Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft
File:                     F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft (raw, json)
Hash identifier:          Rbvep/0XW5/pw+NUs55QJWa3NU8scF6EOfwCRFEDc5Q=
Subject key identifier:   D7:45:77:D4:E9:19:7B:DA:ED:20:66:71:0F:A1:7C:88:66:90:4E:74
Authority key identifier: F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C
Certificate issuer:       /CN=F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C
Certificate serial:       7A83AD282AEF05548B35F284360779D72B2975D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft
Manifest number:          01DA
Signing time:             Sat 29 Mar 2025 03:26:26 +0000
Manifest this update:     Sat 29 Mar 2025 03:21:26 +0000
Manifest next update:     Sun 30 Mar 2025 07:08:26 +0000
Files and hashes:         1: F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.crl (hash: q5YkrSUKJD4jLnzrT0Cuv9pvtjoiEmnkEYeZoPVNDWc=)
                          2: 323830343a363766633a3a2f33322d3334203d3e20323639363633.roa (hash: HNDftg/Pw7Hj5U/zwvpt3JVjYmZZZQ93Fp65BJhngQw=)
                          3: 34352e3139302e3135362e302f32322d3234203d3e20323639363633.roa (hash: skoK1/osMrK/1Lz2IAbF0HGdY4eY40m+LIO2uqBPJKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:83:ad:28:2a:ef:05:54:8b:35:f2:84:36:07:79:d7:2b:29:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C
        Validity
            Not Before: Mar 29 03:21:26 2025 GMT
            Not After : Mar 30 07:08:26 2025 GMT
        Subject: CN=D74577D4E9197BDAED2066710FA17C8866904E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:7b:34:35:09:5e:16:69:f5:7d:96:65:4e:
                    55:a0:74:4e:5a:18:d6:74:88:25:d7:10:58:fa:69:
                    c7:89:68:d0:e5:8e:61:3c:09:70:f6:a2:ae:f1:aa:
                    03:35:78:08:2e:3f:2e:0d:90:29:59:14:f3:bd:ce:
                    e6:ed:8b:cd:4c:32:31:5f:1c:5c:5c:68:c2:29:60:
                    3f:3d:85:85:99:74:54:90:91:f3:ab:13:b4:e4:0d:
                    92:cd:3d:8d:4d:4c:f7:69:9f:56:fb:31:9a:a5:c9:
                    7d:00:b7:42:f7:85:01:c5:e4:cf:20:5c:a8:d3:c1:
                    21:9f:3c:ab:44:07:b8:ad:e4:dc:c9:13:5f:63:fe:
                    7a:b4:6e:d6:30:a0:90:6c:ec:f5:bf:f1:3e:81:8d:
                    ca:fa:28:72:be:d7:65:0c:96:a6:ac:38:31:d8:b1:
                    b9:b1:94:3c:87:3f:70:ce:37:44:23:3a:8c:f4:56:
                    26:c4:93:09:b7:00:38:fa:45:d0:2a:4d:b9:54:94:
                    a6:1b:1a:a3:58:ca:ca:da:72:9d:eb:21:fb:b6:2c:
                    44:83:09:58:dd:a5:75:af:4e:88:23:b7:50:32:37:
                    5e:ca:e7:7c:cd:47:a1:eb:e6:17:fc:dc:42:dc:57:
                    d5:72:62:db:0e:5f:d7:6f:7a:20:55:8b:6f:b1:66:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:45:77:D4:E9:19:7B:DA:ED:20:66:71:0F:A1:7C:88:66:90:4E:74
            X509v3 Authority Key Identifier:
                keyid:F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:fd:a2:40:2d:4e:23:fc:79:32:42:ba:95:4a:c7:36:16:
         e4:a7:85:a8:44:0e:0d:22:ea:07:82:e2:00:40:df:70:ed:3e:
         04:e2:b8:df:a7:fe:35:f6:bd:db:ff:47:ac:95:a7:8a:96:78:
         65:bd:40:5a:67:31:bb:bf:0f:81:44:8b:0c:2a:4b:91:91:75:
         cf:77:ef:0d:f4:c4:22:3c:cf:13:aa:47:ad:4c:71:65:3e:1c:
         be:f0:7f:e6:cf:e1:c0:d1:15:f4:a0:b9:0e:61:ff:cc:a1:bd:
         c5:c1:84:e6:5c:12:af:d7:33:7f:b6:f8:66:68:d8:8d:93:b1:
         96:06:5b:19:7d:fd:a0:f4:0d:70:00:22:28:3f:66:64:14:2a:
         e8:a3:05:dd:33:93:ba:34:03:1b:a0:f9:77:d8:e7:6a:14:12:
         2a:ca:18:f5:65:5f:ca:87:89:75:00:08:ca:14:cb:ab:4f:de:
         94:cb:69:14:fd:9e:06:d8:03:9b:71:ba:51:c0:99:50:f1:dc:
         78:70:90:f7:01:59:4e:8a:8b:dd:1c:f4:06:56:bc:83:48:45:
         61:6e:01:26:b9:b7:e5:7c:e7:ef:e0:cd:f9:17:e0:bf:1b:f4:
         58:9c:42:42:65:5f:97:a5:f5:1f:df:67:29:a6:01:ad:67:1a:
         02:05:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----