Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
File:                     3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft (raw, json)
Hash identifier:          H2KTfabhfra+XMCRYDDYFdxQ7DRH7JpPMpujd0WzS2c=
Subject key identifier:   3C:2B:C7:4F:42:18:09:15:BE:BD:5E:FD:21:4A:3A:37:06:D8:82:80
Authority key identifier: 3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
Certificate issuer:       /CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Certificate serial:       746EC594501CF985D5BB556A29D1FBB97C57FECD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
Manifest number:          021F
Signing time:             Fri 28 Mar 2025 19:50:00 +0000
Manifest this update:     Fri 28 Mar 2025 19:45:00 +0000
Manifest next update:     Sat 29 Mar 2025 19:50:00 +0000
Files and hashes:         1: AS28343.roa (hash: jbPLOcUfkkMoouI/h6tgbdnaxrC5j0hQhRAEEbMSsoM=)
                          2: 3BCE948E59955EF881BD1ECD2DE385FE7959F195.crl (hash: AoNBJHjQ85CBdC0Wg8xeBs2QkteurJxExh/V6ejyNKQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6e:c5:94:50:1c:f9:85:d5:bb:55:6a:29:d1:fb:b9:7c:57:fe:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
        Validity
            Not Before: Mar 28 19:45:00 2025 GMT
            Not After : Mar 29 19:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:3f:f3:bd:37:e5:a6:f6:47:d7:ba:8f:dc:
                    c5:00:78:16:6c:42:f0:b0:3e:64:03:00:90:db:48:
                    6a:c9:d7:18:8d:21:2f:14:91:dd:cc:47:c6:d9:6b:
                    66:54:40:16:45:a1:b3:e0:b5:cf:c1:bf:45:8c:31:
                    2f:c9:39:a3:9e:48:46:60:cf:76:6e:3b:7a:e3:b1:
                    3e:47:94:23:d4:06:d2:30:a8:c2:0c:19:39:5b:cd:
                    b4:0a:a8:56:44:b1:a7:b9:3e:7e:49:7d:b7:29:e5:
                    f0:81:42:5b:09:12:2b:91:c4:bc:f7:48:87:da:1c:
                    5a:9b:c5:93:fe:10:14:b7:8d:d3:51:1e:4a:c2:c0:
                    d7:85:d2:14:ab:66:33:b6:be:3c:f4:30:56:53:d6:
                    f0:91:aa:3d:7c:9b:11:95:43:02:b7:81:1e:3b:c0:
                    2f:8a:6d:d7:32:f9:50:5f:42:bd:d8:58:74:e2:8e:
                    97:27:ae:d6:1e:7a:df:d5:c5:db:ea:67:7d:cc:04:
                    4d:b2:37:b6:30:89:6a:ba:42:6a:65:e3:88:64:c9:
                    3a:2e:b5:ae:c9:b3:b4:4c:cf:1e:ed:7c:45:4f:14:
                    59:43:df:e7:52:7f:df:97:4d:1a:9c:e9:4a:df:ad:
                    b9:db:bd:f6:8f:87:90:2f:0a:0a:00:fa:f5:ed:e0:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2B:C7:4F:42:18:09:15:BE:BD:5E:FD:21:4A:3A:37:06:D8:82:80
            X509v3 Authority Key Identifier:
                keyid:3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:81:47:64:84:1c:b1:f3:3d:f9:e2:63:e7:f7:40:f4:f4:3b:
         c8:90:cc:ba:3c:71:1a:95:aa:2b:d3:a3:40:ce:9e:50:0a:fb:
         e5:17:bd:e3:de:7d:a7:74:fb:b9:06:3b:05:25:21:28:b8:1c:
         cc:db:01:f8:a9:91:4a:91:26:6b:b6:14:b4:d4:e4:79:19:af:
         ae:71:2f:11:d6:ac:54:25:88:41:54:50:75:13:0e:a9:1a:97:
         23:fc:38:7f:35:ab:0d:e9:da:32:03:d6:bc:e6:f6:b7:83:fb:
         4e:11:b2:66:eb:e8:84:a6:df:6d:86:fe:f1:87:12:7b:d0:8e:
         d9:a9:cb:0e:2d:44:27:a8:91:fb:72:d4:80:99:0b:92:28:cf:
         1c:66:bf:5a:56:ff:7f:62:e5:5b:24:47:51:bd:b9:aa:43:10:
         d5:e5:cb:8f:d8:13:0e:10:cc:3a:0b:5b:63:0f:02:69:d0:29:
         06:19:92:a9:f3:86:ca:9f:a4:a0:83:70:3f:62:1f:7d:23:34:
         95:32:a0:07:2a:71:19:37:e6:81:5b:e0:5c:15:8a:fa:10:92:
         34:ca:61:10:ed:fa:8e:28:a4:c8:67:b4:14:92:6d:ec:ba:61:
         fa:e1:96:8a:ef:4a:08:fb:36:a6:54:48:76:82:1e:76:4b:77:
         38:7b:3a:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----