Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
File:                     95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json)
Hash identifier:          ZVSt9f05HxPD+qpzxATrCZGisHj0pGUYTJFhpB5vgPE=
Subject key identifier:   59:E6:8D:34:3D:37:78:29:84:EF:38:BB:1C:E3:9E:16:E5:6D:E9:84
Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81
Certificate issuer:       /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
Certificate serial:       76CF0256BD65BC1149A43E71C6A87833966CA766
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
Manifest number:          2A
Signing time:             Sat 29 Mar 2025 06:25:51 +0000
Manifest this update:     Sat 29 Mar 2025 06:20:51 +0000
Manifest next update:     Sun 30 Mar 2025 08:14:51 +0000
Files and hashes:         1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=)
                          2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: V/G26XDiB6nnl/Q24TsrRcCZ0a0BVCYsHrlOXNT+tsg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cf:02:56:bd:65:bc:11:49:a4:3e:71:c6:a8:78:33:96:6c:a7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
        Validity
            Not Before: Mar 29 06:20:51 2025 GMT
            Not After : Mar 30 08:14:51 2025 GMT
        Subject: CN=59E68D343D37782984EF38BB1CE39E16E56DE984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:01:11:74:a4:b3:15:f0:a7:27:e0:5d:05:
                    15:ce:b8:31:0a:b4:ed:e0:63:cc:ac:82:73:9c:ae:
                    03:f3:b7:b5:07:0b:f7:5f:ee:e0:6f:c2:d2:e2:af:
                    ca:64:69:a8:5d:3d:c9:09:86:dd:b8:64:68:11:0c:
                    35:69:47:44:2f:2f:bb:09:57:09:66:2d:de:7d:f1:
                    82:7e:b3:b9:f3:1e:b0:ec:80:46:fb:a8:b4:cf:3e:
                    ca:50:03:2d:72:2a:e4:9b:78:fd:ed:6e:47:17:7e:
                    61:a6:99:08:ea:88:5c:f1:81:42:32:23:7a:fa:ed:
                    7c:e2:cb:aa:d1:0e:5b:f2:5f:02:1d:ac:76:54:d0:
                    01:c5:5c:2f:97:bd:ef:e4:2d:5b:98:6f:f3:25:39:
                    f7:f7:8d:5f:37:06:8c:17:8e:02:0e:cc:e2:b7:34:
                    62:9f:19:4b:02:0e:bb:d9:d3:26:16:24:0d:7e:03:
                    ff:ff:02:71:81:ed:de:89:ec:23:98:19:9d:92:86:
                    fa:65:77:4e:9a:0a:b6:89:98:e3:20:7e:11:c8:9c:
                    a5:f3:11:09:9c:a6:09:32:72:be:ff:4c:fe:7a:27:
                    fa:9f:7b:dc:b7:f4:e6:42:2a:ad:7b:54:74:51:d9:
                    44:aa:67:fc:72:91:13:bb:a5:9b:77:4c:45:5e:67:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:8D:34:3D:37:78:29:84:EF:38:BB:1C:E3:9E:16:E5:6D:E9:84
            X509v3 Authority Key Identifier:
                keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9a:7f:b6:1b:29:21:93:7b:f8:52:d5:cf:0d:7c:51:47:67:
         f2:6b:79:42:fe:be:0a:9e:cc:ee:62:93:34:b1:15:06:18:6f:
         8e:ee:71:b7:ce:69:9f:62:f2:fa:d9:36:bd:23:2b:f1:3e:4d:
         fd:ac:67:2c:4d:45:bc:48:30:56:3c:d5:42:62:a2:c1:55:8a:
         07:24:19:f8:b3:eb:ed:8d:6c:29:63:6e:0d:4e:b4:25:b3:67:
         50:c0:2e:f7:f2:f6:df:9d:ca:fd:77:d6:90:56:58:5e:41:5a:
         32:ab:20:70:6c:89:28:16:e9:e6:31:9a:98:e4:d0:2b:13:89:
         01:49:4e:18:49:38:ba:af:69:28:fe:9a:0d:4c:09:dd:46:c5:
         80:16:55:e1:df:48:e8:08:8a:d9:dc:8e:e0:97:59:3b:82:ac:
         75:bf:e4:44:ff:b2:c1:7f:58:dc:93:f2:74:5c:34:36:cc:25:
         fd:14:b0:05:df:47:90:6b:63:f4:40:58:09:6c:17:dc:88:4e:
         a9:57:65:bf:72:18:d4:68:bb:31:82:9c:68:fa:46:72:3a:46:
         e7:35:83:66:73:6f:36:fa:0f:fa:f2:a5:68:34:d7:01:8e:4e:
         ad:35:c3:88:ca:96:d4:65:9d:30:a0:2c:6a:2f:ed:9b:92:67:
         fc:4b:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----