Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.mft
File:                     57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.mft (raw, json)
Hash identifier:          xOFqEqRq4Y0D+hM9c8LhRaIwMt1MYu8zltRQ+fS3XXA=
Subject key identifier:   A1:1C:F6:16:FE:A8:D1:57:93:75:FA:C3:BB:B9:5E:F5:AF:F2:4F:00
Authority key identifier: 57:E5:BC:40:3D:FD:7B:11:DB:E0:DF:23:AD:FB:0A:0C:FE:55:AE:A2
Certificate issuer:       /CN=57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2
Certificate serial:       57C579BFE3860DA7550DB5AD0CEC465A332FE4AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.mft
Manifest number:          37
Signing time:             Mon 17 Feb 2025 21:26:32 +0000
Manifest this update:     Mon 17 Feb 2025 21:21:32 +0000
Manifest next update:     Wed 19 Feb 2025 01:11:32 +0000
Files and hashes:         1: 34352e3136352e302e302f32322d3234203d3e20323638363635.roa (hash: tcMoMHnUL6aS9gr8zFqCgWkbacPC0eAz3xpP+G4hJ3w=)
                          2: 57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.crl (hash: OE8M0NDh0ZKELd9AqytDSXQZBQmTPmOmy3Avb3lG7+s=)
                          3: 323830343a353462303a3a2f33322d3438203d3e20323638363635.roa (hash: 9A0epHY6ISZ3MsuV/pQZvUqWSa8bQFJr50gQaGYar44=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c5:79:bf:e3:86:0d:a7:55:0d:b5:ad:0c:ec:46:5a:33:2f:e4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2
        Validity
            Not Before: Feb 17 21:21:32 2025 GMT
            Not After : Feb 19 01:11:32 2025 GMT
        Subject: CN=A11CF616FEA8D1579375FAC3BBB95EF5AFF24F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:aa:6d:59:fd:9a:73:62:85:28:3d:07:70:
                    bf:b4:dd:64:41:c5:5e:8e:37:71:66:76:76:fe:63:
                    27:9b:8b:39:0d:db:2a:27:cb:1a:f4:cf:c3:20:01:
                    a9:2e:ec:65:e5:20:00:3a:5c:18:e7:e1:c5:80:b6:
                    4c:ca:3b:c3:71:f2:6d:74:e2:26:f6:1e:9b:69:41:
                    8c:e2:de:44:1d:93:80:30:d0:c1:a4:84:c3:7c:2f:
                    c5:13:64:70:62:9a:02:47:d2:cc:c7:af:3e:58:ad:
                    a7:b9:ee:bc:60:4b:2c:4a:57:d6:7f:32:a9:14:8c:
                    0c:a9:2b:9f:a6:39:fa:bd:02:ba:cd:0e:77:f2:85:
                    cc:36:6b:eb:5a:2c:09:3a:6a:ba:b3:31:94:e4:8e:
                    6d:4f:f0:26:a7:62:50:b9:e1:cd:1f:2a:78:bd:20:
                    89:1f:2e:f2:05:0f:60:ac:9f:c9:11:f1:08:33:3b:
                    8c:7f:39:1b:e0:a2:40:29:38:be:c9:d4:cd:e3:0f:
                    cb:09:cf:1f:ab:31:22:a7:2f:91:e5:3b:53:ed:11:
                    c2:6c:4e:1f:ed:77:09:89:85:e6:05:e0:27:bf:1b:
                    f6:08:b1:4a:1c:c0:db:37:55:15:43:26:4f:14:a0:
                    6b:16:94:59:23:39:51:d2:23:ab:c6:0e:3f:98:59:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1C:F6:16:FE:A8:D1:57:93:75:FA:C3:BB:B9:5E:F5:AF:F2:4F:00
            X509v3 Authority Key Identifier:
                keyid:57:E5:BC:40:3D:FD:7B:11:DB:E0:DF:23:AD:FB:0A:0C:FE:55:AE:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:20:b3:08:48:39:34:03:f1:d8:af:1d:f2:5c:65:a8:cb:b1:
         82:e9:23:88:8e:a9:39:90:ca:e6:7d:b9:8d:a7:d4:da:4a:74:
         53:91:ee:62:ce:e7:b2:03:24:d4:a1:b0:12:59:43:78:2f:ba:
         43:81:01:01:5a:da:6d:cb:fa:1b:9e:36:cd:e5:df:39:ac:bc:
         34:a0:fb:fe:de:4f:4d:a9:a8:85:c6:f9:a1:cc:46:1a:d8:4e:
         cd:cc:3c:13:1c:19:b2:54:20:a0:92:13:ac:34:52:4e:58:29:
         f2:e3:49:c9:c4:89:96:82:f9:e4:a4:7b:46:b2:44:02:c9:46:
         66:7f:83:47:4a:56:1f:35:c2:81:20:cd:c6:d1:1a:fb:d5:36:
         15:3b:3e:36:94:93:f4:6c:4b:9f:6f:d2:bd:dc:19:64:06:d7:
         28:2e:32:79:2d:50:ed:83:ab:d7:d0:46:d4:7b:20:58:8a:11:
         cd:91:c9:65:c5:80:9e:57:c6:86:c5:59:f5:30:10:96:9a:d7:
         45:4d:11:e8:b9:b3:df:d8:c2:71:2d:47:0b:b0:c9:84:b5:b6:
         0c:82:50:60:3a:cf:a9:b5:52:ce:53:6e:12:ea:be:4c:be:c5:
         a0:17:e5:32:8e:4f:c1:f1:39:68:b2:3b:a5:87:37:77:d1:fa:
         35:69:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----