Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft
File:                     704F7944732F98AD0D651DC0C5B89C092F753A92.mft (raw, json)
Hash identifier:          7uv5Bs2QC9arScbPU3JzlXlOYR/OZISqF9uiYEhnMjY=
Subject key identifier:   79:C3:A5:A8:E8:91:C2:8A:C3:67:5F:14:D8:53:42:57:A7:41:1F:19
Authority key identifier: 70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92
Certificate issuer:       /CN=704F7944732F98AD0D651DC0C5B89C092F753A92
Certificate serial:       2767AD5B9BB4602DD173F6BB591B4D34ECEC8017
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft
Manifest number:          021D
Signing time:             Sat 29 Mar 2025 03:40:01 +0000
Manifest this update:     Sat 29 Mar 2025 03:35:01 +0000
Manifest next update:     Sun 30 Mar 2025 03:40:01 +0000
Files and hashes:         1: 34352e3232362e35322e302f32322d3234203d3e20323636393835.roa (hash: gFKNGQWnxf/lO0ukJjdU4O1Hi8MvZwPF3BEGK/CEjdo=)
                          2: 704F7944732F98AD0D651DC0C5B89C092F753A92.crl (hash: B7fYTeIGosX1OXjhzuY4BG4pRypEz7dzFiaakoGbdFM=)
                          3: 323830343a343635633a3a2f33322d3334203d3e20323636393835.roa (hash: NSUTd+jNQlxEWgEHUGBU26ljbt8t1wltALHSyy3OQwM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:67:ad:5b:9b:b4:60:2d:d1:73:f6:bb:59:1b:4d:34:ec:ec:80:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704F7944732F98AD0D651DC0C5B89C092F753A92
        Validity
            Not Before: Mar 29 03:35:01 2025 GMT
            Not After : Mar 30 03:40:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:30:0e:90:6b:26:14:d5:eb:92:77:7d:74:
                    d9:a9:6a:3e:6e:2b:e3:95:5b:13:69:c9:c7:b7:67:
                    89:00:78:5b:ec:cc:ca:f7:50:a3:61:e9:35:92:c7:
                    c8:5a:a9:0e:27:84:e8:ba:9d:e7:a8:d3:ef:df:a5:
                    c5:83:cb:96:fc:68:20:9a:34:95:c6:52:28:49:8b:
                    e5:78:79:e0:ce:4c:bd:5f:34:b0:0a:3f:23:12:3e:
                    ae:c7:58:6b:5f:1c:44:80:04:a2:78:bb:87:14:88:
                    7e:83:48:73:ba:7f:3f:4b:a3:1a:14:fc:d6:c4:4b:
                    39:42:c9:81:bb:35:3a:db:8c:74:46:6a:be:e5:e0:
                    8f:6d:34:31:79:cb:91:4f:15:63:17:87:bd:ec:b7:
                    74:fb:0e:d3:f2:2f:f3:77:fe:c8:1a:8e:f3:a0:6a:
                    43:60:fc:6a:9e:80:1c:54:80:f7:94:1f:a8:0d:7c:
                    2c:93:39:77:c2:1d:53:45:22:87:2c:cc:c2:22:e0:
                    b0:4a:05:61:96:5d:35:70:39:5f:c4:36:1b:0a:a9:
                    0a:45:b3:f5:a2:54:85:e8:c7:4c:e2:17:db:ee:26:
                    fb:74:88:90:a2:55:cb:1d:10:d7:4a:6d:42:c0:3a:
                    89:e9:62:c3:ae:37:8d:4b:75:bd:df:43:c1:20:5d:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C3:A5:A8:E8:91:C2:8A:C3:67:5F:14:D8:53:42:57:A7:41:1F:19
            X509v3 Authority Key Identifier:
                keyid:70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:be:12:a4:5a:39:0f:9f:a1:93:62:e2:a3:71:5a:54:62:60:
         f3:21:c8:2c:4d:3f:9a:b0:3e:c9:9e:ac:01:7c:9b:3e:4b:ce:
         4c:3d:f8:d6:07:2f:1a:62:ac:67:1f:36:b1:5f:20:aa:3e:63:
         ed:66:e3:7d:28:22:17:28:f7:5d:d8:43:e4:2d:69:38:91:3a:
         bd:49:31:e0:2a:76:6b:94:b6:56:cc:cf:08:fa:57:a5:a8:ba:
         e0:6e:80:5c:17:57:9b:7a:e2:0e:c1:18:4c:bc:57:b3:ec:16:
         46:1c:0e:58:51:b0:8f:57:9a:3e:77:18:42:13:55:63:da:ae:
         88:01:a3:b0:eb:76:ab:66:ed:66:35:0f:81:38:f3:fa:73:24:
         77:b2:f5:d1:dd:e6:7c:07:8a:a5:4c:7e:9d:43:35:d6:c2:19:
         05:d8:27:04:df:72:5b:d0:d6:98:ac:8e:94:41:83:82:b3:47:
         df:79:2e:4a:2a:9f:c0:cd:a6:bf:fa:b3:ce:32:0f:72:a0:18:
         aa:d9:76:5b:5b:5b:af:fc:dc:20:97:74:3c:42:01:7d:d7:68:
         c6:a2:04:b9:04:47:6a:4d:ab:05:e4:10:92:37:64:3e:2b:29:
         5e:9d:08:e9:46:43:1f:3b:cf:c7:c2:b5:53:b0:ad:9d:5f:c8:
         e9:72:ca:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----