Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.mft
File:                     05D1E73FF1B023D43F8C09ED71815BC2F6620D99.mft (raw, json)
Hash identifier:          CUxUdGoxStgh+1X7Ewj3zkVSENqLAHgxKnIC6ywHNd0=
Subject key identifier:   B8:9E:87:20:7D:DF:EC:59:88:22:58:92:21:23:3E:22:C5:6C:5E:2F
Authority key identifier: 05:D1:E7:3F:F1:B0:23:D4:3F:8C:09:ED:71:81:5B:C2:F6:62:0D:99
Certificate issuer:       /CN=05D1E73FF1B023D43F8C09ED71815BC2F6620D99
Certificate serial:       3809F59B8C1610D1354B46A84E30091B2EFEC5DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.mft
Manifest number:          01DB
Signing time:             Fri 28 Mar 2025 15:13:04 +0000
Manifest this update:     Fri 28 Mar 2025 15:08:04 +0000
Manifest next update:     Sat 29 Mar 2025 19:06:04 +0000
Files and hashes:         1: 34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (hash: tGfPDEIgUBV2q7+gZyxLsHeW2cwX7Fi0aP1BETqnpMI=)
                          2: 323830343a353139383a3a2f33322d313238203d3e20323638343634.roa (hash: FwEHv563rBmJRql+sOE+tVHrOv1W1+kzQxG6Z1REygI=)
                          3: 05D1E73FF1B023D43F8C09ED71815BC2F6620D99.crl (hash: JlTBoq4/L3n53ZgPpO06Laa5ciK5K8B0TJHuZJDfrCg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:09:f5:9b:8c:16:10:d1:35:4b:46:a8:4e:30:09:1b:2e:fe:c5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05D1E73FF1B023D43F8C09ED71815BC2F6620D99
        Validity
            Not Before: Mar 28 15:08:04 2025 GMT
            Not After : Mar 29 19:06:04 2025 GMT
        Subject: CN=B89E87207DDFEC598822589221233E22C56C5E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:92:ea:c3:e6:c0:92:4b:4f:e3:cf:ac:6b:
                    b9:a3:e1:7c:93:aa:5b:2b:38:3d:85:a9:fb:5e:da:
                    92:cf:f8:c0:9a:74:66:ae:59:16:53:f1:fb:e2:4a:
                    83:bf:29:7f:a3:d0:6b:a4:2c:7f:89:03:2e:1f:81:
                    40:57:8e:d0:41:7e:13:81:9f:af:a4:4c:5d:20:9b:
                    94:73:e3:f3:f8:18:f0:64:b4:9c:cf:00:61:16:af:
                    fe:02:c6:14:be:1c:1f:2c:b8:06:d1:dc:6d:cb:84:
                    53:c2:69:bd:ca:66:46:5c:46:41:b3:3b:05:f6:45:
                    79:ed:e1:fa:c3:2e:62:b1:62:12:8e:10:e2:ea:4a:
                    a8:4b:df:64:11:7f:7b:08:19:b2:57:f5:85:7e:11:
                    28:5d:44:d3:c4:1f:02:49:d8:b8:2a:52:5b:90:fa:
                    c3:35:a7:c0:2b:6b:0c:7d:92:9b:ca:71:ab:7b:09:
                    e3:bc:2e:06:00:2d:b6:1d:9b:51:ca:24:8d:cb:83:
                    68:9c:43:cd:ee:e7:f2:0d:3e:67:aa:0a:09:79:5c:
                    0c:a7:af:f7:a3:41:f7:a1:9d:7b:e8:45:61:e0:5e:
                    d2:2b:8a:ba:3c:66:66:f0:d4:ad:42:44:22:f0:27:
                    0e:28:6e:39:cf:6e:07:44:fe:6a:5b:5a:59:fc:fe:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:87:20:7D:DF:EC:59:88:22:58:92:21:23:3E:22:C5:6C:5E:2F
            X509v3 Authority Key Identifier:
                keyid:05:D1:E7:3F:F1:B0:23:D4:3F:8C:09:ED:71:81:5B:C2:F6:62:0D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:11:cd:70:37:ca:52:62:71:c2:5f:7c:98:7d:ea:7c:55:
         ff:47:03:2e:d5:ec:d8:67:50:8b:45:60:ac:d4:26:95:48:3b:
         30:8b:79:a4:be:0f:8d:8a:c3:7d:b9:25:15:8e:92:01:2c:46:
         13:49:8d:61:91:7e:e9:bb:fa:e2:a2:d4:f0:69:0f:04:bb:86:
         62:9f:da:32:48:fe:f1:1c:bd:70:b0:b4:46:bc:54:cc:d7:7a:
         f6:d7:dc:a4:b5:b3:71:f1:be:40:12:cc:88:15:b0:5d:2a:d4:
         7d:0f:74:8f:49:6d:d4:76:0b:ee:ad:10:1d:eb:85:e6:02:16:
         d2:77:cf:3e:ba:ed:4a:c8:d7:36:b7:31:14:e2:ac:c1:70:28:
         e0:7f:2d:0f:ef:0b:41:7b:ae:d9:98:96:be:5e:6d:15:98:b8:
         9d:20:e5:01:6d:ef:e8:35:b6:5d:f8:ab:8c:60:a5:9b:68:b4:
         75:a4:a6:7e:14:83:3a:80:99:40:b7:3a:da:d8:f5:19:7b:da:
         93:88:9a:2e:6d:15:d6:10:2b:e2:ca:e5:84:47:e6:fb:0e:09:
         09:e2:59:d9:0c:5d:ca:88:68:00:16:65:31:bc:53:8e:e9:f6:
         51:e4:6e:b0:61:8c:05:cb:67:05:95:50:fb:03:f7:ab:26:42:
         4b:84:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----