Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
File:                     BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json)
Hash identifier:          svZQa/0+Y/DHO0BHB+PA60KBw2I6DoNDbYzfLL7eZPE=
Subject key identifier:   DA:3F:82:EF:28:E2:D3:DF:6D:07:95:38:01:3A:17:76:62:40:CB:DF
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       3AD69B30260982D4B0BF657719BCBF6886C843E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
Manifest number:          01E2
Signing time:             Fri 28 Mar 2025 22:20:22 +0000
Manifest this update:     Fri 28 Mar 2025 22:15:22 +0000
Manifest next update:     Sat 29 Mar 2025 23:57:22 +0000
Files and hashes:         1: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=)
                          2: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=)
                          3: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=)
                          4: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=)
                          5: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: JjYYoCeHz+V7hTC6l3YFeJTRbwWQiYkbmRdLo9YR9Pc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d6:9b:30:26:09:82:d4:b0:bf:65:77:19:bc:bf:68:86:c8:43:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Mar 28 22:15:22 2025 GMT
            Not After : Mar 29 23:57:22 2025 GMT
        Subject: CN=DA3F82EF28E2D3DF6D079538013A17766240CBDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:ed:46:fd:28:07:c1:7a:55:66:13:a8:2b:
                    7a:9b:1f:9a:6f:15:b5:68:2a:7f:1c:80:e0:75:4a:
                    1f:4b:13:06:c1:35:3e:09:cc:e8:7e:ce:3c:24:82:
                    a8:c2:12:96:4e:9f:8e:50:ce:61:97:95:49:54:73:
                    d6:d0:f8:27:85:67:3d:7a:4c:06:86:5c:22:28:b4:
                    bc:5c:34:3b:69:8d:9d:03:ee:fd:4b:01:6d:73:81:
                    fc:3d:97:f3:01:6d:79:fd:43:53:4c:45:b3:57:30:
                    26:4f:50:8d:b5:41:f9:55:81:50:1d:e1:f7:91:77:
                    47:99:32:5f:cd:f9:07:e5:70:57:aa:9d:28:9d:37:
                    d3:98:5c:0b:39:08:7c:8f:09:5b:8a:70:25:ab:09:
                    96:2c:4f:d9:4d:d6:5a:ea:78:00:aa:42:f5:a9:c1:
                    51:3f:05:e2:5b:7a:ee:7d:b7:63:b5:66:0d:16:8b:
                    42:c5:14:24:a3:84:86:75:b4:39:c0:bb:01:af:f1:
                    ac:5e:16:80:ab:e2:51:e8:f5:44:18:0f:59:b1:b6:
                    7e:f6:2a:bf:6b:37:65:84:20:66:3d:6f:d7:c1:d6:
                    fc:0d:b7:d8:58:4e:ac:ff:40:18:7a:81:76:51:88:
                    a0:12:10:40:de:34:d1:46:4d:e2:af:dd:ba:42:02:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3F:82:EF:28:E2:D3:DF:6D:07:95:38:01:3A:17:76:62:40:CB:DF
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:32:a8:e1:cc:af:78:1d:82:5b:3d:d6:db:67:72:a8:16:4e:
         b8:89:74:7c:f8:db:35:04:69:2b:31:9c:d5:4d:b8:e6:df:eb:
         43:3a:f3:c8:cb:e6:26:77:6c:47:2d:7f:4e:c7:ba:5c:76:d4:
         ff:80:11:a2:76:b1:a1:05:70:71:c0:16:7b:b5:b0:d7:ad:8e:
         1a:8f:97:9d:d2:91:86:25:d0:05:b4:2e:e1:1c:b4:31:1c:ec:
         3c:d7:54:80:ab:89:49:4a:9f:da:f1:12:79:43:b1:6b:5e:9c:
         e3:57:a7:6a:be:93:5c:bf:fd:f4:f9:6b:91:a8:55:93:b8:1a:
         a2:00:3d:3c:c5:99:af:43:00:d8:60:40:5f:71:6e:0d:61:b5:
         8f:03:27:e1:c6:2f:af:7d:06:a1:21:91:6e:d3:97:a3:49:1a:
         d4:77:39:6f:01:e7:ed:1b:d2:1d:dd:cc:ba:e3:98:7c:71:0e:
         01:bd:8d:e5:11:a3:7a:5d:d6:c9:6d:b2:49:35:3e:74:37:c3:
         cb:9a:15:9f:49:b4:e8:f8:e8:72:5b:7f:5f:e0:d6:7e:e4:ae:
         a7:6b:80:6c:9d:4a:e5:8f:47:d1:33:d8:84:1c:2c:4b:16:9d:
         27:25:1f:cc:d0:e6:6b:ee:5f:1f:70:ee:8c:a7:86:07:56:6f:
         66:ce:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----