Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.mft
File:                     99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.mft (raw, json)
Hash identifier:          8hIyX20TuSzPi/5mtoVs9ODsXvIyZ0BfjxLXAuUtBLk=
Subject key identifier:   C5:72:02:CC:BD:A9:AA:FA:CA:6B:CE:F2:5F:9E:26:F6:B6:B1:0C:2A
Authority key identifier: 99:DB:82:7F:B2:B7:D3:2F:4F:4C:E9:31:CF:63:CA:A5:C6:B2:FB:76
Certificate issuer:       /CN=99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76
Certificate serial:       50E9CE14D9D67F44ADF5EA20AF490CE7E83167F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.mft
Manifest number:          021E
Signing time:             Sat 29 Mar 2025 03:20:00 +0000
Manifest this update:     Sat 29 Mar 2025 03:15:00 +0000
Manifest next update:     Sun 30 Mar 2025 03:20:00 +0000
Files and hashes:         1: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: flT173l9EH1AgrkAVavkxaoytaU6o1wWQ39jUlLTFqw=)
                          2: 99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.crl (hash: Ww3KkwwKgQ5GebvtPzMc1CDpaKAgLen9XRuAcraME3E=)
                          3: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: CpsEuj4SUzytQdND/kcONT9lDWdik50S8GD3+C6aB/w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e9:ce:14:d9:d6:7f:44:ad:f5:ea:20:af:49:0c:e7:e8:31:67:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76
        Validity
            Not Before: Mar 29 03:15:00 2025 GMT
            Not After : Mar 30 03:20:00 2025 GMT
        Subject: CN=3082010A0282010100F96BEDFDFC6F728CDD903528A235F64B05FD54ECE3006C47251F0C9FEB05C84D36A0676C91F242BA72C14EDDBA433675FB45436DD4F5F9EA5C1D72422EC068234BE3EF8BC3B24D311B34A4905D2A9A1EAEB4546CA4A8EFF173BA435C488EC60765C0E19FD63D7397C5E250E245CBC7194EECDDBE0F5BD5BAABFA2FB87584C1C0921C9F1F51D89FD5F01FAF2BE6162A3B4CED23CA11C58967CC84F0698452966490663DD189782764B1CDEEAF161F1B2A1955C8D10AD0F0DD788B35635C5156F7761801461913C1A79204440021D755012AE3722F41EB927383589C9E2E5019E5CB0CD04D590B3777D775DF411AFA71AEF5819B689C2E74CDF89EB8E4BB4007870203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6b:ed:fd:fc:6f:72:8c:dd:90:35:28:a2:35:
                    f6:4b:05:fd:54:ec:e3:00:6c:47:25:1f:0c:9f:eb:
                    05:c8:4d:36:a0:67:6c:91:f2:42:ba:72:c1:4e:dd:
                    ba:43:36:75:fb:45:43:6d:d4:f5:f9:ea:5c:1d:72:
                    42:2e:c0:68:23:4b:e3:ef:8b:c3:b2:4d:31:1b:34:
                    a4:90:5d:2a:9a:1e:ae:b4:54:6c:a4:a8:ef:f1:73:
                    ba:43:5c:48:8e:c6:07:65:c0:e1:9f:d6:3d:73:97:
                    c5:e2:50:e2:45:cb:c7:19:4e:ec:dd:be:0f:5b:d5:
                    ba:ab:fa:2f:b8:75:84:c1:c0:92:1c:9f:1f:51:d8:
                    9f:d5:f0:1f:af:2b:e6:16:2a:3b:4c:ed:23:ca:11:
                    c5:89:67:cc:84:f0:69:84:52:96:64:90:66:3d:d1:
                    89:78:27:64:b1:cd:ee:af:16:1f:1b:2a:19:55:c8:
                    d1:0a:d0:f0:dd:78:8b:35:63:5c:51:56:f7:76:18:
                    01:46:19:13:c1:a7:92:04:44:00:21:d7:55:01:2a:
                    e3:72:2f:41:eb:92:73:83:58:9c:9e:2e:50:19:e5:
                    cb:0c:d0:4d:59:0b:37:77:d7:75:df:41:1a:fa:71:
                    ae:f5:81:9b:68:9c:2e:74:cd:f8:9e:b8:e4:bb:40:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:72:02:CC:BD:A9:AA:FA:CA:6B:CE:F2:5F:9E:26:F6:B6:B1:0C:2A
            X509v3 Authority Key Identifier:
                keyid:99:DB:82:7F:B2:B7:D3:2F:4F:4C:E9:31:CF:63:CA:A5:C6:B2:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:b1:23:0e:31:30:9e:ba:9d:d1:be:7d:2e:fa:1d:ed:bc:
         3c:09:62:7e:41:fb:e8:76:35:ca:c2:8d:d9:9f:1e:04:b9:19:
         16:d1:c2:82:4e:3f:74:29:79:d8:a6:4c:e1:f3:d9:74:17:82:
         ba:e5:2a:3e:48:fc:3b:3f:00:af:11:57:32:ed:57:32:19:a8:
         55:5f:9c:86:4d:f0:be:1d:17:26:5f:22:0b:e6:a8:f0:a0:a0:
         5e:6b:f4:b4:a5:7f:22:89:8c:22:13:a1:b3:0c:43:57:ea:b7:
         60:56:a8:72:01:a8:24:b9:62:5c:af:da:aa:13:79:a7:53:96:
         3d:d4:73:4a:50:ad:99:15:40:14:0a:07:f2:4c:9b:fe:fc:bb:
         55:df:5b:ec:65:6d:df:79:48:0e:85:dd:62:25:8c:34:af:ac:
         55:bc:ec:9a:62:89:52:b3:58:63:d8:14:3f:07:42:0a:96:74:
         15:fc:1c:85:2c:36:d7:01:12:64:09:6c:7d:22:b3:14:e3:7f:
         4c:43:14:00:47:33:1d:f7:ec:2d:07:95:77:58:c9:77:3d:da:
         f5:0a:4a:57:13:ba:c2:fa:52:98:32:65:04:14:a2:bd:5a:44:
         e5:3d:b3:a2:9d:2f:a5:52:63:2b:66:60:01:28:32:a0:0d:b3:
         79:bd:bf:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----