Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
File:                     213D61EA584763705A7243F87D26327EC5CA63B0.mft (raw, json)
Hash identifier:          IqI9I/WYp4EuUe3jykj+GKzypg8B41ZTAh0TQla48hE=
Subject key identifier:   13:2E:F9:20:C8:75:C2:3B:05:9A:90:25:83:10:9F:7C:1F:5F:A5:31
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       02107FC885C546B8D73AD3DB0D35CCC8DCD16F1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
Manifest number:          D6
Signing time:             Fri 28 Mar 2025 20:28:05 +0000
Manifest this update:     Fri 28 Mar 2025 20:23:05 +0000
Manifest next update:     Sat 29 Mar 2025 23:32:05 +0000
Files and hashes:         1: 3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (hash: 1qrEyc9df4Z2AG3zLlph44TwEtTy3IHCrOF8zS3oQn0=)
                          2: 323830343a316534383a3a2f33322d3438203d3e203233373634.roa (hash: 3Ts042d/UEYTxmGCmrRlmH8gUcNhJn7pIwo1eyDzZ/Q=)
                          3: 3133312e3232312e38312e302f32342d3234203d3e203233373634.roa (hash: 2qTmrxUdkbRIvwib6+w7UvGkOQiloJ0+6GGIxAc9vEg=)
                          4: 3133312e3232312e38332e302f32342d3234203d3e203233373634.roa (hash: nV3EAzkjyjcLJlLYhUzZ1foiT4YiRW1MyOKwg9DBFxU=)
                          5: 3133312e3232312e38302e302f32342d3234203d3e203233373634.roa (hash: 7GhebfZkMpwDf74rrS7174rTkkTIlJFNXfbzkct2rJU=)
                          6: 3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (hash: HaHwoyFWVmrHs3VdmJGyyZ+fSHR5dae8NikP/GrmCkE=)
                          7: 213D61EA584763705A7243F87D26327EC5CA63B0.crl (hash: +uc0zPY3L4BNPkzUcISezHD32gvbyE5/nEjNNdzDBV8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:10:7f:c8:85:c5:46:b8:d7:3a:d3:db:0d:35:cc:c8:dc:d1:6f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Mar 28 20:23:05 2025 GMT
            Not After : Mar 29 23:32:05 2025 GMT
        Subject: CN=132EF920C875C23B059A902583109F7C1F5FA531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:16:a8:5f:d8:dc:5f:59:05:99:63:69:e8:
                    4f:df:3b:1f:c1:71:cc:9f:69:ad:5c:4b:6d:c5:c6:
                    85:a7:f0:3d:28:09:b0:d7:cc:c5:90:00:ac:02:70:
                    77:69:2b:12:f2:7b:b4:87:f9:16:d6:ed:da:f1:21:
                    f9:c5:df:e0:78:f7:47:61:b1:58:08:5e:2f:df:b0:
                    89:c1:18:bc:aa:c8:d6:11:82:ec:ef:5e:ba:4a:14:
                    4a:78:d1:dc:0f:76:5d:39:b4:77:6d:9c:4f:91:a9:
                    49:96:8e:3d:75:4f:f8:20:27:d3:0a:ec:a3:92:f9:
                    48:52:7a:af:35:b7:be:3c:56:18:cc:53:a8:99:90:
                    24:1f:9c:23:0b:81:6e:c5:d0:91:28:91:39:19:39:
                    0c:ca:f4:21:48:52:7c:3e:89:5e:d7:95:0f:f5:37:
                    7f:ce:c0:38:2a:39:d0:c7:02:8f:34:15:e7:09:aa:
                    67:b3:1f:e4:e1:49:be:4d:8c:36:f7:60:73:5b:6f:
                    d1:fa:5f:29:79:aa:2c:df:cc:ac:82:03:95:f2:92:
                    79:5f:fc:1e:b0:21:2b:75:87:ee:de:e7:d6:49:bc:
                    f2:89:06:44:25:fd:28:fe:ea:ad:59:93:ac:5d:b9:
                    2a:58:d3:5c:fc:de:76:a7:74:97:79:19:d4:2d:94:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2E:F9:20:C8:75:C2:3B:05:9A:90:25:83:10:9F:7C:1F:5F:A5:31
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:11:85:b3:e8:40:da:9b:24:ea:05:63:51:e1:46:af:5a:
         46:41:4c:43:d1:2a:6f:db:38:18:b1:0f:27:f4:83:b3:ae:b9:
         97:67:84:02:74:e7:a9:3e:f2:db:68:e7:90:96:cf:72:13:c8:
         a6:4f:87:95:4a:e2:da:39:52:41:d1:09:9f:99:48:d3:1c:38:
         d5:7e:74:d7:34:30:fe:15:e1:31:fe:9f:e6:d3:b0:24:6a:f8:
         35:e5:41:e7:31:f3:cc:c8:98:39:22:66:ff:87:9b:66:34:a9:
         a5:36:a3:da:4e:61:36:26:39:2c:a9:51:b2:4c:39:dc:8f:95:
         9c:45:96:40:c2:86:ed:ab:48:17:da:dc:65:d0:cd:88:0f:e9:
         75:13:4c:aa:cb:73:9a:3d:17:d3:e9:64:e4:be:62:5d:2f:96:
         64:0e:ac:8c:12:c4:eb:5d:14:fb:34:33:1e:2a:94:2e:ec:59:
         cf:b1:0f:6e:00:97:c0:61:58:25:51:ef:70:bd:d7:c2:c1:d2:
         1f:2e:40:83:90:fa:5a:ba:07:72:95:7a:8c:34:c1:09:18:5a:
         5f:55:8d:5e:24:4f:a8:4b:b2:93:b7:ae:6c:05:9a:68:ae:69:
         cd:77:7a:ed:79:65:9b:f5:bf:94:83:2a:b1:8b:b6:28:9d:e9:
         e0:7a:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----