Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.mft
File:                     243A1884366E9900B679E354E56993980B33B31A.mft (raw, json)
Hash identifier:          XRK+WYG6EihxcEZAnwraSYOFpU5Or1zf6l80BR39/8I=
Subject key identifier:   76:D7:B4:4D:9B:21:C9:95:45:DC:F0:F2:CF:50:F2:2D:9F:6F:B0:E9
Authority key identifier: 24:3A:18:84:36:6E:99:00:B6:79:E3:54:E5:69:93:98:0B:33:B3:1A
Certificate issuer:       /CN=243A1884366E9900B679E354E56993980B33B31A
Certificate serial:       E30853A35FD17AF81FDF3B301987A5EDB8CD93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.mft
Manifest number:          82
Signing time:             Tue 11 Feb 2025 18:53:54 +0000
Manifest this update:     Tue 11 Feb 2025 18:48:54 +0000
Manifest next update:     Wed 12 Feb 2025 21:03:54 +0000
Files and hashes:         1: 243A1884366E9900B679E354E56993980B33B31A.crl (hash: afjEvFf/TUamxEvyQqYs6qrThiczhWH7D9xBTJj2FfA=)
                          2: 323830343a366566383a3a2f33322d3438203d3e20323730363330.roa (hash: PK8H3LSt4yaCnNesd4X91uI7Wo/HKj8aNpBAmMup21o=)
                          3: 3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa (hash: bwy3T898+c0i4Z18RoyuhKZ1sPInCzUxdYQF3YkbBNY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e3:08:53:a3:5f:d1:7a:f8:1f:df:3b:30:19:87:a5:ed:b8:cd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243A1884366E9900B679E354E56993980B33B31A
        Validity
            Not Before: Feb 11 18:48:54 2025 GMT
            Not After : Feb 12 21:03:54 2025 GMT
        Subject: CN=76D7B44D9B21C99545DCF0F2CF50F22D9F6FB0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:42:1e:d6:5b:32:b3:6f:75:7f:4a:25:5a:
                    f6:87:42:05:7f:d3:4d:72:e3:4c:46:ce:8a:30:e4:
                    dc:20:ac:3e:7e:b9:5d:5f:c0:9d:45:2b:1a:b0:a6:
                    51:0c:9e:a7:a5:17:ad:a7:b3:b6:6e:30:d2:80:d0:
                    75:b8:5d:db:04:1a:23:f0:dc:49:c1:1c:97:23:b5:
                    70:65:bc:00:ac:2a:1a:f0:cc:eb:04:08:eb:37:58:
                    c6:8e:f4:4e:70:4d:2c:f3:f9:ba:44:1b:c9:1e:18:
                    ef:b9:37:8a:17:1a:a1:91:86:55:9a:5d:3a:c6:5c:
                    5f:9a:7a:3b:24:9d:0a:c3:4c:e8:4b:18:0b:41:57:
                    a5:25:24:66:cc:0e:2e:f2:af:0a:f6:ea:46:88:22:
                    79:43:85:16:72:e4:d9:85:88:1b:4f:bf:32:4b:c1:
                    57:1f:e2:3a:e9:0a:6c:95:13:52:49:e1:d9:af:a0:
                    c8:44:73:29:33:8f:4c:a3:8f:05:ab:04:72:c3:87:
                    33:58:06:8d:25:41:c5:96:3f:32:5a:aa:95:4e:00:
                    da:d7:10:4c:1c:91:51:74:c1:da:6c:11:3f:b3:8a:
                    20:b4:a8:ae:b3:84:1c:89:c3:e3:aa:c0:ab:bf:f6:
                    be:c7:f1:ba:64:4f:2f:f7:33:ce:f5:8b:87:19:1d:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:B4:4D:9B:21:C9:95:45:DC:F0:F2:CF:50:F2:2D:9F:6F:B0:E9
            X509v3 Authority Key Identifier:
                keyid:24:3A:18:84:36:6E:99:00:B6:79:E3:54:E5:69:93:98:0B:33:B3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:d4:42:99:7e:23:46:48:92:45:a0:aa:e7:dd:0e:19:ff:
         56:b0:a7:a7:95:c3:da:68:b5:74:b3:17:58:8e:d7:17:a2:5b:
         c0:33:24:f8:3b:35:00:e8:13:2e:a1:57:2f:eb:48:f9:9d:e5:
         39:da:2a:77:64:7d:ef:72:48:31:5a:1a:87:cc:9a:d5:91:28:
         86:23:ff:b3:6f:3c:21:28:c6:fe:91:1c:2e:13:8e:db:65:f7:
         bc:7f:71:66:43:6e:47:cd:80:54:dd:db:af:1a:91:c4:49:d1:
         21:11:9b:0f:47:26:07:4d:ab:73:1a:ab:08:4e:cb:77:7f:0e:
         23:c3:02:a4:3a:da:d6:8d:b4:9a:4d:b5:c6:a2:79:22:c7:87:
         6c:16:b3:e2:dc:d6:af:19:2f:f1:ae:61:d3:47:bd:fc:d4:87:
         16:e3:7a:3b:d3:eb:fb:18:31:ef:66:78:e4:1e:ba:20:46:ec:
         2c:83:cf:6c:79:69:df:50:67:c9:a0:39:36:14:d0:71:52:3f:
         75:ae:28:f6:da:3a:b4:ab:69:12:4f:c4:03:2b:02:f1:e9:ea:
         d3:18:71:aa:a0:2d:da:0e:79:e0:bc:f5:76:f9:35:c7:29:79:
         0d:27:de:c2:3c:4b:82:ed:4a:f0:a5:6b:6d:42:14:9a:41:2e:
         63:20:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----