Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.mft
File:                     26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.mft (raw, json)
Hash identifier:          QAMipjPFQb9BGrVLLP0IAYUSQZcS6mmpIA/rynqzYHs=
Subject key identifier:   15:39:0A:6A:96:20:98:E9:7C:39:75:54:DA:8E:45:03:30:B6:75:58
Authority key identifier: 26:DC:2A:50:C0:A1:39:F3:B6:37:BF:EA:63:C5:A4:72:E4:CA:B4:FE
Certificate issuer:       /CN=26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE
Certificate serial:       20118AC63AC690E16BBACF5CC08055C3149ECB50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.mft
Manifest number:          23
Signing time:             Sat 29 Mar 2025 09:16:53 +0000
Manifest this update:     Sat 29 Mar 2025 09:11:53 +0000
Manifest next update:     Sun 30 Mar 2025 12:42:53 +0000
Files and hashes:         1: 34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa (hash: bHeajkq341bNVFOXiE11ZlKVe4HwX6yveCnNrGVrGx0=)
                          2: 26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.crl (hash: Zeuge8+sPZNqhWDi6Ngx/TelHF5u6tsdBKQgL0s6U3g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:11:8a:c6:3a:c6:90:e1:6b:ba:cf:5c:c0:80:55:c3:14:9e:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE
        Validity
            Not Before: Mar 29 09:11:53 2025 GMT
            Not After : Mar 30 12:42:53 2025 GMT
        Subject: CN=15390A6A962098E97C397554DA8E450330B67558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:98:9b:37:be:52:5e:15:a7:62:7f:52:fa:
                    05:7f:ed:35:27:9e:27:99:9d:ba:ab:b1:b9:c4:ee:
                    b7:81:cb:07:99:27:89:dd:2a:61:c3:c3:ab:e9:cb:
                    69:0d:42:a5:45:e6:6e:3a:57:90:a0:b5:1e:da:d8:
                    21:ad:f8:f6:54:8f:fc:71:63:58:10:a0:e1:47:43:
                    b0:c2:e0:53:a7:dc:0f:63:76:fe:63:dc:21:c2:2e:
                    d0:64:7c:e3:e2:73:14:4c:f1:15:19:a0:2a:d9:90:
                    55:85:9c:41:ed:b0:db:87:d2:de:10:d4:2b:b4:71:
                    2b:8d:71:a0:cf:7f:ba:f8:af:f3:87:b1:89:e4:60:
                    8f:8f:27:c1:73:6b:8f:42:7f:2d:99:11:3a:1e:83:
                    b7:42:51:c7:7c:3d:63:21:7e:cc:53:22:40:ce:94:
                    67:fa:32:de:2d:66:df:c9:d4:95:f0:f9:c5:59:c1:
                    04:1d:e6:8d:aa:cb:7b:7b:d2:fe:8a:d8:1b:da:40:
                    1c:55:3d:c4:81:10:1c:9e:6a:5e:4e:6a:52:44:21:
                    0f:04:72:a1:24:4c:75:c4:9f:e4:35:6d:0d:ee:ad:
                    3a:f7:f3:bc:86:1f:bb:8a:6b:23:b0:a3:2a:7e:6e:
                    82:93:95:52:68:93:81:39:8d:92:fa:72:1c:96:96:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:39:0A:6A:96:20:98:E9:7C:39:75:54:DA:8E:45:03:30:B6:75:58
            X509v3 Authority Key Identifier:
                keyid:26:DC:2A:50:C0:A1:39:F3:B6:37:BF:EA:63:C5:A4:72:E4:CA:B4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:92:ff:4d:cc:e8:a5:ba:d6:99:a2:a7:ac:3b:cc:66:36:c2:
         33:f1:ad:ec:24:eb:24:94:93:7c:3a:21:f4:fa:68:29:58:dd:
         f7:1b:2f:b3:28:fb:03:fd:ec:16:b4:1d:d1:53:85:75:50:f4:
         36:e5:0b:cf:e9:2f:60:f5:3f:59:1c:b0:3c:a1:38:35:c6:07:
         22:e2:25:1f:21:c0:31:5c:2e:50:22:a7:96:71:9d:fc:d8:38:
         62:62:50:b3:d6:53:29:da:6a:ce:58:c1:2f:f3:6d:75:26:89:
         e4:3f:3c:48:c6:01:cf:e3:18:e0:a7:9d:c1:c7:dd:7f:5a:a8:
         2c:3a:38:9a:b6:51:f4:8f:0c:38:66:5e:73:bc:ca:05:9a:4c:
         e4:22:e4:49:7c:4c:04:ae:2b:d8:6c:ba:59:c8:34:70:ad:63:
         4a:d1:2c:df:c3:4d:b1:97:b4:85:26:02:18:0b:82:22:d2:94:
         3e:10:56:4d:5f:45:40:6b:77:87:c3:d4:58:95:97:56:54:09:
         da:2e:f6:e8:18:aa:2a:6b:f9:80:58:ac:12:fb:a1:74:5d:71:
         b6:5a:8b:b2:69:14:70:3d:b3:5e:bf:87:e4:e8:ad:ae:ab:95:
         d8:d2:da:ed:6c:49:b1:bd:97:03:36:1e:a5:7c:73:07:30:f5:
         a3:cd:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----