Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
File:                     86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft (raw, json)
Hash identifier:          fRX/zaK4OtrzAbZZSHwobTA6MIVGiD1pKL01NSuzpsc=
Subject key identifier:   4B:8E:A4:8D:F2:4B:14:77:8C:9D:00:4A:65:87:F2:4B:D3:DD:D7:59
Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0
Certificate issuer:       /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
Certificate serial:       641CF1C6164962CEA0B9ABC0A16A0EBBDD9D7AEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
Manifest number:          017D
Signing time:             Fri 31 Jan 2025 12:44:41 +0000
Manifest this update:     Fri 31 Jan 2025 12:39:41 +0000
Manifest next update:     Sat 01 Feb 2025 16:18:41 +0000
Files and hashes:         1: 3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (hash: U9C7AIkVM5r77Z45kQ1OSkYmu/IEk9vt1atgw+XimrQ=)
                          2: 323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (hash: 2346Z9sA6sm1fdi4zzQqT2Hbv9Ho+FYcywRTHXQJPPM=)
                          3: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl (hash: 2oIzFGWi3n87FNyazjVvvhULuRGlMhTQxYCli2D/zFY=)
                          4: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (hash: 4sQsq2RwTLw5Hl0XYOgoCLs7SnslRa4Dlq3Ya5UcRbI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1c:f1:c6:16:49:62:ce:a0:b9:ab:c0:a1:6a:0e:bb:dd:9d:7a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
        Validity
            Not Before: Jan 31 12:39:41 2025 GMT
            Not After : Feb  1 16:18:41 2025 GMT
        Subject: CN=4B8EA48DF24B14778C9D004A6587F24BD3DDD759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0c:b5:c1:36:d3:00:6b:d3:f2:2c:b8:0f:a5:
                    a9:90:5f:96:72:46:a2:e1:e4:cb:09:b0:ed:cb:84:
                    ba:0f:cd:dd:5e:e1:24:f1:e5:86:a4:d3:5f:96:ca:
                    10:fc:6f:62:eb:7c:7b:dd:c9:bb:f9:ee:6c:da:81:
                    80:c0:3d:24:e0:2a:6c:30:ea:a6:02:6f:58:fe:07:
                    1d:26:4d:8e:f4:f2:4b:75:ae:f6:15:75:3b:70:30:
                    8f:a4:fa:ea:4c:fb:0d:c9:6f:a9:59:c8:fe:dd:fd:
                    ff:aa:a5:44:a0:b2:08:e6:98:21:f8:a8:7b:8d:2b:
                    f2:3f:22:17:e2:b0:63:17:ff:5d:3e:cb:7f:5e:e7:
                    71:c5:81:99:dc:46:c2:56:f6:42:9e:fa:55:12:b6:
                    2f:e9:66:03:1a:d7:77:0a:bf:c3:57:e2:72:e7:5e:
                    1d:5e:4b:28:a2:79:35:7a:46:8e:72:ee:60:bc:a1:
                    18:14:12:27:0f:bf:17:9d:44:0f:73:37:46:68:b1:
                    1d:91:df:02:5c:c0:b7:23:ab:5e:98:6f:fb:c3:96:
                    2a:e4:59:1b:b8:89:45:47:a7:47:db:3f:fb:96:61:
                    41:fa:45:54:32:f1:92:a8:2e:44:49:82:5f:20:0b:
                    b7:f7:79:92:89:11:37:97:d9:bc:3a:89:9b:42:d9:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8E:A4:8D:F2:4B:14:77:8C:9D:00:4A:65:87:F2:4B:D3:DD:D7:59
            X509v3 Authority Key Identifier:
                keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:44:03:b0:f8:52:9e:0c:45:cc:af:32:9f:e2:be:09:be:87:
         b9:a7:d4:d5:bc:88:19:f7:94:24:95:3f:e8:09:73:8d:5e:c8:
         52:9a:77:be:82:d9:fe:d7:47:b7:76:b3:a5:15:b5:f0:3d:7a:
         6d:9e:3c:26:38:73:a6:0a:13:c2:1a:4f:70:95:bb:82:32:10:
         2c:c7:81:d7:b2:49:b1:34:f0:41:06:ad:49:12:d8:15:07:a4:
         12:5a:4c:a9:a1:a9:85:03:a9:a1:dd:e5:97:99:ac:f6:d6:0a:
         ed:41:01:11:a4:6e:20:17:23:34:31:50:ad:59:5e:d3:c3:35:
         b3:34:37:6f:00:1e:a3:c7:38:48:26:41:1e:fd:8c:45:7d:f5:
         b5:e9:33:50:04:b3:56:e9:e2:b7:dc:73:d9:28:af:27:ab:04:
         7f:dc:03:35:a7:a4:c2:7c:1e:df:a7:10:1d:56:bc:86:76:2a:
         b5:43:1d:25:fa:35:ac:18:7a:4a:5e:3e:7b:b9:77:77:69:ce:
         1f:6c:c2:64:57:d1:fb:c4:01:20:1b:31:ba:e3:a9:d8:8d:fa:
         ad:1c:f2:bf:a0:37:ff:0b:f4:2f:3d:9c:96:0c:70:e8:8c:ed:
         10:e0:6b:82:a6:57:85:17:80:28:fe:81:e7:6d:1e:21:5a:fe:
         28:f9:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----