Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
File:                     6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft (raw, json)
Hash identifier:          q2BSy/ojmnRbpfmnxyGbt4zCnhJXyqK+ayFpA337bYk=
Subject key identifier:   D2:2C:1A:53:7F:A3:3A:70:DE:3B:60:66:11:D1:C3:56:5B:4A:72:A1
Authority key identifier: 6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1
Certificate issuer:       /CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
Certificate serial:       6599FB44E54A3B30E3CB8A6C05B2FD073623AEBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
Manifest number:          01DD
Signing time:             Sat 29 Mar 2025 07:31:23 +0000
Manifest this update:     Sat 29 Mar 2025 07:26:23 +0000
Manifest next update:     Sun 30 Mar 2025 10:38:23 +0000
Files and hashes:         1: 6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl (hash: /JSKsR1Rh52fyJ5pCd1AMuqPBLnCbTjVlvTz3iLIUwI=)
                          2: 3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (hash: s2m/rSCGWtXFgQ0ZfdSHKZmWkAcKxBcAVuMFFal50mU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:99:fb:44:e5:4a:3b:30:e3:cb:8a:6c:05:b2:fd:07:36:23:ae:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
        Validity
            Not Before: Mar 29 07:26:23 2025 GMT
            Not After : Mar 30 10:38:23 2025 GMT
        Subject: CN=D22C1A537FA33A70DE3B606611D1C3565B4A72A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:f9:6e:57:03:66:63:35:1f:4a:6a:5e:65:
                    a0:de:2e:5a:53:da:75:bf:b5:24:aa:88:e2:e7:e5:
                    70:cd:ef:88:c6:3a:e7:d6:0d:f8:aa:8d:4b:0e:50:
                    96:ee:9d:5a:b3:c0:b3:5c:e2:64:6a:df:74:b0:9d:
                    0f:fd:ff:9a:bc:5a:7f:d3:6e:95:da:6a:7d:95:0f:
                    06:95:6d:29:33:1c:8c:03:9b:20:a2:ab:7c:28:0c:
                    93:53:d0:91:e8:4e:66:1e:5c:85:be:ed:40:6f:11:
                    83:b9:d7:59:64:67:43:8d:7d:0c:3a:f4:00:09:d8:
                    7a:0b:fa:ac:67:44:ec:e9:da:af:f5:84:74:44:c3:
                    b2:f4:b7:4a:1e:dc:5c:34:58:4f:7e:04:45:78:f4:
                    c9:bb:31:7f:a6:10:4d:a4:85:45:6b:23:39:ad:c5:
                    eb:92:0f:32:29:9c:3c:34:0a:9f:60:62:99:06:f3:
                    46:54:b7:55:b0:92:a8:1b:43:4f:98:42:b6:92:4d:
                    af:43:c4:87:e9:77:61:45:9a:ad:cc:ac:70:a4:d7:
                    5f:77:88:39:9e:ee:41:28:b1:78:94:96:5d:c1:97:
                    57:ed:2d:f4:a0:c1:2a:de:16:a2:6e:02:89:f4:ef:
                    56:a6:e8:f2:48:d9:77:3c:92:3f:d9:fd:88:0c:00:
                    37:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2C:1A:53:7F:A3:3A:70:DE:3B:60:66:11:D1:C3:56:5B:4A:72:A1
            X509v3 Authority Key Identifier:
                keyid:6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:10:a7:ac:68:f4:57:2d:f2:de:e4:68:db:ed:3a:60:2a:c3:
         b0:10:09:7e:24:8b:c8:91:bc:36:ad:25:2e:b7:43:ce:fd:38:
         9d:d3:28:d2:0c:85:5f:d2:12:40:78:e5:09:e8:17:80:a0:cc:
         ff:bc:6e:d3:6a:9c:32:b9:e3:8d:b7:b3:3b:ea:78:29:a3:cb:
         9d:69:12:b9:83:4e:41:8b:a7:6d:cc:5c:ab:9b:e3:3d:fb:73:
         82:e4:6a:f7:09:b3:c3:bc:56:fa:96:11:02:08:e7:28:37:07:
         55:82:57:c9:b3:d6:9f:23:d7:99:91:64:3a:85:db:e6:1c:bf:
         8e:d0:54:4c:e0:75:bf:b0:27:42:fd:ae:3a:58:8f:0c:d5:23:
         0b:18:69:c8:07:55:86:13:4c:e5:8b:ce:24:c9:62:b3:f1:29:
         5c:9a:a8:49:73:8d:62:84:38:2f:b6:e2:78:77:a1:8c:37:31:
         ca:18:c8:62:5b:d6:e7:ea:8c:3d:f0:83:f6:90:58:64:b3:9f:
         f6:c2:77:9b:f0:d4:18:7b:5c:5f:ce:e5:aa:cd:3c:0c:0b:52:
         5b:a1:d2:78:8c:00:f9:19:5f:80:cf:d0:17:e1:df:32:17:a8:
         28:66:84:db:7d:2e:19:43:d6:1b:43:c8:22:a3:a7:86:9b:86:
         ba:fc:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----