Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.mft
File:                     77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.mft (raw, json)
Hash identifier:          kv0zlZf+aoA3Q6UbyPVb7WGuzsDwIr18bI3fUKb02oc=
Subject key identifier:   4D:F4:2B:56:22:00:55:9E:14:76:03:9D:E7:55:CB:B3:63:83:26:E9
Authority key identifier: 77:D3:C2:A5:52:96:FD:0E:A1:B2:84:CA:1D:F2:5C:9B:E9:92:3F:52
Certificate issuer:       /CN=77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52
Certificate serial:       4113C3C9B1C09DC2C99A9BF5D4231293AC4C883E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.mft
Manifest number:          ED
Signing time:             Fri 31 Jan 2025 12:32:18 +0000
Manifest this update:     Fri 31 Jan 2025 12:27:18 +0000
Manifest next update:     Sat 01 Feb 2025 13:25:18 +0000
Files and hashes:         1: 3133382e35392e3134342e302f32322d3234203d3e203533313037.roa (hash: 7b9d8p6kHjeG36YByErD0tarYRopCcg3+gkRMGY2PCQ=)
                          2: 77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.crl (hash: RDkJ4FkvUN5I/VeKycYCyN/oG3AtZ+v5Lf+oCsly9W4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:13:c3:c9:b1:c0:9d:c2:c9:9a:9b:f5:d4:23:12:93:ac:4c:88:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52
        Validity
            Not Before: Jan 31 12:27:18 2025 GMT
            Not After : Feb  1 13:25:18 2025 GMT
        Subject: CN=4DF42B562200559E1476039DE755CBB3638326E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:f0:97:78:6c:17:e1:00:13:25:9b:9c:67:
                    33:c6:47:34:6f:58:7e:14:99:6c:99:bd:8b:9b:36:
                    8e:22:05:e5:df:6a:94:d9:e9:96:db:ff:db:74:a8:
                    dd:33:7c:5d:35:81:8f:85:c6:23:9b:83:cb:17:ee:
                    a2:f6:d8:12:fa:25:a0:bb:73:90:79:91:8a:9b:78:
                    3f:90:d8:9e:c7:cd:3b:d5:1f:07:d2:3b:fe:90:d0:
                    e7:47:18:a4:b2:b5:9b:51:3d:2a:08:cc:aa:f0:38:
                    1d:b3:4b:96:ee:03:a3:80:44:fc:64:7d:a6:e2:ea:
                    91:b5:f1:c2:fa:30:03:e4:db:03:2e:81:30:6f:97:
                    11:82:0c:7c:a9:cf:15:e1:08:83:75:9d:33:6f:88:
                    08:d2:53:0b:9e:f4:06:24:29:d3:98:76:66:2c:2a:
                    96:5e:b6:0e:4b:ed:ff:29:ce:76:de:eb:2a:73:01:
                    48:2d:c8:d8:13:ec:6c:8a:19:aa:60:ca:e5:e4:37:
                    51:2c:3c:3f:e8:d1:9d:ac:e9:44:f6:33:12:cb:41:
                    d1:1e:f5:11:9b:2c:57:3d:fc:a2:47:57:bc:96:c6:
                    ca:1d:e9:4b:fa:73:b2:cb:4e:42:66:14:f2:13:47:
                    d4:ba:61:98:a4:11:62:c7:72:cf:17:1d:67:2a:19:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F4:2B:56:22:00:55:9E:14:76:03:9D:E7:55:CB:B3:63:83:26:E9
            X509v3 Authority Key Identifier:
                keyid:77:D3:C2:A5:52:96:FD:0E:A1:B2:84:CA:1D:F2:5C:9B:E9:92:3F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:74:2e:52:3c:dd:24:80:fa:51:46:7e:97:2b:31:a3:5e:74:
         a5:ea:d9:ca:5e:e5:64:42:3b:b6:d7:44:1e:3e:71:1e:1d:03:
         ca:db:bd:16:de:74:64:66:14:b7:b2:95:ca:bd:83:10:11:20:
         6c:36:26:92:59:2f:4c:3d:bf:06:f2:b1:eb:ac:99:b2:30:ad:
         f0:14:df:d0:12:4e:88:7f:84:bb:8d:dd:0c:61:d9:26:85:d7:
         51:4a:32:3e:94:59:b0:af:8d:0f:a0:65:fb:5b:16:0d:d7:7f:
         a0:8c:f1:14:3a:ee:d6:1b:47:23:9f:c5:00:62:e4:df:ad:b6:
         ee:11:ec:2a:b0:ad:2f:d5:ff:8c:33:7e:04:13:f6:0a:9a:59:
         e4:21:06:73:c8:e6:c8:36:35:31:f6:a0:99:9b:f4:82:45:99:
         b2:f2:90:11:ca:11:a6:57:f8:02:a9:98:3f:19:43:55:23:40:
         2a:78:e7:6b:01:ad:63:00:6b:a1:4f:0a:92:c8:43:3b:78:d5:
         c0:a4:83:dd:54:6a:5e:be:8f:2b:f1:ac:b4:3b:6d:30:45:e8:
         95:74:7a:1c:a3:73:68:71:45:37:db:84:c0:2e:15:dc:18:d5:
         7e:98:30:ad:41:42:19:21:7b:a9:37:de:c5:aa:47:81:d0:bb:
         18:35:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----