Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/1/6D599374C17F76D831D6256D6C52867DD4074032.mft
File:                     6D599374C17F76D831D6256D6C52867DD4074032.mft (raw, json)
Hash identifier:          CBPA0kMUDTdthtP3qba+KcBnY7BSA1AS1qBQ6uavz8w=
Subject key identifier:   1A:B3:14:CF:62:24:59:E3:2F:A2:D1:A9:22:02:87:AF:BE:43:89:B9
Authority key identifier: 6D:59:93:74:C1:7F:76:D8:31:D6:25:6D:6C:52:86:7D:D4:07:40:32
Certificate issuer:       /CN=6D599374C17F76D831D6256D6C52867DD4074032
Certificate serial:       325C370A7B0FFD7534E0113DBC01517DFE4111DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D599374C17F76D831D6256D6C52867DD4074032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/1/6D599374C17F76D831D6256D6C52867DD4074032.mft
Manifest number:          01B7
Signing time:             Thu 27 Feb 2025 07:12:11 +0000
Manifest this update:     Thu 27 Feb 2025 07:07:11 +0000
Manifest next update:     Fri 28 Feb 2025 09:39:11 +0000
Files and hashes:         1: 323830343a336339343a3a2f33322d3336203d3e20323636323232.roa (hash: tasuVjaqrA0lkEqcGzOaJDVQY1oEzE6NR1fZP0w0CCo=)
                          2: 3139322e3134302e32342e302f32322d3234203d3e20323636323232.roa (hash: VzdvE4ATLsWl3V//TATvxgBP5G62W18h3Dpy3J/KxZM=)
                          3: 6D599374C17F76D831D6256D6C52867DD4074032.crl (hash: XasmMhY8iyaVpm+nE4GUMcDo9v10WTLl715Shg+QBIw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5c:37:0a:7b:0f:fd:75:34:e0:11:3d:bc:01:51:7d:fe:41:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D599374C17F76D831D6256D6C52867DD4074032
        Validity
            Not Before: Feb 27 07:07:11 2025 GMT
            Not After : Feb 28 09:39:11 2025 GMT
        Subject: CN=1AB314CF622459E32FA2D1A9220287AFBE4389B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:11:8b:36:5a:35:b8:d7:a4:ed:7c:5c:71:
                    e7:ab:50:e4:03:b5:87:a9:25:b9:1d:eb:4f:ab:24:
                    1c:6f:5e:06:3d:4f:9e:cd:bf:e6:0c:e2:55:15:8f:
                    2a:9b:d3:21:de:63:30:25:1c:da:6b:c9:cf:a3:f3:
                    3d:42:5e:0a:92:76:2f:44:d4:fb:49:4c:19:94:c0:
                    19:00:78:d6:df:64:77:4e:90:0e:b8:68:f8:98:43:
                    fe:1a:a0:d0:12:ec:22:43:37:1a:dd:e8:ba:04:42:
                    43:8c:cd:3d:1a:00:0e:e7:fb:c1:13:ff:ab:42:2c:
                    10:81:48:43:ec:1c:c9:a1:44:fe:72:90:39:e8:a9:
                    83:94:33:1a:1d:5d:fc:58:21:06:38:c4:26:ca:c4:
                    45:4d:66:18:b4:24:36:b1:35:bb:f5:75:1b:e8:54:
                    f6:2f:a8:57:cd:f0:4b:9c:d6:a5:eb:ce:46:5e:c6:
                    2c:5a:fb:b7:d9:f7:fd:4f:75:e8:cc:ef:1d:bc:da:
                    00:f1:98:47:35:24:98:36:ed:5e:b4:24:0a:db:67:
                    78:32:94:79:0c:b7:9e:a1:a5:46:11:ef:50:cc:bf:
                    9b:cc:99:b0:3b:87:67:d7:9b:b0:43:52:e6:b8:4e:
                    31:e9:74:17:d9:7f:23:54:09:8a:ad:55:98:91:19:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B3:14:CF:62:24:59:E3:2F:A2:D1:A9:22:02:87:AF:BE:43:89:B9
            X509v3 Authority Key Identifier:
                keyid:6D:59:93:74:C1:7F:76:D8:31:D6:25:6D:6C:52:86:7D:D4:07:40:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/1/6D599374C17F76D831D6256D6C52867DD4074032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D599374C17F76D831D6256D6C52867DD4074032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/1/6D599374C17F76D831D6256D6C52867DD4074032.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:16:a3:84:f1:7f:ed:44:6c:09:58:88:76:f7:1a:7c:66:26:
         5c:72:bb:65:ad:2b:26:61:40:da:b4:08:1d:aa:b0:db:47:8f:
         39:88:f2:3f:7f:7e:b4:b6:35:6d:ab:fd:de:30:df:43:94:d8:
         46:c2:c1:31:d2:58:40:61:41:b9:fe:c0:57:dd:10:6c:26:b1:
         f0:ce:a6:ff:e1:0f:3e:81:fb:ec:65:ed:9c:94:39:63:54:f4:
         a2:1c:8f:32:cc:e2:f5:0c:0b:36:c2:8f:38:37:df:f9:0e:02:
         ea:89:aa:8e:6a:24:6f:a2:e0:e1:53:90:de:90:2c:d4:59:e2:
         d5:9e:bb:f2:44:b0:e4:1f:6a:8f:87:0b:b4:ec:5a:17:e7:f9:
         bb:59:98:30:ef:3d:20:ff:a0:16:5e:25:17:b4:32:85:cd:78:
         f3:d8:24:e3:7f:3a:4a:18:92:47:41:dd:39:05:0b:7a:ce:59:
         6b:fd:99:fa:02:15:30:70:c7:d6:55:7a:3c:d3:86:f9:85:4a:
         d1:aa:81:c5:7b:4f:e2:0a:0f:a3:5c:5c:2a:74:08:63:54:7c:
         5d:d2:7d:15:cf:49:34:b6:05:95:31:1c:e5:42:9f:52:91:ed:
         56:a3:90:93:36:56:79:39:27:d0:71:b2:66:49:57:df:73:39:
         59:46:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----