC:06:FD:63:16:20:71:C5:4D:62:02
            X509v3 Authority Key Identifier:
                keyid:7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:46:08:96:08:0c:09:c9:f5:ca:cb:6f:28:ee:7c:85:3a:
         f6:b9:5e:8c:f1:a1:76:cf:bd:93:ab:6a:07:4d:d5:55:d4:e7:
         1f:88:1b:43:4e:a3:32:cd:75:a6:97:f6:a6:98:7c:8f:d2:20:
         4f:11:d0:d1:c5:f7:de:06:a8:47:73:1c:14:34:ca:b5:da:0c:
         92:6e:30:6c:1d:6d:a6:49:55:84:db:8f:e4:a3:87:26:25:13:
         30:9f:91:ea:83:3c:0b:b9:b6:1d:cf:58:31:6f:34:1e:9a:df:
         56:56:6d:72:b5:8f:85:c1:f3:c4:ad:4b:85:63:8e:e6:03:16:
         67:bd:a9:70:e1:67:b0:04:b3:5f:fa:2d:d4:5d:b7:54:ac:4c:
         aa:c0:7b:bc:0e:bc:52:33:92:b8:af:f7:03:fd:a7:5b:84:39:
         3c:0b:57:15:cb:3a:f7:fd:fd:86:d3:5e:44:54:29:e9:a1:bb:
         2f:9a:2c:8d:9e:cc:e3:0d:9c:48:7e:84:d7:80:fb:c3:91:e1:
         ec:bb:64:6b:dd:25:7b:04:49:c8:2e:58:39:a6:26:82:a6:fc:
         ef:9f:05:6a:6b:7c:49:0b:12:44:46:2f:cd:f5:d3:e7:9d:c2:
         b1:55:8e:7d:4b:1d:bf:4d:42:80:ab:f4:d4:bb:12:45:15:77:
         c1:8e:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:48 2025 by rpki-client