Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.mft
File:                     33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.mft (raw, json)
Hash identifier:          rPzuCd7GCbcU2Tzt3tRKIoYN/fL19ZZRKI7H2hFEcsQ=
Subject key identifier:   47:E2:77:A9:24:6B:F5:DC:AE:3C:1A:FB:BD:F2:94:83:B7:84:F4:A8
Authority key identifier: 33:A6:DF:FF:7F:2B:17:EF:89:28:30:BB:63:5C:0D:F0:AB:06:F3:3A
Certificate issuer:       /CN=33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A
Certificate serial:       21D54F34C2EA8B49EB587CB2FA63FE47372D5795
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.mft
Manifest number:          013D
Signing time:             Wed 27 Nov 2024 01:57:55 +0000
Manifest this update:     Wed 27 Nov 2024 01:52:55 +0000
Manifest next update:     Thu 28 Nov 2024 05:36:55 +0000
Files and hashes:         1: 33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.crl (hash: 3Toim9P5k+B1JgAsrSHH3VfonGt20/fY9GrsvVk6ZcQ=)
                          2: 323830343a353966383a3a2f33322d3438203d3e20323638373337.roa (hash: AiOtuScYnHPd4bHROdSU+L6d2ZRJpaMHbghGNw+wNY8=)
                          3: 34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa (hash: 7r0Fo4iNhF6jasljvWT7AWp4VOBw5vxA8pRQ/s9DB9w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d5:4f:34:c2:ea:8b:49:eb:58:7c:b2:fa:63:fe:47:37:2d:57:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A
        Validity
            Not Before: Nov 27 01:52:55 2024 GMT
            Not After : Nov 28 05:36:55 2024 GMT
        Subject: CN=47E277A9246BF5DCAE3C1AFBBDF29483B784F4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:05:93:ac:16:52:3b:fe:d0:e9:ba:f8:dc:
                    63:e1:02:d2:48:41:3f:72:ff:81:e2:cd:3c:86:46:
                    ff:4e:a8:7f:4c:cb:d7:22:d7:18:89:5a:da:d0:7c:
                    e8:39:8c:96:35:11:55:c3:c4:2d:12:89:7e:8d:ff:
                    72:a0:d9:55:ff:db:4c:5f:f6:4b:35:b4:60:25:64:
                    61:7a:3c:5d:79:44:48:b0:2d:09:0e:8a:38:e8:d8:
                    b3:3d:91:19:89:a9:3c:24:da:a2:75:ef:db:f9:13:
                    23:c7:7d:90:a5:88:0d:86:b4:40:fb:09:59:b0:32:
                    3d:cd:fa:1b:e0:70:0f:4a:13:f8:82:2a:d5:3a:68:
                    b0:f9:26:47:9a:aa:48:61:20:ed:63:e9:58:e6:32:
                    02:00:e2:e1:c5:54:95:50:e9:4b:f1:59:25:83:1b:
                    49:19:96:4c:fe:d0:1c:16:1d:7a:cc:ad:34:9d:1b:
                    e2:b9:92:4d:8c:2c:8b:d0:81:4e:35:1d:e3:d1:cb:
                    3e:4b:45:bb:4f:83:9f:46:99:24:14:16:d3:76:c0:
                    45:52:bc:ea:08:de:bc:37:89:e8:1b:d0:2b:58:33:
                    71:36:71:e4:71:aa:c5:db:a3:fc:58:95:5b:ed:5f:
                    f4:d6:a3:50:86:02:21:ce:5e:3c:3e:e3:35:b0:08:
                    93:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E2:77:A9:24:6B:F5:DC:AE:3C:1A:FB:BD:F2:94:83:B7:84:F4:A8
            X509v3 Authority Key Identifier:
                keyid:33:A6:DF:FF:7F:2B:17:EF:89:28:30:BB:63:5C:0D:F0:AB:06:F3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d5:9b:31:63:ac:91:3b:20:ae:7b:32:76:52:4d:2b:92:e1:
         8b:ce:59:88:3f:ad:27:3c:4d:78:3f:ca:87:8b:ce:d6:06:24:
         e0:da:dd:fc:05:eb:61:5d:65:5c:33:12:33:e8:7b:30:8c:50:
         4e:b1:d9:96:25:0b:0e:a9:40:9c:5d:c1:da:15:c7:90:fe:03:
         d5:68:32:ec:69:5d:a6:15:11:e9:c2:1b:6c:66:f5:58:0e:03:
         14:d6:c3:f8:a8:81:2e:25:d6:99:8a:d6:34:9c:77:d4:6e:26:
         50:32:68:b0:53:0b:a3:03:27:38:ea:90:58:fc:c7:44:d9:be:
         f5:4c:8f:32:7f:f8:7f:ef:10:2a:88:e4:97:22:84:a3:a8:52:
         85:5c:4e:bd:55:d8:35:5c:b9:fa:23:dd:b5:1e:dc:d4:f6:40:
         cc:ab:b3:52:e9:6a:f0:99:cf:c4:9a:8b:26:2b:9d:36:4b:84:
         1d:e7:57:bf:ab:0b:fd:c2:e5:0c:c4:4a:59:47:76:68:0f:f7:
         59:b1:e0:ca:57:7d:3b:19:6b:84:ab:a1:b0:f2:80:b6:ad:fc:
         85:c0:83:d1:2a:45:23:26:cd:4b:7e:54:e3:7f:2d:f6:9f:4c:
         43:24:a9:5f:84:67:74:38:4d:63:93:03:51:fe:38:16:da:86:
         44:ed:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----