Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
File:                     D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft (raw, json)
Hash identifier:          drjbW42SdaHZ1TeiKNzAJYgVMT9mW1n3Dl+V8ObYpI4=
Subject key identifier:   19:97:2B:85:48:58:7F:50:04:30:32:33:BB:94:F5:EA:E6:05:A6:44
Authority key identifier: D1:5F:F3:E5:33:CB:36:1A:60:F4:C2:69:CA:7A:0C:08:AD:79:91:32
Certificate issuer:       /CN=D15FF3E533CB361A60F4C269CA7A0C08AD799132
Certificate serial:       511E430FE967BAB62A12FEBCD90630FB9E6B763E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
Manifest number:          FC
Signing time:             Fri 31 Jan 2025 04:32:19 +0000
Manifest this update:     Fri 31 Jan 2025 04:27:19 +0000
Manifest next update:     Sat 01 Feb 2025 05:21:19 +0000
Files and hashes:         1: 3137372e38352e382e302f32342d3234203d3e20323731323633.roa (hash: CFNZ/u6o+I8DRkP+BNDvMlb/omet9ro/ususEiy23ao=)
                          2: D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl (hash: 3ypBOsnLfRy+OKgygIkXhLHHL0oD3QfDVCQoNzhS6a4=)
                          3: 3137372e38352e382e302f32322d3232203d3e20323731323633.roa (hash: UD4osjkE+MafwEBZCoEFABfKuQuTBWU8nKXWUb8SVPw=)
                          4: 3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (hash: yZdpl1MeiH0X1iYrn0mf4e0WK0lNkAQ0zftlllFyDQg=)
                          5: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (hash: 7YI1RjreNNYYpg7xPxXjE+lc4rKTlsuvP/U2tfD1/EQ=)
                          6: 323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (hash: IxxYss7a6LKV1wRq6NkcoTgtcoKXCjvfumIDNTpOHJE=)
                          7: 3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (hash: 8A3zq9EsRbE2d/r/m4Yz6Bq+PPjl4MpjNL13Wo7c8LU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1e:43:0f:e9:67:ba:b6:2a:12:fe:bc:d9:06:30:fb:9e:6b:76:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15FF3E533CB361A60F4C269CA7A0C08AD799132
        Validity
            Not Before: Jan 31 04:27:19 2025 GMT
            Not After : Feb  1 05:21:19 2025 GMT
        Subject: CN=19972B8548587F5004303233BB94F5EAE605A644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:18:04:f3:12:9e:d9:63:6f:b2:90:49:f1:
                    08:ad:c0:33:f3:85:62:e5:3a:c6:33:77:a4:23:0a:
                    91:0f:aa:0e:b0:ea:8a:22:ee:92:a7:69:81:e8:63:
                    b2:e5:b4:7f:97:61:bb:b6:b4:18:17:92:cb:fa:08:
                    b0:c5:19:7e:2f:8f:2a:99:18:47:ba:dd:b6:36:6d:
                    d7:3a:2d:31:f5:58:37:d9:cd:1c:ac:8f:c9:0e:20:
                    fc:49:9c:3c:d0:e3:f3:a3:91:93:dc:72:e8:a1:b0:
                    bf:cd:fd:ad:43:fe:12:f2:0f:c5:8d:07:ad:f0:4d:
                    78:2f:c5:35:28:d6:9b:3d:24:21:4d:66:a6:e4:c3:
                    0e:78:35:22:3d:b6:16:c8:4a:66:96:f8:e4:27:d5:
                    7b:1c:d1:9d:27:00:6d:a0:c8:bf:ab:ea:73:34:8b:
                    7c:fd:76:dd:4f:d4:4f:c2:9d:3e:ff:b9:5e:f5:d4:
                    f8:90:d5:2b:f7:23:e1:fa:25:d2:e1:d1:88:ac:b3:
                    ed:c6:3c:36:ce:b5:16:5a:f9:18:74:fd:c0:ab:7a:
                    10:33:02:d0:59:9f:0d:10:d5:c5:a2:31:4a:bb:d2:
                    37:e3:99:f2:54:80:36:37:59:ef:26:c0:aa:45:d4:
                    f4:11:63:47:96:65:c2:bb:bb:ea:9e:f4:69:f2:9b:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:97:2B:85:48:58:7F:50:04:30:32:33:BB:94:F5:EA:E6:05:A6:44
            X509v3 Authority Key Identifier:
                keyid:D1:5F:F3:E5:33:CB:36:1A:60:F4:C2:69:CA:7A:0C:08:AD:79:91:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:44:c2:f7:77:c1:11:19:8d:e7:69:6d:31:5f:97:eb:de:e7:
         a9:9a:eb:99:84:2a:2d:10:9f:a6:6f:29:c6:9e:7d:84:56:50:
         61:5b:d4:90:80:04:8b:14:d7:49:3a:24:78:c0:14:c3:09:66:
         31:d9:99:4a:03:c5:00:6b:f8:79:ad:25:81:bc:62:02:ff:8d:
         64:92:8f:a2:3c:61:b2:af:5e:8d:ee:31:6c:3c:aa:ab:7b:f0:
         76:2d:f8:a7:ad:9f:ac:90:87:4f:d4:2a:5e:81:d2:4b:3c:6e:
         65:1a:4b:0c:17:c9:9b:7d:2d:be:6f:68:a1:c5:cd:02:f5:3f:
         b4:8d:41:46:92:d1:47:97:c1:a4:af:bf:0f:72:60:a6:17:73:
         f0:e9:70:58:e3:0f:5b:52:9d:dc:c1:17:68:44:dc:e7:32:00:
         d9:93:60:f7:0b:64:7f:e0:98:44:9a:d5:8a:1d:36:d8:ad:df:
         47:5d:12:cd:23:47:cf:da:6b:21:56:d7:be:e6:0d:a2:88:fe:
         30:93:b1:01:cf:5a:5f:23:36:da:df:12:c9:9c:0e:00:91:e0:
         a9:6b:f4:8b:04:68:50:b8:7a:80:d0:15:0c:51:62:42:b1:c7:
         62:89:f4:84:19:05:fe:9e:8f:16:57:b4:66:1f:f6:39:73:ae:
         2f:95:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----