Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
File:                     B3C0ECC43363690F72F949D611EE62DCF8942568.mft (raw, json)
Hash identifier:          ACAViA/OVje+eKeVFyYxmKh8j+ejValWbPwkugy1DVw=
Subject key identifier:   0B:E1:13:4D:74:9F:9D:5D:63:21:EE:05:F9:A6:42:7D:C8:88:AC:B7
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       01B24AC7EB248C145DD3E549C68514B597F04070
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
Manifest number:          7E
Signing time:             Thu 30 Jan 2025 16:21:49 +0000
Manifest this update:     Thu 30 Jan 2025 16:16:49 +0000
Manifest next update:     Fri 31 Jan 2025 17:46:49 +0000
Files and hashes:         1: 3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa (hash: PKdLitCIZ9S12UL7KzcVseLx3ACrvvJC5hEFYwQ9SW0=)
                          2: B3C0ECC43363690F72F949D611EE62DCF8942568.crl (hash: m2Rjl5aQJcoNKVyq5Oa5IaaqerdDbh+Ght6XMFVCEgg=)
                          3: 3139312e352e3233362e302f32322d3239203d3e20323633353433.roa (hash: W8xbYb/TsHzwOaPb3fvUAV6VzezZEO/l88p60qlnxMs=)
                          4: 323830343a313361343a3a2f33322d313238203d3e20323633353433.roa (hash: 1PvI12O/JcW5uKlE1fnnutkDw8XZx5PE9dVr6YUYTGg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b2:4a:c7:eb:24:8c:14:5d:d3:e5:49:c6:85:14:b5:97:f0:40:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Jan 30 16:16:49 2025 GMT
            Not After : Jan 31 17:46:49 2025 GMT
        Subject: CN=0BE1134D749F9D5D6321EE05F9A6427DC888ACB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:ec:db:de:28:fc:81:85:e5:26:e8:b0:16:
                    2b:b6:82:89:cd:d6:45:a4:5c:de:55:b0:9d:7d:bc:
                    6d:66:7d:47:b1:2e:f5:85:36:6a:cd:c4:44:00:7b:
                    2d:72:d1:3b:6f:37:86:26:f1:bd:84:a2:ee:16:b3:
                    28:b5:f8:31:a5:ab:b6:98:c2:0a:8c:1c:ed:56:31:
                    42:04:8e:d1:0d:ae:8f:30:27:fd:f6:da:5a:8c:d4:
                    f1:6d:a6:c0:c3:53:05:3b:79:c6:34:53:8d:67:a5:
                    a3:c2:6a:e9:f7:e8:13:5f:30:a4:10:99:41:48:99:
                    b0:d2:5c:a6:41:0e:dd:3f:9e:77:e4:84:aa:0d:c1:
                    9c:d6:c9:42:22:98:69:79:16:40:8e:4b:8c:73:bd:
                    7d:5c:eb:9a:2e:cd:64:2b:72:28:e0:a2:0a:cd:be:
                    7f:b3:27:23:62:66:d3:e9:3d:1d:8c:6a:bd:bb:d5:
                    3d:02:3f:ba:89:8c:a3:b4:7c:f1:97:db:52:9b:3d:
                    b0:bf:6c:40:7c:fe:f5:91:fa:a4:ac:5b:52:c4:a5:
                    89:b9:0f:22:3e:92:f4:cb:cf:38:06:b3:36:de:f0:
                    7a:fb:9e:63:db:04:c2:d6:45:21:59:81:59:8a:47:
                    c8:07:a7:86:b8:3f:3c:ba:9b:40:f4:cb:0f:8a:f9:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E1:13:4D:74:9F:9D:5D:63:21:EE:05:F9:A6:42:7D:C8:88:AC:B7
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ce:2d:f6:13:38:ef:51:35:41:01:cb:66:e2:a7:14:20:8e:
         9d:bb:64:9d:07:76:bb:89:6c:45:e5:47:42:fd:72:2e:43:9e:
         8a:1a:6b:f0:15:7d:a0:4f:f1:e9:fe:bc:43:76:c2:e3:6e:66:
         aa:84:9b:af:13:a0:f4:d9:05:53:82:47:fe:65:e5:de:94:ec:
         3f:0d:54:d0:79:d4:b2:a8:f8:18:d0:8b:d3:59:10:0d:d8:ac:
         83:e3:90:d3:28:af:b5:b4:39:6a:b3:0b:72:29:f9:70:a9:b5:
         3f:40:59:6a:13:bd:01:2d:4e:6e:db:12:14:bf:83:43:db:8d:
         35:e5:8d:65:d5:fd:72:8d:82:b7:a2:16:7a:df:79:45:35:aa:
         d9:8a:27:84:6b:d4:80:1f:16:28:a8:58:2b:62:93:8c:df:66:
         96:e6:49:f8:14:cc:01:bf:3c:5b:00:60:f1:6d:44:78:b1:fb:
         eb:c0:84:22:25:fb:b7:60:9b:86:69:dc:15:3b:11:fb:65:ce:
         25:9c:04:b3:d5:c0:e1:c9:d5:9b:19:c6:83:29:29:f3:10:30:
         5b:43:a9:49:90:7f:c8:97:f1:16:98:76:d1:da:46:e6:a5:fe:
         dc:de:8f:0b:14:68:dc:1b:b3:ce:83:a6:05:f7:67:80:3f:52:
         32:e9:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----