Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
File:                     AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft (raw, json)
Hash identifier:          m9u83FHL6uqhoYIqOzDyi43Z6qvWcbfFMjYnajoP1xQ=
Subject key identifier:   DF:54:9B:7B:79:37:84:B8:0B:70:D1:D9:8E:36:45:70:8D:15:FB:E7
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Certificate issuer:       /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial:       6FFF191EEF2B51C904FBF043E8D7A38285C788AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
Manifest number:          6B
Signing time:             Fri 31 Jan 2025 14:33:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:28:50 +0000
Manifest next update:     Sat 01 Feb 2025 15:31:50 +0000
Files and hashes:         1: 323830343a323533633a3a2f33322d313238203d3e20323633353738.roa (hash: Ijd+xP+Uh5qfqk4v2OzqNfVY8QInl2sx+SuO+NDL+GA=)
                          2: AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl (hash: HTihYz+4/a2K+sBC8UxFXke/Z3sjJEwu0ezCKqiXtqM=)
                          3: 3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (hash: Ngw/Xvarno/W/Y632B9fkAfNzMhT2vf9bMUn2puUHpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ff:19:1e:ef:2b:51:c9:04:fb:f0:43:e8:d7:a3:82:85:c7:88:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
        Validity
            Not Before: Jan 31 14:28:50 2025 GMT
            Not After : Feb  1 15:31:50 2025 GMT
        Subject: CN=DF549B7B793784B80B70D1D98E3645708D15FBE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:e1:67:fe:63:e9:49:88:27:0d:29:e8:fa:
                    44:fb:e3:b2:03:92:84:b6:a5:69:28:5c:3a:91:17:
                    6b:94:c2:ee:af:26:a5:a4:67:08:83:f8:72:e0:43:
                    09:44:24:59:60:bb:55:04:84:5d:d2:16:f3:b7:5e:
                    5e:85:3c:1b:f1:58:13:1e:7e:e2:85:97:12:69:2d:
                    4b:b2:51:bc:7b:7b:63:8d:1f:73:a5:dc:3e:07:91:
                    f1:a3:74:ad:d4:01:d0:b3:08:14:eb:a1:0a:62:45:
                    16:8b:c4:20:fd:35:a1:44:49:1e:3e:23:cc:2f:24:
                    e7:ee:53:68:df:1c:73:08:c7:ba:a9:9c:3f:7c:82:
                    7e:86:43:de:e8:c0:d5:94:ed:7a:7f:00:05:cb:75:
                    53:00:f8:7f:24:f0:e6:e9:b8:18:70:a6:ad:6f:5d:
                    24:08:df:cb:24:dc:84:93:69:a9:c3:d2:d2:f5:72:
                    3c:33:2f:88:c1:46:82:41:0d:11:95:30:8d:b5:b2:
                    8e:df:a8:69:e1:25:3e:3c:1c:98:3b:0a:59:49:64:
                    6e:42:82:dd:0c:2f:17:98:ba:ca:87:38:4e:db:41:
                    9f:cc:21:33:d3:38:75:24:f4:b5:16:ee:d3:7e:24:
                    66:c5:14:74:3b:20:2c:70:a4:77:8c:59:6c:f8:a0:
                    b5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:54:9B:7B:79:37:84:B8:0B:70:D1:D9:8E:36:45:70:8D:15:FB:E7
            X509v3 Authority Key Identifier:
                keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8e:62:c0:a1:b9:58:9b:c2:ee:bf:97:93:97:03:72:f2:f6:
         58:a1:6a:98:70:70:25:a7:e9:ec:32:a3:15:b6:a9:7f:de:f8:
         3f:50:26:1b:66:1a:b2:d1:ae:85:17:cb:32:85:13:25:1e:c8:
         dc:59:f9:bf:52:ac:c5:92:9e:cc:88:23:de:b9:24:e0:c4:4b:
         04:8c:ce:ee:60:27:36:91:fe:32:8d:01:e3:5a:7e:32:2c:74:
         b9:e9:19:3d:72:3a:69:c7:20:3d:0a:e6:80:34:49:a6:27:e9:
         09:e9:95:4c:1f:85:fd:80:fb:4e:5f:d4:04:1e:2d:e8:b6:0f:
         d1:4a:e3:a0:3f:cf:ee:07:e3:2e:46:f4:e5:bf:f7:32:f8:85:
         16:dc:ca:f7:2d:26:17:7f:36:40:c4:69:06:49:7b:f5:72:43:
         c1:c5:87:88:99:3d:fb:59:6f:08:0d:4b:2c:b6:e0:b3:18:8d:
         66:ac:52:ac:f1:04:22:e6:70:bf:19:a2:6d:ed:ee:af:e0:3b:
         1e:06:02:f1:09:f0:50:43:33:a0:38:07:2e:44:67:6a:2b:b1:
         0c:d2:a7:af:36:5d:d5:57:dd:42:04:6f:30:df:f8:2b:c1:4f:
         a2:63:ab:e1:48:ac:2a:2f:83:91:32:47:42:08:11:fd:87:c2:
         cc:75:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----