Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft
File:                     14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft (raw, json)
Hash identifier:          HlaKrZiZgOzasdlYigF8T6UvgyGAeLH9CdvAx6dwk2M=
Subject key identifier:   7E:FF:B7:5B:6C:B4:79:6A:0C:97:A5:24:DD:26:8D:79:B6:D9:02:4F
Authority key identifier: 14:FA:C5:8F:DA:D4:E0:FC:86:D9:47:B4:C8:EF:14:D5:C0:A9:EF:EB
Certificate issuer:       /CN=14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB
Certificate serial:       2FD994171DE36FF84479135267BF0FB4955A6600
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft
Manifest number:          01E0
Signing time:             Fri 28 Mar 2025 23:56:54 +0000
Manifest this update:     Fri 28 Mar 2025 23:51:54 +0000
Manifest next update:     Sun 30 Mar 2025 01:41:54 +0000
Files and hashes:         1: 14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl (hash: DhIiaHGGAEG9VqRAGapTjrDGIAQH9gbBsP1Gk+YrnB4=)
                          2: 34352e3233382e3130302e302f32322d3234203d3e20323638333335.roa (hash: GBbOVwX1X9HoCDmAl5k/BmMMH+MpiKC7XsxfdtphnrI=)
                          3: 323830343a346639303a3a2f33322d3438203d3e20323638333335.roa (hash: cjF52cn36Stmgc37Ua7Qxatp+9J3nhBvEcDv7D0975s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d9:94:17:1d:e3:6f:f8:44:79:13:52:67:bf:0f:b4:95:5a:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB
        Validity
            Not Before: Mar 28 23:51:54 2025 GMT
            Not After : Mar 30 01:41:54 2025 GMT
        Subject: CN=7EFFB75B6CB4796A0C97A524DD268D79B6D9024F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:c3:21:f5:52:80:73:2f:49:d1:b3:40:4a:
                    39:10:dc:d4:f4:04:c8:70:93:1f:b9:75:94:36:01:
                    5d:bb:86:88:f7:31:2b:9e:c9:af:2d:7b:5c:49:42:
                    04:ca:61:51:6b:8b:e7:2e:01:f0:38:b0:31:79:23:
                    6b:74:68:d6:d2:c5:4f:96:19:44:b5:59:96:b2:2a:
                    72:cd:76:0e:8a:08:d1:72:23:f2:c7:8c:5d:96:6c:
                    b0:7a:de:c6:8b:0f:b6:47:57:46:67:b1:3a:d6:fc:
                    bb:fc:d2:e4:b2:a0:5d:93:64:f2:63:17:db:17:cd:
                    95:05:d6:0b:fc:12:7a:e0:57:eb:91:f2:b1:83:4c:
                    d7:af:61:10:e3:4a:7c:0e:42:5a:6a:70:b4:ad:bb:
                    8f:92:0b:ba:5f:5c:f2:14:05:0d:d9:fb:b6:b7:c2:
                    98:58:0d:a5:ef:85:04:ab:55:c9:d7:65:8e:95:2f:
                    0b:1d:84:78:da:5a:f5:1b:04:fc:b2:ad:08:00:1e:
                    76:eb:f8:ab:2e:61:7e:04:c2:b3:22:24:42:d9:a6:
                    d5:c4:67:cb:35:97:2f:60:7b:0e:fe:a9:82:d6:10:
                    d9:3d:b7:5d:7c:34:d3:7b:07:b8:48:e6:cd:34:b5:
                    5c:af:51:92:54:7a:77:6f:dc:64:ba:0e:54:fd:3d:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:B7:5B:6C:B4:79:6A:0C:97:A5:24:DD:26:8D:79:B6:D9:02:4F
            X509v3 Authority Key Identifier:
                keyid:14:FA:C5:8F:DA:D4:E0:FC:86:D9:47:B4:C8:EF:14:D5:C0:A9:EF:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:19:f7:95:1a:82:6c:b6:36:39:b6:3e:78:a9:2d:32:f5:d5:
         f0:27:29:c8:dc:9f:03:5d:8f:d9:ec:25:7d:37:46:79:e6:51:
         b9:a8:8d:42:74:f3:26:0b:50:b9:f4:ef:a8:d2:f0:89:92:c0:
         1b:fd:ea:3e:44:93:d7:fe:98:3b:70:9c:48:ae:88:08:1e:a2:
         6d:79:b3:65:13:02:78:2a:d2:8a:08:05:98:9a:c3:51:99:34:
         56:bc:27:33:71:d2:4b:9a:80:dc:d8:ce:0d:ce:45:e9:03:5a:
         e5:de:dd:f6:71:e3:f3:28:c1:da:c4:12:d5:d4:94:d0:59:76:
         3c:7a:07:47:04:a9:53:d7:37:b0:08:12:99:57:76:ae:fa:b1:
         74:f9:3b:31:f1:be:ba:88:59:28:6e:43:50:70:a6:c6:18:87:
         61:94:58:9e:b0:6b:9b:8e:0e:36:75:7b:5f:38:88:59:cd:54:
         1c:19:9a:4b:98:75:cb:e5:bf:0a:7e:5d:dc:a6:28:70:c2:ee:
         a7:a2:74:3b:ca:fc:71:38:2a:03:a1:43:40:20:50:5d:47:a8:
         08:0d:b9:47:99:e8:b3:ff:d0:c0:e4:d9:41:10:6e:a3:f9:65:
         58:e9:78:dd:3a:98:04:b8:e3:32:19:bc:8a:0c:1a:75:93:8b:
         80:e2:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----