Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/AD018CF2552AB8A04E6D299C30B685761B00ED43.mft
File:                     AD018CF2552AB8A04E6D299C30B685761B00ED43.mft (raw, json)
Hash identifier:          6C4L7ennPx552ZL9mxei/TmKBkxn5Bm8B24sgSwWbOY=
Subject key identifier:   61:0E:06:4C:10:EE:A6:D8:82:F9:13:FC:54:C9:6A:50:58:A1:CF:CB
Authority key identifier: AD:01:8C:F2:55:2A:B8:A0:4E:6D:29:9C:30:B6:85:76:1B:00:ED:43
Certificate issuer:       /CN=AD018CF2552AB8A04E6D299C30B685761B00ED43
Certificate serial:       69C8BD6279F24E300AD652C6C6FA0A167E1F517F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD018CF2552AB8A04E6D299C30B685761B00ED43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/AD018CF2552AB8A04E6D299C30B685761B00ED43.mft
Manifest number:          13
Signing time:             Tue 21 Jan 2025 00:02:55 +0000
Manifest this update:     Mon 20 Jan 2025 23:57:55 +0000
Manifest next update:     Wed 22 Jan 2025 02:51:55 +0000
Files and hashes:         1: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: ZZecPpn1Ea5dRiGV2XiTxHEM7brRRR9PaeZxEazBItI=)
                          2: AD018CF2552AB8A04E6D299C30B685761B00ED43.crl (hash: GWzU2f9RNDMt/meduOaE083ON3nLo7dOzEc+hGjlGfk=)
                          3: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: uowviBQLR2AizMnzLuR5iBA2pa/Gj3udO/cisw3SppU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c8:bd:62:79:f2:4e:30:0a:d6:52:c6:c6:fa:0a:16:7e:1f:51:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD018CF2552AB8A04E6D299C30B685761B00ED43
        Validity
            Not Before: Jan 20 23:57:55 2025 GMT
            Not After : Jan 22 02:51:55 2025 GMT
        Subject: CN=610E064C10EEA6D882F913FC54C96A5058A1CFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:54:85:fd:e3:26:d8:9b:14:54:57:74:4a:
                    60:ed:2b:e8:55:3d:d5:d1:fd:cc:3a:41:8c:b6:ee:
                    0a:ab:16:2f:57:a2:23:58:ba:fd:3c:c2:c9:78:9a:
                    7e:4f:1e:f7:67:51:8e:03:2f:b0:b4:be:07:31:03:
                    86:fa:f7:41:dc:79:eb:00:03:28:fb:87:0c:ff:c1:
                    7a:1f:cd:2c:cc:a6:7e:1b:01:ff:10:66:c6:67:ff:
                    46:3b:90:71:dd:af:43:fd:37:b4:7f:a6:b6:37:fa:
                    3e:45:52:2a:06:55:cf:3e:76:83:de:ed:66:c1:c7:
                    00:ec:9f:e7:43:04:6d:21:be:8e:11:2f:ae:54:fd:
                    8d:91:fa:77:1a:a1:79:c4:95:21:80:c4:57:16:8f:
                    57:9e:99:f0:7e:38:b2:52:9c:60:35:86:ac:e3:29:
                    ae:47:b8:1b:11:f6:47:5b:c7:cc:b3:6f:c9:21:9f:
                    bf:fd:0d:d9:51:54:ac:1c:72:2d:bd:62:1f:db:84:
                    91:1f:9f:c5:f6:6b:88:ab:86:46:28:a1:d9:23:5b:
                    6a:a4:04:11:31:6d:aa:e0:42:a2:2e:f2:b9:af:79:
                    1e:11:61:f1:e3:94:7d:21:4d:f1:19:1c:be:4d:f6:
                    a7:14:ab:b5:a7:0e:18:aa:be:4e:6c:ee:b0:0f:8c:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:06:4C:10:EE:A6:D8:82:F9:13:FC:54:C9:6A:50:58:A1:CF:CB
            X509v3 Authority Key Identifier:
                keyid:AD:01:8C:F2:55:2A:B8:A0:4E:6D:29:9C:30:B6:85:76:1B:00:ED:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/AD018CF2552AB8A04E6D299C30B685761B00ED43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD018CF2552AB8A04E6D299C30B685761B00ED43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/AD018CF2552AB8A04E6D299C30B685761B00ED43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:38:1c:25:72:4c:62:3f:66:91:24:ba:10:b1:b2:d5:de:10:
         ad:db:83:c7:f0:38:23:60:c1:3c:5a:df:98:54:53:ab:c4:b3:
         0a:05:37:cb:f8:93:bd:53:79:e5:7c:a1:a0:5c:a1:81:10:59:
         fe:2c:c9:4e:b8:a9:93:ed:03:b1:32:9d:ec:67:da:d3:d9:39:
         d5:79:dc:9b:7d:3f:bb:3d:ad:ce:d1:c9:84:bc:b9:42:39:84:
         fb:43:6b:b5:0c:6c:4c:20:1e:51:23:19:69:a9:fe:e0:33:70:
         ab:a7:29:4e:22:2e:9e:d3:dc:65:47:ac:3a:0b:d1:3c:9f:bd:
         e4:8f:3c:13:55:9e:9c:39:92:0d:f1:2e:5a:16:f9:38:0f:d3:
         8c:5b:b0:6c:c4:23:4c:8c:e1:55:ec:a7:bc:56:67:55:50:33:
         dd:b1:e2:23:39:6b:9f:a2:49:14:1b:36:b4:0d:11:42:d7:60:
         76:91:41:6c:58:a5:6b:94:14:43:7b:ba:17:7f:8d:f8:84:56:
         e7:e6:94:4d:7a:cd:e0:39:c9:9c:17:83:0d:b9:8a:e3:fe:29:
         6a:45:d3:bd:0d:29:3e:67:5c:8a:05:03:c4:3b:d2:e3:ea:a5:
         6f:b0:14:15:f0:21:34:4f:cb:f1:d5:da:25:b2:dc:be:10:ba:
         8a:f3:c7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----