Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.mft
File:                     37EB8EE765648941F5940F0A601E6B1CA23382F4.mft (raw, json)
Hash identifier:          8KGNnyyPqejfPKB2qKVsEOwxnjs3BjxigewfyJlKFBk=
Subject key identifier:   8C:CD:BC:22:51:F3:50:EB:61:73:1E:18:96:4F:00:78:2B:F2:20:11
Authority key identifier: 37:EB:8E:E7:65:64:89:41:F5:94:0F:0A:60:1E:6B:1C:A2:33:82:F4
Certificate issuer:       /CN=37EB8EE765648941F5940F0A601E6B1CA23382F4
Certificate serial:       06F3411FAD637DA9B87D8E7C7D91D3BA50FD20AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EB8EE765648941F5940F0A601E6B1CA23382F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.mft
Manifest number:          0102
Signing time:             Thu 30 Jan 2025 17:53:43 +0000
Manifest this update:     Thu 30 Jan 2025 17:48:43 +0000
Manifest next update:     Fri 31 Jan 2025 20:43:43 +0000
Files and hashes:         1: 34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa (hash: nwGXjy17dqAcHtvb6xWRbgiR/f3Ii1nLiImmtwcxBwc=)
                          2: 37EB8EE765648941F5940F0A601E6B1CA23382F4.crl (hash: 4y/Cp88lGcQj6CNhYK226cjICR933+pVL+nlzKG4T24=)
                          3: 323830343a363333383a3a2f33322d313238203d3e20323639333437.roa (hash: LQBUAlcEWIhW33+f7CU8VGQj+bGaiAmnqFKEjnnmlFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f3:41:1f:ad:63:7d:a9:b8:7d:8e:7c:7d:91:d3:ba:50:fd:20:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EB8EE765648941F5940F0A601E6B1CA23382F4
        Validity
            Not Before: Jan 30 17:48:43 2025 GMT
            Not After : Jan 31 20:43:43 2025 GMT
        Subject: CN=8CCDBC2251F350EB61731E18964F00782BF22011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d0:47:2e:bd:c6:36:1e:a7:df:e1:8f:cf:4e:
                    0d:b9:66:d1:8a:25:31:81:ad:53:dd:b6:e9:24:d3:
                    f4:83:0b:7c:34:a9:8d:71:ce:1a:d0:c2:51:c4:78:
                    c2:ba:34:26:ef:77:89:e9:e8:a7:9b:ea:b0:d5:6b:
                    7f:4e:7f:56:b6:55:fe:75:10:86:5c:60:b5:bb:6f:
                    0a:2f:0b:f7:97:0f:84:e8:06:11:9f:93:f2:27:76:
                    4a:c4:3e:e4:d6:d5:f0:cf:4f:60:c6:df:54:90:ea:
                    c0:27:97:49:7e:c7:4f:5e:a7:79:7f:b3:a1:d3:2c:
                    ec:d9:89:5b:88:12:62:a4:86:45:4c:05:e3:4b:2f:
                    16:52:20:4d:2f:ca:d6:f5:fb:d8:5e:26:c4:9a:ea:
                    ae:2d:e3:a5:48:37:0f:10:0b:d1:62:2a:8e:57:10:
                    5a:52:b3:0d:fc:0b:ad:9c:70:07:91:52:78:26:7e:
                    bd:eb:eb:e6:60:74:36:99:50:1d:a6:e8:37:86:03:
                    13:e5:4e:1b:2d:09:ee:24:c1:dc:0d:d3:21:c2:d8:
                    0c:6c:36:a4:5d:fd:54:11:d1:2e:48:27:3e:57:49:
                    3e:16:14:e5:08:a5:9c:2f:c5:7d:44:2d:d6:7f:52:
                    e8:ff:29:58:c0:0d:87:01:f5:45:87:75:a7:ae:72:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:BC:22:51:F3:50:EB:61:73:1E:18:96:4F:00:78:2B:F2:20:11
            X509v3 Authority Key Identifier:
                keyid:37:EB:8E:E7:65:64:89:41:F5:94:0F:0A:60:1E:6B:1C:A2:33:82:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EB8EE765648941F5940F0A601E6B1CA23382F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:7a:c5:3d:23:11:06:6e:55:2a:f1:4f:b0:be:66:db:dd:
         e8:e8:b8:43:f1:d9:89:c5:70:76:ea:eb:78:1b:64:01:3c:69:
         a6:36:63:25:d4:71:ca:29:7e:9f:d0:6d:c9:10:48:e2:a2:ed:
         e2:3f:d6:99:bb:55:e4:eb:50:af:9e:0e:a8:2b:0c:3e:7f:5e:
         82:21:b5:d4:01:9c:a1:3f:aa:45:7a:60:5a:d7:cd:17:c8:74:
         96:81:f5:b7:63:85:0e:71:9d:3e:6d:48:89:77:5d:32:c0:59:
         7e:21:cc:bb:32:57:39:75:52:9a:8a:ff:4b:b6:3c:df:3e:d8:
         4e:ac:12:e4:c6:47:73:87:eb:16:09:66:6d:29:30:6f:46:39:
         84:0e:7f:86:8f:5c:91:e8:c6:d0:a0:88:33:89:ec:a4:56:29:
         9c:31:81:02:aa:e7:2e:33:90:d4:97:fc:f2:ba:2e:38:ac:a7:
         2a:55:88:de:71:5e:13:9d:0b:cf:af:c6:6f:b1:4e:be:45:7e:
         d8:ba:83:6a:88:ab:34:b5:d3:e4:f3:ad:a1:1e:f8:86:92:ac:
         ac:c6:01:6f:aa:ac:7d:48:3e:5e:aa:a1:ac:96:11:83:11:58:
         8b:6b:65:9f:1b:ab:bc:a3:e6:45:09:44:e2:c6:c0:df:07:1b:
         af:e2:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----