Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
File:                     42E0C742D5DC5A6C41753F73202F41323E27436C.mft (raw, json)
Hash identifier:          Xx+Hj8EdwHzO3dcUMvsU4vFT2NhJ13S3Z8AETJkFWik=
Subject key identifier:   B6:C9:CF:37:41:00:6E:C3:5C:30:9A:22:97:4A:64:F7:55:0C:EA:10
Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Certificate issuer:       /CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Certificate serial:       46E2EA261D999B3D44DF66279D7F8AF20418F2E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
Manifest number:          01DF
Signing time:             Sat 29 Mar 2025 07:11:13 +0000
Manifest this update:     Sat 29 Mar 2025 07:06:13 +0000
Manifest next update:     Sun 30 Mar 2025 09:41:13 +0000
Files and hashes:         1: 3137302e37392e35322e302f32322d3234203d3e20323634353532.roa (hash: UQ56rMkePIWmRQnxJEolgK/byYB/tX2CcoDpZOtnz1o=)
                          2: 34352e3137322e38302e302f32322d3234203d3e20323634353532.roa (hash: GvxwwRB4CJnq/Jj9AOzJMqWm+rt4u0wxOID0kLFpMS4=)
                          3: 3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa (hash: 0ZZEuQrrPfiHaMrIh9+0kxAuBjT9ZSwkAb3GoL//XvY=)
                          4: 3133382e302e3137322e302f32322d3234203d3e20323634353532.roa (hash: GmwZJbaoy+k1FTw6qlwbLXe+EFZw6807X+9GSA5dJ74=)
                          5: 323830343a323136343a3a2f33322d313238203d3e20323634353532.roa (hash: Sbv71aUgQsl8zdlbbpeXL+yAaywXJvWpr940dxida9s=)
                          6: 42E0C742D5DC5A6C41753F73202F41323E27436C.crl (hash: 5xHNyoucl8TPQzWEGQh9/ZC2oeDaqIKP1REOz8FjHJ4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e2:ea:26:1d:99:9b:3d:44:df:66:27:9d:7f:8a:f2:04:18:f2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
        Validity
            Not Before: Mar 29 07:06:13 2025 GMT
            Not After : Mar 30 09:41:13 2025 GMT
        Subject: CN=B6C9CF3741006EC35C309A22974A64F7550CEA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:70:39:d8:c8:6e:09:df:b5:d4:92:66:86:
                    71:71:75:dc:be:a2:fd:2d:e1:c4:49:f6:96:98:be:
                    0b:8a:b5:1e:b4:23:50:7e:21:48:bc:4a:52:b0:68:
                    e9:72:31:ca:1c:6e:d5:63:20:cd:e4:9f:90:f2:49:
                    ef:f8:c3:63:3a:df:58:5f:80:4a:fe:be:84:08:72:
                    17:2a:90:41:77:df:62:fc:49:55:1d:75:b8:8f:ff:
                    b2:8a:47:63:44:80:b5:ac:27:aa:9a:21:69:b7:7c:
                    f8:d1:6c:5c:36:70:bd:02:c6:d9:7c:c8:51:86:ac:
                    02:be:92:c5:b6:7a:04:9e:f0:81:9e:d6:3f:e4:9a:
                    b8:21:42:92:05:42:74:5b:9d:76:c9:55:c9:60:70:
                    ad:b8:e6:4c:af:c2:5f:62:f7:57:ff:89:94:5f:66:
                    75:ae:58:6d:b7:18:2a:28:ec:95:a0:67:e4:f9:7c:
                    9b:87:20:a9:84:6d:28:9b:37:99:25:a3:54:79:32:
                    27:f1:46:dc:f1:fd:8e:2a:e8:95:4c:4b:da:4b:74:
                    b4:b0:7a:73:a4:5e:d2:46:f4:61:14:2c:fc:c3:55:
                    9d:ea:31:33:a9:93:3b:93:17:da:16:de:26:de:66:
                    9d:a8:a0:b8:6d:71:b4:6d:b7:78:ff:48:21:89:0e:
                    91:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C9:CF:37:41:00:6E:C3:5C:30:9A:22:97:4A:64:F7:55:0C:EA:10
            X509v3 Authority Key Identifier:
                keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:01:cf:80:5c:04:f5:1c:73:7d:8f:39:b6:27:0e:17:9d:97:
         e4:72:14:e8:af:84:c2:de:44:49:52:6f:1f:93:cc:69:55:2a:
         5f:ff:b1:bf:98:a7:e2:f6:64:86:04:07:f4:aa:d0:dc:bb:d9:
         3e:19:c7:1d:83:c6:bf:bb:50:0d:46:47:40:e4:22:f7:52:6c:
         f8:fb:b9:b1:90:4c:57:f7:5b:bd:b5:a1:9a:c7:fd:e2:b1:08:
         c3:20:c5:a6:9c:75:5c:7f:c4:56:6a:fd:6a:c3:1a:3e:f4:cc:
         f8:f7:af:5c:b7:1b:c0:0b:4d:f1:0b:6c:8b:b3:e0:46:35:2c:
         3f:e0:75:7b:33:72:71:08:d7:6d:1a:cf:a6:0b:41:cb:65:69:
         8f:1b:27:c5:2f:0f:41:e9:bb:5a:1c:06:66:12:7f:bb:08:fc:
         70:53:82:cc:41:37:f7:49:e2:61:9a:ae:60:c8:1a:94:b8:e1:
         12:b6:c6:3c:75:9a:7f:7a:68:01:5d:6b:1f:a4:55:bb:e4:24:
         7b:4b:55:42:22:74:19:4b:00:90:c6:6b:ec:c9:ae:4b:0f:f8:
         a5:65:c1:38:72:3d:73:59:0e:7c:1d:ee:28:68:38:93:96:37:
         3b:9e:26:8e:d5:ab:6f:5b:b3:1d:31:08:39:79:59:a0:da:38:
         2c:5a:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----