Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.mft
File:                     DF6BC07304FD9D446EC22F36A506BE9E3428FE34.mft (raw, json)
Hash identifier:          vslbdujt2H0NXabAXqRrN+BW+eUnzEDQXfgQv/gLBGA=
Subject key identifier:   B4:33:F1:F1:62:1B:98:DC:D1:40:86:5C:D2:7E:5D:6A:CA:C3:3E:05
Authority key identifier: DF:6B:C0:73:04:FD:9D:44:6E:C2:2F:36:A5:06:BE:9E:34:28:FE:34
Certificate issuer:       /CN=DF6BC07304FD9D446EC22F36A506BE9E3428FE34
Certificate serial:       6E1C982F7D599E3A96BF4FA177670C1C9CB6959F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.mft
Manifest number:          07
Signing time:             Mon 17 Mar 2025 13:36:26 +0000
Manifest this update:     Mon 17 Mar 2025 13:31:26 +0000
Manifest next update:     Tue 18 Mar 2025 17:26:26 +0000
Files and hashes:         1: DF6BC07304FD9D446EC22F36A506BE9E3428FE34.crl (hash: GHkcIQKLa0d/d+8UasznEQkGO+e1w5X3h17ThKk2s1Y=)
                          2: 3230312e3232312e3131362e302f32322d3234203d3e20323731323934.roa (hash: /8M1k5zcibem6NFP+raTgrAhchxB59yTdiiNsJ+1gAE=)
                          3: 323830343a373934303a3a2f33322d3334203d3e20323731323934.roa (hash: CFe/igOFajNxwWRKoeL4NbqZ9VhiFbyyVMZsF0P2XR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1c:98:2f:7d:59:9e:3a:96:bf:4f:a1:77:67:0c:1c:9c:b6:95:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF6BC07304FD9D446EC22F36A506BE9E3428FE34
        Validity
            Not Before: Mar 17 13:31:26 2025 GMT
            Not After : Mar 18 17:26:26 2025 GMT
        Subject: CN=B433F1F1621B98DCD140865CD27E5D6ACAC33E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:2f:fb:d6:58:8e:29:ba:a1:ae:75:56:23:
                    c0:a6:e4:d4:69:49:23:02:89:52:6d:0a:91:7d:28:
                    d4:dc:ce:26:8f:4f:88:87:75:95:65:b8:39:e3:38:
                    b2:2e:11:58:b2:f1:f1:6b:c0:70:71:8e:6c:72:76:
                    00:9a:b8:78:08:da:08:3b:02:0a:bc:cd:dc:ef:6b:
                    9b:85:a2:65:b9:9f:88:b7:87:2c:e2:e4:32:a4:6e:
                    8f:be:5a:ab:d8:43:15:30:e2:0f:03:b7:48:71:3f:
                    29:09:b9:42:28:50:79:68:bf:57:43:58:1d:5f:1f:
                    d7:bb:b1:18:d6:8b:4e:94:a0:6e:32:ad:f2:08:b4:
                    3a:32:e4:53:45:44:f1:9b:0d:d7:66:f9:d5:82:85:
                    30:43:34:9b:14:fd:00:b2:85:b5:d9:e1:7f:a8:cb:
                    8a:ac:e8:8f:4b:ee:d7:55:72:9b:cd:c8:32:83:37:
                    1c:a0:00:c4:29:26:16:10:e1:80:97:93:63:0e:99:
                    5d:e2:02:55:20:80:44:a0:99:e9:24:2f:f0:65:d1:
                    52:a4:4c:cf:50:91:dc:0a:28:02:20:f4:a6:23:ac:
                    4c:fe:74:88:50:b3:6d:80:cb:a6:6a:b4:29:e7:8a:
                    22:b7:d7:03:80:12:07:4e:ba:b4:b1:2d:2c:21:3a:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:33:F1:F1:62:1B:98:DC:D1:40:86:5C:D2:7E:5D:6A:CA:C3:3E:05
            X509v3 Authority Key Identifier:
                keyid:DF:6B:C0:73:04:FD:9D:44:6E:C2:2F:36:A5:06:BE:9E:34:28:FE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DF6BC07304FD9D446EC22F36A506BE9E3428FE34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c0:db:4a:85:56:a3:9b:15:e7:0d:ab:74:1b:c2:04:12:c6:
         b9:4c:7c:a3:fc:f3:e6:c5:ed:d2:69:14:51:fa:be:51:48:b9:
         7a:af:25:9b:b7:fc:dd:cb:60:a7:d9:97:23:a1:2a:7b:47:71:
         36:6e:40:9e:80:a3:96:22:92:46:ca:df:3f:30:19:8e:68:1e:
         4f:cd:15:d0:84:5d:51:47:81:96:16:3f:91:90:9d:60:9b:bf:
         62:14:44:86:8f:0b:91:6f:33:73:ce:fc:d3:42:89:15:cd:7e:
         68:c5:d3:81:b1:09:35:42:e6:d9:64:e8:7d:d5:97:bf:45:c5:
         28:21:cb:50:d6:4a:c8:e5:47:99:a8:e5:cc:00:d0:ec:05:2b:
         d6:6f:15:da:b5:f2:d1:c0:99:e2:00:26:bb:3c:ed:0e:27:14:
         f1:20:6b:92:0d:b8:88:d5:60:92:87:2a:2a:cf:59:35:3e:1c:
         ee:f7:df:4e:5d:49:6e:22:8c:bd:c2:17:63:ad:37:fe:02:b1:
         36:33:ee:12:23:3b:86:ef:a9:25:28:da:a3:dc:a2:16:de:43:
         fe:c9:cc:f6:0d:fe:36:04:03:4e:fb:44:97:8a:e5:4b:ad:70:
         7f:db:27:33:7b:10:cc:94:20:1b:ff:c1:dd:c5:3b:1c:30:88:
         b1:d7:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----