Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/B2B6CE3FB133330E66576F710D1637FEE10E60FC.mft
File:                     B2B6CE3FB133330E66576F710D1637FEE10E60FC.mft (raw, json)
Hash identifier:          pp4/o6wdMyPxlVygL4aP8CLgw8/l0pwsT4D7f26aWBI=
Subject key identifier:   01:46:3D:C8:52:C4:47:20:2B:30:94:90:ED:61:5D:39:E0:9C:43:5E
Authority key identifier: B2:B6:CE:3F:B1:33:33:0E:66:57:6F:71:0D:16:37:FE:E1:0E:60:FC
Certificate issuer:       /CN=B2B6CE3FB133330E66576F710D1637FEE10E60FC
Certificate serial:       5CAC63B0267C06A33132BF49179CB498A963BD36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2B6CE3FB133330E66576F710D1637FEE10E60FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/B2B6CE3FB133330E66576F710D1637FEE10E60FC.mft
Manifest number:          BE
Signing time:             Sat 29 Mar 2025 10:56:01 +0000
Manifest this update:     Sat 29 Mar 2025 10:51:01 +0000
Manifest next update:     Sun 30 Mar 2025 11:08:01 +0000
Files and hashes:         1: 3133312e3130382e3232382e302f32322d3232203d3e20323634333532.roa (hash: XjwhUop8Wq/5mNnU2Mjnypcdoz4Ik/9mcxTaqGH0n78=)
                          2: B2B6CE3FB133330E66576F710D1637FEE10E60FC.crl (hash: ySDWpGH0raJq9lrybzcT1i3ghfy2cv1RxJ5tEL0PfFc=)
                          3: 323830343a316432633a3a2f33322d3332203d3e20323634333532.roa (hash: Fq77ahO6NkECS+xxyNGaL6Afk410yo/62/8MprJ7Y7g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ac:63:b0:26:7c:06:a3:31:32:bf:49:17:9c:b4:98:a9:63:bd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B6CE3FB133330E66576F710D1637FEE10E60FC
        Validity
            Not Before: Mar 29 10:51:01 2025 GMT
            Not After : Mar 30 11:08:01 2025 GMT
        Subject: CN=01463DC852C447202B309490ED615D39E09C435E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:39:22:6c:30:34:a1:51:e1:23:98:42:c0:
                    10:51:e9:4c:e3:e5:63:ab:2f:dd:f3:bc:5b:82:58:
                    ca:05:4d:b5:e9:17:a6:72:26:4e:92:7f:d8:8d:12:
                    2b:09:03:e6:ef:64:7b:5c:30:00:5e:93:7f:12:39:
                    5b:ee:66:b4:39:c6:46:69:29:10:2a:05:5a:86:25:
                    0d:83:8c:58:98:06:a8:90:7b:34:4a:fa:1a:6f:36:
                    bc:1e:8b:e9:3b:ff:a4:20:a1:12:8e:4a:88:7b:84:
                    3e:26:56:ff:0a:46:1d:63:50:49:14:14:e2:48:7e:
                    2e:47:2f:2d:e4:1a:2d:95:56:3a:fc:56:eb:63:af:
                    68:6e:7e:4b:21:fe:2a:0b:ce:75:68:6a:f7:d3:10:
                    90:60:1c:50:a8:b1:d7:58:7a:45:2e:6d:13:dd:73:
                    06:51:9b:a8:38:b3:f3:f0:82:05:00:84:d2:9c:02:
                    36:7a:7b:65:40:6f:e8:f1:c0:02:f1:19:24:b0:4f:
                    3d:8c:25:08:b5:cb:5d:cd:a4:6a:32:a9:45:0d:f3:
                    c9:cf:eb:c7:4c:b0:8a:f8:68:f5:bd:d0:c2:53:d9:
                    b7:6d:46:de:59:ef:6f:5d:33:ba:7f:29:ca:5f:ba:
                    6c:a5:bf:ca:60:a2:7d:2f:9c:e6:26:a5:f7:c1:76:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:46:3D:C8:52:C4:47:20:2B:30:94:90:ED:61:5D:39:E0:9C:43:5E
            X509v3 Authority Key Identifier:
                keyid:B2:B6:CE:3F:B1:33:33:0E:66:57:6F:71:0D:16:37:FE:E1:0E:60:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/B2B6CE3FB133330E66576F710D1637FEE10E60FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2B6CE3FB133330E66576F710D1637FEE10E60FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/B2B6CE3FB133330E66576F710D1637FEE10E60FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:fd:91:c8:26:ba:bd:31:51:8f:26:70:f5:ff:4c:ee:0c:
         9e:62:98:f1:35:87:07:96:e8:ea:01:0c:34:0c:03:9f:30:01:
         10:6d:55:73:b5:c8:6c:73:d3:cf:f7:3c:02:49:d3:d6:cf:47:
         29:8a:a3:f8:7d:a8:49:d7:73:d6:c6:41:a6:24:80:b3:7f:d5:
         1a:88:d9:85:eb:74:95:04:9b:a5:0e:1e:ec:d3:f2:76:9c:c7:
         6e:45:fc:5c:3e:1f:33:f0:4c:c2:14:6c:ec:b3:19:2f:4c:f0:
         bc:5f:5d:c3:53:1c:d3:46:3e:e4:cd:e3:37:3a:60:ea:0d:c7:
         36:4b:ae:c7:7c:92:3c:67:41:b1:1e:3e:31:4d:26:61:f1:1d:
         a6:32:78:45:14:e0:ec:47:63:72:53:af:12:e5:a1:19:0a:8f:
         26:5e:4b:56:22:f6:60:df:7d:23:0f:46:f0:ee:64:88:86:cf:
         2e:a7:42:c7:69:7f:80:15:81:79:a2:7f:c6:14:1d:16:c6:65:
         31:3a:79:e0:af:be:42:da:1e:ff:78:81:b9:4b:26:8c:ba:b7:
         7c:9c:03:6c:ec:c3:0d:0b:a5:e6:87:a7:e2:66:4b:7b:1c:42:
         4f:c9:e0:54:5d:a1:e1:4c:73:86:e4:4a:e9:27:3a:51:fc:c2:
         53:a5:5e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----