Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
File:                     CF357620357B25129A68E7D55D716CED7E4E1516.mft (raw, json)
Hash identifier:          QATq5k7Lru11Bdc/0OxL1ArE/F0qrpUdUKdaJNku+sM=
Subject key identifier:   D9:D7:68:94:15:14:A0:63:6B:EB:25:98:01:15:74:9D:F3:75:41:AF
Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Certificate issuer:       /CN=CF357620357B25129A68E7D55D716CED7E4E1516
Certificate serial:       10A56EDFD4536E51797276AEC64FC39E2079E51E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
Manifest number:          76
Signing time:             Fri 31 Jan 2025 04:55:55 +0000
Manifest this update:     Fri 31 Jan 2025 04:50:55 +0000
Manifest next update:     Sat 01 Feb 2025 08:39:55 +0000
Files and hashes:         1: 323830343a373431303a3a2f33322d313238203d3e20323730393536.roa (hash: xpsUUg000pVSrUVcd0uouQCDQ8ge5aU1OuYkKxpWKpU=)
                          2: 3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa (hash: 0XjKrxOKkYmS1FdPhPC1n2keDHCvPZQDuEogT+g5GRQ=)
                          3: CF357620357B25129A68E7D55D716CED7E4E1516.crl (hash: j6vlKQmcNB216WjTvoSmC9BvhClf0/3H4XOqnQGQNEI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a5:6e:df:d4:53:6e:51:79:72:76:ae:c6:4f:c3:9e:20:79:e5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516
        Validity
            Not Before: Jan 31 04:50:55 2025 GMT
            Not After : Feb  1 08:39:55 2025 GMT
        Subject: CN=D9D768941514A0636BEB25980115749DF37541AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:10:0d:b0:98:f2:39:ed:1d:03:e6:ac:13:
                    89:5a:db:59:2b:8a:48:e4:f3:22:60:5f:96:15:5c:
                    94:e4:ea:5f:49:6c:73:4a:89:b8:88:c1:10:fe:47:
                    eb:e4:87:b2:bd:94:3a:07:03:84:ef:d9:7b:c0:a5:
                    f4:7e:ee:d6:b9:cc:47:11:2f:f0:4d:bc:49:34:a7:
                    35:ab:12:f2:c0:5d:48:2f:07:93:97:08:75:16:4c:
                    f8:ee:7f:a4:df:bd:25:2a:7b:e6:a8:ae:4a:ba:72:
                    2e:96:da:58:0d:7d:75:33:ef:96:f3:88:07:cf:cd:
                    ae:5f:6f:45:e5:8a:51:4d:bf:c4:4c:77:04:0f:45:
                    07:b4:bb:93:27:cf:dc:81:c4:46:7a:7e:47:73:ea:
                    64:3c:ee:d9:bd:45:87:ac:82:2c:0b:cf:b9:6d:2f:
                    fe:c2:54:7e:25:49:8b:02:66:42:9a:24:85:c0:2d:
                    12:d1:20:2f:0d:3f:b4:53:06:74:93:d5:c1:f7:87:
                    b2:d3:b3:83:7d:33:f0:21:21:d7:c3:eb:b6:29:a4:
                    ad:55:fb:eb:43:8b:7c:bf:0c:07:7f:81:2c:fa:c4:
                    f5:7b:ee:b0:e1:51:cd:60:49:f8:9b:1d:97:ac:e9:
                    97:14:d1:8d:f9:eb:ee:8c:92:8c:70:9a:08:d9:00:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D7:68:94:15:14:A0:63:6B:EB:25:98:01:15:74:9D:F3:75:41:AF
            X509v3 Authority Key Identifier:
                keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:65:25:4d:0f:2a:c6:16:a3:a1:f9:68:66:5e:c8:24:a4:8e:
         a7:27:16:b1:3e:cd:a4:b3:d6:40:7e:d7:5b:00:dc:11:e6:a7:
         de:3f:ee:81:f7:3c:ba:5c:88:dc:50:84:88:43:9c:78:bd:62:
         7d:36:e0:31:be:43:ec:a2:16:6c:20:57:ab:a8:3f:ca:3c:b5:
         e1:cf:e2:e4:55:b9:c3:9a:1c:09:0a:93:38:23:d4:6f:21:92:
         3b:46:c9:23:79:13:2f:4c:e7:85:12:e5:6c:d8:e1:55:c2:bd:
         d7:10:93:2c:c5:aa:20:97:2c:45:7b:d0:d6:52:7f:65:0a:de:
         5f:c3:56:8c:dd:db:0e:d1:5e:34:e2:50:ba:06:4b:ff:ee:1d:
         18:53:f9:ed:fc:c4:f8:3f:28:ac:3b:90:f1:0f:2d:7d:f9:1c:
         92:0d:97:1e:db:01:8b:c7:bb:7e:74:5c:18:a7:01:92:82:e4:
         64:84:0f:9c:86:3f:bd:2b:08:cc:c3:2a:61:60:75:4b:75:f5:
         40:f2:76:5d:e9:f5:fc:ba:3c:c9:b9:16:07:3a:07:9c:9f:31:
         94:93:42:d8:e3:06:a2:98:eb:83:eb:f8:63:f6:ae:49:3a:22:
         49:c5:d2:d4:aa:e3:1b:1c:e8:51:1c:97:cf:53:e1:d6:5c:58:
         06:7e:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----