Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/C482D0929FF8D199FDC92401922F235EAC78F111.mft
File:                     C482D0929FF8D199FDC92401922F235EAC78F111.mft (raw, json)
Hash identifier:          ZUcIObFET7UQey9H4ca/2X0UWui5M1NkYFpZyMoHOD4=
Subject key identifier:   BB:F0:CA:ED:D8:FB:D0:A1:4E:3B:F9:BA:D6:8D:05:41:31:D3:EF:D5
Authority key identifier: C4:82:D0:92:9F:F8:D1:99:FD:C9:24:01:92:2F:23:5E:AC:78:F1:11
Certificate issuer:       /CN=C482D0929FF8D199FDC92401922F235EAC78F111
Certificate serial:       1F50B83233EEB9CBCF21927F21CCF70911DD8677
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C482D0929FF8D199FDC92401922F235EAC78F111.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/C482D0929FF8D199FDC92401922F235EAC78F111.mft
Manifest number:          2A
Signing time:             Fri 28 Mar 2025 21:02:29 +0000
Manifest this update:     Fri 28 Mar 2025 20:57:29 +0000
Manifest next update:     Sun 30 Mar 2025 00:47:29 +0000
Files and hashes:         1: 3134332e3230322e34382e302f32322d3234203d3e20323632353436.roa (hash: 9TVPEvHzSZBwj1pLcOyjfdC7UERYX2HM3Y3ms8coJ0Q=)
                          2: C482D0929FF8D199FDC92401922F235EAC78F111.crl (hash: 9GhhV9O6c7Ufomc1sEFXuhOHj5E/b81jBL2vaxGuThk=)
                          3: 323830343a3564383a3a2f33322d3438203d3e20323632353436.roa (hash: dUxc5EhiY84OoYqm9xQs/JL1UTedw/+uqa/Ch03KQxM=)
                          4: 3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa (hash: W18pJM3sACxIdZpa9xnsiQPYePxZKpYsn/WPAaq3gqA=)
                          5: 3137372e37322e3131362e302f32322d3234203d3e20323632353436.roa (hash: DHhMy8nUY7lvnfq8TgN85LIWSAWGhzTuHHftU9UiafA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:50:b8:32:33:ee:b9:cb:cf:21:92:7f:21:cc:f7:09:11:dd:86:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C482D0929FF8D199FDC92401922F235EAC78F111
        Validity
            Not Before: Mar 28 20:57:29 2025 GMT
            Not After : Mar 30 00:47:29 2025 GMT
        Subject: CN=BBF0CAEDD8FBD0A14E3BF9BAD68D054131D3EFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:40:b8:e5:7a:c2:43:6e:39:4c:08:78:9e:
                    61:ce:2b:c8:5f:c0:d7:27:47:61:af:be:16:47:a2:
                    41:f8:f8:77:0c:4b:1b:ca:ff:37:f3:67:a1:53:ea:
                    78:f8:9b:33:2e:a2:7c:e1:cf:e8:29:6a:4b:e3:09:
                    42:44:b0:b1:15:52:01:7d:d5:0e:72:63:72:89:38:
                    ff:f3:ce:a8:a5:52:e0:9e:b7:56:c8:17:f6:c3:51:
                    f3:26:07:d3:b7:30:20:f3:88:43:92:3b:75:62:dd:
                    8a:da:44:05:c0:e8:b5:96:76:2e:92:68:f0:6c:42:
                    b9:6d:27:dc:fb:82:42:1d:eb:21:a6:c0:e5:49:53:
                    27:96:a8:cb:8e:af:1d:f8:be:eb:f7:94:d9:05:fe:
                    87:c8:67:8e:4a:46:58:67:d4:49:24:1b:c1:f3:22:
                    c5:7a:ac:03:f6:7e:a0:28:d5:37:14:52:29:76:45:
                    ed:53:da:83:8b:a4:d4:5a:fd:64:69:4d:a8:c9:02:
                    9c:df:c7:fa:8d:7a:fc:73:cc:98:fb:65:58:fa:eb:
                    59:52:35:1e:90:32:e3:f6:a3:89:60:3a:ea:3f:dc:
                    9c:69:d2:3c:dc:88:2d:58:83:aa:c7:b3:68:22:d8:
                    4d:71:3a:3c:db:1b:ee:99:cf:33:e1:88:d5:b5:e7:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:CA:ED:D8:FB:D0:A1:4E:3B:F9:BA:D6:8D:05:41:31:D3:EF:D5
            X509v3 Authority Key Identifier:
                keyid:C4:82:D0:92:9F:F8:D1:99:FD:C9:24:01:92:2F:23:5E:AC:78:F1:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/C482D0929FF8D199FDC92401922F235EAC78F111.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C482D0929FF8D199FDC92401922F235EAC78F111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/C482D0929FF8D199FDC92401922F235EAC78F111.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:bd:10:b6:bb:5e:0a:6c:76:98:0d:30:7c:66:e4:08:b1:
         8e:45:34:c6:ef:72:50:f2:ea:b5:7a:9a:dc:00:51:bb:35:94:
         ee:11:92:3c:3b:aa:9b:e1:d4:48:5f:01:e2:73:7a:a9:df:f7:
         d8:7d:0d:16:41:d9:5d:38:16:a9:47:95:3c:83:3a:9c:6d:90:
         db:5e:cd:9a:5d:07:89:ca:05:9e:e2:07:9b:84:96:e5:2c:8a:
         d4:c5:f0:03:f4:96:d2:46:3a:b7:14:54:67:d2:91:23:e9:f0:
         55:ba:d5:d1:79:5c:71:f8:76:67:a5:e6:ef:4d:ba:6f:9a:92:
         5d:10:4d:ad:fd:73:ec:c9:f1:84:66:88:e3:c5:03:4b:d6:54:
         5c:31:92:aa:57:72:89:27:fa:a7:72:59:0b:4e:c6:b4:77:07:
         43:37:5c:77:26:15:73:d7:38:c9:27:85:57:eb:ff:c7:29:6b:
         bb:60:8a:21:b6:f8:8b:28:c8:81:44:6c:37:ad:58:29:31:9e:
         8c:63:c7:a9:5b:46:70:07:6d:ab:d9:80:66:9d:db:c2:36:bb:
         83:bf:e4:56:61:d9:9e:70:7e:ea:59:45:25:e9:f9:52:06:3d:
         69:1a:7c:8e:f3:3e:aa:aa:a6:ee:0f:b8:3f:2a:b4:12:0b:64:
         7a:7a:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----