Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
File:                     71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft (raw, json)
Hash identifier:          UOxd20x/fDkJsrhLpbSQNRg7hp/mq0j4/TNbXcDH/gw=
Subject key identifier:   6A:29:9F:53:5C:C5:AA:E2:46:34:19:7E:E2:8F:3F:7B:08:77:DA:79
Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
Certificate issuer:       /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
Certificate serial:       5D85F96232F111D5CFB0AD0B1C1E0C230E46544E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
Manifest number:          01DF
Signing time:             Fri 28 Mar 2025 17:49:06 +0000
Manifest this update:     Fri 28 Mar 2025 17:44:06 +0000
Manifest next update:     Sat 29 Mar 2025 21:34:06 +0000
Files and hashes:         1: 3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa (hash: IV3rgpu5jqUf8IKt60skmyD4qSR/oAcEE4NuthHk2GU=)
                          2: 3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa (hash: 3DVq0DqkNADLTWL9AGG+zxpnVBOYf65tDKJdH03YwxI=)
                          3: 323830343a326265343a3a2f33322d313238203d3e20323633303034.roa (hash: YCMokJP8YtzLgx2BEvdyCNMZiRlmmm6TEAPNElQUjXQ=)
                          4: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl (hash: 5camy5RgtyNdrvar9tJP6s1+JzpHvZW81E5dLSJXRyo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:85:f9:62:32:f1:11:d5:cf:b0:ad:0b:1c:1e:0c:23:0e:46:54:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
        Validity
            Not Before: Mar 28 17:44:06 2025 GMT
            Not After : Mar 29 21:34:06 2025 GMT
        Subject: CN=6A299F535CC5AAE24634197EE28F3F7B0877DA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:24:12:33:67:15:82:54:2d:48:98:4f:d1:
                    7a:29:f5:2c:92:13:3c:7e:20:7e:96:56:b1:b7:82:
                    52:f6:ce:27:aa:65:ec:fb:b5:26:4c:11:62:d9:30:
                    31:16:a4:dd:fa:87:93:56:d9:62:b2:9d:40:39:b2:
                    9c:09:37:e0:a3:a9:f7:10:5e:c6:71:77:dd:f3:c4:
                    f3:12:e6:6f:da:60:cd:e7:ce:b4:e0:a1:54:93:38:
                    d6:28:ee:c5:65:09:e1:65:d4:5b:93:16:6d:23:db:
                    60:13:37:8d:36:f3:d9:f2:2a:30:9f:a7:33:03:c5:
                    07:47:d5:1d:d3:15:42:7b:a2:38:94:82:fb:12:35:
                    e6:5f:2b:7d:a4:02:f8:b7:9a:94:21:d6:35:3e:0d:
                    09:5f:14:98:f5:77:43:e8:c7:13:23:0a:3b:ec:43:
                    9f:a2:15:9b:4c:f3:a0:1e:60:30:ef:a7:61:0a:74:
                    c2:4b:16:7c:7e:14:17:85:e7:cb:02:c0:98:9d:fe:
                    a9:bd:c0:92:e1:a8:24:36:ff:ad:d3:ff:72:c6:e5:
                    79:79:cd:81:f3:fe:3c:c9:53:48:8c:df:e0:da:9b:
                    a0:00:44:51:05:5d:bf:ea:68:28:14:e9:b5:81:f4:
                    87:c3:d9:a4:ed:0b:38:16:74:cc:da:92:ad:f0:a2:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:29:9F:53:5C:C5:AA:E2:46:34:19:7E:E2:8F:3F:7B:08:77:DA:79
            X509v3 Authority Key Identifier:
                keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:12:2b:ff:58:8b:2b:d9:a1:3a:f6:33:a7:25:ab:15:bc:9c:
         03:8f:3f:d9:c9:55:e4:05:57:cf:6f:70:5e:9b:c7:7c:e4:e4:
         f6:68:ae:5c:06:3e:d3:d9:e9:31:b8:47:ba:a8:22:98:ec:ec:
         69:a1:21:57:57:bb:70:74:5c:a1:61:ff:31:30:d5:0f:1d:3f:
         db:e0:cd:22:f6:8a:2b:c5:5b:96:8f:d4:4d:2d:c2:cb:78:00:
         e8:bf:18:d4:f4:07:5b:db:5d:bc:1b:ef:fd:08:a0:86:31:61:
         f2:a3:0c:34:7d:12:f3:ad:d5:68:08:be:d5:73:10:71:b2:d7:
         6c:5d:e3:f2:10:e1:6e:5c:ac:00:28:f1:07:ca:6d:e3:6a:d9:
         5b:a2:07:de:27:1f:77:80:6a:ab:03:ba:60:b6:30:b5:0a:9a:
         44:36:1e:99:96:ee:82:e3:16:ea:96:e0:38:3c:d4:32:95:79:
         34:de:e1:3f:94:b9:f9:78:48:d8:a4:f3:68:3e:e6:0e:14:bd:
         5d:e4:e1:a8:fb:e6:ba:c8:9d:32:63:3f:89:74:30:85:da:54:
         d5:b7:59:5a:d3:8d:7d:12:4b:bb:cc:51:33:d2:0b:49:5a:78:
         ad:31:93:3f:85:03:7a:ed:5f:54:ef:3d:a5:97:b3:fe:67:81:
         3c:af:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----