Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.mft
File:                     2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.mft (raw, json)
Hash identifier:          Kejxj72VFVxWUPghR+U04llO5GCGuwr29l3lqmvBTFw=
Subject key identifier:   6B:BD:34:6F:CC:A1:6A:64:3D:20:15:F6:84:97:44:9E:3E:7E:D4:5E
Authority key identifier: 2F:65:51:3E:9B:A3:C6:CA:0E:D4:70:DE:03:A6:E1:E3:04:EC:97:4C
Certificate issuer:       /CN=2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C
Certificate serial:       4B77872A3FCFAF14ADC7FD8D402D92BA008269C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.mft
Manifest number:          3E
Signing time:             Fri 28 Mar 2025 17:14:34 +0000
Manifest this update:     Fri 28 Mar 2025 17:09:34 +0000
Manifest next update:     Sat 29 Mar 2025 21:00:34 +0000
Files and hashes:         1: 323830343a386437633a3a2f33322d3438203d3e20323733333630.roa (hash: 45znK4MTl7lvb7UivElf2GtUXH47s2au87KG1k738E0=)
                          2: 2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.crl (hash: GWeEulQos0RC/J5ckB+kJHLveEwGTUp3UkaNsdi5SZw=)
                          3: 3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (hash: FzYJFbDNbZgiMUj1fIs1gkuhosqvbFTL0+CO+NSzJLE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:77:87:2a:3f:cf:af:14:ad:c7:fd:8d:40:2d:92:ba:00:82:69:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C
        Validity
            Not Before: Mar 28 17:09:34 2025 GMT
            Not After : Mar 29 21:00:34 2025 GMT
        Subject: CN=6BBD346FCCA16A643D2015F68497449E3E7ED45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ad:22:69:7d:93:c3:4d:1f:7d:f7:fd:79:24:
                    36:33:19:2b:9b:35:8f:3e:0f:53:fc:2b:5d:d1:cd:
                    74:8d:a0:77:3b:c4:4e:e7:d2:84:53:7c:5e:74:53:
                    29:c4:8b:59:8b:74:e1:9e:17:47:ee:fa:14:ca:d2:
                    97:bb:e3:30:b3:40:85:fe:2e:5f:74:4c:dc:ea:69:
                    82:e0:a9:c8:1e:db:a9:07:34:37:76:72:36:78:e4:
                    11:40:19:2e:a4:4a:e2:4a:25:7b:d5:20:cf:00:1c:
                    15:ed:bd:e3:0c:e7:fd:ed:58:02:68:73:78:de:36:
                    fb:1b:8e:06:de:93:ae:0a:31:83:94:e3:20:a3:d8:
                    d1:77:d3:36:bf:a9:23:97:5e:ae:79:4a:58:c5:57:
                    20:f8:8c:87:ff:97:8c:92:7d:08:c8:a0:0c:5b:4a:
                    85:4b:14:cd:9b:37:06:57:a6:45:d3:2c:8b:5b:66:
                    61:46:c2:c5:bc:bf:1c:66:53:60:a3:24:9e:6a:33:
                    69:6d:a7:6a:f6:f2:db:56:57:a8:56:6c:c7:dc:63:
                    77:29:8d:52:4c:8c:73:96:c1:fa:2e:b5:11:6b:c0:
                    3e:c2:fb:ab:28:8a:b7:98:f2:c4:10:b3:c1:20:e9:
                    9b:69:93:47:1e:1a:7c:3a:69:5a:67:81:2c:f7:da:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:34:6F:CC:A1:6A:64:3D:20:15:F6:84:97:44:9E:3E:7E:D4:5E
            X509v3 Authority Key Identifier:
                keyid:2F:65:51:3E:9B:A3:C6:CA:0E:D4:70:DE:03:A6:E1:E3:04:EC:97:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:c9:ea:90:22:58:b0:d4:19:bf:a3:01:64:6b:b9:f9:b6:
         78:3b:56:55:c3:4d:29:0f:e0:5f:46:9f:24:86:2a:51:13:80:
         1a:eb:ac:be:b6:d0:39:09:ad:d1:9b:68:ca:d8:ea:79:64:f3:
         f5:c9:cb:0b:ac:0d:91:9e:7a:3b:9c:0a:aa:dc:6d:20:c9:38:
         5d:1d:f0:8f:17:b0:1d:14:a2:2a:08:8a:cd:04:79:23:34:01:
         b4:76:58:9d:e0:2d:05:8f:46:2c:c1:71:d2:ea:2a:ba:e5:af:
         a8:f8:25:39:93:f0:84:1f:18:d3:51:50:d8:a8:c2:0e:19:2a:
         9f:ec:19:4a:ee:b1:63:81:55:aa:24:cf:3e:41:22:60:a0:35:
         d5:88:3d:01:09:ea:f4:54:e2:91:0a:e3:a6:df:0f:c2:a3:2d:
         3d:f7:15:91:40:2a:88:a5:a1:e6:6b:27:6b:3e:2c:bc:ac:35:
         72:21:4f:31:e7:85:1c:59:0c:de:44:05:b5:03:7e:58:8d:40:
         97:d4:06:ff:07:03:dd:0e:48:13:50:e4:52:12:49:2e:69:48:
         8b:a6:89:bc:92:cc:9e:0c:44:9c:43:64:e4:e7:83:d5:bc:ec:
         41:a3:b2:41:a7:0f:69:c2:eb:66:33:2a:a2:8a:41:7f:bb:2a:
         49:3a:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----