Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.mft
File:                     33FC465BDB75F74010029718CB2EA6DB8FA9EF32.mft (raw, json)
Hash identifier:          RdV8hawGSbodLU0VOQcAU0kLjL+Dll/Q9amkezRpHcU=
Subject key identifier:   94:FE:CC:4A:14:23:CD:C0:4A:32:CB:C0:DF:64:56:63:75:26:54:5B
Authority key identifier: 33:FC:46:5B:DB:75:F7:40:10:02:97:18:CB:2E:A6:DB:8F:A9:EF:32
Certificate issuer:       /CN=33FC465BDB75F74010029718CB2EA6DB8FA9EF32
Certificate serial:       153BBD1F5F9E0ABA0AB21050DA08795DD05E82B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.mft
Manifest number:          29
Signing time:             Tue 29 Apr 2025 16:54:33 +0000
Manifest this update:     Tue 29 Apr 2025 16:49:33 +0000
Manifest next update:     Wed 30 Apr 2025 16:59:33 +0000
Files and hashes:         1: 32342e3135322e3130342e302f32322d3332203d3e20323730353139.roa (hash: nMznqvjiqJa/OqoynuSfc5j9S/Jb6uvsJv89dx9JAP4=)
                          2: 33FC465BDB75F74010029718CB2EA6DB8FA9EF32.crl (hash: 3oPh93ElOtWs0eD00Jp+WNeM8+L7BkoZ2QuRUZ9XFfs=)
                          3: 323830343a366433633a3a2f33322d313238203d3e20323730353139.roa (hash: C+XWAZq5dLnWvj1kcDprPvKjOSkNxcZfUiERiPfE0hY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3b:bd:1f:5f:9e:0a:ba:0a:b2:10:50:da:08:79:5d:d0:5e:82:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33FC465BDB75F74010029718CB2EA6DB8FA9EF32
        Validity
            Not Before: Apr 29 16:49:33 2025 GMT
            Not After : Apr 30 16:59:33 2025 GMT
        Subject: CN=94FECC4A1423CDC04A32CBC0DF6456637526545B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:89:43:8e:ee:85:9a:1c:3f:89:45:db:40:
                    f2:62:02:84:cf:11:d5:22:79:38:98:39:65:0f:cb:
                    f8:c7:65:ea:3d:53:e3:0b:ab:8a:20:af:c3:17:ad:
                    6f:7d:94:1a:73:89:69:c8:e4:2c:1e:8d:ca:dd:7e:
                    ad:4d:2a:41:bc:9e:90:15:37:31:be:c5:2a:38:f7:
                    39:e9:9a:d6:f6:56:60:bf:81:7c:38:4a:55:9f:32:
                    c6:fc:36:75:12:53:8b:40:9e:a6:bd:c1:f8:5d:ae:
                    5e:88:0d:4d:d5:fd:49:28:d6:d4:09:a5:6a:3f:b6:
                    ba:99:66:86:27:04:50:cc:f4:91:c4:90:16:d9:1d:
                    f5:36:b1:0b:52:0e:9f:97:e0:3e:fb:59:94:5e:52:
                    c7:45:5b:c9:67:33:92:81:84:cf:85:d7:3b:d4:f6:
                    d5:89:59:9d:b8:eb:0e:59:ec:dd:4c:0b:64:5f:ee:
                    d3:a6:6f:04:0c:2e:52:5f:3d:57:4b:d1:15:f7:14:
                    b1:b2:3e:05:10:a3:e6:1c:34:71:00:88:04:49:22:
                    0e:a6:87:9f:07:6d:78:46:0f:f9:35:25:b9:99:ee:
                    3e:ad:74:66:1d:3f:ad:3d:ab:bb:50:8e:41:82:47:
                    03:4a:f3:f1:bf:5a:c9:56:37:97:25:c1:5f:74:02:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FE:CC:4A:14:23:CD:C0:4A:32:CB:C0:DF:64:56:63:75:26:54:5B
            X509v3 Authority Key Identifier:
                keyid:33:FC:46:5B:DB:75:F7:40:10:02:97:18:CB:2E:A6:DB:8F:A9:EF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/33FC465BDB75F74010029718CB2EA6DB8FA9EF32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f8:4a:6c:fd:9a:2a:ee:1d:21:40:f2:39:aa:1f:65:be:bc:
         66:4b:f4:04:a6:02:e7:44:4e:5e:1f:48:13:6a:08:5b:b3:b8:
         58:00:f8:0d:d8:e0:cf:66:c9:e4:91:05:f1:b7:65:8a:d1:63:
         c5:27:13:90:63:9f:d2:d7:5e:e5:e2:94:00:c5:75:7d:2f:33:
         70:e5:24:4d:aa:65:33:1f:64:f5:05:09:a3:0e:09:a9:74:21:
         e0:1e:e8:a6:bd:e4:f2:c7:4a:df:4b:71:e9:05:da:da:6b:77:
         2a:20:af:54:a4:65:69:3f:6e:26:02:51:0f:1d:c4:a3:fa:5c:
         ab:07:23:e8:9c:15:21:af:67:58:0e:3e:0f:ef:86:ec:26:f3:
         51:07:eb:b5:4f:8d:0c:7f:1b:80:21:68:5e:8f:35:e6:2e:e7:
         4e:e7:65:c4:95:f6:c2:c0:33:e3:aa:a6:18:58:47:68:62:b8:
         d4:74:67:de:91:a1:17:d7:dd:17:af:8a:2b:aa:f8:49:99:e4:
         34:fd:bf:95:6c:13:2c:8d:92:dc:c2:dd:74:1e:26:ba:4f:83:
         b1:18:ca:e9:b4:32:59:3d:2f:ad:e6:e1:d5:59:c1:7f:d0:46:
         3b:d1:2c:e8:a9:29:3f:5a:c2:75:78:32:98:29:bb:71:7c:52:
         7b:2b:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----