Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.mft
File:                     45A824BE3AB3681275CCCDCBCFDBD96A825082AB.mft (raw, json)
Hash identifier:          LoPYfdjadg2T1wpdjYGt8LBqy8p7o+nbdbhQmEIhPxw=
Subject key identifier:   F8:25:62:AE:45:FC:99:0A:D6:14:AF:AA:A6:F2:53:74:CA:8C:97:54
Authority key identifier: 45:A8:24:BE:3A:B3:68:12:75:CC:CD:CB:CF:DB:D9:6A:82:50:82:AB
Certificate issuer:       /CN=45A824BE3AB3681275CCCDCBCFDBD96A825082AB
Certificate serial:       2CB8FB293E82630F17EEE0B85F0B0121B0A0ECE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.mft
Manifest number:          01D9
Signing time:             Tue 25 Mar 2025 16:08:07 +0000
Manifest this update:     Tue 25 Mar 2025 16:03:07 +0000
Manifest next update:     Wed 26 Mar 2025 16:46:07 +0000
Files and hashes:         1: 3136382e3138312e3234322e302f32342d3234203d3e20323635333538.roa (hash: V6zc4IyqNwR6Trs88kpcgcg8wzoI0FtlWCIZMoI5Ot8=)
                          2: 45A824BE3AB3681275CCCDCBCFDBD96A825082AB.crl (hash: 2a2UYRNcD0n0Lq/f9ELIMfspKSvPB6ktOYYZmxnzjK4=)
                          3: 3136382e3138312e3234312e302f32342d3234203d3e20323635333538.roa (hash: BgAgFYOp2iYt62WEaHNNK0R/3H0Kk2XOXGHbR+bf8M4=)
                          4: 3136382e3138312e3234302e302f32332d3233203d3e20323635333538.roa (hash: iTtzmJ7hP4F7FUGWGA1I7YJecH2QR1Ofe6nxMZbEtEE=)
                          5: 3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa (hash: sBptWeoi5ewB92yp0xpmrQuBFKAAXhB8b5k2PrHE4OE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b8:fb:29:3e:82:63:0f:17:ee:e0:b8:5f:0b:01:21:b0:a0:ec:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A824BE3AB3681275CCCDCBCFDBD96A825082AB
        Validity
            Not Before: Mar 25 16:03:07 2025 GMT
            Not After : Mar 26 16:46:07 2025 GMT
        Subject: CN=F82562AE45FC990AD614AFAAA6F25374CA8C9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:15:2f:09:9b:85:59:56:a6:6f:ed:64:cf:63:
                    ec:81:be:2f:9d:86:6d:29:ce:c1:cd:3a:b2:e7:2b:
                    5b:00:50:02:69:bf:a0:a7:3c:15:fa:95:22:67:60:
                    fe:54:cb:c7:be:d6:4e:3b:89:31:0e:01:4d:7f:50:
                    a8:ee:4f:21:3f:a0:ef:17:7a:da:cc:85:3e:0b:ab:
                    a4:f6:5a:40:fe:8a:2b:10:bd:60:90:78:23:0f:c5:
                    7a:f2:c6:64:d3:e3:bb:d4:7c:1b:7f:25:da:1a:30:
                    0a:0d:d0:93:93:7a:80:87:9d:4a:44:2c:8d:f3:ea:
                    52:63:d0:a2:58:43:b1:b4:7b:af:64:4f:6e:ca:b9:
                    1c:69:8a:3f:c8:6e:93:77:a1:c5:a7:e3:8d:2a:67:
                    0f:af:64:c2:1c:1d:60:20:ed:01:3e:d8:68:6f:48:
                    d5:d7:04:e3:01:f1:f4:f3:cc:2d:f9:ba:da:41:45:
                    1c:cf:7d:e4:ec:cc:19:02:a8:5f:7f:c8:9c:60:a0:
                    94:69:be:d0:fa:58:b7:bf:d7:56:dd:a2:bf:dc:d1:
                    52:83:b8:d0:13:5b:d5:4c:b5:6e:41:ec:56:0e:c1:
                    18:3a:0e:c6:e5:30:88:b4:e2:3a:3b:97:07:a5:35:
                    54:8b:04:74:1e:95:b5:5f:a2:08:79:7d:c9:de:9c:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:25:62:AE:45:FC:99:0A:D6:14:AF:AA:A6:F2:53:74:CA:8C:97:54
            X509v3 Authority Key Identifier:
                keyid:45:A8:24:BE:3A:B3:68:12:75:CC:CD:CB:CF:DB:D9:6A:82:50:82:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:35:1a:21:69:6e:64:d0:13:c3:f5:56:c0:bd:da:71:33:
         5b:42:df:8b:1a:e1:a4:59:29:55:44:6b:97:94:c2:ec:c8:d1:
         2e:92:77:16:fa:a6:09:91:b5:6d:f7:de:49:a4:61:6d:d9:86:
         8f:a0:8f:d6:cb:fd:d6:b6:24:24:1e:99:7d:53:81:5e:06:d5:
         8e:23:23:21:8b:bb:6f:f4:6f:30:84:29:21:b1:7e:c2:37:0d:
         0c:58:47:60:90:91:37:a1:c8:40:26:f2:b6:9d:77:7b:99:ff:
         b7:dd:07:2b:8d:8b:b3:8e:39:31:81:49:ed:e9:fa:26:61:f0:
         a3:ac:c9:cd:96:62:7b:e9:79:23:f6:c4:79:d0:86:5f:83:7a:
         a2:56:72:22:bf:8f:91:90:51:16:c9:7c:bf:2c:ce:60:5d:96:
         27:19:88:6e:bd:71:19:40:8e:2e:71:69:21:cc:35:89:d6:e3:
         07:5c:3e:7e:a2:cb:76:a5:4c:31:63:41:12:8e:58:9c:60:ae:
         4f:29:e0:fa:6f:f9:91:98:4f:20:61:31:0a:da:b9:bb:ef:94:
         75:f4:a3:69:86:6b:b9:c6:e8:c8:fc:12:a5:43:11:26:4c:30:
         23:04:2b:4b:19:ed:84:58:e9:e1:c1:a9:fa:cb:c0:50:f0:49:
         47:8a:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----