Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
File:                     6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft (raw, json)
Hash identifier:          LU8EybivX5843Qr5b5+6R368QT35FSyu+PBlJY4S00U=
Subject key identifier:   0C:D0:65:32:C5:1F:B9:62:36:D8:31:32:BE:65:99:03:67:F4:D1:6C
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       37C1B0AC2005BF415B16B7AE8FB0F46113E44092
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
Manifest number:          01E2
Signing time:             Fri 28 Mar 2025 18:39:08 +0000
Manifest this update:     Fri 28 Mar 2025 18:34:08 +0000
Manifest next update:     Sat 29 Mar 2025 19:18:08 +0000
Files and hashes:         1: 3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (hash: zCJ9NcAZgKh2r/gHTI/+9ji8xjgt5SZ/Um8SDcvF4VI=)
                          2: 3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (hash: ISLR/SHc5/TU+SqtFt9tn8WBaID+aj52PKr8f09VylI=)
                          3: 3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (hash: YHLrw22ihutPUNd9BxRl0QS4TkPEc/vmPOTHqth4DFI=)
                          4: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl (hash: 2Mlac1461c3jojkFe0xeQJiq0GmWDDtGZGva+MUF/14=)
                          5: 3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (hash: aayLUxa+4PtSzKbXdlcEV5j5+uegyNKpZJNgf1xFsc4=)
                          6: 3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa (hash: Ot1EWApvBmh4FPs84Z1lY3kwhdYkbmmnY60dPj9p9ec=)
                          7: 323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (hash: jwGypfEcZTI1iJl0YRFLhbSSCMtq7GuPrRa/9uXHV5g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c1:b0:ac:20:05:bf:41:5b:16:b7:ae:8f:b0:f4:61:13:e4:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Mar 28 18:34:08 2025 GMT
            Not After : Mar 29 19:18:08 2025 GMT
        Subject: CN=0CD06532C51FB96236D83132BE65990367F4D16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:7c:93:c1:eb:62:e5:ac:6e:60:64:55:71:
                    9e:28:f7:f3:a3:71:13:9a:d3:51:14:43:96:6e:44:
                    16:4b:f8:bb:24:17:7d:4f:7f:4a:36:e2:53:4e:fd:
                    1d:50:8c:cd:40:d5:41:c0:eb:ab:84:11:8b:75:dc:
                    9d:79:b0:f8:a3:a8:e8:61:a2:90:bf:14:3c:86:5e:
                    e0:47:d7:f9:5b:c5:98:3c:94:a7:0e:fc:ba:5a:ba:
                    f1:19:2c:c8:88:14:15:5d:27:42:ab:99:4f:bd:e6:
                    20:80:2f:9e:09:1f:2e:99:94:49:4d:f4:b5:9d:77:
                    41:fa:f1:f5:0e:d7:65:01:13:12:d8:da:55:68:38:
                    5f:e8:5f:76:dd:09:75:70:ae:17:b2:e9:f6:5d:d4:
                    22:ec:05:bd:e3:5a:b8:74:43:a6:e8:7e:8b:58:8f:
                    36:32:b2:45:e8:af:08:6d:89:fb:90:19:fd:f0:69:
                    c0:41:91:b7:f4:fa:98:b6:b3:d6:9c:95:54:61:2e:
                    9a:8d:80:ae:52:91:07:a4:40:b5:da:ff:56:b9:9a:
                    8d:c2:87:3f:99:f9:a8:de:2b:b9:8b:90:50:28:e5:
                    73:11:77:98:4d:95:d6:f0:21:2e:57:70:b2:74:72:
                    fc:c2:48:b0:e6:c2:4a:60:ea:10:54:a5:62:f8:84:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:65:32:C5:1F:B9:62:36:D8:31:32:BE:65:99:03:67:F4:D1:6C
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:92:d9:d9:b9:95:ce:16:7a:d1:b5:ad:a4:36:ed:c3:8b:0d:
         3e:25:cb:13:e6:a5:c7:29:32:9f:ee:92:ab:02:92:80:64:21:
         8b:db:3a:d5:38:99:34:d2:1f:86:27:91:21:eb:ed:6c:7b:4e:
         17:68:a7:62:01:02:49:4c:2e:3b:89:e8:ab:74:24:92:42:7c:
         f3:43:78:fb:28:a5:55:a9:86:03:c0:e4:76:0b:1e:0e:11:3a:
         d8:b7:e1:f7:e3:aa:4c:6f:25:14:69:d0:11:28:3b:bb:d4:24:
         74:69:41:24:4d:5b:02:80:53:33:be:4c:0d:0d:c5:68:40:5a:
         ef:c7:c4:e9:52:91:ad:61:c2:6c:ac:d8:da:15:fd:5e:39:d0:
         dc:f0:48:c7:ee:8c:55:bf:6a:00:7e:0d:db:79:56:ba:5c:ea:
         0a:72:f9:bc:38:4e:ad:77:97:d7:18:f3:9d:df:51:8c:ca:e4:
         7e:0e:65:40:46:8a:31:9c:05:b0:58:78:c1:a7:7c:e4:87:9b:
         f9:54:68:21:0d:73:bd:0d:8d:1b:c1:d9:72:52:ab:bd:33:e7:
         40:77:31:a5:42:35:5d:34:8e:be:8c:80:fa:0b:35:9d:c6:02:
         49:35:4a:d3:85:51:68:98:3c:b6:b8:67:35:41:9c:3d:e8:f7:
         e9:03:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----