Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
File:                     E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json)
Hash identifier:          +fzDX2KB8rYQLb4xvAzUP0RxG2ezN1w9rRoRGfdRakU=
Subject key identifier:   BE:22:57:62:18:13:E7:CD:A3:F0:C9:B7:E7:23:1C:39:C0:18:D3:F0
Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
Certificate issuer:       /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
Certificate serial:       5232BF1BF710E3B8719ED71C2632A0ADE549BB5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
Manifest number:          01DF
Signing time:             Sat 29 Mar 2025 03:59:24 +0000
Manifest this update:     Sat 29 Mar 2025 03:54:24 +0000
Manifest next update:     Sun 30 Mar 2025 04:40:24 +0000
Files and hashes:         1: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: 6jJ09fWkVix5AgDmG7kNY2PJl1qZu4y9VCPLS/28dRA=)
                          2: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=)
                          3: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: ht/LU548z0DQ9qyd/CXKzpoxrH9NqeBOqRLrPd+T36Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:32:bf:1b:f7:10:e3:b8:71:9e:d7:1c:26:32:a0:ad:e5:49:bb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
        Validity
            Not Before: Mar 29 03:54:24 2025 GMT
            Not After : Mar 30 04:40:24 2025 GMT
        Subject: CN=BE2257621813E7CDA3F0C9B7E7231C39C018D3F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:e4:83:83:64:54:67:90:3f:f9:c7:be:4e:
                    75:5d:a4:ab:63:70:73:36:4e:f2:24:f4:90:ab:68:
                    cc:92:e0:c2:c3:3c:e5:bc:fe:77:3b:43:7e:8b:85:
                    93:3b:3c:39:df:23:89:71:91:72:e1:2d:bd:91:40:
                    96:c3:4d:bb:9a:92:4f:58:f7:b5:19:16:7e:da:be:
                    0e:ec:a5:b2:55:18:c8:90:88:88:cc:55:20:b1:a4:
                    c0:27:a4:da:34:59:df:b0:b4:1a:44:61:13:85:73:
                    b2:97:2d:f6:40:a9:b2:e2:10:65:52:54:84:25:44:
                    5e:00:c9:18:01:8c:89:fe:03:d2:22:d8:03:4e:bd:
                    e6:a9:8d:36:5a:ed:0f:46:c9:a1:df:f3:30:eb:f2:
                    56:a4:5a:ca:d5:04:99:8d:f9:1e:85:a3:ee:27:84:
                    ec:47:0d:c3:fb:08:c4:c0:b5:1f:2a:16:6d:91:29:
                    56:ae:47:73:c1:8c:1d:e0:8c:f7:16:80:a6:f2:83:
                    73:f4:42:ce:fd:16:ce:12:45:2a:70:aa:8d:ac:66:
                    be:8d:7a:a5:1c:68:4c:80:f3:16:a0:dd:6d:31:4f:
                    8d:08:fa:99:41:a2:fb:2b:b1:5d:c5:da:70:c1:dc:
                    66:76:53:ce:ac:39:60:96:bf:fb:d1:a0:02:f1:c9:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:22:57:62:18:13:E7:CD:A3:F0:C9:B7:E7:23:1C:39:C0:18:D3:F0
            X509v3 Authority Key Identifier:
                keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:f5:cc:35:e4:0d:5d:09:16:78:05:e4:77:9e:b1:76:2f:
         92:26:87:b6:eb:39:29:6c:d5:87:a9:45:79:7d:0a:53:88:7f:
         bb:e0:50:78:17:25:b2:7b:3c:cb:d1:f0:af:aa:82:2f:1a:62:
         7c:66:fc:ec:e1:62:da:92:4d:6c:68:22:d2:73:20:81:7f:15:
         f0:94:5f:2d:02:39:be:00:19:63:a0:4d:ab:33:34:42:a3:6f:
         af:ee:dc:a9:a0:c2:2d:cd:e6:27:5e:c9:00:d8:ac:03:54:ee:
         2d:d9:0d:c9:55:d1:c8:24:86:22:9c:48:96:9a:b8:69:c7:e7:
         27:e1:66:70:11:84:31:d0:98:32:f1:7e:cb:cf:03:cb:0f:cf:
         38:bc:8c:f8:9e:9a:14:f8:e2:8f:ef:11:c7:f1:77:72:c9:aa:
         0f:d4:ac:8d:80:fb:5e:d3:9f:04:5c:34:44:ae:ea:a2:18:58:
         30:83:ee:95:18:22:96:f8:fb:e9:41:11:f9:a6:d7:3c:4c:0b:
         20:a3:34:5e:b7:81:75:f9:ef:f7:e7:9d:f8:be:70:f4:6e:6f:
         c8:e6:35:fd:c8:f9:aa:68:e3:24:9a:c7:b2:d3:85:4d:df:db:
         86:53:46:48:49:8c:45:c2:3e:9b:6e:b1:27:7c:2d:9e:31:22:
         d8:ce:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----