Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
File:                     9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft (raw, json)
Hash identifier:          Z6nUnnfvY+ckC2DB0FSp6lsJVuw5FcPILaslQi4fg5M=
Subject key identifier:   E9:6D:AE:0A:2E:B1:2C:04:93:8A:D7:08:FE:55:EC:6B:4F:A9:9F:FD
Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9
Certificate issuer:       /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
Certificate serial:       42C9A3C1C6030AD0816D0F708655EC542C0ACC61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
Manifest number:          DE
Signing time:             Sat 29 Mar 2025 10:43:33 +0000
Manifest this update:     Sat 29 Mar 2025 10:38:33 +0000
Manifest next update:     Sun 30 Mar 2025 12:30:33 +0000
Files and hashes:         1: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: PFf7r8NesetTZTWlwVJGodcacjgKx2YPuW6mqFlVgBA=)
                          2: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl (hash: 8dLV/Ysm3dI9nGspvWU3DKUeld8U59pQOLogs2tNexA=)
                          3: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: C/JW/5+W67z3bHrJD4GBQa9VrsbU/o7KtfAav89CUFM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c9:a3:c1:c6:03:0a:d0:81:6d:0f:70:86:55:ec:54:2c:0a:cc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
        Validity
            Not Before: Mar 29 10:38:33 2025 GMT
            Not After : Mar 30 12:30:33 2025 GMT
        Subject: CN=E96DAE0A2EB12C04938AD708FE55EC6B4FA99FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:d5:17:8c:5a:36:8d:59:67:c8:b6:f8:de:
                    44:3e:ab:cc:b9:25:39:14:aa:46:14:bd:22:27:e7:
                    5c:89:a5:74:4f:67:bf:6a:40:88:1e:58:c4:fe:69:
                    57:92:f4:c7:49:e3:53:1a:f0:9c:a4:3b:53:bd:5e:
                    8d:c2:b3:c2:e7:ae:98:9e:2a:83:e7:36:0e:e2:6f:
                    b6:2e:66:02:05:26:76:69:e1:38:8f:a2:28:92:01:
                    3a:46:09:45:07:7e:7a:cd:33:63:f4:de:65:8f:1a:
                    82:f6:f5:c7:b5:f9:39:7d:88:bd:fd:b6:6e:da:6e:
                    8e:6a:84:ea:2b:58:1b:42:25:17:ff:8e:e4:4e:a7:
                    fb:8d:c5:cf:74:12:31:2c:66:a5:34:92:b6:12:f0:
                    9b:c7:15:ae:c9:ad:a4:b5:28:70:2a:ca:18:8b:02:
                    e7:e9:f9:dd:d2:ef:1a:ef:22:a7:8e:86:aa:15:52:
                    8e:d6:2a:9e:23:49:48:9b:6c:14:6e:b7:81:de:3a:
                    69:e2:52:91:61:eb:ac:ae:4d:a8:2b:e9:02:bd:39:
                    c3:f0:0d:5f:7d:53:6b:e2:b5:96:79:78:c5:71:75:
                    b0:c8:b6:a4:44:f7:90:46:fd:fe:0b:c2:7f:2b:42:
                    95:90:a8:9e:fb:4d:bd:42:30:8b:57:ae:80:e2:28:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6D:AE:0A:2E:B1:2C:04:93:8A:D7:08:FE:55:EC:6B:4F:A9:9F:FD
            X509v3 Authority Key Identifier:
                keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:64:84:86:0a:0f:5a:c1:1a:99:c2:4f:bd:1a:9b:45:ab:3f:
         4a:ff:fb:03:71:75:3e:04:33:eb:89:b6:0d:7f:b7:06:d8:05:
         30:4e:68:19:bd:99:37:65:78:ae:fc:89:ee:84:2c:9f:7e:ce:
         3b:42:cb:d9:cf:c7:23:03:b9:f1:18:36:39:71:53:3e:9e:30:
         cf:42:3c:1f:51:9a:c2:7e:8e:65:4e:e8:b6:ff:43:eb:1d:44:
         bd:25:c0:36:ba:ed:3d:85:de:6f:5d:ec:1d:d6:7b:7c:8b:0a:
         c6:d5:67:c0:db:55:53:1e:ef:41:3e:99:ba:01:c5:f1:17:ff:
         18:c3:5a:99:36:58:b5:b3:27:eb:ac:07:5e:ff:f2:94:e4:ed:
         bf:75:45:f3:85:27:44:a4:35:b4:2b:16:24:42:f4:42:09:a1:
         0f:bc:f6:11:bc:ce:ae:26:05:1a:4f:6e:ad:f0:b0:4b:27:cb:
         1b:1f:fe:21:8e:3d:7a:37:c8:3a:f4:5c:d6:fc:3c:72:9e:e5:
         b5:9f:1c:57:0c:2d:41:f2:35:69:14:ed:b5:08:52:72:2a:30:
         ce:5e:e6:b0:1f:64:e5:06:cb:2c:d8:6d:fd:aa:af:39:a3:18:
         b1:de:00:a2:ae:7f:9f:cb:52:da:af:32:58:44:67:13:90:56:
         8d:63:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----