Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft
File:                     A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft (raw, json)
Hash identifier:          72/eZueNAVZNaQ/dwijqLuS3xmK2FP2S24aa9LwfZR8=
Subject key identifier:   2C:C9:E4:4E:D8:07:CF:32:77:A8:0C:53:7F:E5:FB:61:BC:06:9C:A4
Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3
Certificate issuer:       /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
Certificate serial:       66C7E21299DE65DE4921BEC4FC6EA288CF3324E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft
Manifest number:          EF
Signing time:             Fri 31 Jan 2025 01:03:42 +0000
Manifest this update:     Fri 31 Jan 2025 00:58:42 +0000
Manifest next update:     Sat 01 Feb 2025 04:41:42 +0000
Files and hashes:         1: 323830343a323261303a3a2f33322d3438203d3e20323634313132.roa (hash: xjN6sHaV4vO2I0ogT4RW4ELkCzroQkdpCfyvnk2SDZM=)
                          2: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: AhtVw8+m+BE2xIGpEOoG2xLgZpn+7eLrWC9ArM8aH28=)
                          3: 3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (hash: Axay2FXOHlab3Zbtc8prF8iZEWyctVL766TnXVI/cRU=)
                          4: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl (hash: 4BjyJg6MYrZ4YfP6VHd2Rj9HaZhP2lCACuryQFtY4n8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c7:e2:12:99:de:65:de:49:21:be:c4:fc:6e:a2:88:cf:33:24:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
        Validity
            Not Before: Jan 31 00:58:42 2025 GMT
            Not After : Feb  1 04:41:42 2025 GMT
        Subject: CN=2CC9E44ED807CF3277A80C537FE5FB61BC069CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:9f:7e:10:11:6d:19:dc:51:8e:0e:cb:f9:
                    a5:4e:46:fb:cb:38:02:24:fb:da:7b:1e:2c:5c:89:
                    6f:d1:79:a5:9f:7c:63:55:f0:d1:ca:2f:a3:31:28:
                    40:94:80:e9:64:7c:ec:ae:d8:63:34:58:90:a6:fc:
                    32:ab:9b:cd:4a:79:10:55:d6:a7:30:91:ea:22:82:
                    0c:3a:c9:c0:09:3e:a0:0a:f9:12:9e:37:92:16:6b:
                    0a:17:c7:22:9c:0b:85:98:7b:97:2b:86:25:90:81:
                    e3:6f:be:cb:0d:70:43:96:b3:c7:00:0b:5a:7c:57:
                    9c:ad:10:de:d7:c2:e4:1e:d5:58:be:5c:01:7e:16:
                    ed:17:50:08:b3:e0:66:38:1d:47:17:86:95:b5:f9:
                    54:bc:05:cf:2b:a6:3c:d2:84:2d:5f:1f:4b:a1:34:
                    c5:39:79:32:f1:91:14:de:5d:98:4b:5f:54:24:6e:
                    38:cd:b3:28:6d:55:ac:3f:5a:34:62:51:b5:e9:c7:
                    49:10:01:a5:fc:e9:c4:9f:c6:05:82:c1:be:5d:25:
                    a4:5d:49:f2:a0:28:66:6c:e6:a0:82:d9:86:ed:72:
                    50:11:ec:09:68:1c:a1:57:56:87:31:03:1e:14:2d:
                    ca:49:23:85:78:b3:71:a0:47:6c:05:f1:8c:79:f1:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C9:E4:4E:D8:07:CF:32:77:A8:0C:53:7F:E5:FB:61:BC:06:9C:A4
            X509v3 Authority Key Identifier:
                keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:46:ab:ad:12:cc:4f:96:9a:6a:7a:75:7b:13:a8:27:1b:eb:
         0f:86:7b:53:be:b1:8b:c6:0f:cb:10:d0:2d:40:e2:94:dd:ae:
         ad:ee:e7:d7:a7:8b:7a:3b:e1:78:1f:a9:5a:23:d4:dd:bd:9f:
         ab:ce:84:93:33:d7:4b:08:68:af:bc:c4:db:c8:f9:fa:90:ec:
         79:98:e8:72:10:13:4a:4e:75:40:d0:f6:80:eb:2f:32:8a:2d:
         ad:9b:07:9c:ca:68:73:a5:e6:1d:49:0c:77:e6:ba:a6:74:bb:
         57:de:c8:b0:a9:85:f9:3a:eb:77:a6:14:4c:d5:b3:c5:58:50:
         e7:5f:8d:5b:23:6d:f0:c3:81:cf:25:91:20:60:76:df:68:11:
         90:6c:20:41:9f:fa:46:af:cd:91:b4:c0:af:94:87:67:3f:a3:
         70:ff:5c:c7:43:7f:35:ea:c3:23:be:52:64:d5:1a:b0:c2:8e:
         8e:ea:c4:10:57:df:84:6a:a5:45:bb:97:b5:56:38:a5:b4:eb:
         2a:68:f9:f0:07:64:35:70:e2:a1:df:b2:69:07:db:79:f1:3a:
         79:88:62:77:33:8f:64:c7:68:ec:75:5e:8f:77:31:c9:59:e3:
         e7:53:b7:bc:56:a4:2c:7d:77:40:bd:23:ff:20:8f:64:c8:11:
         ea:2a:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----