Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.mft
File:                     2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.mft (raw, json)
Hash identifier:          l4R1D7kcoXp+sYUKvRHzrGnA9lmp+zC48KddhbWfpgw=
Subject key identifier:   F7:6C:C5:37:CB:35:39:2C:B4:94:89:4F:82:0A:F4:6C:E2:E4:45:9A
Authority key identifier: 25:01:EA:CD:3E:F1:F5:0A:4D:01:6A:A6:54:9B:27:1F:B0:2B:9D:6D
Certificate issuer:       /CN=2501EACD3EF1F50A4D016AA6549B271FB02B9D6D
Certificate serial:       34D27199A6117AD99DFE92A81ED2BB85EAE6BABF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.mft
Manifest number:          12
Signing time:             Sun 22 Sep 2024 17:52:17 +0000
Manifest this update:     Sun 22 Sep 2024 17:47:17 +0000
Manifest next update:     Mon 23 Sep 2024 21:13:17 +0000
Files and hashes:         1: 2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.crl (hash: JhRTYtFu9aHEMmwxLoZLqV31Pi318veUR0HIpk5quww=)
                          2: 323830343a376461343a3a2f33322d3332203d3e203631363035.roa (hash: MbSTxAJM3ZTqpx/FO0OcKIaFfBtLU3r0grgovn2UPUs=)
                          3: 3137392e36332e3137392e302f32342d3234203d3e203631363035.roa (hash: donwcR6xof4ifpocbPF5CGl5zHFs+33fRZoxmqKXUxE=)
                          4: 3137392e36332e3137382e302f32332d3233203d3e203631363035.roa (hash: TUnO9ytslCvQKqb+pg5xH2lFhdXl6kDCpoy0v+aILlY=)
                          5: 323830343a376461343a383030303a3a2f33332d3333203d3e203631363035.roa (hash: Byy4LZ3ZPBhJsSJBOxTuF6uwPnsbTUOoPy/f7ta7/xM=)
                          6: 3137392e36332e3137382e302f32342d3234203d3e203631363035.roa (hash: nJNlxtT8Ubc64i97yG9HDF8vbJNm0soH1puFXuX8lec=)
                          7: 323830343a376461343a3a2f33332d3333203d3e203631363035.roa (hash: SsUIicFUJaai/RrOC4A3TYNRnA8j9gWdGof70/n5RzI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d2:71:99:a6:11:7a:d9:9d:fe:92:a8:1e:d2:bb:85:ea:e6:ba:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2501EACD3EF1F50A4D016AA6549B271FB02B9D6D
        Validity
            Not Before: Sep 22 17:47:17 2024 GMT
            Not After : Sep 23 21:13:17 2024 GMT
        Subject: CN=F76CC537CB35392CB494894F820AF46CE2E4459A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:b3:0b:eb:06:e4:cd:ae:aa:28:12:36:6a:
                    6a:d2:e8:29:f8:60:d4:6d:9b:11:24:e4:46:7d:db:
                    3b:47:26:5b:02:5d:86:d6:fe:ba:92:75:03:18:40:
                    c4:86:04:a9:74:50:1c:0e:c1:fb:71:22:2a:4f:e6:
                    8c:0d:9f:3d:3e:ef:61:10:db:5a:49:b1:c2:15:5b:
                    87:12:a6:49:c0:b2:db:21:5c:ae:63:58:43:ed:35:
                    29:12:fa:65:02:f5:05:76:36:46:3d:cb:25:48:b9:
                    a5:48:8e:67:eb:64:6a:62:11:c8:74:24:2c:56:0d:
                    fd:ba:b4:11:ba:78:fe:2b:6d:ba:90:ab:37:64:18:
                    f6:e0:dc:ce:79:01:ec:c0:b6:47:b9:bf:4b:37:b0:
                    a1:ba:31:b8:ac:80:82:3f:e2:f1:08:a0:be:c5:3b:
                    22:f3:f2:c4:ea:17:0d:77:ed:f4:84:57:fb:72:d8:
                    83:0b:6c:be:76:eb:9d:2f:f0:de:61:4e:fc:5e:33:
                    51:61:83:f9:14:38:8a:02:9e:81:95:db:ae:bf:79:
                    00:93:ed:f8:93:f2:4e:72:69:40:24:fc:de:c4:64:
                    0d:51:13:25:ca:a4:59:79:00:82:5e:55:c8:c0:04:
                    9d:34:78:7c:34:c8:a4:7f:78:57:37:5a:e2:db:72:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:C5:37:CB:35:39:2C:B4:94:89:4F:82:0A:F4:6C:E2:E4:45:9A
            X509v3 Authority Key Identifier:
                keyid:25:01:EA:CD:3E:F1:F5:0A:4D:01:6A:A6:54:9B:27:1F:B0:2B:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/2501EACD3EF1F50A4D016AA6549B271FB02B9D6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:15:d0:4a:09:e3:33:4e:5f:b9:2a:d0:a5:4f:f7:2a:44:05:
         73:ff:8c:64:aa:4e:ad:27:0a:9a:3d:40:25:a7:e8:c4:26:9b:
         8f:76:1d:af:da:15:0e:b0:d9:ef:26:c8:d8:ba:aa:c9:6f:ca:
         6b:29:43:b8:88:5d:46:d1:ce:85:63:f8:9a:f8:9e:aa:de:f8:
         ae:4d:cb:78:2b:5e:69:35:0b:ff:ca:97:83:9a:53:8c:e0:c5:
         b2:75:28:8a:8c:57:b4:54:68:b0:61:41:8a:55:28:8a:5a:63:
         6b:88:0c:1b:79:89:15:bb:bd:95:5d:7e:fe:8e:b3:88:8c:14:
         74:44:5f:09:89:35:e7:c6:7a:72:d2:04:1e:1e:b7:3b:25:e7:
         3e:3c:fa:52:ab:69:90:15:78:b0:35:d8:da:89:bd:3e:f9:35:
         e9:2d:6d:20:3c:d4:9c:1d:83:62:da:dd:e7:f5:9f:44:51:b1:
         56:b8:07:24:e1:87:b4:dd:6e:5d:cc:49:11:93:d4:25:26:1c:
         10:89:95:bf:1a:1c:7b:ee:c1:1a:50:d3:ab:d8:eb:55:b8:4d:
         7c:c4:07:56:23:96:65:7e:08:9d:b5:39:73:73:cb:27:c3:49:
         2a:71:e0:cb:eb:17:61:52:85:44:29:fd:97:fa:4a:1f:0a:93:
         9a:cc:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----