Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.mft
File:                     972925A57A172EFE7255E798517DAC0C695452AC.mft (raw, json)
Hash identifier:          HdxON6+3H54UfDX0vXD/fK3nkzsey9DbhkTontAc05Y=
Subject key identifier:   04:6C:2E:E0:12:A0:A2:50:B3:E2:E9:FE:CD:97:94:0C:76:BE:E3:39
Authority key identifier: 97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC
Certificate issuer:       /CN=972925A57A172EFE7255E798517DAC0C695452AC
Certificate serial:       3189ECF37E0B94D4C215AA540506E7214EB00855
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.mft
Manifest number:          0141
Signing time:             Thu 28 Nov 2024 05:36:36 +0000
Manifest this update:     Thu 28 Nov 2024 05:31:36 +0000
Manifest next update:     Fri 29 Nov 2024 06:56:36 +0000
Files and hashes:         1: 3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa (hash: emVatyv161m20Qj9NnQEpLQzwvV3d2PR90Zfr3rRjbs=)
                          2: 972925A57A172EFE7255E798517DAC0C695452AC.crl (hash: N11AwKeQjGJ8A7J7DOBjob+kIKcopHgZvJhRUutj1fM=)
                          3: 3134332e3133372e34332e302f32342d3234203d3e20323634303330.roa (hash: obzGQwGLkG2yyQ/ppKnvEIG68o/AJh7l9SY8hOQNFT8=)
                          4: 3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa (hash: mwW0fYtbhRjSmGjaetRV1FgLkpCfinuBRyA53ieFEGQ=)
                          5: 3134332e3133372e34312e302f32342d3234203d3e20323634303330.roa (hash: sEJ26u8xN07VlbVs7QDEVUSlryXqnSJBWjL/YixuU9g=)
                          6: 3134332e3133372e34302e302f32342d3234203d3e20323634303330.roa (hash: jG62GTcVVd2wGL7xp8NvzuKfZxQQfvU1nARb7uDbdVA=)
                          7: 3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa (hash: QxHbUS+uE+f/kJ7TJYvsUj1ECVKtIZWKMhfEPUCzujw=)
                          8: 3134332e3133372e34322e302f32332d3233203d3e20323634303330.roa (hash: TwmELaBLkZchk/dFxhgJmXaEkPrGz65A9djTkMNxZpk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:89:ec:f3:7e:0b:94:d4:c2:15:aa:54:05:06:e7:21:4e:b0:08:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972925A57A172EFE7255E798517DAC0C695452AC
        Validity
            Not Before: Nov 28 05:31:36 2024 GMT
            Not After : Nov 29 06:56:36 2024 GMT
        Subject: CN=046C2EE012A0A250B3E2E9FECD97940C76BEE339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0b:a1:75:9c:ce:01:69:62:62:b3:55:db:fb:
                    49:48:d3:4e:2a:2a:2f:2d:8d:5e:4f:ae:0d:b4:64:
                    c4:ba:bc:e2:6a:a2:46:6d:42:e8:d7:1c:6e:90:1e:
                    51:e4:e4:4c:f9:72:f0:e7:18:1b:a3:38:74:3e:13:
                    39:98:62:46:64:a1:a3:4f:b5:3f:5d:98:fb:21:a0:
                    f6:58:a7:9a:53:0b:0e:45:f2:d6:16:22:79:c9:cd:
                    7e:40:b9:b0:32:0e:e1:ca:4f:3c:a7:04:b9:a1:8d:
                    03:f2:ef:1f:b9:e0:50:f9:96:7e:ac:bd:5d:8f:7b:
                    e4:cb:ce:69:ea:4a:72:d2:6a:f0:08:b0:37:46:f3:
                    6d:e8:d2:ba:64:9c:97:8e:ee:75:67:3a:2b:e4:d1:
                    3c:1a:9e:56:25:52:c0:6a:7f:17:56:8f:7b:91:ad:
                    45:2d:65:84:b8:e9:23:5c:c8:79:0c:ea:a3:8d:a5:
                    f7:ea:5b:fd:6c:f2:42:9b:77:67:62:e8:b6:49:d3:
                    99:a9:48:52:d5:94:e4:0e:3d:21:ec:03:9b:88:72:
                    94:f2:5b:18:6d:18:6c:df:87:52:87:0a:88:2e:bc:
                    29:9f:00:de:37:28:41:d2:04:ea:54:66:be:b4:50:
                    cd:4c:29:c2:de:a2:5c:1a:09:12:b9:03:cc:a5:29:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6C:2E:E0:12:A0:A2:50:B3:E2:E9:FE:CD:97:94:0C:76:BE:E3:39
            X509v3 Authority Key Identifier:
                keyid:97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7d:cd:8b:74:5a:1d:37:02:d9:d5:16:40:69:60:1e:61:b5:
         ce:24:60:b7:7c:82:63:26:6c:da:39:ce:39:47:ab:9c:92:15:
         cf:e0:48:a8:83:f0:27:3d:d2:95:1e:29:48:a2:86:1e:dd:14:
         99:4f:5a:b0:eb:e5:76:b1:cb:c6:6d:8d:81:5b:96:ab:ca:c5:
         b5:14:ff:42:11:1d:39:ef:57:18:e2:05:96:5e:c3:24:00:ba:
         a9:6c:d0:f6:e3:9d:1d:32:0d:ab:72:73:bb:af:a7:d9:d5:c4:
         dc:0b:85:17:4e:22:93:ea:2c:3e:e6:8b:ac:27:0f:34:08:5c:
         a8:10:62:96:d1:ba:fd:f0:b3:2b:6b:b3:e8:9b:04:84:d3:9d:
         f4:fd:cf:16:80:1f:b7:ee:52:07:34:fd:6b:b5:eb:76:ac:fb:
         ea:49:ad:33:34:19:ba:9d:4e:93:0e:34:f4:95:57:2f:a4:c8:
         7e:4b:e5:8d:dc:0d:5c:ac:c8:14:3c:1c:fb:40:85:11:e1:3b:
         1c:59:11:64:53:b8:56:51:bf:54:04:db:09:82:f1:95:bf:f0:
         73:bc:01:4a:c1:70:69:83:0c:19:19:53:7f:d4:be:1d:b1:d7:
         7b:81:58:b6:4f:d0:15:c5:3c:93:dd:bc:c4:74:a9:4e:a6:ef:
         a3:4a:b2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----