Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC.mft
File:                     4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC.mft (raw, json)
Hash identifier:          ixQSSrzk+JeVwVC5XUVbhiiiA2kedT6zQvHNN+a5GIU=
Subject key identifier:   D6:47:53:AF:BF:FC:D4:58:7E:01:BF:93:E0:7F:A4:E8:30:B3:4F:F2
Authority key identifier: 4F:FD:1B:CD:A8:9C:B9:E7:93:7C:0F:7B:94:80:3B:43:29:2D:33:DC
Certificate issuer:       /CN=4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC
Certificate serial:       069380A3A20EF501098625A70CCF37DB867C1EA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC.mft
Manifest number:          3E
Signing time:             Fri 31 Jan 2025 08:12:31 +0000
Manifest this update:     Fri 31 Jan 2025 08:07:31 +0000
Manifest next update:     Sat 01 Feb 2025 10:39:31 +0000
Files and hashes:         1: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: gK7Vv2UXWi2LMpOB+3+HJs7LhAbPV4ui4fTsm3naqB4=)
                          2: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: ML4BlJ+rC+vf1E2KXNcXnDwV8DS50x24jgJ/jGVwcOw=)
                          3: 4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC.crl (hash: YjrYZE5hIQzsFDg2+WDjGs2GzXH8aoqL8ALOF47c5W0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:93:80:a3:a2:0e:f5:01:09:86:25:a7:0c:cf:37:db:86:7c:1e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC
        Validity
            Not Before: Jan 31 08:07:31 2025 GMT
            Not After : Feb  1 10:39:31 2025 GMT
        Subject: CN=D64753AFBFFCD4587E01BF93E07FA4E830B34FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:ed:43:44:15:2a:70:b2:bb:55:ff:a2:64:
                    99:3e:f2:12:12:06:39:b2:1f:c8:19:d8:c3:95:27:
                    67:00:32:c3:58:6b:87:e6:b5:19:1b:7b:63:c2:97:
                    b5:fb:4f:7b:a3:5c:60:32:ae:e0:cf:fb:4d:63:2e:
                    e3:95:49:4e:ec:5a:b5:70:39:80:e0:dd:51:d6:fe:
                    8e:05:e2:1b:4f:e4:d7:2b:5c:66:84:70:2d:71:5e:
                    80:9b:e3:08:9a:d8:fa:c8:52:19:97:a8:ed:ce:db:
                    61:e6:3c:62:0d:de:53:19:d7:28:78:0e:a7:de:37:
                    bf:cc:72:9a:e5:a8:04:cb:0a:da:17:65:37:4e:57:
                    67:57:94:a5:6f:fb:11:8e:52:d4:3a:a6:48:a6:07:
                    20:81:4b:6f:64:87:74:62:5c:1b:e4:66:e4:67:42:
                    dc:a4:81:12:6a:f0:bd:01:39:92:d3:c8:b9:98:93:
                    64:21:3e:c3:ef:e2:72:f2:d6:f3:6e:d7:b0:0f:df:
                    ad:09:fd:fc:3f:cb:8e:fd:32:26:29:7e:8f:a4:41:
                    78:ce:14:be:9e:7d:89:f5:8f:39:a8:56:e6:b0:82:
                    97:d4:8b:28:b7:fa:55:16:05:d7:8a:df:d0:37:98:
                    bb:d0:47:d1:ec:e1:66:22:01:4b:3d:5d:f8:c4:6b:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:47:53:AF:BF:FC:D4:58:7E:01:BF:93:E0:7F:A4:E8:30:B3:4F:F2
            X509v3 Authority Key Identifier:
                keyid:4F:FD:1B:CD:A8:9C:B9:E7:93:7C:0F:7B:94:80:3B:43:29:2D:33:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/4FFD1BCDA89CB9E7937C0F7B94803B43292D33DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0b:be:02:61:d9:d4:32:b0:bc:2f:16:9d:ca:3b:fa:0b:ec:
         97:b8:7f:48:f1:ff:00:78:bd:d6:aa:34:92:5d:cb:62:94:f2:
         e0:be:48:b8:14:f1:94:8d:b2:05:d3:3a:e0:49:4b:8c:65:71:
         6e:b0:72:d6:96:d3:2f:82:21:21:cd:b4:e5:06:b4:8e:b8:19:
         71:d0:36:e5:fb:fd:ef:02:55:09:e3:19:96:a3:ac:09:76:a3:
         a0:cb:fa:b4:54:16:20:a9:0f:9c:c5:22:68:a3:4d:9a:57:82:
         01:3e:bc:23:64:d4:a4:f3:bd:8c:aa:6e:6b:9a:fe:2c:e7:79:
         65:40:97:18:cb:9a:7a:22:14:70:81:01:6f:f2:ec:3b:b7:fd:
         fd:67:98:0c:65:1e:4c:de:26:ee:ed:2d:55:25:01:ab:81:e9:
         5b:86:7c:58:ff:a3:41:34:b7:0e:a9:ed:6b:7d:8d:f2:c8:b9:
         30:b7:5c:31:77:df:ae:e6:72:86:5e:38:f3:c8:a8:32:ad:7d:
         7a:b7:63:7c:e9:f3:93:ac:17:22:d2:51:a7:7c:2e:b8:bb:70:
         3e:92:85:e8:b7:b2:e8:59:59:2a:1f:5e:e8:65:05:8f:a3:79:
         1c:9d:88:13:4a:8f:37:a3:7f:98:b2:c5:9f:65:3e:6d:1d:00:
         9b:61:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----