Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft
File:                     5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft (raw, json)
Hash identifier:          n2PMeclZbaC1htXTwSsc7gTx1mSeLmL1xNg8GX3S6Kg=
Subject key identifier:   B2:15:D8:52:2C:1A:BE:5B:4B:6A:A7:4C:70:70:FE:AA:65:BE:90:D7
Authority key identifier: 58:91:D2:45:4F:33:64:90:E5:D3:34:AA:9E:3D:63:FE:E0:EB:D8:FC
Certificate issuer:       /CN=5891D2454F336490E5D334AA9E3D63FEE0EBD8FC
Certificate serial:       4170B59E35B725561EF4E7DBB34DE49878F05215
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft
Manifest number:          0274
Signing time:             Wed 16 Jul 2025 16:09:30 +0000
Manifest this update:     Wed 16 Jul 2025 16:04:30 +0000
Manifest next update:     Thu 17 Jul 2025 19:51:30 +0000
Files and hashes:         1: 323830343a333037633a3a2f33322d313238203d3e20323634393534.roa (hash: YrPM00XVaX+J+/R5Ieg/VjbG59Tc31kRMWcqFnQ8Zcg=)
                          2: 3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa (hash: 40GTm8P6GyxI1uTuy64niH97rhqF0zj3ZV9KGmD/Tnc=)
                          3: 5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.crl (hash: +EmjbEu0mVNdXPa04MGeoq6dU8txSWL837kKzk7+vlY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:b5:9e:35:b7:25:56:1e:f4:e7:db:b3:4d:e4:98:78:f0:52:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5891D2454F336490E5D334AA9E3D63FEE0EBD8FC
        Validity
            Not Before: Jul 16 16:04:30 2025 GMT
            Not After : Jul 17 19:51:30 2025 GMT
        Subject: CN=B215D8522C1ABE5B4B6AA74C7070FEAA65BE90D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:da:30:0c:a0:be:15:c5:1e:8d:7f:f3:74:
                    f8:8d:46:65:d4:2e:88:4e:88:eb:f5:0f:3e:df:d6:
                    90:d7:ca:cf:7e:2f:1b:7e:cf:d2:f7:2d:a6:cc:6a:
                    10:96:ce:bc:40:11:a9:7a:f4:0c:3f:52:bd:07:13:
                    d7:b2:11:2f:55:d9:45:07:a9:35:93:1c:1d:c1:77:
                    df:76:2d:b7:15:37:46:a0:5b:ef:ae:71:15:fb:11:
                    a7:24:b7:c4:41:ae:89:26:4b:8f:c7:9c:72:ac:d7:
                    8e:40:3a:ce:2b:71:74:07:f5:e8:52:75:b1:b1:ca:
                    ea:48:b9:63:a3:b1:63:ea:cc:56:ab:6f:9f:77:0b:
                    d5:09:5d:1a:5d:92:12:ff:c4:6a:c6:9f:97:27:02:
                    c9:34:b6:9b:98:24:04:ab:fb:4e:82:15:4f:6d:1a:
                    76:59:b9:ba:87:3f:c6:0b:9f:3b:a1:76:b8:23:6c:
                    12:71:16:14:93:20:e3:3a:61:70:f1:cb:b1:32:63:
                    c9:3a:8d:a0:81:10:24:4d:91:03:79:67:cd:1d:48:
                    6e:7a:24:a9:fd:73:96:19:5f:c5:c3:52:ad:3c:9f:
                    c3:6a:ae:c2:9d:3f:cb:aa:df:ac:e7:1d:79:13:a5:
                    7e:a8:e9:72:8c:c0:a4:ef:ef:b8:05:e7:14:b9:c0:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:15:D8:52:2C:1A:BE:5B:4B:6A:A7:4C:70:70:FE:AA:65:BE:90:D7
            X509v3 Authority Key Identifier:
                keyid:58:91:D2:45:4F:33:64:90:E5:D3:34:AA:9E:3D:63:FE:E0:EB:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:f0:6c:56:a3:c8:0a:10:76:1a:94:d1:19:94:16:2b:38:
         21:e4:da:46:1c:e1:51:aa:79:08:6f:d3:3e:5f:ce:d6:5f:ed:
         e1:a3:12:9b:c6:ed:a8:8c:6d:8d:f5:5e:46:c8:01:ab:b4:e1:
         2c:b4:b5:af:32:8c:d2:76:08:9d:d3:20:6b:0b:e7:d6:ab:ca:
         93:55:e6:b2:03:5e:0f:ca:cc:e7:62:79:99:d2:5b:31:f2:9a:
         30:b0:00:65:97:a1:7a:ea:4b:ad:d0:bb:ef:d9:04:6d:0b:6c:
         b4:c0:01:20:63:a9:ed:74:a5:72:e3:28:fd:95:c1:4a:a3:b8:
         6a:5f:3d:e8:34:e2:de:43:d8:04:5f:64:af:9b:a8:0b:60:56:
         ce:98:5c:ed:38:2a:78:cb:54:ec:1f:0d:36:f2:33:b6:a3:35:
         5f:58:df:b9:9c:3f:ec:a2:b9:76:f9:ce:89:87:53:28:2b:ba:
         fa:0e:d5:27:49:fe:ab:f9:46:a5:a0:35:7f:ab:33:a6:9d:67:
         61:bf:f4:73:cf:5b:b8:28:89:ec:dc:51:aa:c8:29:90:2a:9e:
         c1:e6:ad:5f:26:d3:1f:89:16:6c:e5:68:25:a1:c4:a9:eb:0b:
         8b:d3:7b:5f:63:7b:53:13:5e:33:f1:7d:71:2f:59:dc:c1:ff:
         db:97:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----