Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/1/C30EA7B642EDD56FDAE966FBDF740E7083482C88.mft
File:                     C30EA7B642EDD56FDAE966FBDF740E7083482C88.mft (raw, json)
Hash identifier:          /9hMLPsnjvmMhW/U6vmBYITMHm+VhMLrWC2YPclqfHI=
Subject key identifier:   2C:A8:21:7A:42:8E:A4:38:10:15:69:3C:78:B1:0C:1E:11:03:4C:0B
Authority key identifier: C3:0E:A7:B6:42:ED:D5:6F:DA:E9:66:FB:DF:74:0E:70:83:48:2C:88
Certificate issuer:       /CN=C30EA7B642EDD56FDAE966FBDF740E7083482C88
Certificate serial:       63F8A6354145A2ADD24E32A8FE2B5698DC1F686F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C30EA7B642EDD56FDAE966FBDF740E7083482C88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/1/C30EA7B642EDD56FDAE966FBDF740E7083482C88.mft
Manifest number:          015D
Signing time:             Sat 21 Dec 2024 00:59:05 +0000
Manifest this update:     Sat 21 Dec 2024 00:54:05 +0000
Manifest next update:     Sun 22 Dec 2024 04:58:05 +0000
Files and hashes:         1: C30EA7B642EDD56FDAE966FBDF740E7083482C88.crl (hash: pVbXYgiunk0WXmz90AgwHdheL3tlySDUeI0W8bpTb5Q=)
                          2: 323830343a6339343a3a2f33322d3438203d3e20323632373230.roa (hash: CUBlQtCFszf+xsm+OJz6yvXwcXHRT+u94VdMIBUXEck=)
                          3: 3138362e3139352e39362e302f32302d3234203d3e20323632373230.roa (hash: vHalRvDs3dHGX+NyCvMApQ8cMM49Rfvjx2xMGcgxVKU=)
                          4: 3137372e382e3139322e302f32302d3234203d3e20323632373230.roa (hash: vLF0WzVbsIOVxTwQzd+1ZBVzmEA2od/Beyth6C7Zi6M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f8:a6:35:41:45:a2:ad:d2:4e:32:a8:fe:2b:56:98:dc:1f:68:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30EA7B642EDD56FDAE966FBDF740E7083482C88
        Validity
            Not Before: Dec 21 00:54:05 2024 GMT
            Not After : Dec 22 04:58:05 2024 GMT
        Subject: CN=2CA8217A428EA4381015693C78B10C1E11034C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:41:c6:4a:40:3b:59:87:4e:1f:d9:9e:b5:
                    32:08:6c:73:22:91:c0:4c:95:c2:7d:49:9b:61:f3:
                    1f:e5:61:e9:d7:45:c0:62:f2:78:33:c2:b3:5d:cb:
                    e3:bd:50:68:02:2f:98:fb:7a:88:e8:f9:54:03:c3:
                    38:6e:5f:9d:99:d4:41:3c:b0:7e:a1:7e:57:d8:94:
                    84:49:3f:9c:6b:7e:9f:a0:a0:f9:50:ae:f5:86:92:
                    b7:2a:82:a9:56:65:06:93:fb:0a:98:49:83:7f:01:
                    61:ce:69:a3:67:db:6f:ee:4c:9b:12:dc:05:90:ba:
                    89:90:f4:bb:23:84:f5:4f:10:fd:a5:8a:16:c4:89:
                    2d:b0:4c:81:7d:90:7c:e8:8b:87:70:d8:e7:85:22:
                    c4:8e:fa:c5:77:19:e7:a7:7c:f5:db:8f:51:9e:88:
                    df:db:43:b3:84:00:b6:16:f4:c9:7d:f5:4f:65:8e:
                    f2:e3:ac:e6:d7:b1:b6:32:bb:9f:af:d9:90:1c:31:
                    1e:55:89:21:2a:68:d2:82:7f:dd:f9:6b:49:16:8b:
                    ee:a2:d0:9c:61:d7:19:bf:9b:03:ef:39:f6:61:11:
                    56:bf:67:64:2f:4f:97:c9:11:fd:a5:53:00:2e:b3:
                    6f:d2:53:93:da:5b:b2:fd:24:40:f6:cc:ee:f8:66:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A8:21:7A:42:8E:A4:38:10:15:69:3C:78:B1:0C:1E:11:03:4C:0B
            X509v3 Authority Key Identifier:
                keyid:C3:0E:A7:B6:42:ED:D5:6F:DA:E9:66:FB:DF:74:0E:70:83:48:2C:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/1/C30EA7B642EDD56FDAE966FBDF740E7083482C88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C30EA7B642EDD56FDAE966FBDF740E7083482C88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/1/C30EA7B642EDD56FDAE966FBDF740E7083482C88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:5e:ed:7f:2f:e5:46:58:c6:29:d8:a7:63:38:47:7a:58:
         d0:f1:c8:e8:43:80:6a:5d:34:7f:22:84:43:f2:ca:03:d0:97:
         78:c3:1b:c6:06:22:99:57:62:9b:ba:86:fe:53:91:90:a6:7a:
         97:78:c3:ba:b2:8a:d3:32:82:4f:d6:7e:63:90:a7:55:da:d2:
         c5:f8:d1:a3:f8:22:cb:07:89:4b:07:40:69:8d:be:47:bc:21:
         7f:3c:4c:b9:1f:1f:bc:ce:15:7d:58:e8:7a:5e:c5:d4:f7:aa:
         90:a6:70:d7:51:50:fb:b8:12:01:aa:35:66:ff:d6:9c:14:a7:
         83:f2:97:57:8f:6b:df:81:d6:0b:91:02:5c:2a:c5:6c:6a:ad:
         1b:8b:5b:72:ff:52:c9:a2:b6:97:43:4d:03:bc:a2:d8:bb:40:
         c5:24:a8:4d:42:91:42:9c:e5:09:8f:d2:78:8d:f0:d0:ef:06:
         5b:de:9f:5e:83:a1:54:1d:50:6e:2e:3a:66:36:73:d7:e2:5a:
         55:ff:d0:83:bb:35:ba:f9:4c:bc:d2:7c:f7:46:be:e9:43:d4:
         e5:9a:57:29:dd:91:7e:1c:d7:10:88:3b:5c:a1:2f:47:99:9a:
         66:0b:7c:d6:08:a3:d5:33:3c:6d:c8:49:70:68:7d:4e:e0:78:
         d9:dc:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----