Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
File:                     D903348767481BAEFE2C4B534D22308FC61456DE.mft (raw, json)
Hash identifier:          iGDv+4faPj6W6Cqp3pPL7K+id5+XL48LxkEKKSofzN4=
Subject key identifier:   A3:75:54:FE:E5:26:6C:C0:0B:AA:03:56:C7:94:C4:95:35:AB:40:82
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       08DA4A7E961DBFED049865706704EC29A11FB127
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
Manifest number:          01E2
Signing time:             Sat 29 Mar 2025 03:57:55 +0000
Manifest this update:     Sat 29 Mar 2025 03:52:55 +0000
Manifest next update:     Sun 30 Mar 2025 07:38:55 +0000
Files and hashes:         1: 323830343a333364633a3a2f33322d3438203d3e20323635343231.roa (hash: Mw7HvlDrp63aWO1ARIfPFNHv5rafM0coG3YOIzN9QdA=)
                          2: D903348767481BAEFE2C4B534D22308FC61456DE.crl (hash: 6l5tv3XOWJETYh5tG6r4CoPbB0OdzGODNIy1igbIfFw=)
                          3: 3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (hash: 9qI1j80SisNpEFrkVgnZx2fMMWt5iqrs2+4KLEk1aLI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:da:4a:7e:96:1d:bf:ed:04:98:65:70:67:04:ec:29:a1:1f:b1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Mar 29 03:52:55 2025 GMT
            Not After : Mar 30 07:38:55 2025 GMT
        Subject: CN=A37554FEE5266CC00BAA0356C794C49535AB4082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:f3:4c:71:85:c5:84:10:c8:bf:2f:fd:6f:
                    0a:01:b5:73:12:1b:0f:64:50:b4:ba:cf:11:f7:28:
                    fe:fc:64:b3:72:e4:97:19:c0:57:74:a3:95:76:8d:
                    ba:36:c3:76:5a:1a:16:70:b6:ac:92:5e:47:3e:31:
                    be:c2:08:c5:32:f7:7f:78:8b:05:0d:5f:95:72:a7:
                    89:a4:82:db:25:df:8b:9e:b9:92:a0:5b:e4:1d:d9:
                    c0:aa:33:b4:b2:cd:9c:9e:78:80:e2:78:52:d9:76:
                    3d:bc:1b:9b:d3:2a:09:cf:2d:e7:4c:9b:07:30:75:
                    7d:25:ec:3c:bc:e2:65:8b:ae:c9:3a:01:25:11:03:
                    ef:1f:39:5e:dd:66:de:ac:f7:ec:60:f5:df:a5:75:
                    d3:d0:a7:c2:54:36:7f:f4:ba:fc:b3:57:6c:48:27:
                    b9:ed:98:85:fe:cb:2b:e5:3a:d9:86:bf:29:b0:56:
                    a3:7c:e4:39:76:4f:14:9c:df:15:e1:c7:dd:f4:94:
                    28:7e:5a:7c:d8:7e:0b:61:c6:22:07:b0:37:c6:c6:
                    da:38:57:cf:b9:92:82:c0:ed:6a:cc:5e:22:ae:cb:
                    1b:44:fd:78:0c:7d:23:57:c0:4f:78:bf:5c:53:04:
                    5d:51:b3:e7:04:6d:3d:71:29:17:02:5e:ed:87:cf:
                    24:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:75:54:FE:E5:26:6C:C0:0B:AA:03:56:C7:94:C4:95:35:AB:40:82
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:44:44:a5:0d:ad:e1:6c:3f:55:33:c6:d0:46:3c:52:66:
         fa:eb:17:85:f0:50:04:11:7c:84:ef:46:a3:69:b7:12:9e:c9:
         20:3b:9a:f7:d8:c4:4b:4a:7a:56:b7:b5:91:b4:64:b8:1b:d9:
         c8:d3:44:37:c3:92:5b:4a:ff:36:18:d6:e7:e1:ac:a2:a4:62:
         70:4a:88:10:99:e1:c7:6b:f0:3b:07:95:3a:4b:b3:f8:08:84:
         9c:5a:1b:5a:c6:4a:7f:26:3b:b4:fe:b8:10:4f:8e:20:00:0a:
         d6:2d:5c:a6:dd:2c:52:bf:b4:1d:3c:97:24:7b:14:31:75:6a:
         93:8a:53:98:75:df:1c:18:cb:14:e7:44:79:e8:c0:1e:a2:dc:
         6c:69:7e:a1:ea:9e:c5:0a:a6:89:e8:0e:4e:a7:41:d7:dc:85:
         38:66:88:65:d8:85:31:df:b8:2b:ec:e1:d1:f6:32:10:72:97:
         52:12:bf:46:c4:3a:5d:6c:a8:10:2a:1a:d9:c8:c7:30:c9:ad:
         60:c0:c0:08:dc:de:03:30:af:c1:af:ee:be:2b:64:33:f6:14:
         0f:2f:be:2b:9c:fc:25:30:fc:1d:26:ce:69:b0:87:4d:a4:99:
         24:da:be:3c:e8:de:a2:ff:7a:df:de:a8:50:e5:47:2a:63:d2:
         f6:a5:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----