Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
File:                     9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft (raw, json)
Hash identifier:          Uua752WUEOGYsgwwGX2FAm+88PyNU7JNDrb60Uip0Ko=
Subject key identifier:   6A:F5:E6:2F:81:14:C9:6F:13:23:06:6D:F8:1C:55:81:A0:D0:BD:39
Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
Certificate issuer:       /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Certificate serial:       580E0C7CA8072D3CCAE6962F181DCB5D105FBA22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
Manifest number:          0180
Signing time:             Fri 31 Jan 2025 03:54:43 +0000
Manifest this update:     Fri 31 Jan 2025 03:49:43 +0000
Manifest next update:     Sat 01 Feb 2025 07:37:43 +0000
Files and hashes:         1: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl (hash: I3GzsPK2inyoN2ii/NzPQ/5SzWN9R9PYwQEI3OBP/Lo=)
                          2: 34352e3233372e342e302f32322d3234203d3e20323638323932.roa (hash: eeoAW50v+vw7gZxyacv3npxzwcpubUxfU+XpMQahwnM=)
                          3: 323830343a346566303a3a2f33322d3336203d3e20323638323932.roa (hash: dJRPAt6D24afB3WtvhrUDAgr/3Wji0lTm/PPXUl2gd0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0e:0c:7c:a8:07:2d:3c:ca:e6:96:2f:18:1d:cb:5d:10:5f:ba:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
        Validity
            Not Before: Jan 31 03:49:43 2025 GMT
            Not After : Feb  1 07:37:43 2025 GMT
        Subject: CN=6AF5E62F8114C96F1323066DF81C5581A0D0BD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:a4:8f:2c:71:05:72:5b:e9:89:6e:20:1d:
                    22:ff:58:b9:8e:c2:9a:76:ea:67:32:d3:9f:88:a6:
                    73:18:08:c0:68:5a:c6:9a:6e:0c:97:f3:26:fd:99:
                    cf:c9:ce:51:b5:0c:2b:4d:d1:eb:6c:04:e9:dd:17:
                    df:c1:69:ba:a7:a2:12:0c:12:c5:9f:71:f1:93:a8:
                    14:d7:a1:68:71:0b:96:dc:84:7a:c9:9a:13:b3:54:
                    f1:d8:c7:ac:e9:7e:a6:78:d0:84:8f:43:ea:24:70:
                    e4:ca:d2:bc:72:43:3c:35:6d:e2:a9:0f:01:db:ee:
                    db:ec:4e:26:d9:df:04:64:ef:e6:59:31:10:b9:da:
                    7e:bc:c6:8a:09:e7:d7:18:aa:c1:6d:ba:c7:17:04:
                    8f:01:5c:e7:c2:c3:4a:fc:0c:e8:43:4d:a5:3c:4d:
                    91:3b:95:94:c8:87:8e:88:86:a0:a2:44:21:92:ce:
                    b7:36:95:12:c3:e2:b1:95:af:2e:6d:14:b0:c5:f4:
                    ad:e1:cf:a8:38:7a:7c:0e:56:2d:c6:46:03:78:42:
                    28:c1:48:3b:21:3c:fb:3f:12:28:72:0e:88:4b:06:
                    b1:99:73:b1:36:4d:a3:b3:90:40:dd:9e:0e:35:1a:
                    e3:14:40:d8:f3:e6:7d:4f:fa:ec:b9:6c:de:69:2e:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F5:E6:2F:81:14:C9:6F:13:23:06:6D:F8:1C:55:81:A0:D0:BD:39
            X509v3 Authority Key Identifier:
                keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:1e:fd:df:24:4d:d7:3c:6c:74:a3:46:82:5f:18:ca:bb:
         a8:73:f9:c3:f4:76:ac:d7:3c:66:fb:bc:90:41:df:51:c3:b7:
         44:c8:f5:6c:65:73:82:84:53:7c:fc:9c:82:7d:dc:2b:3a:a3:
         20:65:72:2b:ae:6b:89:cb:45:ac:49:b0:b7:3b:27:5a:21:4a:
         0c:ec:93:0e:94:07:47:1d:91:07:d5:02:bd:e8:d3:8f:c6:21:
         97:72:73:1f:8a:22:2c:b1:4c:e1:fa:81:a6:33:50:12:6f:d7:
         5d:7e:1a:3a:2f:90:2a:9b:d5:73:c8:0d:bd:d2:1e:fd:eb:fe:
         fb:b1:d6:aa:e9:7b:0a:af:9c:8b:f7:99:0a:d3:04:b5:24:a7:
         2e:cc:fe:77:d4:7c:e8:16:1f:fa:87:33:79:e0:80:f7:5a:6f:
         24:38:e8:9e:6e:b0:f7:b5:8f:1d:61:a3:ab:71:9f:e2:3b:2b:
         7a:ff:a0:f8:e6:8a:a9:1f:68:d3:4b:10:a3:8e:18:cd:ff:8f:
         31:b3:0d:b5:9a:c1:07:3c:83:24:6d:a0:42:c4:ce:98:e8:c0:
         d1:45:04:c6:10:6b:25:3d:d8:74:9e:75:1a:67:11:c2:3b:69:
         0b:31:44:51:16:4c:e9:1c:92:bf:58:4b:ed:88:cf:20:16:4a:
         a2:e2:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----