Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft
File:                     A238987D0DCDD2E9A9A971D52BB6651198981252.mft (raw, json)
Hash identifier:          lawrLQEbhHLzHXcu12vaBFguOPfO99yRA5yg9yVpaDs=
Subject key identifier:   32:EA:22:AA:EE:18:EB:7B:CE:99:BB:FF:25:8E:48:72:22:3C:C5:55
Authority key identifier: A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52
Certificate issuer:       /CN=A238987D0DCDD2E9A9A971D52BB6651198981252
Certificate serial:       43F44D07F68F60DEC043977D829E5DDB1FAE40B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft
Manifest number:          76
Signing time:             Tue 14 Oct 2025 11:20:10 +0000
Manifest this update:     Tue 14 Oct 2025 11:15:10 +0000
Manifest next update:     Wed 15 Oct 2025 13:31:10 +0000
Files and hashes:         1: 323830343a343739383a3a2f33322d313238203d3e20323637303634.roa (hash: /DFqZtK8pcbJpNfMcmW86/HL6yQhNfKgR1+Vx7V3qvk=)
                          2: 34352e3232382e3132382e302f32322d3332203d3e20323637303634.roa (hash: 50aTTpLDa7imopjFF42vqESbqb0F96QgB5qVPAU09a0=)
                          3: A238987D0DCDD2E9A9A971D52BB6651198981252.crl (hash: q0Ksvwaqz2OhQY89dJ1FodncnEjxO+lV5oEbtQFjjak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f4:4d:07:f6:8f:60:de:c0:43:97:7d:82:9e:5d:db:1f:ae:40:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A238987D0DCDD2E9A9A971D52BB6651198981252
        Validity
            Not Before: Oct 14 11:15:10 2025 GMT
            Not After : Oct 15 13:31:10 2025 GMT
        Subject: CN=32EA22AAEE18EB7BCE99BBFF258E4872223CC555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:d3:d0:11:b3:2b:59:e4:25:32:03:b8:f1:
                    7a:91:5b:67:51:29:a2:93:be:72:51:91:c0:e8:91:
                    48:55:0b:14:7c:e4:24:d1:f3:51:b7:c2:01:56:b3:
                    33:4a:64:b2:e1:85:c1:d3:05:7a:a5:d5:85:77:ef:
                    75:bd:bc:3c:cc:b8:56:7a:47:d4:92:28:5a:6d:75:
                    d7:c3:31:18:b9:50:81:a9:76:c0:30:ab:97:22:0f:
                    b5:31:19:68:e7:42:82:8b:86:28:ba:c7:10:89:4e:
                    ad:2b:6c:c0:84:68:bc:88:61:e0:9a:46:49:6a:fc:
                    bb:ea:02:33:8b:17:0b:e6:54:c5:71:ca:98:f0:bc:
                    2c:2f:44:a4:8a:6f:ce:fa:71:f2:27:33:d5:6b:7e:
                    78:61:09:30:4b:e4:10:3f:8f:07:65:85:fb:10:3b:
                    3d:93:0c:94:a9:7e:79:76:d9:10:19:74:7d:dd:0d:
                    1b:e6:b6:2f:85:b8:d1:2e:20:b6:2a:8c:d4:09:b0:
                    ed:a7:7b:c0:79:63:40:4f:62:fe:28:07:d4:f8:bd:
                    6d:ff:55:5e:ef:13:8e:3b:08:a9:16:61:8c:a4:09:
                    07:00:2d:6d:fb:44:d1:71:ef:ba:ae:c7:ff:ef:12:
                    cf:5d:d9:81:19:35:70:e4:c9:27:f7:d2:e3:50:2e:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EA:22:AA:EE:18:EB:7B:CE:99:BB:FF:25:8E:48:72:22:3C:C5:55
            X509v3 Authority Key Identifier:
                keyid:A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:29:11:61:03:8b:63:fb:a1:80:d3:b5:16:8f:30:59:3c:eb:
         53:f7:c8:1c:5b:3a:34:55:4e:cf:82:6b:3d:f3:0f:de:54:13:
         c8:11:0b:0d:d1:95:27:44:71:58:d4:75:d9:71:1a:b8:c8:f8:
         55:71:0a:39:75:c4:ff:da:5f:22:66:f2:92:b1:5a:5a:df:27:
         24:47:0c:a9:73:f0:56:ef:ae:ba:04:b3:ec:87:34:aa:69:5c:
         21:23:63:5e:af:29:37:68:43:7e:33:3e:47:af:1a:b5:19:45:
         2f:fa:62:c9:7f:6d:c7:d5:80:ae:ac:64:59:e0:77:96:1c:a1:
         3a:32:d9:78:20:00:46:89:4d:cf:28:70:6c:bc:49:34:3d:62:
         80:2c:ad:f1:6c:8d:01:1d:e0:c1:d8:1f:1e:1d:ea:92:e3:d7:
         24:dd:39:1b:89:9b:28:44:ad:c9:01:e5:c3:86:9a:53:e2:fb:
         bc:2d:fb:ca:11:96:8d:ca:e2:c3:b7:15:2a:cd:72:a9:30:08:
         cb:dd:8c:b9:62:a4:87:e7:05:b0:d0:d1:b6:3f:b3:63:f0:a1:
         83:56:98:44:53:17:56:ea:16:2b:f9:b5:31:94:04:2e:6d:34:
         b4:26:df:59:dd:0b:cc:f7:46:8b:28:1c:cd:c6:c6:64:cb:ed:
         63:82:ae:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----