Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.mft
File:                     4F3C63A4C583A15ECA112E14A2ACE28AFE972053.mft (raw, json)
Hash identifier:          lp+fyYfOy/MQJ3MlOKYRqCanKx/3pv7Ga9+pXOa4mqU=
Subject key identifier:   E8:53:16:66:3A:BF:F4:67:A9:90:6E:E9:CD:49:0F:9D:4D:E4:DB:2D
Authority key identifier: 4F:3C:63:A4:C5:83:A1:5E:CA:11:2E:14:A2:AC:E2:8A:FE:97:20:53
Certificate issuer:       /CN=4F3C63A4C583A15ECA112E14A2ACE28AFE972053
Certificate serial:       149D5DB27C26A7D2F6C510C1BB6AF619E5E83A9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.mft
Manifest number:          0114
Signing time:             Mon 17 Feb 2025 15:45:40 +0000
Manifest this update:     Mon 17 Feb 2025 15:40:40 +0000
Manifest next update:     Tue 18 Feb 2025 18:25:40 +0000
Files and hashes:         1: 4F3C63A4C583A15ECA112E14A2ACE28AFE972053.crl (hash: pjak8ClzuLO6lgJPbPRA7tB6VBOuJk/NeGw8h7khocA=)
                          2: 3133382e39392e3139362e302f32322d3234203d3e20323634323136.roa (hash: OX9TTEMV3ymeiKJrKyD5SMOVqI+yyNpgRKqIPdkp8iQ=)
                          3: 323830343a323435383a3a2f33322d3336203d3e20323634323136.roa (hash: moBrazak0n5YromInR2fw8vMGAkRZTtKa9d/Q7awDcs=)
                          4: 3137372e38362e34382e302f32312d3234203d3e20323634323136.roa (hash: ZtSHpw7sKxrPVHcfxDFwQHdy5uN2jhsYr/XmRse4Q10=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9d:5d:b2:7c:26:a7:d2:f6:c5:10:c1:bb:6a:f6:19:e5:e8:3a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3C63A4C583A15ECA112E14A2ACE28AFE972053
        Validity
            Not Before: Feb 17 15:40:40 2025 GMT
            Not After : Feb 18 18:25:40 2025 GMT
        Subject: CN=E85316663ABFF467A9906EE9CD490F9D4DE4DB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:f7:34:cd:ea:9c:04:cb:bd:42:6e:a8:5a:
                    2c:ac:a4:a6:63:92:de:6a:aa:f4:64:e1:ed:04:fa:
                    22:69:0c:3d:5e:ca:a9:12:d5:12:5f:80:84:25:a3:
                    70:c3:98:40:d4:43:74:98:96:47:5a:e2:4c:ba:9f:
                    b4:b7:39:67:2d:84:dc:f8:ba:18:98:a8:4b:cf:80:
                    0e:e8:ae:c0:db:5e:4b:fd:05:ad:bb:a6:53:7b:0b:
                    0f:99:57:99:b2:27:26:df:ad:b0:65:d9:37:cf:8b:
                    28:47:e7:4d:41:ad:55:c7:25:a5:25:30:0c:03:8f:
                    b9:16:9f:f7:53:db:63:50:32:0f:77:d0:ba:c8:75:
                    c2:04:27:79:6c:b8:75:50:d0:32:bc:0d:37:b4:b6:
                    80:c2:10:8a:28:ac:24:71:93:42:17:4f:8a:a5:75:
                    13:8e:25:9f:bd:00:bb:49:7a:92:34:24:da:93:d0:
                    73:e4:6e:69:3b:16:0a:2c:29:7a:42:fa:3d:d5:4f:
                    76:a3:b5:b7:73:90:8c:88:7f:12:11:c4:cb:f5:1d:
                    2e:39:5a:7a:16:f3:b9:5c:17:2b:fc:bb:67:fa:1d:
                    8d:1f:7b:1a:bd:56:fe:07:5a:f7:74:bb:79:49:8d:
                    12:94:70:95:33:2b:3f:c3:af:e7:5c:da:fd:14:29:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:53:16:66:3A:BF:F4:67:A9:90:6E:E9:CD:49:0F:9D:4D:E4:DB:2D
            X509v3 Authority Key Identifier:
                keyid:4F:3C:63:A4:C5:83:A1:5E:CA:11:2E:14:A2:AC:E2:8A:FE:97:20:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a2:ad:e5:8d:cb:ad:56:80:02:55:cf:fa:83:9f:7e:a8:34:
         72:68:00:f0:a0:f3:e5:cf:63:83:eb:7a:ed:c4:5b:f4:1c:3c:
         55:e0:f7:23:2b:bf:55:ee:a6:62:e7:9e:45:b9:e1:60:09:7c:
         72:fe:c0:2d:f1:94:f0:78:15:98:32:ac:78:8c:90:17:92:6d:
         2c:d2:e4:ca:27:cf:f5:c2:06:8d:52:bc:e0:2b:d3:9e:bc:20:
         53:e3:09:d9:8d:c6:e2:ea:e9:3d:45:dc:bf:12:8a:8c:00:3f:
         a6:bd:7c:6b:8e:ad:ff:37:e6:52:67:cd:bc:19:f5:12:f2:08:
         6b:3c:c9:a6:56:1c:28:da:9c:37:39:b3:38:2a:41:f3:31:c4:
         f8:c9:4b:8e:ff:f9:a8:64:89:3a:a0:bf:ad:e1:85:06:3e:b7:
         b4:d6:34:45:86:90:ef:9f:02:31:4e:30:f4:30:e9:f5:f0:d7:
         2d:a4:ee:e4:de:72:c2:63:ea:56:e6:04:65:df:c4:88:21:9f:
         05:74:0d:2f:b9:47:02:ec:b3:b3:aa:5e:9c:4f:93:87:61:db:
         7b:da:55:ac:c6:ad:b9:ce:fc:38:d7:86:6c:23:26:0d:e3:36:
         8a:73:57:4c:ca:c1:74:c4:96:45:38:37:0c:c2:77:50:55:71:
         74:61:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----