Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/B6D44620345E29DB62C28AADE7580BEE6B5ED19C.mft
File:                     B6D44620345E29DB62C28AADE7580BEE6B5ED19C.mft (raw, json)
Hash identifier:          Male1DRRWVUCic5riOAP12GeLeIFrzBHPjryS0Scx7I=
Subject key identifier:   59:FB:9E:4A:DD:93:32:72:8F:DF:1E:B3:9E:70:17:36:01:1C:35:09
Authority key identifier: B6:D4:46:20:34:5E:29:DB:62:C2:8A:AD:E7:58:0B:EE:6B:5E:D1:9C
Certificate issuer:       /CN=B6D44620345E29DB62C28AADE7580BEE6B5ED19C
Certificate serial:       7158986D445A3EDB3E75BC84ACDDB02B47D351C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6D44620345E29DB62C28AADE7580BEE6B5ED19C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/B6D44620345E29DB62C28AADE7580BEE6B5ED19C.mft
Manifest number:          41
Signing time:             Mon 14 Apr 2025 05:35:47 +0000
Manifest this update:     Mon 14 Apr 2025 05:30:47 +0000
Manifest next update:     Tue 15 Apr 2025 05:40:47 +0000
Files and hashes:         1: 34352e3138392e3136332e302f32342d3234203d3e20323639373234.roa (hash: zBqvhGy2dTAjHBnX7RUN3EvvgkdZvGlx/2uiTB98N04=)
                          2: B6D44620345E29DB62C28AADE7580BEE6B5ED19C.crl (hash: d3rKr4q1tzaXOViMkCxCSfVGiMapJvvx4GFSd3rGUq0=)
                          3: 34352e3138392e3136312e302f32342d3234203d3e20323639373034.roa (hash: tl/bqQKP3JRZF4wpYHS79E869A7I+ZBNSLTi890kK1M=)
                          4: 34352e3138392e3136322e302f32342d3234203d3e20323639373234.roa (hash: VLcWXQMYGvClclgqMTmwKOuE9Cskv/3Pa+sMKwFC2cs=)
                          5: 34352e3138392e3136302e302f32342d3234203d3e20323639373234.roa (hash: CVRG9tzVyiZoize7drJuuV8Webo77CVF7U/Ig0WrsFo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:58:98:6d:44:5a:3e:db:3e:75:bc:84:ac:dd:b0:2b:47:d3:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D44620345E29DB62C28AADE7580BEE6B5ED19C
        Validity
            Not Before: Apr 14 05:30:47 2025 GMT
            Not After : Apr 15 05:40:47 2025 GMT
        Subject: CN=59FB9E4ADD9332728FDF1EB39E701736011C3509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:40:8f:bf:e0:64:b6:57:44:b7:48:18:e8:
                    57:f6:15:7b:10:b5:bd:b4:f6:73:51:50:be:62:fa:
                    46:1d:a4:f5:7e:65:bb:da:89:83:ad:e8:fe:aa:44:
                    d7:d9:20:fb:27:28:2c:e1:0b:8e:ef:ff:20:ce:cf:
                    de:ed:8e:25:35:70:a7:75:89:a3:01:7d:c7:63:fa:
                    d1:11:4f:33:5c:37:c2:bb:60:af:0e:26:00:10:ff:
                    a9:90:c3:57:fe:26:c9:ff:37:07:35:9f:b6:7f:6a:
                    e9:0d:55:f4:ce:18:ff:fd:5f:d9:5d:ed:7d:03:96:
                    60:ab:2d:57:28:d0:2e:40:25:fb:89:f8:63:82:78:
                    fa:95:ed:a8:03:fb:8c:8e:3f:4b:cf:08:c3:dc:9d:
                    1e:73:ee:95:51:7d:39:65:82:be:e1:a7:1d:0a:50:
                    b8:da:96:19:4b:de:54:48:51:9a:68:0a:b0:2e:cb:
                    7f:71:5e:95:e4:86:4e:31:26:9c:5d:c7:36:82:85:
                    af:8f:ce:96:81:c7:81:35:95:d1:e4:dd:78:d1:bd:
                    82:0d:ff:ff:71:8a:40:00:07:bd:ad:b5:70:c0:e4:
                    d9:73:52:4c:1b:df:db:d6:38:3d:21:eb:25:d7:ff:
                    d0:a9:26:97:3b:cf:7e:5a:43:d5:47:b5:af:48:7c:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:9E:4A:DD:93:32:72:8F:DF:1E:B3:9E:70:17:36:01:1C:35:09
            X509v3 Authority Key Identifier:
                keyid:B6:D4:46:20:34:5E:29:DB:62:C2:8A:AD:E7:58:0B:EE:6B:5E:D1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/B6D44620345E29DB62C28AADE7580BEE6B5ED19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6D44620345E29DB62C28AADE7580BEE6B5ED19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/B6D44620345E29DB62C28AADE7580BEE6B5ED19C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:bc:8b:7d:af:fa:74:7d:24:52:23:cb:32:dc:ea:2e:e0:
         5f:27:22:3d:bf:c9:20:b7:b0:99:40:40:fb:25:b2:b6:4a:32:
         b2:e4:35:10:e9:ff:f7:a6:b1:a7:d1:45:d8:54:05:58:fb:76:
         b6:36:c0:ee:b7:3b:3d:dc:1f:61:50:fe:2f:88:cd:e1:66:e1:
         fe:fc:73:c7:b7:d2:27:a7:6c:8b:76:03:b8:f5:d3:d3:a4:3c:
         6a:0e:30:71:ee:fa:f9:2f:e8:94:8d:f2:b7:17:50:27:6e:42:
         7a:c6:0f:f4:92:45:f8:cd:d9:40:79:1a:32:2f:a0:f7:b7:1a:
         2a:ea:9c:4c:28:9e:d0:b6:1c:68:1a:fa:32:01:86:96:89:3a:
         0c:02:bd:ed:4c:91:fd:3c:f6:17:83:0a:9c:08:db:11:18:2c:
         1b:08:b8:d8:8d:9e:1a:fc:bc:b8:80:d0:41:b4:0b:5a:c1:a3:
         44:be:d3:54:92:90:6f:29:ff:14:c4:b6:e6:d3:de:2a:ed:b1:
         1a:91:2d:0a:e5:10:c6:5c:e9:ad:23:55:ef:13:11:5d:f3:9c:
         b9:41:0a:d9:ce:66:4f:9e:d8:40:b6:d3:6a:7f:5e:ff:07:ce:
         74:df:5a:15:4a:b1:63:e5:a2:5c:b4:51:33:31:2c:1a:30:79:
         61:63:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----