Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
File:                     8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft (raw, json)
Hash identifier:          iRJHtXYzSQj4BsRqLLA7LPs8rbVhDSyoGYLCWjhKimg=
Subject key identifier:   9D:2E:8A:AA:26:F4:C4:4C:6F:1A:05:F2:CE:41:B7:5A:D1:09:80:17
Authority key identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
Certificate issuer:       /CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
Certificate serial:       0F996D99F2ACAA2D90875B1164FEEC4833F937FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
Manifest number:          01A1
Signing time:             Fri 31 Jan 2025 01:25:46 +0000
Manifest this update:     Fri 31 Jan 2025 01:20:46 +0000
Manifest next update:     Sat 01 Feb 2025 03:23:46 +0000
Files and hashes:         1: 8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl (hash: 5F3orSOftegywVEcNJjTWkvkFTamcfnZV+xaikbpUc4=)
                          2: 3133382e39342e38342e302f32322d3234203d3e20323633353734.roa (hash: 5At/G9UsrsnqEwgPwILv6VOmeoJrOzwwfV8tP2hndC0=)
                          3: 323830343a6634343a3a2f33322d3438203d3e20323633353734.roa (hash: +oyhQj/JldQRfoPP7ytLqYKN1LTBjs7GTGp4PgLzRbM=)
                          4: 3137372e3138352e34302e302f32312d3234203d3e20323633353734.roa (hash: LDApwjkkxAOKAgMzvpTOoVbQ+b7Eyd2tONLdNZWXICw=)
                          5: 34352e3137342e39362e302f32332d3234203d3e20323633353734.roa (hash: S+T6kNJu4Dv6yCthoN3mrRlcNE8sVaMA9pHn9s5rh94=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:99:6d:99:f2:ac:aa:2d:90:87:5b:11:64:fe:ec:48:33:f9:37:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
        Validity
            Not Before: Jan 31 01:20:46 2025 GMT
            Not After : Feb  1 03:23:46 2025 GMT
        Subject: CN=9D2E8AAA26F4C44C6F1A05F2CE41B75AD1098017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:e0:e9:5a:2a:53:90:4b:1c:b7:dd:a4:16:
                    0f:2d:20:4a:cf:38:d4:6d:e9:a9:9c:3a:ba:d4:16:
                    ad:ff:4f:11:79:6f:bb:35:17:c7:47:09:28:e0:02:
                    e6:fb:9c:57:f0:f9:22:62:93:94:5e:8f:4a:c9:7a:
                    f1:18:f1:b9:82:53:19:e0:65:79:77:af:39:a4:dd:
                    b0:a1:8d:75:c7:8e:17:a6:1e:0b:3c:07:bc:96:ec:
                    22:02:02:8b:49:a9:c2:bf:b5:86:18:22:13:59:0f:
                    8e:1c:9c:12:77:e8:b4:8a:8b:0a:45:0b:73:f2:2d:
                    7c:85:02:de:16:a9:3b:b7:70:ee:a2:4d:42:f1:2e:
                    1a:d5:f7:3a:b4:48:60:73:fe:3c:9c:2f:6a:51:ae:
                    a7:b5:4e:7d:b9:89:26:a0:e8:50:fe:16:f6:7a:54:
                    67:26:90:c5:2a:1c:ed:a2:00:04:e3:ee:e2:40:1d:
                    3f:b8:21:d0:38:0b:41:ba:27:be:be:c3:04:de:f8:
                    7d:2e:58:89:5c:d3:df:0c:f2:e3:4b:00:32:c9:e3:
                    9a:22:1d:ee:4f:39:9a:9e:fd:0a:1e:9b:30:a4:d3:
                    8d:27:8c:f6:dc:a1:d3:53:26:05:92:26:da:d0:33:
                    d8:58:f1:d4:f7:d4:9e:39:9c:da:7a:62:85:0a:68:
                    32:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2E:8A:AA:26:F4:C4:4C:6F:1A:05:F2:CE:41:B7:5A:D1:09:80:17
            X509v3 Authority Key Identifier:
                keyid:8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9e:72:04:f5:0a:e1:64:be:4c:0d:30:82:7d:48:d3:c6:68:
         18:55:a6:44:45:c1:91:fa:19:88:7b:59:7b:84:7a:af:e4:fd:
         8f:b8:ff:e4:9a:54:58:56:ec:3e:95:a3:e0:9a:1c:e0:b7:4d:
         bc:04:11:a0:56:df:e1:b1:75:1b:4b:0c:f8:b4:4a:db:24:d5:
         ae:c9:80:ee:e2:83:3d:65:6f:e5:51:2a:a1:f9:60:86:81:38:
         75:c0:a6:9d:38:69:fc:55:39:71:24:62:08:ac:72:58:09:be:
         5b:c4:63:07:50:4d:f5:8c:55:02:05:86:db:f2:4e:c2:5d:4c:
         85:a0:79:15:41:7a:dd:11:11:10:b9:32:69:bf:8c:63:33:6e:
         e1:b9:95:e2:28:b9:b0:c1:43:c1:74:ef:71:85:e8:d9:0a:7d:
         e6:87:de:31:eb:e0:f4:d7:ec:fa:30:e1:3d:b1:94:17:42:3f:
         f9:90:17:be:25:e2:e3:f0:c9:c7:c0:91:b7:78:6d:82:26:03:
         af:7a:d1:b9:77:63:8a:6f:46:99:01:c6:cf:58:79:28:92:70:
         46:cc:ac:6f:47:55:57:07:61:b4:64:93:e5:5f:64:c0:cd:6c:
         fa:95:0a:31:80:9b:ee:38:4c:7f:47:00:5f:4d:93:d6:f2:7b:
         8d:8c:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----