Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft
File:                     CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft (raw, json)
Hash identifier:          Kqre3OYORwXzzJC9Fv5haMVEDt2kJSQgdcDs5uGlgIA=
Subject key identifier:   8B:72:06:3E:50:FD:52:91:ED:79:7A:23:C8:73:2D:51:55:1D:F1:0A
Authority key identifier: CE:C2:57:CD:A1:BB:40:12:35:BD:01:14:C1:FA:2B:A6:A9:66:D3:11
Certificate issuer:       /CN=CEC257CDA1BB401235BD0114C1FA2BA6A966D311
Certificate serial:       172E3250E0523D1B64F5271D14158CDBEF65B6D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft
Manifest number:          22
Signing time:             Fri 28 Mar 2025 22:19:15 +0000
Manifest this update:     Fri 28 Mar 2025 22:14:15 +0000
Manifest next update:     Sun 30 Mar 2025 01:42:15 +0000
Files and hashes:         1: CEC257CDA1BB401235BD0114C1FA2BA6A966D311.crl (hash: DbkqIO2G+X4MF6mby+arJg7E+isESJeuyty+0lGJLOc=)
                          2: 323830343a376635633a3a2f33322d3430203d3e20323731363833.roa (hash: zzGVKx01JE8zz2qrco8Ii3uzvQuukTR3pLjlltIM+eU=)
                          3: 3133312e3130302e3230302e302f32322d3234203d3e20323731363833.roa (hash: ySVkMs4aA5MidBRgBKpOFbv0M80074JIn7NJsrvNpFg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2e:32:50:e0:52:3d:1b:64:f5:27:1d:14:15:8c:db:ef:65:b6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC257CDA1BB401235BD0114C1FA2BA6A966D311
        Validity
            Not Before: Mar 28 22:14:15 2025 GMT
            Not After : Mar 30 01:42:15 2025 GMT
        Subject: CN=8B72063E50FD5291ED797A23C8732D51551DF10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e4:e7:13:da:52:cc:1d:df:be:c4:f1:d5:02:
                    ef:79:13:8a:11:ff:78:ab:ab:3f:2d:a7:02:fd:5f:
                    8b:ee:58:dd:fe:44:a0:78:99:17:f5:23:bf:93:39:
                    44:13:bb:66:bb:f3:98:59:e5:19:d6:75:e4:0a:25:
                    ee:47:ff:25:6f:84:7f:aa:22:cc:41:6f:72:c2:36:
                    84:a3:22:1d:22:0c:5d:bb:20:1a:8c:21:4d:01:fa:
                    83:39:83:27:f7:6a:de:70:ff:ce:f5:39:ca:ea:7a:
                    ee:7c:03:05:22:7d:cc:24:04:ce:23:96:3b:97:c1:
                    61:1c:bd:5a:78:32:98:f1:45:ea:6e:49:fa:6c:d7:
                    24:b7:bb:22:8a:3b:e1:22:c8:ae:f7:1c:5f:ba:fe:
                    b9:a2:80:49:65:dc:60:d8:6f:ba:ed:19:93:ed:98:
                    bb:b2:a4:b6:a2:74:b9:14:f6:04:da:cf:ae:2a:a7:
                    ad:1c:2f:60:54:09:28:1b:67:68:7c:99:87:96:16:
                    6e:85:9a:dd:e8:3f:7d:a3:e6:f4:69:90:ed:f8:d2:
                    a9:ac:aa:a8:99:9f:7a:e1:76:f3:31:22:5c:c9:4b:
                    58:73:0f:3b:32:63:26:64:b6:df:83:85:42:2b:7c:
                    f4:2a:af:a9:cd:54:7c:7e:80:ea:4d:52:be:02:21:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:72:06:3E:50:FD:52:91:ED:79:7A:23:C8:73:2D:51:55:1D:F1:0A
            X509v3 Authority Key Identifier:
                keyid:CE:C2:57:CD:A1:BB:40:12:35:BD:01:14:C1:FA:2B:A6:A9:66:D3:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:78:b2:a3:87:c7:22:ee:f0:90:c4:21:29:f5:13:c5:26:49:
         31:aa:fa:b8:5c:59:76:eb:6a:68:d5:cf:ff:96:dd:5f:66:e9:
         f1:70:01:93:9e:9a:ab:5d:f7:b0:04:ea:1e:b6:01:ee:f9:14:
         bf:c6:f5:e8:dd:fe:74:88:92:75:ad:98:9a:18:9d:6e:4d:90:
         f3:9a:7e:f1:17:0e:9f:9a:c2:5b:11:24:85:d9:ba:30:81:0e:
         fa:7a:3c:94:3c:e8:16:8f:d5:67:d8:fa:d6:e1:ba:47:21:37:
         5f:80:ab:53:d8:a2:2a:60:3f:66:69:9e:93:c8:d8:cd:12:fb:
         11:2d:87:26:3b:26:c7:45:03:e3:66:c2:73:44:f7:7c:6e:e5:
         cd:7f:13:dd:da:be:b1:c6:ae:5b:8e:cf:77:ad:a0:61:1f:62:
         17:c0:0e:67:0c:fe:4f:93:39:81:50:13:cc:0e:bb:24:36:6c:
         90:8e:66:fa:04:91:93:06:47:36:e4:e5:1e:61:16:a7:1c:b7:
         58:fd:ac:da:45:86:b9:22:1f:92:47:95:0f:45:a7:96:0f:70:
         ed:15:7b:b1:fb:5f:24:8c:0d:00:99:e5:0b:0c:ed:a6:67:16:
         35:3c:78:da:bc:a8:3d:ea:b4:1e:c9:9b:e9:e1:7d:c7:37:f3:
         38:d8:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----