Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.mft
File:                     7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.mft (raw, json)
Hash identifier:          sq5cXl2DI7vkoCM8oKVoxx8AoOIt/kWPCkcatVYnOLo=
Subject key identifier:   50:17:26:E2:CE:FF:66:AE:AC:73:78:14:88:F0:48:5F:EB:90:5B:CF
Authority key identifier: 76:06:BC:A6:1F:F8:15:F7:18:C8:3D:CE:1C:3F:8E:FA:EC:1D:F2:F1
Certificate issuer:       /CN=7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1
Certificate serial:       16BF39A1C038D068A6B66B7D8B469F9E54B63653
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.mft
Manifest number:          018F
Signing time:             Fri 31 Jan 2025 10:29:44 +0000
Manifest this update:     Fri 31 Jan 2025 10:24:44 +0000
Manifest next update:     Sat 01 Feb 2025 15:17:44 +0000
Files and hashes:         1: 7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.crl (hash: ixdbYy3VBhiSWKedXqwl/aJsk9M6QoqPPG86iFM2mC4=)
                          2: 323830343a373931303a3a2f33322d3438203d3e20323731323832.roa (hash: UmmdU9ADJQQGmzxJciAzdGXzSd/khI2bByBljC6hFss=)
                          3: 3137302e302e3135322e302f32332d3234203d3e20323731323832.roa (hash: i2jUUWWBBU6d/AHTmZ8Z1MCJ72h6hRZM5+eqcPVXywA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bf:39:a1:c0:38:d0:68:a6:b6:6b:7d:8b:46:9f:9e:54:b6:36:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1
        Validity
            Not Before: Jan 31 10:24:44 2025 GMT
            Not After : Feb  1 15:17:44 2025 GMT
        Subject: CN=501726E2CEFF66AEAC73781488F0485FEB905BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:e9:7c:a6:f0:35:cd:f3:0b:4d:b8:89:39:
                    9e:dc:72:6d:f9:67:fb:70:56:6d:47:59:b4:c9:54:
                    b1:8f:e8:a8:50:24:56:b3:24:26:c6:77:47:82:ad:
                    20:16:91:e7:8e:99:c0:e3:86:1c:c7:fe:9f:e4:04:
                    24:94:c1:83:4d:92:23:88:f2:7a:05:bc:72:61:c7:
                    76:52:ef:cc:7b:46:a9:0b:82:9a:2f:58:a3:ab:1c:
                    6c:a9:d1:ae:f5:d8:25:f6:cd:c2:2a:10:52:3d:4b:
                    4f:77:b9:6a:6a:1e:13:3f:7b:c2:cd:19:74:dc:30:
                    eb:b5:85:21:9d:b1:08:2e:7c:9e:b7:d2:82:58:f8:
                    96:7c:a7:0c:c5:54:e0:f9:bc:17:da:c2:3f:86:b2:
                    e5:c0:30:0c:39:a3:5f:c6:96:9a:5f:59:e8:7a:34:
                    98:62:74:9a:b3:f6:ee:4f:31:b8:d9:5f:18:2b:d8:
                    67:65:c5:ce:f1:ec:35:dd:df:93:e9:ca:f1:ed:3b:
                    e8:e7:fa:5c:01:ba:9f:31:ab:39:38:3e:fb:28:e3:
                    df:13:ff:37:6b:42:0c:29:21:7c:79:71:c8:eb:40:
                    f6:ad:f7:7d:1a:3a:84:28:48:ec:14:46:cd:83:37:
                    64:4a:c3:c2:3c:53:83:db:ff:f4:2c:0c:ac:c7:8c:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:17:26:E2:CE:FF:66:AE:AC:73:78:14:88:F0:48:5F:EB:90:5B:CF
            X509v3 Authority Key Identifier:
                keyid:76:06:BC:A6:1F:F8:15:F7:18:C8:3D:CE:1C:3F:8E:FA:EC:1D:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:46:c7:8c:b4:e2:d9:4c:87:df:a8:20:b3:14:59:c0:34:1f:
         8c:62:70:92:81:50:ef:6e:71:05:8c:23:e8:84:6d:b6:9f:7d:
         6e:7d:86:69:9d:9b:5a:09:b0:cf:54:7b:b6:cf:59:cf:5d:a0:
         2e:97:5a:0f:8c:6c:eb:ed:46:2d:2e:a4:b6:dd:da:c4:6c:0c:
         c9:c0:69:74:e4:fc:fa:e9:a4:cf:32:9c:54:c5:56:22:fe:e6:
         5b:dc:54:55:73:d7:a6:ad:d0:43:13:d1:5e:07:92:3b:8e:4f:
         62:33:8d:6e:2f:15:7a:7b:74:4b:b6:7f:c2:68:b1:d4:7b:c4:
         ef:0a:49:25:17:fd:33:41:23:a8:4f:dd:8a:c6:cd:d1:00:a8:
         d9:3d:69:85:d4:f0:49:a2:e6:46:61:8f:d0:62:6e:8d:fb:b7:
         52:6e:c5:7b:89:dd:0c:3c:4b:fd:fd:84:e5:7d:db:32:c9:7c:
         ab:67:fb:31:51:09:2b:79:95:5d:8a:56:78:10:f3:03:87:11:
         45:47:55:cb:ce:de:85:ff:6a:1a:93:f8:ed:c2:58:4e:f3:6f:
         25:03:f5:40:d0:60:f6:9b:a9:9e:da:6b:e6:ae:59:7d:28:5e:
         7e:f9:53:2f:44:85:d6:e7:f6:b8:97:bc:51:38:fa:5e:7d:7e:
         6f:95:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----