Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
File:                     21619A6DD05DB15FE1B213C8C5C580B755346175.mft (raw, json)
Hash identifier:          uFs9pBnC4vXvh3/OuhxYe9012TZ+K29ItvXWTFhryK4=
Subject key identifier:   27:9F:7F:CE:E9:A0:5E:F8:1A:58:66:34:B1:C3:05:C9:7D:32:22:05
Authority key identifier: 21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75
Certificate issuer:       /CN=21619A6DD05DB15FE1B213C8C5C580B755346175
Certificate serial:       15C12B8313CF483C1406A9B86575ADC8059A28D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
Manifest number:          01E1
Signing time:             Sat 29 Mar 2025 04:14:42 +0000
Manifest this update:     Sat 29 Mar 2025 04:09:42 +0000
Manifest next update:     Sun 30 Mar 2025 07:38:42 +0000
Files and hashes:         1: 21619A6DD05DB15FE1B213C8C5C580B755346175.crl (hash: NiZoQLpsC/7EPGZJVfSUBs2MTGnkPiSWr9g5BUJ2BfE=)
                          2: 3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa (hash: XyS3jblFpiG2drdAu8D6HmYv5cLQOXgbSYQCQvhd0M8=)
                          3: 323830343a3964343a3a2f33322d313238203d3e20323632393936.roa (hash: tzrgGr/KPcXclXzmZkaYFGbc/XdqrbnWYA+YSUhH6Ew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c1:2b:83:13:cf:48:3c:14:06:a9:b8:65:75:ad:c8:05:9a:28:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21619A6DD05DB15FE1B213C8C5C580B755346175
        Validity
            Not Before: Mar 29 04:09:42 2025 GMT
            Not After : Mar 30 07:38:42 2025 GMT
        Subject: CN=279F7FCEE9A05EF81A586634B1C305C97D322205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:73:82:21:bb:9a:11:a4:cb:d4:ba:d6:f6:
                    b1:65:7e:fc:57:57:bc:2f:bc:48:f6:25:a8:b5:90:
                    c2:6c:77:51:cb:9c:45:c7:33:e1:a9:98:8b:3f:8b:
                    c7:e3:ae:44:d8:0e:bc:6c:2c:e0:df:47:65:80:98:
                    9c:cd:f8:28:cc:4b:53:e6:6e:8b:59:86:ac:6e:fa:
                    38:c8:c5:eb:09:64:c3:f3:aa:a3:d9:9c:a1:56:87:
                    54:6c:ae:f5:f6:ce:63:66:cc:d6:ba:76:b2:f5:1b:
                    ec:16:3c:66:da:19:5d:02:63:d9:58:11:3e:80:73:
                    ea:a9:37:75:57:b2:54:e4:5e:1d:59:9f:e5:a2:42:
                    b2:f1:b3:63:29:4a:e1:1f:b0:79:3f:fd:a5:76:20:
                    49:f8:af:7d:96:7c:fc:43:c4:43:96:83:ca:40:46:
                    4f:ef:77:05:26:59:a7:7c:0d:0f:a2:85:02:9b:7b:
                    a6:f6:fd:fe:e2:74:67:53:15:1a:ef:c1:7d:14:2c:
                    dd:3e:7b:d5:00:8e:2e:ae:06:14:61:8d:72:79:a3:
                    c1:87:1b:9a:9b:a6:d8:c1:c1:2c:b4:02:57:d6:b2:
                    1d:56:eb:28:41:cf:ce:c4:e6:9c:d6:5e:9a:6c:77:
                    cb:ce:06:04:30:59:48:6a:30:9c:93:44:6e:b9:ea:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:7F:CE:E9:A0:5E:F8:1A:58:66:34:B1:C3:05:C9:7D:32:22:05
            X509v3 Authority Key Identifier:
                keyid:21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:58:14:ff:f7:59:75:fe:7c:3a:2e:eb:3a:40:32:c8:ae:b7:
         3b:6b:d0:46:08:ef:79:f1:1c:d7:4c:6b:6b:f6:11:d9:64:28:
         ec:1b:09:f8:6f:bc:f5:aa:9d:f8:3e:e0:ed:d6:79:5e:2c:33:
         8c:0c:cf:cb:70:44:58:66:7c:b2:34:6f:64:f5:40:07:b3:74:
         75:81:91:2f:eb:81:f8:9f:2d:8d:91:8e:59:f3:7a:92:98:50:
         90:88:48:ab:52:be:6b:c1:a8:cd:4c:f1:57:9d:23:a9:80:75:
         8f:d3:e8:a0:38:3a:7d:fa:b2:d7:e5:7d:7e:02:b6:52:d6:7d:
         04:20:42:25:7f:60:66:e6:9b:1b:bb:7a:23:ec:50:3f:75:88:
         27:9f:4e:28:13:ae:7a:98:ae:48:8f:97:3b:f3:54:7d:62:a1:
         48:cb:b6:2e:dd:70:32:69:68:bd:03:e9:bf:92:45:d9:00:64:
         fb:dd:17:5c:d8:38:cc:aa:c4:27:f3:07:2e:d4:0e:76:70:ea:
         22:6d:de:f1:17:bf:47:eb:a1:00:05:cf:00:4b:37:ed:96:33:
         5c:ea:c7:66:01:2d:f5:16:db:68:c6:fb:f3:fd:dc:9f:7a:92:
         41:e8:bf:8c:d7:0d:dd:06:7c:41:73:80:81:a0:34:42:0a:8c:
         80:95:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----