Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
File:                     9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft (raw, json)
Hash identifier:          aRyK0t6t1jWQMFIjcm1SUKjUOJgSwuRXxpioaz3n9gw=
Subject key identifier:   10:54:A9:D1:A3:7B:62:FE:B7:17:1C:84:E9:15:C9:6D:D5:B3:79:9E
Authority key identifier: 9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE
Certificate issuer:       /CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
Certificate serial:       082B46EC92A4F9344C7A06E53BA3E5380D8B3111
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
Manifest number:          01DC
Signing time:             Sat 29 Mar 2025 03:06:03 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:03 +0000
Manifest next update:     Sun 30 Mar 2025 05:39:03 +0000
Files and hashes:         1: 323830343a343738303a3a2f33322d3438203d3e20323637303538.roa (hash: orO/1R0+9lYbIbJddlR5mm0L25AsMFyaS1SmlAkobc4=)
                          2: 9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl (hash: 4WkEEGSU+yTl+2tpvl/m4STt/os8Q3i0mmMxJ8b5jzE=)
                          3: 34352e3232382e39362e302f32322d3234203d3e20323637303538.roa (hash: 5FNu6OiEs92vCxFqtAHez4FJ3a9UuGefadMQFR0f41I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2b:46:ec:92:a4:f9:34:4c:7a:06:e5:3b:a3:e5:38:0d:8b:31:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
        Validity
            Not Before: Mar 29 03:01:03 2025 GMT
            Not After : Mar 30 05:39:03 2025 GMT
        Subject: CN=1054A9D1A37B62FEB7171C84E915C96DD5B3799E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:88:a0:e3:e3:40:17:ca:65:57:26:8b:fe:
                    56:7a:a7:40:16:a5:38:e6:c3:9e:cb:a3:e4:a4:f5:
                    34:b6:75:c5:00:ce:0a:3a:04:7d:b7:6f:f0:2b:90:
                    be:8b:6b:e7:30:c2:70:b5:97:2b:91:30:60:f9:09:
                    6c:6c:41:d1:fc:5c:b6:82:62:b9:38:97:70:01:7b:
                    b7:66:b8:82:b7:65:fe:27:83:c7:0f:9f:ef:d2:e7:
                    61:e7:26:4b:c0:f8:60:66:af:f2:95:02:00:86:2e:
                    76:73:d2:39:d3:0e:9f:aa:71:64:04:8e:fa:bb:b3:
                    bd:75:9e:43:e5:67:fd:d1:bd:4d:da:74:89:eb:ed:
                    a2:4c:44:95:a5:da:4d:10:bb:b0:4d:bd:e6:84:e1:
                    00:6c:f2:98:a3:36:d9:bf:d6:4f:4c:c9:8b:1a:08:
                    6d:b3:ed:46:9a:a2:2f:68:84:18:b7:30:85:c7:f7:
                    b0:da:63:71:b1:40:8d:6c:90:9e:6d:26:ec:db:c6:
                    dc:cf:6b:c1:c8:38:c6:fa:14:99:c8:3b:25:c4:e8:
                    10:55:94:c1:7e:89:bd:ca:27:05:ec:84:82:d0:47:
                    e2:84:09:e8:c6:0d:8b:f8:ec:a1:bd:37:48:4c:8b:
                    f3:f9:77:86:c4:88:cd:1a:84:02:48:88:b5:af:c3:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:54:A9:D1:A3:7B:62:FE:B7:17:1C:84:E9:15:C9:6D:D5:B3:79:9E
            X509v3 Authority Key Identifier:
                keyid:9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:6e:92:16:e2:c0:b9:2d:96:61:a6:fc:0e:66:8d:da:07:10:
         b7:aa:61:43:e6:03:da:ea:be:aa:aa:18:e5:4e:5e:51:60:39:
         c5:6c:7f:ee:a0:5b:b8:aa:88:c3:c3:7d:94:4a:02:8b:bf:c3:
         d1:d3:db:90:ba:3a:86:23:f8:33:b1:88:3b:c0:7f:d6:14:93:
         c4:35:3b:d2:11:fc:4f:c1:6c:c5:6f:91:e7:80:fc:ae:b4:e4:
         69:bf:b2:c8:62:1c:24:08:e2:13:18:92:c2:69:7d:11:25:ca:
         a8:67:d5:ab:74:b6:f6:e3:2e:96:ae:9c:2f:de:1d:6f:f8:c7:
         80:f7:7d:a8:e9:af:70:ec:7e:13:2c:ef:a5:bb:bc:05:2b:04:
         e9:e5:ee:a5:39:2e:0e:bc:1f:44:79:10:fe:38:a9:d4:c3:8e:
         ea:5e:c3:a8:f7:0d:59:22:a7:c4:3c:a2:08:2f:95:e9:6c:a5:
         99:69:81:b0:71:66:ad:4c:4b:72:7f:3b:7e:82:e4:6f:e9:65:
         98:2d:55:32:46:03:03:f0:23:9e:c2:00:65:68:ea:04:88:9b:
         0c:78:b5:e2:fb:56:c2:61:f0:88:aa:f2:ba:db:10:61:bf:23:
         e1:90:d2:fd:8b:0a:df:66:73:fa:91:83:7d:a0:f3:42:8c:a5:
         6c:b5:97:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----