Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.mft
File:                     68FD0235B3CB797681390860BD7AFE8B6E96F9F4.mft (raw, json)
Hash identifier:          hegvTmg3cfpt1POY/BNhdS/yOLCmaSxvLpLXKDFqh0Y=
Subject key identifier:   87:C2:AA:95:F3:0A:67:12:2B:83:F8:D0:50:3F:5A:F3:5C:EB:62:A1
Authority key identifier: 68:FD:02:35:B3:CB:79:76:81:39:08:60:BD:7A:FE:8B:6E:96:F9:F4
Certificate issuer:       /CN=68FD0235B3CB797681390860BD7AFE8B6E96F9F4
Certificate serial:       7E7AD2C992DE196597A8D7F817C95E68D35F979A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.mft
Manifest number:          38
Signing time:             Thu 12 Dec 2024 22:07:28 +0000
Manifest this update:     Thu 12 Dec 2024 22:02:28 +0000
Manifest next update:     Fri 13 Dec 2024 22:17:28 +0000
Files and hashes:         1: 323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa (hash: MQAvKn5iTRGRAvf049o9GLlnut6MKMXvMKc+jVibhIM=)
                          2: 68FD0235B3CB797681390860BD7AFE8B6E96F9F4.crl (hash: jahUFN1VtXGbMgAWi8HlvqIz467HvLaa+a+vMxFXcI0=)
                          3: 323830343a383635343a3a2f33322d3332203d3e20323732363336.roa (hash: 9PP0w2CiVqvP64CtUqi5bUS644EDBXyhW+SFwMsj1DA=)
                          4: 323830343a383635343a3a2f33332d3333203d3e20323732363336.roa (hash: K1iwVlnw93Ax7Givq2S/5rqBCgtMUsGcj7ijGvhjook=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7a:d2:c9:92:de:19:65:97:a8:d7:f8:17:c9:5e:68:d3:5f:97:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68FD0235B3CB797681390860BD7AFE8B6E96F9F4
        Validity
            Not Before: Dec 12 22:02:28 2024 GMT
            Not After : Dec 13 22:17:28 2024 GMT
        Subject: CN=87C2AA95F30A67122B83F8D0503F5AF35CEB62A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:b6:00:85:b2:57:1c:a4:a9:44:a8:8f:ef:
                    b4:0c:7a:29:2a:c6:f7:7c:30:0c:e3:38:08:6d:8f:
                    7b:91:31:7a:99:12:52:03:fc:5a:ac:be:e2:01:b2:
                    b4:d4:f5:4b:c3:05:0b:40:b3:3b:46:55:66:64:ec:
                    ef:57:16:ac:24:49:78:d6:c1:99:13:ca:d0:17:a1:
                    bd:39:62:3b:ec:6d:18:fd:0a:44:23:c0:8b:bf:fa:
                    51:3b:20:9c:81:f3:da:43:eb:2e:f6:6a:ec:2e:3a:
                    e0:b2:e5:1a:fc:6d:e1:aa:d3:b1:f9:d2:bd:08:6d:
                    bc:4a:26:b4:91:4d:bc:0e:b4:19:1a:70:10:1e:29:
                    d9:3a:a0:3a:fd:39:8c:f1:2c:d7:83:f5:ad:75:50:
                    a3:72:49:4c:c4:1f:72:7a:f2:9d:6e:5a:77:d6:75:
                    c0:d6:8c:0c:c3:7f:49:6b:4d:32:ad:59:d3:fc:31:
                    f2:1f:70:12:71:f2:ee:7e:73:f4:01:b5:86:6e:fe:
                    e0:48:03:eb:bc:35:a3:0a:0f:c6:14:10:b3:da:fa:
                    2c:09:82:98:30:b4:96:6f:2f:c1:87:3b:cd:b6:ba:
                    cf:ee:39:83:86:c9:72:f5:8f:92:3c:dd:78:f7:19:
                    04:54:f3:a0:ba:ea:56:13:e1:6b:e6:84:7a:ac:3f:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C2:AA:95:F3:0A:67:12:2B:83:F8:D0:50:3F:5A:F3:5C:EB:62:A1
            X509v3 Authority Key Identifier:
                keyid:68:FD:02:35:B3:CB:79:76:81:39:08:60:BD:7A:FE:8B:6E:96:F9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:b5:2a:3c:86:22:02:35:7b:01:be:e9:69:12:3b:88:44:
         7f:23:b6:73:24:7a:e6:f5:b4:cb:ab:32:05:a0:ed:77:71:ee:
         37:d8:f4:9b:d1:6d:a1:b5:87:fe:d5:2d:47:7e:19:1c:1a:c9:
         fe:fe:fc:9a:b4:b3:10:99:5c:70:b6:ed:9d:4c:47:58:fd:0f:
         a3:29:a9:c1:fc:c2:b7:a4:44:ca:98:a4:85:81:fd:dd:f0:64:
         99:38:8d:3a:bb:ba:b9:15:4d:b9:3d:4a:ec:dc:82:6d:5b:96:
         f4:fa:ed:40:52:54:6d:60:9d:b7:38:cf:38:1d:6a:f1:3f:fa:
         64:8c:08:0d:ee:ce:dc:8f:21:21:7d:da:c4:6c:f1:c4:71:66:
         09:f0:97:9c:9a:68:ca:80:b1:3c:64:2d:47:b5:27:34:84:e7:
         b3:a2:74:41:19:9e:57:70:9b:b1:16:d7:b7:b8:2d:2b:ae:53:
         a3:0c:a5:14:da:76:6e:9a:c7:2b:2a:9c:0d:71:71:16:85:55:
         a0:7d:92:93:9d:0b:26:79:1f:ef:a4:69:0f:d1:a0:84:88:5c:
         72:41:13:49:b0:5e:6c:18:fd:bc:f8:17:f4:2e:ba:58:5b:6d:
         46:37:d6:6e:aa:ac:2d:d8:1c:20:58:f4:3f:a9:19:f2:40:a1:
         2b:2a:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----