Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/2925537C23E520880A217E95F2C902FE4962439B.mft
File:                     2925537C23E520880A217E95F2C902FE4962439B.mft (raw, json)
Hash identifier:          ua/0Dn03jlsii416DHWXctJRfNWWPAML1V7kPoTXT8s=
Subject key identifier:   0C:73:84:5A:FF:82:2D:80:06:8B:E1:60:3D:89:1D:00:2C:B6:6A:7E
Authority key identifier: 29:25:53:7C:23:E5:20:88:0A:21:7E:95:F2:C9:02:FE:49:62:43:9B
Certificate issuer:       /CN=2925537C23E520880A217E95F2C902FE4962439B
Certificate serial:       36820F557995F3B06CABA808A6B7A1E94791A7E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2925537C23E520880A217E95F2C902FE4962439B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/2925537C23E520880A217E95F2C902FE4962439B.mft
Manifest number:          0D
Signing time:             Wed 19 Mar 2025 13:36:32 +0000
Manifest this update:     Wed 19 Mar 2025 13:31:32 +0000
Manifest next update:     Thu 20 Mar 2025 14:01:32 +0000
Files and hashes:         1: 34352e3138392e34392e302f32342d3234203d3e20323639353638.roa (hash: 9PFWMy6FrO21cvVPPFMOyy+6NkLJhD0YGS+7wSR5sOc=)
                          2: 2925537C23E520880A217E95F2C902FE4962439B.crl (hash: wKuz3teXSb4mmgyNWFAPaV5U6cKmQxV4iWm0mx/ktMs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:82:0f:55:79:95:f3:b0:6c:ab:a8:08:a6:b7:a1:e9:47:91:a7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2925537C23E520880A217E95F2C902FE4962439B
        Validity
            Not Before: Mar 19 13:31:32 2025 GMT
            Not After : Mar 20 14:01:32 2025 GMT
        Subject: CN=0C73845AFF822D80068BE1603D891D002CB66A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:67:e5:32:8d:ad:75:88:20:5c:6e:2b:44:eb:
                    b8:59:59:a5:8d:7a:89:6d:a5:5f:66:cd:db:3d:a0:
                    46:94:38:da:5c:6f:01:1e:82:1d:00:97:9b:e3:eb:
                    12:a1:a7:a7:af:29:cf:ac:29:82:cc:1a:c1:a5:2f:
                    6c:93:d3:b5:a0:98:6a:b4:ff:56:6e:2c:0c:80:d5:
                    15:27:9e:da:36:09:59:6e:f1:0e:b4:09:f3:25:fc:
                    2e:86:54:be:e6:a2:52:b8:e9:74:43:0c:79:d1:af:
                    d4:01:f0:c1:0a:f9:51:b6:bf:31:d6:5d:18:6b:f1:
                    e1:c4:1f:74:39:8a:5a:13:bc:fb:96:1d:a0:51:47:
                    f5:97:bd:90:a8:11:50:03:53:c1:19:3e:df:f6:9a:
                    6f:5d:cb:ea:b7:9e:3b:f1:40:1b:ed:a4:11:dc:0d:
                    f9:3f:4c:4e:fc:b2:fb:8a:0b:2c:02:07:bb:e5:ca:
                    d4:e1:fe:6f:14:95:94:6c:7c:90:22:2b:bf:a9:d8:
                    97:66:a9:7d:13:ca:f6:c8:ee:ba:29:d2:b1:c0:c5:
                    ed:46:8c:62:ab:20:0d:a7:0c:0c:08:f4:d4:31:51:
                    de:4f:ac:11:df:18:44:ad:0e:b0:09:ea:8f:6c:c9:
                    48:e0:03:00:1b:89:06:91:4a:74:d8:ce:c1:41:d8:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:73:84:5A:FF:82:2D:80:06:8B:E1:60:3D:89:1D:00:2C:B6:6A:7E
            X509v3 Authority Key Identifier:
                keyid:29:25:53:7C:23:E5:20:88:0A:21:7E:95:F2:C9:02:FE:49:62:43:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/2925537C23E520880A217E95F2C902FE4962439B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2925537C23E520880A217E95F2C902FE4962439B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/2925537C23E520880A217E95F2C902FE4962439B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:28:b5:b2:a3:fc:4c:01:b3:d7:a1:3a:54:36:56:60:fb:
         ae:1e:b7:e7:e3:e7:3b:ec:20:ec:45:17:a4:01:49:fa:6d:20:
         29:00:a2:76:ef:34:85:39:f6:e8:43:51:ce:88:49:e4:32:38:
         28:3f:68:0d:71:e3:46:4c:5b:b5:49:eb:f4:34:df:f1:7c:8b:
         4d:0e:31:77:79:39:c6:9e:b0:1d:9a:b9:5f:c5:a2:8e:17:82:
         7b:6f:da:16:45:bf:93:06:62:11:cd:35:3c:09:28:73:77:83:
         26:65:e6:fc:70:c7:2a:01:7f:29:d9:2b:1d:75:5c:82:a7:33:
         35:4c:f2:0f:87:ba:d1:51:f0:2d:2f:4f:ee:7d:82:e7:54:90:
         6f:ce:4f:0b:28:51:2d:6d:31:d4:77:99:8a:ba:04:7e:a8:4a:
         0c:04:0b:24:8e:8f:3b:bd:32:4e:b9:97:15:14:54:82:2f:9f:
         52:8e:91:44:89:b3:3a:a2:48:91:ee:56:af:83:2f:d1:2f:36:
         3d:7b:88:fa:71:c4:fd:db:6b:71:83:a3:9c:49:30:80:88:83:
         96:c8:a6:8d:e6:4c:d3:2f:32:6a:9d:7e:05:ad:f3:90:4b:1a:
         e1:a7:a8:67:5a:f6:1e:51:d2:71:49:f5:f2:d8:19:43:b2:b2:
         c5:19:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----