Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.mft
File:                     10F89465878BF8E210D035F4B8267A8BF1E2F68B.mft (raw, json)
Hash identifier:          XkJCgF8Eijl+mbnj61EpeLdV3BhhSZdsQmJL+PXCBrI=
Subject key identifier:   9B:60:C3:FE:C4:77:F1:A1:9E:0C:68:6E:C8:EB:81:80:84:60:F3:E5
Authority key identifier: 10:F8:94:65:87:8B:F8:E2:10:D0:35:F4:B8:26:7A:8B:F1:E2:F6:8B
Certificate issuer:       /CN=10F89465878BF8E210D035F4B8267A8BF1E2F68B
Certificate serial:       69AD98E0E33F778E1CAD5BE8C283F67D61651B0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10F89465878BF8E210D035F4B8267A8BF1E2F68B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.mft
Manifest number:          0168
Signing time:             Fri 28 Mar 2025 18:13:45 +0000
Manifest this update:     Fri 28 Mar 2025 18:08:45 +0000
Manifest next update:     Sat 29 Mar 2025 19:21:45 +0000
Files and hashes:         1: 3137372e39332e38382e302f32312d3234203d3e20323632353832.roa (hash: AXpMh7QlgRkvDlavl/N4wy4uOq7YdY+I/GJ2BR/G094=)
                          2: 3137372e38342e39362e302f32312d3234203d3e20323632353832.roa (hash: WVWYqq+GMD8kELhPMhEa80a6A+8Flaf5qWOqE5f/wC0=)
                          3: 3133382e39392e33322e302f32322d3234203d3e20323632353832.roa (hash: 9I1KxrpDfMRKlu4qoG+IQUIIvaV4nx8vvyWpQXnzOm8=)
                          4: 10F89465878BF8E210D035F4B8267A8BF1E2F68B.crl (hash: +ga5GCJkQD2SlrgO9mPX9XofQLeNuWa5LrKB+Yt0MIA=)
                          5: 323830343a3636343a3a2f33322d3438203d3e20323632353832.roa (hash: sIczg0c7ZqnQh39qDLr8+bp9AgCAHusPMfZqrPd3j5s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ad:98:e0:e3:3f:77:8e:1c:ad:5b:e8:c2:83:f6:7d:61:65:1b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F89465878BF8E210D035F4B8267A8BF1E2F68B
        Validity
            Not Before: Mar 28 18:08:45 2025 GMT
            Not After : Mar 29 19:21:45 2025 GMT
        Subject: CN=9B60C3FEC477F1A19E0C686EC8EB81808460F3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:59:0c:44:91:86:c0:38:0e:a8:e1:bb:90:
                    3b:04:d4:d6:a2:29:29:0d:39:7b:0d:f1:19:e9:29:
                    42:40:16:3f:a2:69:c7:a1:1d:81:b3:cb:43:e7:51:
                    89:f3:03:9f:7e:90:aa:a7:21:cf:05:08:27:b4:3a:
                    df:74:ad:2d:38:21:0c:31:a7:df:e1:b5:ce:9e:3c:
                    cf:f3:1c:92:d6:10:61:13:b9:d4:31:9e:ff:8f:74:
                    cc:22:45:c6:06:63:e3:f3:ab:73:38:65:c2:c3:bc:
                    6f:0b:a7:b1:eb:6e:27:ca:03:92:66:fa:04:be:7d:
                    e6:35:ef:7a:53:39:e0:33:4e:17:32:67:76:ed:09:
                    d2:88:37:1c:e5:5e:72:dd:b2:e8:26:3d:bc:de:27:
                    00:17:9a:ae:49:23:79:3a:fa:c7:94:e0:ef:36:57:
                    fe:20:b9:56:5e:3a:8a:e2:5c:e1:7a:0d:09:ff:7c:
                    9f:6c:86:d0:ad:83:b0:ee:96:26:7f:e7:60:41:da:
                    96:d7:bc:ec:01:4f:a6:da:17:40:40:52:22:89:9e:
                    3b:b2:9d:e7:1f:d6:a8:f0:01:a1:45:10:2a:a8:70:
                    d1:4a:4f:98:af:8d:d5:76:1c:b1:c3:22:fb:35:99:
                    a1:21:db:59:2f:95:df:ae:b7:5b:e1:9e:84:01:d2:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:C3:FE:C4:77:F1:A1:9E:0C:68:6E:C8:EB:81:80:84:60:F3:E5
            X509v3 Authority Key Identifier:
                keyid:10:F8:94:65:87:8B:F8:E2:10:D0:35:F4:B8:26:7A:8B:F1:E2:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10F89465878BF8E210D035F4B8267A8BF1E2F68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:31:6a:1c:7b:0e:05:23:d8:f8:2b:d5:94:6b:be:22:9a:d7:
         6d:e1:a7:0e:f5:d4:df:41:5e:da:22:d4:fc:90:6e:9c:14:0f:
         ee:6d:9c:6d:0b:95:5a:2d:0e:5f:c1:3e:65:f4:32:8b:98:7d:
         30:50:fd:b0:90:e2:22:00:39:c1:8f:17:7a:fe:a9:ca:e5:14:
         c5:7d:1f:93:d1:37:7c:57:6e:bb:8d:b0:f6:ce:f1:78:e8:a4:
         ce:75:6f:12:66:3c:b6:f2:f7:fc:63:e9:ba:cf:59:77:83:93:
         b6:84:51:5a:8e:3c:ce:8d:a4:ad:a7:4c:49:1f:8c:85:a8:1f:
         6f:3c:24:36:f3:68:a8:a2:8c:77:29:af:42:02:90:54:4f:3d:
         6e:b0:ad:64:fd:2f:f3:cf:28:71:d6:35:89:8e:e0:df:85:4a:
         2d:38:b1:58:9a:ff:fe:58:02:f9:40:a5:98:62:5e:d7:03:9e:
         9b:69:de:d7:a9:90:86:e6:ab:ce:b7:61:14:90:f8:96:86:57:
         41:38:44:1d:e0:53:29:2c:7c:6f:09:a2:4d:0a:96:22:ff:ec:
         92:e5:c3:a4:52:fe:3a:3c:e4:66:e6:0a:6e:62:06:5c:e2:ed:
         97:7c:bf:79:45:59:a1:b6:cb:05:d4:87:74:92:7f:a0:a1:13:
         03:0a:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----