Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.mft
File:                     64F34AAEF7C614E665668431B50EB7B1981EDD37.mft (raw, json)
Hash identifier:          CUEWZYQ9XzN7Tp3JaEX8h/Xh0yyWRNEUqgJziOeX1Jc=
Subject key identifier:   F5:DF:57:87:4C:6E:CD:32:06:21:00:C6:A5:9F:86:BF:A2:0C:44:64
Authority key identifier: 64:F3:4A:AE:F7:C6:14:E6:65:66:84:31:B5:0E:B7:B1:98:1E:DD:37
Certificate issuer:       /CN=64F34AAEF7C614E665668431B50EB7B1981EDD37
Certificate serial:       0A0C4AB3E6231F1FF7C897A9D202176DC68F748A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F34AAEF7C614E665668431B50EB7B1981EDD37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.mft
Manifest number:          6E
Signing time:             Fri 28 Mar 2025 19:21:03 +0000
Manifest this update:     Fri 28 Mar 2025 19:16:03 +0000
Manifest next update:     Sat 29 Mar 2025 19:22:03 +0000
Files and hashes:         1: 323830343a383332343a3a2f33332d3333203d3e20323732313739.roa (hash: I44JAhFd3swIh0q1PEX6uOoB3bBkpAEoQodWf0o2G2c=)
                          2: 323830343a383332343a383030303a3a2f33332d3333203d3e20323732313739.roa (hash: 4XLSk1H8Zs3/2iEP/S1r7T3cG8H3qUHWpWL596XBV1Y=)
                          3: 34352e3138322e36332e302f32342d3234203d3e20323732313739.roa (hash: TI3JxV6cLJKajrIsVu3n4xt8NDpYndh9fu8abeSU6hM=)
                          4: 64F34AAEF7C614E665668431B50EB7B1981EDD37.crl (hash: osIUkNamMmK0t34ARSCVmWpS1rtGjgc/G6HzeWnjSG0=)
                          5: 323830343a383332343a3a2f33322d3332203d3e20323732313739.roa (hash: Wy0m0f/evgk3fJawzx51x88qnvg12nCoBLfjPRQ0ABY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0c:4a:b3:e6:23:1f:1f:f7:c8:97:a9:d2:02:17:6d:c6:8f:74:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F34AAEF7C614E665668431B50EB7B1981EDD37
        Validity
            Not Before: Mar 28 19:16:03 2025 GMT
            Not After : Mar 29 19:22:03 2025 GMT
        Subject: CN=F5DF57874C6ECD32062100C6A59F86BFA20C4464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:35:f3:28:bc:8b:4a:86:6b:61:a6:45:44:76:
                    a1:60:ed:a4:1c:8b:ff:ca:9d:bf:9a:9d:11:50:08:
                    51:77:4e:39:32:3b:88:59:07:9e:8c:8a:33:3a:95:
                    fe:2d:07:33:72:82:25:74:21:8d:cb:4d:e7:09:c5:
                    3f:be:3d:19:37:91:d9:89:83:c9:cc:5a:71:70:e1:
                    c0:21:34:ff:51:a1:87:05:b2:c3:6e:aa:0a:47:1c:
                    50:63:3b:e2:5b:86:68:c0:1f:13:de:b9:f8:8a:4f:
                    f0:bf:65:83:f0:43:55:e8:23:23:f2:fa:9b:6d:92:
                    c0:15:95:b2:f7:ec:f4:f9:08:1f:44:fb:8d:63:a8:
                    37:68:ef:36:f3:3b:20:69:e0:24:70:2c:8a:2d:5b:
                    35:26:95:3e:39:2a:87:11:e2:b4:69:d2:88:ce:74:
                    27:41:f4:8b:7c:c3:51:91:b1:d4:69:5d:6c:b3:ce:
                    82:81:f6:81:a1:8c:c7:dd:7b:6b:ab:ca:61:08:ea:
                    bc:1d:e8:10:5a:06:34:ba:c8:b5:92:05:56:8a:82:
                    43:0e:35:2d:5c:d1:1c:46:70:d5:16:9e:d1:44:18:
                    89:48:a3:0c:2b:34:b1:2b:f4:ab:3e:12:11:fc:02:
                    7b:b3:75:8b:12:c8:5b:4f:09:aa:89:fa:a5:e0:20:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DF:57:87:4C:6E:CD:32:06:21:00:C6:A5:9F:86:BF:A2:0C:44:64
            X509v3 Authority Key Identifier:
                keyid:64:F3:4A:AE:F7:C6:14:E6:65:66:84:31:B5:0E:B7:B1:98:1E:DD:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F34AAEF7C614E665668431B50EB7B1981EDD37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/64F34AAEF7C614E665668431B50EB7B1981EDD37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2f:3b:53:91:5f:b7:0a:d8:50:f4:ac:bf:08:a7:60:6a:bd:
         56:18:28:c8:ff:29:c1:be:a0:00:6f:06:23:bf:54:b8:27:83:
         e0:cf:b3:8f:51:30:f7:cc:91:30:0a:e4:90:13:1e:b8:a9:cc:
         42:d4:eb:8c:21:e1:97:68:b2:fa:d2:fa:f9:bb:30:21:67:bc:
         4f:37:c9:91:e9:c3:b5:53:a4:32:c6:dc:24:6c:af:94:a2:7e:
         d9:1b:4e:7d:f9:4d:19:5d:55:d9:96:6a:0c:e6:fd:19:77:7d:
         d5:00:95:cb:f0:0f:33:44:0c:6e:7b:ea:57:b3:16:33:97:8a:
         22:61:94:78:d8:73:73:3b:7d:6c:23:b0:d9:90:cb:e1:00:a6:
         74:f0:f3:f9:1b:54:8e:8b:ed:59:3e:b5:6f:36:7f:1b:6f:ee:
         aa:1c:06:3b:49:50:db:04:62:10:9f:e3:eb:6f:4c:63:57:56:
         69:9e:ec:74:7d:3a:04:a3:0d:92:c4:6b:80:8d:41:5b:d6:4e:
         70:56:da:71:31:3f:55:46:78:a0:91:78:84:63:f9:0b:bc:9b:
         fb:6a:ab:55:e7:7e:f7:5b:23:f8:cc:ee:b4:64:eb:b7:c5:13:
         c6:8d:c4:bd:14:b8:44:80:0e:15:a7:53:4c:74:34:f8:48:d4:
         bf:04:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----