Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
File:                     EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft (raw, json)
Hash identifier:          HFHJRb1IuWZcm18uLqXUX+PLYYZ3BtFvxUzPrCfXAkg=
Subject key identifier:   58:18:5F:30:D7:5C:EE:CF:05:62:7C:7F:0A:6E:77:F6:36:FA:37:AC
Authority key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
Certificate issuer:       /CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Certificate serial:       742E664DDE0899CE0113DE3F0BD40F171318FCD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
Manifest number:          0F
Signing time:             Sat 29 Mar 2025 07:32:44 +0000
Manifest this update:     Sat 29 Mar 2025 07:27:44 +0000
Manifest next update:     Sun 30 Mar 2025 11:12:44 +0000
Files and hashes:         1: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: 2S5jPVpDtF/c3KX+7YrkDsURbXg6ohRU2xrGg9VcEpU=)
                          2: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: S7mn+aIRKkfCkrEGNSaEpbEn+9QE2IZk2jlyPQPYAu4=)
                          3: 3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (hash: loryBBnRoI838DX1HT9b2dWqBg6cpy3QhXLAn1D7dG0=)
                          4: EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl (hash: 8XvQr2N7/vINCTvcohnbI2hOJCv8vhiP47NcGpA8dq8=)
                          5: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: aglHitQCJNgIY3C7Tlxv80IWetc3uLwgBi5NAsxzjh8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2e:66:4d:de:08:99:ce:01:13:de:3f:0b:d4:0f:17:13:18:fc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
        Validity
            Not Before: Mar 29 07:27:44 2025 GMT
            Not After : Mar 30 11:12:44 2025 GMT
        Subject: CN=58185F30D75CEECF05627C7F0A6E77F636FA37AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:d5:99:37:0c:e7:cc:94:22:b9:20:b5:0f:
                    f0:d2:ea:54:19:c8:e4:44:0e:a7:d1:15:d3:71:73:
                    d5:4a:be:dd:8e:9d:fb:83:fa:d2:8b:a6:d6:62:41:
                    a4:31:c5:e3:9d:66:15:e9:3d:65:c7:0e:74:4b:6e:
                    61:88:99:94:d0:84:73:e0:36:b7:fa:c7:69:92:4d:
                    06:25:95:af:51:b3:da:4d:d6:8f:d1:cf:8e:16:a2:
                    07:97:f9:28:42:6b:ea:c5:2c:fa:3f:40:f0:cb:79:
                    46:c3:cf:0a:ad:86:fa:4a:a8:05:16:45:80:18:ce:
                    9c:e2:0e:15:fb:33:cd:73:33:e8:5d:a7:aa:e0:c0:
                    85:06:67:21:38:7f:f5:ce:e5:5a:75:6e:33:2a:7e:
                    73:74:92:6c:c8:e0:4c:09:d0:46:e1:88:85:11:40:
                    e4:1b:e4:fb:81:78:c5:a3:e4:97:93:66:0d:b1:d8:
                    d0:68:47:44:97:9c:44:1b:68:3e:51:31:c5:00:86:
                    19:dc:d7:b0:18:53:0d:6d:2f:a3:28:b0:00:b1:25:
                    99:fa:22:5f:37:c2:12:02:b1:6e:fb:7a:3b:75:4c:
                    48:cf:30:ff:56:b0:95:8b:be:94:1e:8c:c4:f6:3b:
                    01:b2:a2:d0:58:49:78:82:11:5a:37:83:a8:b3:a4:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:5F:30:D7:5C:EE:CF:05:62:7C:7F:0A:6E:77:F6:36:FA:37:AC
            X509v3 Authority Key Identifier:
                keyid:EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ce:b8:dc:3b:99:4b:81:61:4c:a1:f8:fc:f9:20:c3:7b:04:
         b7:90:73:8c:09:48:68:d1:b9:35:af:a5:ff:3a:27:ea:8e:b6:
         43:97:28:8a:e8:40:c5:50:27:05:b0:06:6a:4b:d0:ad:4e:a2:
         fe:e7:1a:0f:09:55:30:4c:0a:22:65:74:6c:a7:44:e0:7f:26:
         9d:60:00:c0:26:3b:a9:18:53:21:bb:48:0a:f2:d4:47:4d:6d:
         15:7f:8d:2d:6b:73:86:4b:a4:d3:03:6b:3f:7a:9d:5e:6d:2e:
         2f:03:28:06:cd:56:36:69:75:8b:69:f6:44:72:43:5c:61:4e:
         15:c3:39:39:d3:3b:f4:1a:7a:a5:59:31:9f:13:1f:de:97:8d:
         c8:33:4f:9e:e9:3f:95:12:05:07:b7:4b:b5:91:b4:ed:d9:79:
         30:fe:ba:f1:8d:6e:52:bc:17:2f:df:97:1d:7f:48:9f:4b:de:
         91:06:92:16:d6:76:79:ce:10:68:9d:aa:98:6f:8b:b9:e0:0d:
         db:43:a2:0f:ca:dd:d5:3f:e2:79:b0:fe:f6:5b:58:50:d9:95:
         36:4c:eb:84:2a:07:84:3c:da:2a:af:64:3f:a4:26:77:17:98:
         54:1a:1c:93:04:3c:8b:5c:9e:52:96:63:6b:66:6e:b3:59:50:
         cc:ae:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----