Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
File:                     0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft (raw, json)
Hash identifier:          QUkQq859Ye4KqN5gwS0j9l35Sjmb7QEYeDKBiBPmVO4=
Subject key identifier:   CA:EC:EA:AD:F4:CB:7F:FD:8B:C7:6D:55:8F:DA:8F:C4:49:E6:25:5D
Authority key identifier: 0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76
Certificate issuer:       /CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
Certificate serial:       0DBF9B99065AA6B27CF5B568C64793DEF5A44D48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
Manifest number:          010C
Signing time:             Fri 31 Jan 2025 05:06:43 +0000
Manifest this update:     Fri 31 Jan 2025 05:01:43 +0000
Manifest next update:     Sat 01 Feb 2025 07:51:43 +0000
Files and hashes:         1: 3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa (hash: HCi+ozGlqJMe2RL+xtVfmo+Hw9xdMOf7nagtA6lPQDY=)
                          2: 323830343a313839343a3a2f33322d313238203d3e203631393431.roa (hash: Z03kjJanckckkzDLT8EhqtZ2Kty2w9Fkj4To6RJFSBE=)
                          3: 0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl (hash: CAcaqSvxC64TEiF4Gh1AofFaidmCHc0KUysvZ5gYAcE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bf:9b:99:06:5a:a6:b2:7c:f5:b5:68:c6:47:93:de:f5:a4:4d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
        Validity
            Not Before: Jan 31 05:01:43 2025 GMT
            Not After : Feb  1 07:51:43 2025 GMT
        Subject: CN=CAECEAADF4CB7FFD8BC76D558FDA8FC449E6255D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:3b:89:77:33:c6:bb:f2:7b:27:d0:2f:f0:
                    2d:b3:96:68:b0:f0:59:84:a2:06:d6:c2:c7:cc:06:
                    33:69:ca:fc:8e:6c:4b:36:74:a3:7b:90:38:0c:ee:
                    8d:79:e2:c8:3b:a8:49:f9:04:4a:73:0f:2b:05:24:
                    3c:ae:b3:ef:e2:5e:2d:17:a3:ef:f5:54:44:6a:59:
                    03:16:70:f8:9e:d7:73:8e:5f:97:23:39:a2:e4:a0:
                    cb:9b:0d:84:1c:5c:38:6e:b5:a7:c6:d5:70:c6:89:
                    0c:93:5d:8f:58:65:7e:b6:ab:9c:61:33:71:a4:23:
                    71:c1:34:59:16:6d:0d:69:9a:73:ac:3f:da:84:63:
                    74:97:39:91:b8:b3:50:54:76:06:69:ae:4c:9a:2f:
                    ab:0d:10:19:a5:a4:72:9a:25:f9:e0:19:a6:f8:b4:
                    34:88:a4:40:76:8e:55:b3:5c:92:5e:b2:2a:17:c3:
                    41:23:11:df:87:fa:4f:62:af:57:84:f6:dc:00:c3:
                    c8:90:20:fa:7d:61:0e:43:9b:de:29:c3:fb:13:a9:
                    20:ea:2e:9e:47:f3:83:2a:fc:53:2f:93:01:33:73:
                    dd:88:47:43:90:ae:67:b4:e9:aa:98:29:18:c2:3f:
                    93:a1:ba:75:3a:26:43:17:6c:14:48:4e:98:1a:04:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EC:EA:AD:F4:CB:7F:FD:8B:C7:6D:55:8F:DA:8F:C4:49:E6:25:5D
            X509v3 Authority Key Identifier:
                keyid:0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:03:3a:de:33:9b:a0:bb:4d:bf:c5:63:6b:09:a5:ad:8e:ce:
         52:cb:1c:02:ca:15:1d:43:40:cd:13:78:8f:17:72:e4:20:d7:
         7b:bb:9d:cf:8b:7a:0a:38:cf:dd:20:eb:bb:e7:60:2a:2e:e5:
         3b:60:65:f1:cb:20:d3:42:b4:97:d1:e5:8a:1c:f4:cc:94:d1:
         9a:4b:67:db:0f:0a:4c:8f:57:23:af:3f:b3:8f:dd:a3:bb:0b:
         83:b0:e6:60:e7:26:b0:e3:b0:7b:5e:29:b6:db:51:d3:5d:c0:
         45:a3:b8:a3:f8:78:ac:38:77:7e:b7:fe:ad:54:59:a4:9e:0a:
         c9:74:6a:fb:23:00:02:3d:5d:94:60:18:86:a1:40:13:ce:1d:
         d0:c3:3b:09:e5:28:a0:3c:bc:fb:32:97:37:ba:2e:fe:80:51:
         8a:69:1d:d6:71:ff:fa:ee:91:be:b1:bf:0e:d6:71:70:6e:e9:
         97:f4:37:0e:1a:ab:33:8c:80:02:6b:ec:8f:ea:c8:61:95:28:
         cd:5e:94:98:ab:7b:d7:c0:b2:3a:9a:ed:c0:58:8a:01:53:68:
         b7:cd:d7:96:70:86:b1:50:e1:84:4e:44:2b:0b:42:9c:5a:90:
         17:e5:a2:d8:98:36:8c:5c:b9:d8:a6:8d:5f:c7:ec:0f:f3:74:
         03:23:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----