Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.mft
File:                     2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.mft (raw, json)
Hash identifier:          nGUb+rIorzmcJlnEyoCmKvnH/IimxxgQqEscxFlx0+I=
Subject key identifier:   82:40:E2:C7:72:83:38:DE:DD:05:0A:2D:0E:6D:69:9E:74:10:7D:09
Authority key identifier: 2F:C1:8E:66:BC:89:56:CC:2B:6B:8E:02:F4:E8:A4:DD:B7:73:28:59
Certificate issuer:       /CN=2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859
Certificate serial:       7BBB4A6778CB77319B6DAC033E0082DCD50E0105
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.mft
Manifest number:          4E
Signing time:             Fri 28 Mar 2025 22:05:41 +0000
Manifest this update:     Fri 28 Mar 2025 22:00:41 +0000
Manifest next update:     Sat 29 Mar 2025 22:36:41 +0000
Files and hashes:         1: 323830343a333664383a3a2f33332d3333203d3e20323636333736.roa (hash: c03WlThopgfx8VQKP+zLhTw++GqUXayTbyDTcuKc48U=)
                          2: 2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.crl (hash: LD0Fym94aI5ob7l1fTR24/r8lqj3mJsFLHOLc7AlafY=)
                          3: 323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa (hash: koPkHnPCxBOJ4+33gcs9navoww5NQoVNFsAbW6LmUwo=)
                          4: 323830343a333664383a3a2f33322d3332203d3e20323636333736.roa (hash: DF9a1mzh2CvxZZ/9jOSovfRIkJjoSxl+2bpDoy+M0G0=)
                          5: 3137302e38302e3131322e302f32322d3233203d3e20323636333736.roa (hash: Ju1Hvvrse37ZVfz7oScxnutYPd1Fn0/HJi5KVJNScxQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bb:4a:67:78:cb:77:31:9b:6d:ac:03:3e:00:82:dc:d5:0e:01:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859
        Validity
            Not Before: Mar 28 22:00:41 2025 GMT
            Not After : Mar 29 22:36:41 2025 GMT
        Subject: CN=8240E2C7728338DEDD050A2D0E6D699E74107D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:d8:a5:2c:72:39:fc:12:30:15:85:4e:2f:
                    46:f6:01:59:b0:15:d3:59:fd:d3:0b:e0:6e:cd:67:
                    d8:ed:01:fe:2c:f0:97:8b:15:b5:15:2d:36:13:43:
                    f6:6c:41:4e:1f:82:77:d6:d9:ad:f4:58:1a:6e:83:
                    0f:4d:81:4f:69:9a:bf:90:c9:78:86:85:b6:c7:e8:
                    c7:bb:fb:82:a2:56:7b:ea:50:a4:da:36:5c:44:4e:
                    e9:21:cf:df:76:07:03:29:47:68:a9:71:3f:df:75:
                    8b:31:fa:c4:b4:c6:32:d2:ae:81:13:e4:1f:e0:4e:
                    7d:74:b2:89:df:bc:49:74:ad:36:e0:b8:7a:64:90:
                    1b:71:6d:ce:8d:42:af:be:44:ab:fd:21:a0:ed:f4:
                    bd:ec:f6:fd:45:a3:f2:c8:14:6c:12:e2:34:b2:b4:
                    b0:f1:f7:cf:9b:44:9a:21:66:e8:c7:5a:da:0f:d3:
                    f8:07:38:fa:1b:90:e4:5b:f0:c8:7d:fc:92:1f:6f:
                    b1:af:76:df:35:20:52:02:b9:0e:2a:cb:4a:c1:72:
                    73:83:60:88:df:d4:b7:6b:7e:e0:0e:67:7e:71:fb:
                    cb:40:c4:50:c0:72:75:6e:c6:96:2a:a4:86:c2:21:
                    6a:73:db:85:8d:b2:57:7d:d7:a3:36:ca:f4:a5:8b:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:40:E2:C7:72:83:38:DE:DD:05:0A:2D:0E:6D:69:9E:74:10:7D:09
            X509v3 Authority Key Identifier:
                keyid:2F:C1:8E:66:BC:89:56:CC:2B:6B:8E:02:F4:E8:A4:DD:B7:73:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/2FC18E66BC8956CC2B6B8E02F4E8A4DDB7732859.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:26:03:af:41:28:48:56:e4:c4:55:a4:a9:85:60:e1:33:8f:
         60:2a:ad:53:9c:47:b8:f0:c5:b2:54:6f:bb:50:6d:8a:32:1e:
         2f:ee:1b:9f:12:97:91:66:a4:a2:48:3f:ce:dd:d3:71:ee:3c:
         a5:8f:60:4c:7b:bc:fb:01:b9:42:73:e7:75:b8:bf:b7:f1:c1:
         a7:f8:6d:f8:29:6f:e0:c6:c4:86:05:59:8b:2e:5b:49:d0:35:
         f3:03:e1:ef:c4:39:7d:16:d4:02:d2:44:1f:a7:4c:f0:1b:2d:
         e3:9c:3c:66:b5:97:38:45:af:c9:ca:e3:b6:a9:cf:c1:50:f2:
         94:36:5b:1f:90:b3:10:f1:89:c4:f1:da:37:67:6b:a8:8a:7d:
         6e:b4:32:a8:bd:05:f4:ef:13:7c:1a:02:f0:50:38:7c:38:d1:
         bc:e4:51:37:33:dc:e6:fa:15:5f:d3:84:6c:b5:a8:db:fb:e3:
         d4:f4:7c:a4:59:23:08:6d:ec:56:e2:bd:3f:07:be:04:eb:b3:
         87:5b:09:d0:38:9c:a7:c3:4b:e1:43:0c:f0:fa:f9:ce:fc:41:
         ea:78:c7:b3:8a:e9:08:11:e8:76:bb:2d:63:8f:3c:b7:ea:ec:
         38:59:2e:b9:58:ab:b4:7e:b5:ea:be:2e:ca:11:ba:6e:44:06:
         8f:c8:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----