Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.mft
File:                     D10EF815EAD486C0A38260587180EFB1D6A0DE5B.mft (raw, json)
Hash identifier:          IT12/a9Py5ExaOaL6ExzFfD4YmTlj77fh9SrYLey0t0=
Subject key identifier:   AC:D4:90:52:CA:A5:1D:DF:E2:2E:F6:66:8A:D0:57:05:81:F0:3D:6A
Authority key identifier: D1:0E:F8:15:EA:D4:86:C0:A3:82:60:58:71:80:EF:B1:D6:A0:DE:5B
Certificate issuer:       /CN=D10EF815EAD486C0A38260587180EFB1D6A0DE5B
Certificate serial:       61BB6ACAA7B8BC51E92826F014AE697FD7948434
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.mft
Manifest number:          03
Signing time:             Mon 10 Mar 2025 16:38:35 +0000
Manifest this update:     Mon 10 Mar 2025 16:33:35 +0000
Manifest next update:     Tue 11 Mar 2025 18:19:35 +0000
Files and hashes:         1: 34352e3137362e34302e302f32322d3234203d3e20323638393239.roa (hash: n2R+xcbEcD1kIpE2BcPeYs5P8+Q7nO0FznWMznzcvLc=)
                          2: D10EF815EAD486C0A38260587180EFB1D6A0DE5B.crl (hash: HalXxQPMdPCpV6WtlFd86r0sRp1oVqyAh9nlpJ0Ko5k=)
                          3: 323830343a356363343a3a2f33322d3336203d3e20323638393239.roa (hash: slnPY7Wmum+t5hFpsSadiEDmMHl2WuSvJsS52edlZc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bb:6a:ca:a7:b8:bc:51:e9:28:26:f0:14:ae:69:7f:d7:94:84:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10EF815EAD486C0A38260587180EFB1D6A0DE5B
        Validity
            Not Before: Mar 10 16:33:35 2025 GMT
            Not After : Mar 11 18:19:35 2025 GMT
        Subject: CN=ACD49052CAA51DDFE22EF6668AD0570581F03D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:d0:3f:48:ef:58:50:cf:54:a3:10:7d:47:
                    99:22:56:12:2e:17:11:c3:c1:24:eb:c5:98:2d:07:
                    a2:d8:1a:a4:d2:48:45:92:24:e8:d1:a2:d3:54:eb:
                    73:d6:1f:b1:55:63:c8:10:4a:27:e9:22:d6:c6:a7:
                    a3:55:4d:f1:c6:f4:78:b2:1c:68:d9:1b:27:38:6d:
                    d9:0e:bb:cf:95:42:99:b3:0e:1c:c6:c6:6f:2f:4e:
                    7d:4d:5e:62:ca:d1:05:78:24:6a:32:08:07:82:59:
                    9f:30:d3:55:3d:e3:03:78:b2:8f:d9:27:37:0d:21:
                    7b:84:39:2e:c0:e8:a9:bd:10:e9:8c:6d:ac:49:6d:
                    eb:de:62:2b:28:75:f7:e4:49:54:97:4c:79:ce:7f:
                    67:f7:67:c4:1b:05:63:03:86:4b:7a:35:dd:50:d2:
                    e0:44:32:80:56:dc:47:7d:9c:b6:e3:f9:19:16:93:
                    85:bb:40:22:6e:59:ae:63:e3:48:3a:fa:67:f2:88:
                    9f:af:85:d3:3b:81:b2:4e:b2:3f:da:bb:cb:3b:fd:
                    42:dc:e4:be:00:56:46:1b:56:af:1f:a4:6c:4e:40:
                    44:c2:70:5e:ea:2b:c5:4a:e0:8b:d7:f3:ea:22:dc:
                    d3:c7:72:9b:fc:98:66:75:36:e5:7f:af:fd:ca:3f:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D4:90:52:CA:A5:1D:DF:E2:2E:F6:66:8A:D0:57:05:81:F0:3D:6A
            X509v3 Authority Key Identifier:
                keyid:D1:0E:F8:15:EA:D4:86:C0:A3:82:60:58:71:80:EF:B1:D6:A0:DE:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:f2:5a:56:b4:19:6a:94:3b:31:70:59:6b:c7:77:7a:50:
         cf:62:13:e4:32:4c:48:17:36:d0:73:3e:29:73:58:31:84:5b:
         b4:b7:dc:b1:1a:1f:b7:e0:c6:b2:10:0b:67:05:f8:16:03:1b:
         70:98:1a:8c:93:94:04:90:dc:e4:e0:a1:2b:7b:15:d6:96:d3:
         f8:df:3c:bf:d5:a1:c4:e0:ee:a1:44:48:95:96:5c:54:fd:46:
         f3:a2:0f:95:12:6a:7e:24:f0:62:e6:d3:99:8e:7c:24:f5:3c:
         da:16:18:5c:00:da:f1:24:bd:ae:32:f0:04:eb:ab:75:98:45:
         d0:de:00:8a:07:96:bb:68:41:90:b5:8e:82:e9:c6:be:ff:0c:
         a6:1e:33:18:34:03:ef:b2:bc:65:d1:d5:47:ae:09:8b:da:f2:
         56:38:f8:c9:ee:37:85:b0:f0:d1:fa:31:ed:21:09:b0:21:ac:
         96:fc:eb:6c:2d:a3:56:3f:63:48:71:09:68:d7:8d:ec:a3:20:
         65:21:12:da:3e:c8:66:af:27:78:08:7d:56:8b:f5:eb:9f:43:
         1d:78:af:a7:5e:82:19:52:01:dd:63:16:8d:9e:36:60:34:ad:
         1d:04:5c:42:1a:79:4a:d8:a1:fc:8f:a8:dc:c6:1d:7b:31:c9:
         70:3b:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----