Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/65E6584AC53052B8CE2149FE3718F6CD7DA24485.mft
File:                     65E6584AC53052B8CE2149FE3718F6CD7DA24485.mft (raw, json)
Hash identifier:          pfPigxbc+TicdqiGjY/CDMQp3ACPW66+Szj3jGao2UQ=
Subject key identifier:   EA:02:10:3F:37:0D:FD:88:03:AF:E5:8D:B9:0D:D2:EE:76:DB:C7:58
Authority key identifier: 65:E6:58:4A:C5:30:52:B8:CE:21:49:FE:37:18:F6:CD:7D:A2:44:85
Certificate issuer:       /CN=65E6584AC53052B8CE2149FE3718F6CD7DA24485
Certificate serial:       22B5319EBFBDFAEB86E0E5DD876F3DE833DD6A76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E6584AC53052B8CE2149FE3718F6CD7DA24485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/65E6584AC53052B8CE2149FE3718F6CD7DA24485.mft
Manifest number:          25
Signing time:             Tue 22 Oct 2024 08:45:49 +0000
Manifest this update:     Tue 22 Oct 2024 08:40:49 +0000
Manifest next update:     Wed 23 Oct 2024 12:26:49 +0000
Files and hashes:         1: 3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (hash: vkW+/7BnlfRVQrPTCu21LgsVENZ/snGkHzJekEYIrB0=)
                          2: 65E6584AC53052B8CE2149FE3718F6CD7DA24485.crl (hash: DJ6cPncMBfyy9mYMkULZPmDgsL9KZdAGTjMBne7ptb4=)
                          3: 323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (hash: 4yx17xcbEy2/TnIBc324DThg5KHtyF7/INlUNpv/FqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b5:31:9e:bf:bd:fa:eb:86:e0:e5:dd:87:6f:3d:e8:33:dd:6a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E6584AC53052B8CE2149FE3718F6CD7DA24485
        Validity
            Not Before: Oct 22 08:40:49 2024 GMT
            Not After : Oct 23 12:26:49 2024 GMT
        Subject: CN=EA02103F370DFD8803AFE58DB90DD2EE76DBC758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:eb:e6:2d:f2:95:fa:36:c9:91:5b:68:91:15:
                    af:87:af:7e:6e:1e:82:52:bc:13:7e:83:75:bd:7d:
                    2f:c2:b3:ba:de:e7:f4:06:73:36:ef:00:5c:9c:8a:
                    67:29:70:42:52:8a:e5:f4:08:b2:dd:5b:2f:89:67:
                    e4:90:dc:be:87:00:2a:19:57:76:02:4a:27:88:14:
                    1e:ed:a9:41:6c:13:67:5f:3d:35:70:c3:54:b7:a2:
                    67:64:d7:57:93:db:c1:ad:8b:0a:e6:a6:01:20:28:
                    78:db:ea:b1:89:f5:69:da:08:cb:de:6c:ce:ea:4d:
                    c6:33:d0:ac:17:6a:86:ee:b6:69:e1:72:77:f7:f8:
                    23:80:4b:96:a5:e2:fa:78:f6:ca:6f:53:6c:8d:03:
                    18:02:31:58:20:1d:4d:6f:b7:6d:ff:b4:a0:8e:90:
                    dd:b5:50:66:cf:fa:5a:66:fe:0d:21:65:e6:6d:9b:
                    8d:7c:45:dc:6c:4f:78:4b:33:88:6d:d3:74:6a:94:
                    b6:94:5e:7e:a7:3c:6e:f8:d5:7f:21:0a:d1:60:a4:
                    34:16:4d:84:f8:70:db:d3:85:99:f6:37:50:1f:f0:
                    47:40:9a:01:a5:f9:07:73:b1:85:69:d3:61:06:e9:
                    33:b1:be:df:02:68:4e:c4:f4:a6:4d:4e:4e:0d:39:
                    b6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:02:10:3F:37:0D:FD:88:03:AF:E5:8D:B9:0D:D2:EE:76:DB:C7:58
            X509v3 Authority Key Identifier:
                keyid:65:E6:58:4A:C5:30:52:B8:CE:21:49:FE:37:18:F6:CD:7D:A2:44:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/65E6584AC53052B8CE2149FE3718F6CD7DA24485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E6584AC53052B8CE2149FE3718F6CD7DA24485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/65E6584AC53052B8CE2149FE3718F6CD7DA24485.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:22:a0:a3:4e:4c:26:82:8b:52:de:5c:23:70:d0:95:aa:c4:
         46:e9:f1:82:a1:4d:3f:b7:d1:f0:2d:67:13:33:2f:01:ff:6a:
         dd:c7:45:7c:41:12:67:52:7e:b0:7d:05:f1:a6:68:1b:a6:38:
         66:7f:de:9f:bd:9a:8b:5b:0c:68:3f:d2:ee:b2:d9:49:ff:62:
         b0:89:99:14:0f:50:dc:40:09:cf:d6:ab:09:2e:38:fc:de:95:
         34:75:d0:4f:c1:1b:3d:8e:51:f2:19:1e:b3:9d:fc:ec:e2:fe:
         ec:33:93:ba:1a:11:62:23:5d:f7:ec:67:5a:3b:0f:18:8b:7d:
         c6:92:98:77:8d:4b:ed:00:d1:62:1d:aa:c1:4a:84:8a:2a:b5:
         13:0b:0f:10:1f:5e:c1:f0:cb:59:ed:b3:1b:9d:62:d6:f9:2d:
         ff:3f:df:8d:45:66:bc:6c:23:41:88:1a:56:d0:34:dc:ab:cb:
         4f:c9:3e:a1:69:69:c9:0c:b6:99:fd:4e:d2:2f:a0:d4:11:14:
         42:0e:7c:b5:05:62:7b:a6:f2:e8:ab:9d:bf:70:69:35:4c:51:
         1f:a9:99:df:29:fb:0e:b0:8c:3d:11:94:34:79:0f:8d:0d:66:
         31:66:1c:31:a1:25:fd:90:95:4e:89:f0:59:5d:a8:47:bb:84:
         c3:eb:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----