Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
File:                     3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft (raw, json)
Hash identifier:          1LmVL8ovpJrhw5fUppAVltCFdxjsToFghklOz0eWAu4=
Subject key identifier:   DC:9D:4B:D7:14:03:51:CB:C9:F9:00:2C:C1:33:82:EF:4A:26:F3:96
Authority key identifier: 3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30
Certificate issuer:       /CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
Certificate serial:       5C37C90794DCF54E532826869092AC0B9CE80428
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
Manifest number:          015F
Signing time:             Fri 28 Mar 2025 23:24:40 +0000
Manifest this update:     Fri 28 Mar 2025 23:19:40 +0000
Manifest next update:     Sun 30 Mar 2025 02:59:40 +0000
Files and hashes:         1: 3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl (hash: HS9Ckb8yXRh20xuG1drt3sn50VFJ6q/aejnPNDxzGxI=)
                          2: 323830343a356530383a3a2f33322d3438203d3e20323639303037.roa (hash: m/AQew8Jq7WwBH5WxLOfIK8d39i1V++AsRKj6Jkarfc=)
                          3: 34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (hash: Qvum6A9tSRyAMauMd+lE/0rLlkyYbtVYCXvqJOtOlgE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:37:c9:07:94:dc:f5:4e:53:28:26:86:90:92:ac:0b:9c:e8:04:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
        Validity
            Not Before: Mar 28 23:19:40 2025 GMT
            Not After : Mar 30 02:59:40 2025 GMT
        Subject: CN=DC9D4BD7140351CBC9F9002CC13382EF4A26F396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:c3:b3:8d:d2:c5:33:f1:84:14:a8:8d:b1:
                    7b:21:90:78:81:48:cf:08:a0:78:29:6c:45:14:06:
                    77:e5:64:14:86:a6:b4:62:52:c2:3c:f3:17:26:78:
                    9b:ce:f3:2d:60:6d:42:dd:ae:05:cc:26:06:02:2c:
                    5c:4c:c3:87:5d:9e:b9:b0:e2:6c:bd:0b:7b:9e:fb:
                    87:b8:a0:38:fa:12:4d:af:cd:d7:a2:4a:01:3e:22:
                    64:4a:5f:48:76:ba:6d:78:ec:ce:8b:ab:7b:ae:c5:
                    f4:4a:01:f1:eb:2a:8f:0a:2b:55:26:54:1c:88:10:
                    b2:fa:eb:2d:e9:6d:b8:10:da:3a:aa:b7:66:e3:da:
                    3d:d8:d3:95:ab:e7:17:d6:5c:87:ac:eb:59:e5:ca:
                    84:d5:4a:cf:43:8d:96:9f:17:7e:e9:0b:39:07:62:
                    f5:d7:01:34:5b:5e:5e:1c:a6:2e:d0:14:e0:5b:e2:
                    73:9c:40:f5:ad:ac:56:8d:07:85:6c:53:46:57:80:
                    f3:bf:48:11:ad:97:9e:92:96:f9:65:9d:e7:de:3e:
                    bd:35:10:f4:4a:93:e8:a9:68:58:0d:41:46:31:bd:
                    cb:cf:f5:53:46:de:db:31:0e:8e:0d:00:8b:55:48:
                    65:28:87:7b:ca:69:bd:f5:87:39:bb:c4:42:fc:e7:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:4B:D7:14:03:51:CB:C9:F9:00:2C:C1:33:82:EF:4A:26:F3:96
            X509v3 Authority Key Identifier:
                keyid:3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b8:ba:e1:d1:d2:5c:d4:bb:8a:a7:aa:85:6f:c8:54:99:a6:
         6b:94:27:34:b1:d0:47:de:2f:97:e6:e6:ac:cd:da:11:c0:a4:
         a2:cc:d3:6a:75:80:68:18:14:dc:2b:53:83:9c:f6:c1:8a:e3:
         82:a9:9d:07:0a:54:e3:80:27:ff:d9:f3:77:cb:25:57:e9:ed:
         8b:62:86:3c:2d:95:f5:89:d7:c2:bd:32:9f:01:00:7d:eb:2e:
         e9:a7:2b:4a:81:85:c0:e1:30:c6:c8:94:dd:3a:a1:f9:e8:21:
         f6:9e:86:e7:ad:11:06:2b:d7:e6:1d:f8:91:aa:c9:57:76:e7:
         54:22:47:fb:fa:2b:e4:c7:cc:17:46:61:38:dc:71:cf:91:2f:
         9e:ce:1c:e6:68:ff:c8:e5:83:05:b6:89:7f:62:18:a1:fe:a0:
         a2:f4:e3:aa:24:37:f3:a1:7c:52:2e:75:c2:99:7d:f7:6a:86:
         ff:30:98:be:2b:0c:f3:fa:f5:44:64:ad:0b:e4:da:6a:9e:0d:
         a4:9c:0d:29:5c:ad:b1:f4:ae:ee:44:b0:60:f7:3c:03:7d:9f:
         33:79:bd:e0:aa:44:99:37:4f:68:8a:dc:99:92:b6:bb:63:3f:
         b3:2d:4f:d3:56:12:0a:0d:74:b7:95:a6:cf:54:f3:92:e0:97:
         be:f0:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----