Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
File:                     CE444325009DC85BE712BCD01156510F2B6F4AB9.mft (raw, json)
Hash identifier:          GncUZHVf4DhIGLm5mAGAPOY+AQ72/G5/UlWEyHGa7ik=
Subject key identifier:   F1:AB:86:7E:EF:53:84:62:BF:8C:C2:25:27:E2:EE:5C:88:41:6A:C6
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Certificate issuer:       /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial:       4DCD7D616564AEEB072DD61548C47A9AA862A122
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
Manifest number:          01DD
Signing time:             Fri 28 Mar 2025 15:34:25 +0000
Manifest this update:     Fri 28 Mar 2025 15:29:25 +0000
Manifest next update:     Sat 29 Mar 2025 19:11:25 +0000
Files and hashes:         1: 3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (hash: 5G9Dy/D8jUa6k6N7o6A0OHuAONqqnFUQzjSegVsSatU=)
                          2: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (hash: xee9sI4lZhpA/ae1SfSHZt6s0IIwr6d9n4pRuri1Uv0=)
                          3: CE444325009DC85BE712BCD01156510F2B6F4AB9.crl (hash: o6snE2wOnASVlOPAexq6Mux55um0S3P0ihP0zpO+DTU=)
                          4: 3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (hash: 0I6R76WFWVe6GvnC6HPSO5DNoIpkRloxekrdv5uaocA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cd:7d:61:65:64:ae:eb:07:2d:d6:15:48:c4:7a:9a:a8:62:a1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
        Validity
            Not Before: Mar 28 15:29:25 2025 GMT
            Not After : Mar 29 19:11:25 2025 GMT
        Subject: CN=F1AB867EEF538462BF8CC22527E2EE5C88416AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:57:8e:26:35:79:e6:14:51:19:b5:e3:e4:
                    1b:55:5c:2b:db:86:cb:e6:16:29:68:de:a9:c7:c0:
                    ed:13:01:5c:27:10:bc:6a:68:3f:3d:38:c9:f8:00:
                    a0:ac:47:c2:68:9a:96:31:ce:01:f5:3f:ff:5e:1c:
                    c8:1a:97:1e:74:54:f3:6f:b1:d6:29:bf:35:22:16:
                    d7:70:a2:2b:ca:f6:ab:f9:a5:70:c9:7d:2e:df:89:
                    35:12:b1:c9:4d:b1:6c:ba:2b:43:1d:64:41:e5:87:
                    05:bc:46:52:b1:24:ed:79:dd:44:2e:00:2e:24:09:
                    27:dd:d6:cb:c7:87:7f:0a:14:2d:a0:60:39:bd:18:
                    8c:73:c1:da:51:3b:34:ed:9e:5c:7d:06:c9:f1:aa:
                    36:5b:82:dd:2f:a0:5b:94:81:91:78:bb:48:8a:68:
                    af:f8:1e:f3:89:0e:91:70:17:4f:9e:5b:a8:71:a8:
                    5b:24:e5:c1:e7:23:0e:0b:68:bf:e2:f1:b5:12:70:
                    0c:58:71:8a:68:d0:78:62:51:b0:7b:6c:11:f9:44:
                    e0:6d:a1:10:76:77:9e:9a:4f:d2:bf:de:1e:a2:62:
                    28:f0:cb:cd:b2:6b:e0:ba:66:d8:10:a6:2c:96:14:
                    07:9e:5f:6b:06:95:de:78:6b:dc:fe:bc:f8:f5:93:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AB:86:7E:EF:53:84:62:BF:8C:C2:25:27:E2:EE:5C:88:41:6A:C6
            X509v3 Authority Key Identifier:
                keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:19:f4:92:57:7f:29:38:97:0b:92:aa:78:2c:41:c4:dc:7a:
         ea:d7:78:8a:bb:cd:c1:a6:80:ca:65:10:f7:17:0b:11:2b:75:
         fe:dd:29:36:98:93:2a:83:ea:a9:fe:ed:d3:cd:9e:51:78:09:
         09:a7:83:67:9c:35:e9:c3:58:6f:7c:e3:d6:7e:0a:8c:68:c3:
         6b:56:7d:d4:6a:31:19:f0:e9:e4:14:28:c5:02:1a:3e:d5:e2:
         9b:5d:b1:b9:2b:89:84:0d:94:e2:35:df:43:99:68:31:f0:d4:
         e0:62:20:24:61:da:fb:a3:4e:83:e9:c7:41:68:ce:bf:9f:90:
         61:6f:33:7b:93:db:61:e8:b4:c7:bc:d8:fa:35:f5:52:0f:9f:
         3d:7d:45:b9:47:0b:04:35:02:5a:43:80:49:9f:60:7b:6a:98:
         e5:04:c4:68:12:d3:6c:0c:5b:24:03:53:f7:59:74:77:f4:2d:
         f1:fb:2b:4b:50:04:dd:66:7f:70:06:4d:23:14:58:09:0c:2f:
         df:6e:84:66:a1:a6:3b:c1:6c:78:e9:65:3b:06:1c:28:3a:fd:
         c9:4b:a5:06:dc:70:1b:b8:17:ec:1a:00:94:c3:ac:62:b1:15:
         0b:a7:6f:7e:bf:9e:6f:52:88:74:64:0b:1c:16:2d:05:81:e6:
         b1:25:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----