Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.mft
File:                     2348176CD3158AFA70E70E5727DF6BF014A4E45D.mft (raw, json)
Hash identifier:          NNngA4BjwLbhf0rHW84IkMB2igMH8ulc4Wj2VUJCXkE=
Subject key identifier:   2A:11:24:12:F4:EB:35:47:72:9C:67:18:47:0A:9D:7A:C5:DF:E9:AB
Authority key identifier: 23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D
Certificate issuer:       /CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
Certificate serial:       16CE70CD7CBCDFE84CA04E89D1FCA509CF55240E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.mft
Manifest number:          01EA
Signing time:             Fri 28 Mar 2025 20:04:01 +0000
Manifest this update:     Fri 28 Mar 2025 19:59:01 +0000
Manifest next update:     Sat 29 Mar 2025 20:59:01 +0000
Files and hashes:         1: 323830343a326436343a3a2f33322d3438203d3e20323635323739.roa (hash: LKfIPSpRhuxrIxtXFU3pao2diwFff0WSPAJmKv9hW1E=)
                          2: 2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl (hash: rvONNdgb1g4af/rVjaFUNsRX1h4/jw4/FbW0hgyNDH4=)
                          3: 3136382e3139352e3134342e302f32322d3234203d3e20323635323739.roa (hash: DduzbXPdI+TD4rxtNS4RJBLRI68cw31iUEUqVijWvAo=)
                          4: 3136372e3235302e32342e302f32322d3234203d3e20323635323739.roa (hash: 9boyuMXixEdoF4lRiVSFKqt9dKiAFrPq4I5hukFx+kU=)
                          5: 3230302e3231352e3234302e302f32322d3234203d3e20323635323739.roa (hash: icgPl8zZDgcYbm167zxIA2cQZfToa4c2Bpp4W79Qb6E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ce:70:cd:7c:bc:df:e8:4c:a0:4e:89:d1:fc:a5:09:cf:55:24:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
        Validity
            Not Before: Mar 28 19:59:01 2025 GMT
            Not After : Mar 29 20:59:01 2025 GMT
        Subject: CN=2A112412F4EB3547729C6718470A9D7AC5DFE9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:1e:15:e4:d2:b2:ca:f4:d8:42:39:1c:c8:
                    37:3b:ca:9b:16:6a:20:d4:72:76:48:11:1a:d1:ab:
                    a4:0f:ea:61:26:f4:cb:71:43:dd:ab:43:c4:90:7d:
                    39:77:9b:97:1a:76:8c:b0:ac:20:07:bd:ae:12:83:
                    9b:5d:70:9e:ab:fb:eb:78:7e:0b:f7:2c:ae:47:1d:
                    e7:a7:37:6a:33:1e:a6:1d:e9:c9:a3:5b:25:9a:01:
                    e5:14:7a:ec:2a:93:e9:a0:67:38:ab:bb:0d:ff:44:
                    35:72:b4:91:fd:97:58:26:5d:df:d7:52:28:62:58:
                    50:b6:7b:00:a8:cb:a8:f9:c5:41:dc:0b:26:06:c1:
                    b8:22:a1:27:1b:83:bb:ab:9b:5a:f9:46:c2:87:68:
                    58:ea:72:e1:56:7d:30:7e:de:06:48:03:ab:93:9d:
                    11:ce:0f:83:8e:f9:40:18:1d:d4:38:ca:ef:5e:11:
                    17:97:42:91:ba:48:79:6d:32:96:8d:eb:71:c6:27:
                    3e:ce:04:af:87:62:44:2b:5e:ec:77:5f:c4:b3:02:
                    4a:55:7a:74:94:74:69:59:e8:4a:a5:bf:e5:e9:e7:
                    4a:47:5a:b2:27:86:92:74:aa:6b:2d:20:25:33:98:
                    00:ec:a1:d1:0b:e6:15:10:1d:60:92:bf:7e:88:a7:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:11:24:12:F4:EB:35:47:72:9C:67:18:47:0A:9D:7A:C5:DF:E9:AB
            X509v3 Authority Key Identifier:
                keyid:23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:42:4e:50:50:72:b8:ba:fc:28:72:e1:b9:2d:49:f6:f3:a2:
         67:72:58:59:44:36:45:6a:ac:e0:f0:46:d3:0f:c0:8c:cc:c5:
         c3:29:eb:4f:3e:09:97:e4:d7:41:92:aa:a0:f5:47:9e:f3:f1:
         9f:cb:5a:50:4c:37:e7:37:03:64:cb:ff:92:22:5d:57:b6:e9:
         80:66:5e:83:9e:8f:c0:d6:bc:85:91:58:d1:2e:8b:10:38:5b:
         29:0f:c2:1b:c5:9d:15:7e:9a:51:9d:99:75:44:d5:47:ef:cc:
         c4:ea:99:34:be:41:23:02:da:46:53:f1:2e:fd:01:54:dd:6e:
         83:1c:56:3d:02:a7:33:53:cb:b9:7a:1f:13:cb:9e:ad:6b:2b:
         9d:1a:31:21:e3:d5:e1:22:85:e7:2e:b8:3a:b9:3a:eb:57:56:
         a9:26:fa:00:3c:09:60:95:fc:9c:61:72:9a:0b:12:3c:e3:28:
         3a:99:a7:79:6d:da:0e:24:52:ab:ea:06:84:c2:46:c3:8b:be:
         d6:1e:95:94:c4:c4:3c:7e:b0:1b:0c:1c:a3:98:69:fe:15:7e:
         5a:12:68:2f:91:9b:98:97:a5:e3:37:a4:8b:a9:d4:cb:6b:98:
         9f:ac:4b:55:9f:4d:2f:dc:ac:e7:5b:54:f5:1d:09:f4:1f:f4:
         5d:d7:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----