Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/78A4A875BA6BBD81EBF95316342157431299CE88.mft
File:                     78A4A875BA6BBD81EBF95316342157431299CE88.mft (raw, json)
Hash identifier:          Vkhx+9iegQCzP1RbCdTU51RZnyCJtlldmmqm2KhzMAs=
Subject key identifier:   16:75:3D:B1:C6:53:A4:70:8F:AC:B5:25:47:D9:BF:66:6F:F3:8C:B5
Authority key identifier: 78:A4:A8:75:BA:6B:BD:81:EB:F9:53:16:34:21:57:43:12:99:CE:88
Certificate issuer:       /CN=78A4A875BA6BBD81EBF95316342157431299CE88
Certificate serial:       3FF5276232C8B66A2932FCD0ECE6C11ECFC57F3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78A4A875BA6BBD81EBF95316342157431299CE88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/78A4A875BA6BBD81EBF95316342157431299CE88.mft
Manifest number:          5D
Signing time:             Sat 29 Mar 2025 10:46:52 +0000
Manifest this update:     Sat 29 Mar 2025 10:41:52 +0000
Manifest next update:     Sun 30 Mar 2025 10:47:52 +0000
Files and hashes:         1: 3137302e38332e302e302f32322d3234203d3e20323636343534.roa (hash: yQMxKAXhknB4SwnJgyNJeRMg62927dKXy6ysbI+DRCg=)
                          2: 3137392e302e3132342e302f32322d3234203d3e20323636343534.roa (hash: 5SPwCEprmyLNiSIGYlPpLgwkxnlXxcSdxfaD6SItz8o=)
                          3: 78A4A875BA6BBD81EBF95316342157431299CE88.crl (hash: rKcJ/krCrt6Xv97lyeP9UbyhvAKKxWPt/yZ9siGpBQ4=)
                          4: 323830343a333831343a3a2f33322d3438203d3e20323636343534.roa (hash: EFmp+lOVQAAnIg76PX4x7ns0j+QTWegQz1CC/6XoGq8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f5:27:62:32:c8:b6:6a:29:32:fc:d0:ec:e6:c1:1e:cf:c5:7f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A4A875BA6BBD81EBF95316342157431299CE88
        Validity
            Not Before: Mar 29 10:41:52 2025 GMT
            Not After : Mar 30 10:47:52 2025 GMT
        Subject: CN=16753DB1C653A4708FACB52547D9BF666FF38CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:a9:e7:92:a0:e2:b1:da:0f:69:3c:29:aa:
                    ff:0a:9c:83:7b:ba:10:12:6d:21:a2:4a:61:c8:bd:
                    39:65:c1:1b:db:e9:51:06:17:0c:f7:dc:7d:f9:d7:
                    33:80:19:a2:26:99:91:80:ab:8c:ed:c6:65:34:19:
                    29:eb:24:b4:16:e8:72:68:e0:d8:0d:16:9e:fc:f1:
                    76:17:2a:13:b4:68:e5:ef:f9:25:8c:0b:d6:3f:e6:
                    66:92:dc:9b:e0:2a:2f:9d:db:8f:34:da:eb:b5:01:
                    5e:3e:d1:43:0d:67:96:79:5e:a0:c6:48:70:07:a3:
                    d0:85:24:26:c9:9a:9a:b8:13:ca:5f:9d:84:f0:f8:
                    74:41:fc:92:b8:85:f3:ca:28:44:b8:60:bd:1c:5f:
                    60:af:83:be:fe:6c:1d:63:84:f9:a5:9d:cf:f1:48:
                    2d:7b:ee:b9:c3:0e:5e:87:fc:de:90:db:96:22:e8:
                    20:83:7c:da:e3:bb:ab:0e:21:25:5b:0c:b4:71:4e:
                    ab:c2:d5:aa:b8:42:f8:96:cd:ce:94:36:a4:02:0c:
                    76:9c:51:83:8c:ca:1c:73:09:db:54:13:8e:1c:bd:
                    c4:cb:70:bf:9f:30:8c:62:e8:87:d9:c4:c0:d7:7e:
                    90:4e:14:5a:1e:14:fb:77:e6:c6:de:d1:24:c0:55:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:75:3D:B1:C6:53:A4:70:8F:AC:B5:25:47:D9:BF:66:6F:F3:8C:B5
            X509v3 Authority Key Identifier:
                keyid:78:A4:A8:75:BA:6B:BD:81:EB:F9:53:16:34:21:57:43:12:99:CE:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/78A4A875BA6BBD81EBF95316342157431299CE88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78A4A875BA6BBD81EBF95316342157431299CE88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/78A4A875BA6BBD81EBF95316342157431299CE88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:bc:a9:df:a7:33:cb:2c:88:26:50:41:e4:55:86:fd:d7:
         32:db:4d:1f:31:b0:d2:eb:58:45:bd:9c:1b:16:d8:45:62:fa:
         4c:f5:60:13:ce:c2:04:96:c0:ba:40:29:cf:61:ae:b3:3f:eb:
         c6:1f:16:aa:bb:b8:bb:21:3e:9d:f0:b0:a8:6e:17:d0:b1:a1:
         0e:98:3a:3c:31:79:4c:c3:4b:e2:83:66:32:34:32:70:2b:96:
         ba:45:9e:57:b8:ad:6d:fa:18:c1:65:02:cb:89:f1:20:ca:db:
         8b:21:da:df:bc:5b:14:fd:ef:59:bb:b6:61:f0:8a:8e:92:a4:
         3d:a8:34:7e:2a:7b:9c:6f:68:0b:42:51:0d:bd:f1:8e:eb:2a:
         7d:e5:4e:2b:e3:46:9d:aa:8b:b4:4b:ab:b1:39:66:4f:97:1c:
         99:81:ac:f0:54:f9:7a:f6:7e:7a:4f:3e:4a:a7:fe:0e:69:c6:
         7c:d0:33:ca:e2:8d:cd:5f:0c:fb:94:d9:82:4e:0f:fe:60:90:
         30:17:9c:44:2e:bc:f4:11:71:36:a3:71:71:6a:a6:94:79:00:
         22:bb:26:89:42:41:ed:2b:65:58:97:d1:94:d6:54:03:47:c0:
         e1:e4:a4:b6:a6:d9:64:87:ca:80:4f:49:f9:2d:61:4d:8a:f5:
         39:d2:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----