Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/00C65B86D207F9E0E311ECD95BDEFF56752084D1.mft
File:                     00C65B86D207F9E0E311ECD95BDEFF56752084D1.mft (raw, json)
Hash identifier:          V/jh84A4DipbsfyOlzBPW4/Xqc3bsEdnUdazBMpyu10=
Subject key identifier:   9E:EF:9D:11:CF:9C:81:A5:73:1E:BD:D3:6E:27:B3:8B:AA:83:82:2E
Authority key identifier: 00:C6:5B:86:D2:07:F9:E0:E3:11:EC:D9:5B:DE:FF:56:75:20:84:D1
Certificate issuer:       /CN=00C65B86D207F9E0E311ECD95BDEFF56752084D1
Certificate serial:       047E1C68594B7C95047ADA863FBFBF3B206F89B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00C65B86D207F9E0E311ECD95BDEFF56752084D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/00C65B86D207F9E0E311ECD95BDEFF56752084D1.mft
Manifest number:          68
Signing time:             Fri 28 Mar 2025 22:44:46 +0000
Manifest this update:     Fri 28 Mar 2025 22:39:46 +0000
Manifest next update:     Sun 30 Mar 2025 01:40:46 +0000
Files and hashes:         1: 00C65B86D207F9E0E311ECD95BDEFF56752084D1.crl (hash: hx23iN5hePFW7LL8WloBN4I7GWcc2Tl215XAyMqyI3Q=)
                          2: 323830343a323931383a3a2f33322d3438203d3e20323633393937.roa (hash: pfHeWAX3UI+O6utgK+vodlCZ6fEY3vpwtwWVFCKtUt0=)
                          3: 3134332e302e35322e302f32322d3234203d3e20323633393937.roa (hash: KFSiWBFPmsZqF5y/JgVhWyM8zBfMflKZnbvA6faYNbM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7e:1c:68:59:4b:7c:95:04:7a:da:86:3f:bf:bf:3b:20:6f:89:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C65B86D207F9E0E311ECD95BDEFF56752084D1
        Validity
            Not Before: Mar 28 22:39:46 2025 GMT
            Not After : Mar 30 01:40:46 2025 GMT
        Subject: CN=9EEF9D11CF9C81A5731EBDD36E27B38BAA83822E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:2d:83:97:96:4f:c5:13:d8:5a:cd:2c:23:
                    19:4c:76:3d:69:6c:25:ee:bf:e2:d9:1e:8b:b4:ab:
                    d4:3e:4d:cf:ab:84:98:aa:c1:bc:60:3f:19:6b:10:
                    68:21:4d:d3:ff:4f:81:ff:a4:ae:c7:91:6e:de:ce:
                    6a:78:13:6d:e4:bb:4b:80:5b:67:ed:89:23:62:18:
                    37:2c:79:37:dc:36:3d:aa:34:0b:d9:fa:15:04:ef:
                    a6:71:28:fd:2c:db:41:ad:c5:55:59:04:9f:a2:59:
                    4f:99:15:8a:d3:3c:1f:75:85:d1:fa:46:f5:b3:48:
                    f8:28:27:d6:61:9a:30:56:73:28:2d:ad:0b:d7:5f:
                    a1:30:64:43:f3:90:bc:7e:10:b4:69:2e:66:fb:91:
                    6d:91:b0:3e:4b:42:55:bd:77:fb:82:2a:b5:d8:c6:
                    f4:e7:ad:e6:a5:44:3b:21:b3:31:2a:0d:f5:a6:04:
                    a4:0e:36:fb:95:9c:60:fe:c4:b7:e5:29:bc:6f:8d:
                    10:48:32:39:c5:b0:40:ac:b4:fb:6a:a3:84:ae:f8:
                    f4:b9:13:e2:49:0c:aa:6b:c7:c0:ff:45:e8:13:32:
                    47:7c:55:6e:a5:3c:65:b3:23:74:55:94:48:a4:c9:
                    d2:57:86:1d:3b:77:49:7f:2c:80:65:7c:fb:c4:e9:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EF:9D:11:CF:9C:81:A5:73:1E:BD:D3:6E:27:B3:8B:AA:83:82:2E
            X509v3 Authority Key Identifier:
                keyid:00:C6:5B:86:D2:07:F9:E0:E3:11:EC:D9:5B:DE:FF:56:75:20:84:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/00C65B86D207F9E0E311ECD95BDEFF56752084D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00C65B86D207F9E0E311ECD95BDEFF56752084D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/00C65B86D207F9E0E311ECD95BDEFF56752084D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:7f:a0:f0:30:42:5f:90:7b:08:a1:9a:5c:90:74:96:3e:
         cd:fa:1d:0f:0e:81:97:f4:08:e2:a5:95:ce:06:87:6f:33:12:
         39:d3:4c:bf:1f:d3:d2:6d:d2:4d:46:6d:b4:19:54:61:5e:a9:
         05:30:59:33:b4:3c:78:9e:d0:d2:0b:76:a8:ca:f1:4f:f8:1a:
         cb:2d:0d:be:98:ea:70:0b:24:b4:3e:51:fa:b0:7a:6c:ed:9a:
         8d:d4:aa:21:b9:5c:97:59:fb:6a:d4:97:16:7c:58:b6:9c:d6:
         fa:49:c4:47:fb:f9:ab:34:3f:2b:b3:dd:ff:01:f6:cf:bb:a9:
         7a:b0:23:13:4f:82:77:64:cf:54:e4:6d:95:ef:86:ae:7f:2a:
         7f:93:b7:ed:eb:9b:33:a7:fe:f8:52:94:4f:01:d4:40:cd:fa:
         fc:06:76:e2:8b:4c:96:97:8c:15:be:d5:bc:9a:e2:54:b0:12:
         93:1f:d0:1a:69:b5:73:df:00:0f:41:93:b5:4d:5b:af:8e:72:
         43:b6:9e:2f:8f:35:25:c4:79:4b:13:c6:41:fe:e2:ad:9c:fb:
         14:b5:75:b6:a2:a5:5e:d8:3f:2e:68:32:af:8e:92:6d:16:db:
         ab:31:2f:41:66:70:63:59:2e:bd:46:28:21:c3:ed:18:9f:bb:
         03:b3:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----