Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350.mft
File:                     B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350.mft (raw, json)
Hash identifier:          yhX+QSVluitnLf9toNshNcIrF/kOmqbpDmWuOQo8Z0U=
Subject key identifier:   34:29:A6:E9:12:B8:10:84:23:71:47:38:4C:67:79:D3:82:B2:28:AC
Authority key identifier: B7:5B:99:CF:AF:D6:48:74:93:C4:C8:C6:4A:32:D3:D0:DD:6C:E3:50
Certificate issuer:       /CN=B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350
Certificate serial:       7B002043F53364D057F403C49C65A5297C607189
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350.mft
Manifest number:          EA
Signing time:             Sat 28 Dec 2024 07:58:31 +0000
Manifest this update:     Sat 28 Dec 2024 07:53:31 +0000
Manifest next update:     Sun 29 Dec 2024 11:48:31 +0000
Files and hashes:         1: B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350.crl (hash: yB3IogKnkahJS+Hg9RnUcURLeYsmrcac8V6knhhCqWU=)
                          2: 3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa (hash: JcnS0clfEwNHOhB3XYLzkIzKRgHcyH9V+rLpMQiDxZw=)
                          3: 3137392e34382e3138342e302f32342d3234203d3e20323731303935.roa (hash: oPq39hh83PJWyM9OPweFq/SnmRwNdeyCxl5crh7Er1w=)
                          4: 3137392e34382e3138352e302f32342d3234203d3e20323731303935.roa (hash: uFZNZNU130pmN2HxL9FXhzJtTgyUbInpmUTiNqaAJhk=)
                          5: 3137392e34382e3138372e302f32342d3234203d3e20323731303935.roa (hash: UYTr9NOKvuHxQ5wGWmx66r8cm5eRthAPEQj1D3hCzXg=)
                          6: 323830343a373633303a3a2f33322d3332203d3e20323731303935.roa (hash: wTPgb+k5Xhr6/dw2NAd3HPElHmFaNJDHhRSnaZ5a/cY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:00:20:43:f5:33:64:d0:57:f4:03:c4:9c:65:a5:29:7c:60:71:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350
        Validity
            Not Before: Dec 28 07:53:31 2024 GMT
            Not After : Dec 29 11:48:31 2024 GMT
        Subject: CN=3429A6E912B81084237147384C6779D382B228AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:8a:3b:19:8a:9a:8e:eb:e1:d2:3f:00:f7:
                    7e:bc:25:cf:10:94:68:e1:bc:e3:cf:f0:c6:94:c9:
                    7d:07:4b:7d:30:1f:2d:ab:b9:b3:26:9d:d0:78:79:
                    cd:e8:fc:c3:47:64:38:40:51:6f:07:f4:e2:67:96:
                    ca:74:a0:f0:19:75:c7:98:3b:93:f3:f2:9c:c9:2c:
                    d2:65:78:cc:a3:27:df:6d:42:15:f7:ed:44:5f:4c:
                    7a:55:f7:0c:8c:be:48:23:7b:12:8c:e1:de:00:43:
                    3b:af:93:08:ac:03:06:a9:54:21:c3:9f:8e:cc:42:
                    90:06:8b:01:7f:a0:e7:0b:10:da:a1:34:d9:35:e7:
                    e4:8d:c9:b8:2e:c4:c1:d0:38:41:e2:38:df:d1:2b:
                    a1:8e:2d:17:66:2d:f6:10:98:28:35:14:6e:da:64:
                    b3:00:66:dd:22:45:a3:e1:98:dc:f5:b1:4c:f3:5b:
                    26:da:3d:1e:e8:b3:d2:f7:75:87:bb:05:19:d9:b8:
                    bb:c8:17:0e:8e:eb:18:14:2e:54:18:94:57:ff:ac:
                    5b:e0:23:d1:6f:ca:c0:8f:5b:68:d3:35:de:5b:b8:
                    95:fc:eb:98:15:52:0b:e0:89:3b:da:1c:ec:f8:2d:
                    b7:90:a0:b4:09:dd:d8:61:99:d8:8f:ac:b1:4b:0f:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:29:A6:E9:12:B8:10:84:23:71:47:38:4C:67:79:D3:82:B2:28:AC
            X509v3 Authority Key Identifier:
                keyid:B7:5B:99:CF:AF:D6:48:74:93:C4:C8:C6:4A:32:D3:D0:DD:6C:E3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/B75B99CFAFD6487493C4C8C64A32D3D0DD6CE350.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:26:b7:80:1a:05:c5:bc:aa:73:fd:9e:e6:aa:3e:d3:02:00:
         d1:15:83:89:99:4d:db:d6:bd:40:d9:dd:3a:a2:7e:0a:02:f9:
         57:54:5d:fa:23:a2:62:5c:bd:eb:6b:fd:6d:54:17:ae:74:b6:
         b9:c4:5d:af:34:6a:52:52:1a:bb:e0:44:a9:af:24:80:f2:75:
         fa:36:6c:ea:56:e6:21:c3:8b:23:56:d4:63:17:95:10:b7:0e:
         cd:ea:e6:24:69:21:dc:2e:7a:27:42:85:21:ab:d5:27:45:f7:
         49:2f:f4:06:f6:76:07:7e:fe:6b:f4:ec:37:fe:24:73:bb:51:
         a3:9c:8b:a4:98:07:71:24:70:ed:71:66:91:2a:82:19:ee:62:
         d5:48:ac:e8:0d:7e:3a:b5:ed:48:9d:d2:9d:20:2e:b3:3d:2b:
         e2:28:80:08:3b:08:a3:ff:24:85:1b:60:1f:ba:5e:71:0a:d9:
         2d:17:5b:2b:d5:b4:60:08:42:c0:0d:ea:19:15:06:3f:59:b9:
         af:57:c2:bc:38:7d:44:87:db:6d:85:47:28:b3:65:a2:56:14:
         5c:e8:8a:f7:9c:9d:5d:a5:71:c7:52:cd:a9:a2:ef:c7:5b:11:
         f6:bb:c3:1b:b5:a7:3d:dc:7e:e3:36:f9:43:5d:d4:76:d1:31:
         5c:c6:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----