Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.mft
File:                     65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.mft (raw, json)
Hash identifier:          pJ1lccDadEwshTg15fBA5K1Dcc3Ual6cF2ZNpd8Jep0=
Subject key identifier:   82:13:84:6C:2E:C2:B6:3E:DB:55:06:83:8A:A1:28:4E:F3:77:6D:0B
Authority key identifier: 65:A1:69:8F:B6:1E:F3:BC:3D:D5:3F:E3:2C:EB:B7:C0:D2:4C:3A:27
Certificate issuer:       /CN=65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27
Certificate serial:       517F5336215422A2E97F7AA06C0B42F5C8A7E703
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.mft
Manifest number:          4C
Signing time:             Sun 14 Apr 2024 21:36:14 +0000
Manifest this update:     Sun 14 Apr 2024 21:31:14 +0000
Manifest next update:     Mon 15 Apr 2024 23:42:14 +0000
Files and hashes:         1: 3133382e3231392e3131322e302f32322d3234203d3e20323633393236.roa (hash: pATFJJrwsDLwbNWIDFe2h/UCOdGbpTd4W/BJDy8YywE=)
                          2: 323830343a323764633a3a2f33322d3438203d3e20323633393236.roa (hash: Rvm/+uBWrYRxjgG5aX/WmkIiGQea4VyUaj73ehM4Mvg=)
                          3: 65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.crl (hash: IfMITlRZEWYNmgPo8yOVH+69btQQIa4gvfGMyDams9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7f:53:36:21:54:22:a2:e9:7f:7a:a0:6c:0b:42:f5:c8:a7:e7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27
        Validity
            Not Before: Apr 14 21:31:14 2024 GMT
            Not After : Apr 15 23:42:14 2024 GMT
        Subject: CN=8213846C2EC2B63EDB5506838AA1284EF3776D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:2a:97:cc:fb:67:38:9c:6b:71:eb:73:2c:
                    19:7d:d7:07:78:9b:85:ab:2b:55:56:13:c4:e2:e3:
                    00:e8:95:5d:9b:79:60:48:a6:cd:77:f0:3c:db:29:
                    77:1e:31:ad:de:c4:5a:d1:0d:f4:2b:ab:8a:ec:92:
                    3a:43:66:4d:ac:09:8c:22:3b:b2:ee:bd:64:19:07:
                    f7:73:14:c7:30:8c:71:cb:67:d9:d7:49:63:2e:94:
                    94:3c:45:00:fb:54:98:2e:85:4e:f8:93:ba:5c:91:
                    fc:12:69:22:52:c6:6e:c4:00:22:bd:a3:b6:dc:a4:
                    83:75:3f:0b:24:c5:32:6e:2f:96:20:d6:25:e4:fb:
                    01:c9:86:37:48:d0:35:28:7f:c6:39:49:c7:62:d9:
                    1f:fe:bf:58:f4:1f:f3:72:cd:62:51:21:38:1a:be:
                    40:7b:3a:7c:e5:ae:3a:35:a0:15:e7:f6:12:fa:22:
                    63:3e:a9:28:ed:ab:9d:ee:72:44:0e:2b:fb:91:70:
                    41:b2:f2:87:16:ac:8c:dc:d1:8f:f4:c1:6e:89:de:
                    42:b6:4d:7e:f3:88:d6:03:d4:2a:84:c6:88:d6:32:
                    07:f1:0d:82:16:4b:77:7f:ec:57:4f:86:48:a0:ad:
                    76:5f:96:86:ba:63:27:b0:37:27:d4:13:63:f7:2a:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:13:84:6C:2E:C2:B6:3E:DB:55:06:83:8A:A1:28:4E:F3:77:6D:0B
            X509v3 Authority Key Identifier:
                keyid:65:A1:69:8F:B6:1E:F3:BC:3D:D5:3F:E3:2C:EB:B7:C0:D2:4C:3A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/65A1698FB61EF3BC3DD53FE32CEBB7C0D24C3A27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:64:66:0d:3b:74:b3:9e:d8:01:49:2b:4a:f7:00:4f:d1:92:
         5a:3d:a8:61:83:33:92:f9:ca:65:d3:de:17:e2:27:36:4e:72:
         47:4c:81:77:0f:39:2b:9a:8c:1c:a4:50:fa:14:23:a5:5d:70:
         da:af:45:ba:f6:7c:e0:75:c5:34:e1:3e:f9:7b:f6:ac:88:39:
         54:21:9f:84:aa:ef:d6:c4:b7:bf:5b:a2:f5:fe:e8:a0:4d:2e:
         53:a7:78:58:38:ec:29:c5:a0:6b:66:90:93:a0:92:32:53:5b:
         c8:51:29:84:d8:5b:30:63:2a:74:8b:16:c3:69:38:30:b3:fc:
         6a:e5:49:55:b0:61:88:46:78:e9:33:6f:dd:bc:6c:8e:64:54:
         ad:ac:72:12:20:19:5e:f6:d8:06:88:57:6c:d6:e3:c0:82:76:
         38:97:32:87:9e:0b:8d:ce:cd:3e:13:b8:81:cf:f9:4e:62:48:
         34:46:fd:89:ae:45:63:23:ed:ab:74:b3:7c:dd:41:f5:29:df:
         98:f5:e7:f9:db:eb:7c:7f:73:ac:d8:0d:84:96:f8:8d:c8:1d:
         1e:5a:7e:10:37:1e:72:ee:86:e9:13:be:1f:ea:45:9e:90:05:
         88:46:1b:01:bf:89:c5:fe:13:83:1a:a0:e3:a9:84:89:29:a6:
         b5:73:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----