Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
File:                     1A3ED1628CA42B3B4C8213417B61162F196BD434.mft (raw, json)
Hash identifier:          Pgju5XZ439PYFj6imCMC6TDkuS8hq1b7JFpNgpL3sUw=
Subject key identifier:   D1:51:57:A4:EE:68:D3:97:95:A2:6F:7F:3F:B0:E1:F0:44:7E:F5:5A
Authority key identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
Certificate issuer:       /CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Certificate serial:       6B64305ACF7D69917D8E1EB4C7766621FE12EA89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
Manifest number:          01DF
Signing time:             Fri 28 Mar 2025 17:27:16 +0000
Manifest this update:     Fri 28 Mar 2025 17:22:16 +0000
Manifest next update:     Sat 29 Mar 2025 20:42:16 +0000
Files and hashes:         1: 323830343a343030383a3a2f33322d3438203d3e20323635393239.roa (hash: hvcsJL+15g+sHCIcoaqDoNFc49qRkcfVNAlRBE7gMII=)
                          2: 3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa (hash: Pmk25y2Umg9oJFme2ExEpYGQMhSUFKOVTccOjUFoAZA=)
                          3: 1A3ED1628CA42B3B4C8213417B61162F196BD434.crl (hash: efPdnHJ6jTRDWNDZ8ILEmGjHMEIuW8p0201fF8i3jHk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:64:30:5a:cf:7d:69:91:7d:8e:1e:b4:c7:76:66:21:fe:12:ea:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
        Validity
            Not Before: Mar 28 17:22:16 2025 GMT
            Not After : Mar 29 20:42:16 2025 GMT
        Subject: CN=D15157A4EE68D39795A26F7F3FB0E1F0447EF55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:80:0b:46:e5:f6:b0:cd:43:0c:99:87:a8:
                    3b:be:ab:a7:b2:fc:62:2d:5a:c0:ff:f5:fc:63:71:
                    4f:39:59:26:e8:0d:4b:79:e0:cf:79:f4:c6:e1:d8:
                    39:ee:85:d6:dc:8f:0d:fa:5a:a2:e5:bf:9e:30:d7:
                    6f:41:1d:20:c0:9c:78:ff:2b:b7:ff:1d:d4:a8:15:
                    c5:cd:88:05:01:91:42:c7:7a:f8:c0:27:d2:51:a9:
                    fa:d9:9b:7f:d9:aa:42:8c:49:28:1e:56:cf:19:09:
                    63:0d:82:f0:51:25:0a:95:64:a8:cc:bf:d7:1f:71:
                    85:8e:96:a0:88:56:1e:4d:a0:ca:54:ac:77:aa:1b:
                    b8:cd:6b:25:3e:e0:d1:58:20:13:b8:b5:b2:6c:98:
                    e0:28:2e:97:90:92:4c:30:eb:c1:5a:c1:a4:51:c7:
                    2a:45:4a:6d:38:f3:3e:2f:11:63:48:d0:77:11:20:
                    f1:54:7b:71:da:52:8a:3a:eb:7b:e9:e8:7e:b8:5e:
                    5f:a0:54:89:a9:c4:f9:69:d3:39:e3:d9:8f:60:8c:
                    02:bf:9a:71:39:fc:fd:9d:ce:49:ae:70:86:f0:10:
                    98:ef:d6:d4:b7:c5:be:12:be:27:c4:34:5b:71:0e:
                    06:fe:3f:89:98:2d:63:4d:7f:10:0d:fa:1a:47:f6:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:51:57:A4:EE:68:D3:97:95:A2:6F:7F:3F:B0:E1:F0:44:7E:F5:5A
            X509v3 Authority Key Identifier:
                keyid:1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d0:c6:cb:88:8f:d6:27:a1:46:e7:09:45:38:4b:81:ce:fc:
         b2:1a:d2:bd:56:ba:46:28:dc:e7:5e:48:64:69:ba:41:c5:8f:
         e1:ad:4c:46:f2:58:cd:82:4e:23:71:8a:36:ec:93:09:04:11:
         a9:dd:78:64:a3:f2:b8:13:42:9b:96:fc:57:77:d8:d2:38:3f:
         a2:5b:15:44:bf:02:e7:10:25:39:25:22:ae:c6:59:9a:d2:17:
         81:5b:c0:d5:01:20:6a:9b:a0:6a:d6:eb:8b:5e:d7:4e:8a:15:
         56:d1:c5:2b:84:69:89:28:c8:54:98:20:3e:83:f9:d6:2c:9a:
         f9:78:24:3c:70:b7:04:00:9a:1d:a3:40:ee:e2:0e:9b:ad:e3:
         38:18:ad:4b:77:60:60:9c:f6:48:e5:cf:a4:7a:a4:25:09:1a:
         ba:85:54:e7:14:84:60:a5:cd:32:77:e7:d5:92:08:89:34:bc:
         b8:30:17:42:20:8b:e6:46:ec:37:77:2b:4b:9b:66:95:99:3c:
         53:e0:34:c7:29:e7:09:7b:44:2b:2f:91:07:17:44:0c:28:09:
         58:18:72:49:e5:1b:84:72:88:c4:c7:c1:fe:da:b9:bd:2c:70:
         4e:e8:07:b9:1e:c4:81:35:21:f7:48:dc:b1:e2:f0:43:65:6b:
         86:dc:f6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----