Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
File:                     BB141441D22A497A1BF5ADB580A218637930FA95.mft (raw, json)
Hash identifier:          2z6MnVTYN57tgy/lCby82Ns7FwSg6KDymU5YqI7/EWM=
Subject key identifier:   DC:76:EC:90:87:09:67:1A:E4:C5:D0:52:55:80:08:99:EF:CB:03:9F
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       7BB727C2D17072578F51697C9DFA838F7B054946
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
Manifest number:          0225
Signing time:             Fri 28 Mar 2025 19:30:00 +0000
Manifest this update:     Fri 28 Mar 2025 19:25:00 +0000
Manifest next update:     Sat 29 Mar 2025 19:30:00 +0000
Files and hashes:         1: 34352e3138362e302e302f32322d3234203d3e20323639353032.roa (hash: 9SfeJghxwFZaKACPC5Q+yt/V5g2GLG7HXhWlywSy0B4=)
                          2: BB141441D22A497A1BF5ADB580A218637930FA95.crl (hash: FoNTtTZmuzCBzP9MW7zs3uG3o3dOIh4ZbWIq9+uDJAo=)
                          3: 323830343a363539383a3a2f33322d3430203d3e20323639353032.roa (hash: sYPfQOyWCT/xYoHQ0IlLrbrx4YJL49Rq0+SE8ynBtTM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b7:27:c2:d1:70:72:57:8f:51:69:7c:9d:fa:83:8f:7b:05:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Mar 28 19:25:00 2025 GMT
            Not After : Apr  4 19:30:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:f7:ef:f1:68:7a:c5:b5:ce:d0:f5:62:6b:
                    e7:25:23:59:2f:78:e4:73:c5:2b:ad:bc:d4:1c:6d:
                    ce:8b:86:f6:c7:72:bd:f7:ee:87:09:0c:f2:bf:54:
                    76:6d:db:30:32:69:4a:08:12:a1:61:ac:a5:35:1d:
                    0b:15:ef:5c:36:48:a5:44:89:f8:4e:d5:1a:9d:08:
                    6d:47:5c:4b:c2:c8:5c:47:b2:cc:44:f6:c8:1d:0d:
                    10:44:bd:54:fb:03:23:1e:e5:3a:27:6e:77:9e:30:
                    6a:2f:7d:ae:82:9b:cf:f7:7f:6c:16:e0:cb:7a:ca:
                    e1:72:e8:4f:47:f6:36:f7:5d:54:10:d7:d7:26:ff:
                    bd:12:3d:3c:b2:12:0d:05:09:e1:aa:fd:21:7e:a9:
                    fa:a4:81:61:81:19:7c:8f:76:48:9f:96:03:a1:27:
                    8f:d2:f5:71:02:aa:0d:23:4f:f5:78:0c:83:42:44:
                    92:da:c1:98:4b:e0:6b:51:77:a9:5f:ab:ef:b1:88:
                    8b:c2:c8:58:28:3f:65:81:1b:91:1c:a8:8d:5c:67:
                    e1:27:52:98:61:91:14:34:70:db:86:77:73:e7:89:
                    c0:6b:ef:48:4f:f0:f9:cc:90:ba:98:9b:2d:f0:ef:
                    29:0d:ec:ca:3f:af:17:3d:dd:5c:30:2e:be:5f:f6:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:76:EC:90:87:09:67:1A:E4:C5:D0:52:55:80:08:99:EF:CB:03:9F
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:4c:c3:d6:5b:0a:04:d8:c9:9c:a3:f1:52:13:2f:08:5b:
         13:fa:eb:7c:ca:87:9c:2c:ab:7b:d2:72:0c:bd:da:b6:20:91:
         b1:6d:81:67:c2:f4:3e:64:93:3e:4b:db:1a:d4:35:2d:3b:8f:
         a1:45:1c:4e:cb:99:58:14:5f:59:20:b1:ff:71:83:30:57:d9:
         36:89:b5:05:f7:37:5a:3e:7f:77:aa:e9:6f:7a:d7:4c:b1:9d:
         44:fc:3a:60:bc:0a:0d:fc:78:49:86:52:0d:7d:41:f7:ce:2a:
         26:49:2f:ed:bb:92:85:f3:15:74:e2:80:52:d2:c0:82:d7:8a:
         fc:ec:46:f8:5b:09:08:f3:bb:86:ab:78:44:13:0b:38:93:8e:
         26:6a:17:4f:b4:1f:2e:e9:70:84:bb:13:3e:a3:50:80:bd:9f:
         4e:58:d4:a6:b8:79:c2:ad:6a:27:00:11:ca:62:1e:e0:45:d1:
         21:c0:ee:d8:01:16:64:a3:cf:6b:5f:66:7d:ce:e9:32:80:69:
         f1:37:f4:2a:50:fd:26:e3:9a:e7:ca:7c:5c:e1:fe:6b:18:c8:
         bb:45:f1:18:a8:f1:8e:96:e6:81:b1:66:54:8e:ac:71:6a:fa:
         e0:8b:14:9a:70:26:7f:3d:99:9b:4e:a7:83:90:e9:8f:1a:ed:
         8f:b2:44:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----