Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
File:                     38E14B86FE172DD4D8E534146604EB873463394D.mft (raw, json)
Hash identifier:          Hfqe9hEzg63JEl64PM+cLYdYnswDc0SZ2EHVVW4qbHE=
Subject key identifier:   E7:F1:53:13:9F:92:50:E9:64:3F:CB:0D:0F:0B:AA:85:AB:49:A8:E2
Authority key identifier: 38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D
Certificate issuer:       /CN=38E14B86FE172DD4D8E534146604EB873463394D
Certificate serial:       12EBB418AD99F1A13B2334DE73AC2724FE05F3CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
Manifest number:          8A
Signing time:             Fri 28 Mar 2025 19:58:00 +0000
Manifest this update:     Fri 28 Mar 2025 19:53:00 +0000
Manifest next update:     Sat 29 Mar 2025 23:07:00 +0000
Files and hashes:         1: 3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (hash: FGbym0C7oy+3WkWLxGeUkkMs9tZRG07fiF6hYHOGFP8=)
                          2: 38E14B86FE172DD4D8E534146604EB873463394D.crl (hash: 5pOviDQW/uEXNjrdC+JjWNVj9QYxzkqlptPRNbwITIo=)
                          3: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (hash: KS3CIPQBP8uBSzv8b+te50bhqKxNppim+ZvFE5maTMk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:eb:b4:18:ad:99:f1:a1:3b:23:34:de:73:ac:27:24:fe:05:f3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E14B86FE172DD4D8E534146604EB873463394D
        Validity
            Not Before: Mar 28 19:53:00 2025 GMT
            Not After : Mar 29 23:07:00 2025 GMT
        Subject: CN=E7F153139F9250E9643FCB0D0F0BAA85AB49A8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:cd:22:a9:2d:9e:f6:cd:1e:e7:8f:e7:83:
                    9b:8a:fd:b7:f7:64:81:b1:54:61:83:e4:07:98:c1:
                    04:25:df:52:ac:09:40:39:6f:d0:c0:c1:96:0a:1a:
                    b0:02:54:91:4a:78:b8:0e:b5:c0:74:2b:c3:bc:d8:
                    80:b8:65:a1:c8:1b:5e:f6:42:d0:b9:2f:8c:49:52:
                    fe:88:f9:48:43:40:e8:92:91:8a:a6:61:77:48:ca:
                    18:95:59:6b:80:2b:a2:26:ed:fa:49:e7:5d:b4:34:
                    2f:16:6d:84:ae:11:67:f0:d5:e5:bd:74:3f:68:e0:
                    4a:e1:51:c9:58:65:57:01:f8:82:6c:f7:42:41:68:
                    73:2a:04:7b:fa:df:00:fa:b5:21:0d:b9:85:14:43:
                    3c:21:ba:27:96:37:01:38:ed:a1:51:7e:55:c3:a0:
                    0c:de:14:04:40:f7:a3:4a:2f:60:fa:f4:90:bf:9f:
                    c3:37:00:3e:00:8e:42:57:64:50:9d:67:b1:ae:28:
                    98:fd:07:c1:69:c2:1d:ff:3f:23:48:d1:80:92:77:
                    ee:a1:ee:3a:29:a7:d0:88:82:38:87:37:6a:de:d2:
                    58:dc:a1:bc:54:e0:21:8c:b9:e7:54:9e:44:27:91:
                    28:dc:65:20:9b:2e:02:80:ce:42:d9:75:18:48:04:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F1:53:13:9F:92:50:E9:64:3F:CB:0D:0F:0B:AA:85:AB:49:A8:E2
            X509v3 Authority Key Identifier:
                keyid:38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:a8:f9:29:35:0a:32:4f:75:68:98:3c:30:dc:0c:c6:20:
         41:1c:5e:66:c3:18:71:46:07:00:36:f1:76:2a:e5:de:0a:0b:
         ab:66:d4:31:57:3f:64:64:a0:e9:b0:54:64:dc:38:d5:00:03:
         a5:14:19:9a:b0:05:1d:5a:6b:9b:f6:5c:66:6a:d9:3b:5e:1d:
         1e:53:75:fb:a0:c4:21:9b:d4:d2:86:34:9f:83:fb:b3:58:00:
         c0:51:bf:96:a7:a9:97:b8:eb:7c:35:23:60:a3:b8:c8:75:ca:
         3c:30:dd:a9:d1:5c:a4:14:49:87:53:4c:69:f9:dd:0e:e1:35:
         b9:4b:ca:48:b1:50:2c:31:71:ff:2d:b1:1d:b5:0b:cb:6d:4e:
         c8:4d:bf:4d:89:26:cd:ff:44:43:49:8c:de:75:d0:ce:ba:db:
         92:cc:30:90:c3:6a:a1:f3:19:12:b7:cd:9c:c9:98:4a:ec:9d:
         63:04:c5:71:32:24:b3:f1:59:3a:7f:23:12:29:b7:d7:58:6b:
         b5:66:de:ca:2c:fe:33:05:1e:95:79:5f:7b:31:f4:3d:e2:59:
         05:24:71:d3:63:85:db:d3:f4:6f:17:5c:a9:ff:6e:81:2c:60:
         20:66:d8:9d:0f:fb:84:9d:bc:a2:86:73:4f:de:49:46:44:66:
         ad:2e:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----