Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
File:                     42E0C742D5DC5A6C41753F73202F41323E27436C.mft (raw, json)
Hash identifier:          s82B44aaB7MRQM2pGThTBl8amr082MZzHVS2zGJpNfA=
Subject key identifier:   BA:8E:E3:34:1F:EE:55:2C:6B:7D:75:BE:01:61:3E:C1:5C:D2:11:7E
Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Certificate issuer:       /CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Certificate serial:       B3917CD4013F4C5208ECB0A09F6AF905026835
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 08:04:47 +0000
Manifest this update:     Fri 31 Jan 2025 07:59:47 +0000
Manifest next update:     Sat 01 Feb 2025 09:58:47 +0000
Files and hashes:         1: 3133382e302e3137322e302f32322d3234203d3e20323634353532.roa (hash: 0MFfiXic+V90A0smzs10RYsb8NM7jYXCSdh17VQBpAs=)
                          2: 3137302e37392e35322e302f32322d3234203d3e20323634353532.roa (hash: J6OhdI4Lidmh5KuDKqt6HigY1WFB4Z81PC/8LWX82Ts=)
                          3: 323830343a323136343a3a2f33322d313238203d3e20323634353532.roa (hash: A4Lq+PQ31+20IzfeVtk8ACaOsf/Iwi+IUxhq5EBP7gE=)
                          4: 3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa (hash: AraEfsFv/N+wtGJTz+pq4R9SqdAXQ1WU2aOXrPIgl4g=)
                          5: 42E0C742D5DC5A6C41753F73202F41323E27436C.crl (hash: B8bmy8UZ1UxSUJdCY03tUVjs3gHsQvUql3c0pJ/Nrbs=)
                          6: 34352e3137322e38302e302f32322d3234203d3e20323634353532.roa (hash: Dz1o/uLzm8fSM4rGvAD1HvCWuB5zbYtPSdzHAs6PC5I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b3:91:7c:d4:01:3f:4c:52:08:ec:b0:a0:9f:6a:f9:05:02:68:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
        Validity
            Not Before: Jan 31 07:59:47 2025 GMT
            Not After : Feb  1 09:58:47 2025 GMT
        Subject: CN=BA8EE3341FEE552C6B7D75BE01613EC15CD2117E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:ce:70:61:6a:7c:fc:60:8b:4e:78:c6:c0:
                    88:74:7a:cb:29:33:d5:d1:b0:8f:78:d9:9e:af:6d:
                    89:86:b7:09:4e:74:89:f9:d7:c2:8c:23:12:72:02:
                    6d:73:fe:00:53:0d:8d:dd:33:8a:96:71:f3:33:80:
                    a7:c5:ed:f6:51:9c:e0:3e:c4:92:31:ae:75:f5:22:
                    b5:e6:54:d5:97:1c:cd:bb:75:9c:95:2d:f9:ee:c9:
                    e3:1c:dc:89:12:22:e5:0b:5c:64:c0:ee:7c:59:1b:
                    09:11:a4:69:17:a7:4f:79:3d:00:a2:a0:5d:38:87:
                    24:6b:09:a9:9d:3e:5f:f6:95:59:d8:b5:27:96:1c:
                    16:3a:b5:72:42:e3:de:70:a9:10:a1:8b:2c:72:cf:
                    db:78:18:73:57:f2:71:76:c0:c0:c6:6f:3d:35:3e:
                    47:93:55:c0:68:85:82:72:18:c3:dd:0c:4d:0c:cd:
                    ff:77:f0:78:b5:c2:06:d8:e6:22:84:02:c2:5e:9c:
                    ad:2b:1f:87:14:b1:ab:7d:4b:f4:02:fb:50:17:59:
                    26:b3:58:2b:a0:3d:e3:d4:b8:e3:89:ff:33:c9:63:
                    81:1b:20:b7:62:0f:ad:f7:19:bf:e3:7d:41:83:ac:
                    51:11:64:46:67:c8:7b:83:b5:f0:a7:39:11:fd:73:
                    97:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8E:E3:34:1F:EE:55:2C:6B:7D:75:BE:01:61:3E:C1:5C:D2:11:7E
            X509v3 Authority Key Identifier:
                keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:a3:78:e4:2f:af:85:31:50:9d:3d:32:5c:8a:71:2d:1e:
         17:05:86:fb:b7:64:3a:9b:1c:b9:43:ec:12:b1:d0:ba:f9:b9:
         66:11:cc:3b:34:0f:ac:67:dd:39:00:d6:49:aa:3c:1f:65:58:
         8f:80:21:29:85:89:89:90:e4:6f:4c:7a:d1:20:9c:7b:84:ed:
         0c:49:fd:3f:d7:fd:93:2b:51:82:e1:d6:0a:51:4e:9a:27:1b:
         ee:cf:98:aa:4d:c1:39:74:77:68:f3:aa:75:91:19:ff:5e:c2:
         b9:93:f4:2f:a1:e9:fb:ac:e8:a6:dc:24:56:8e:d2:d3:33:6f:
         93:5c:db:68:55:8a:1b:23:68:98:90:cd:c4:3a:9a:62:62:a2:
         a3:60:5b:46:bc:a4:46:31:ee:4f:e1:c1:ba:6f:cb:5f:d5:7b:
         2b:5b:0b:a9:eb:b2:30:cd:2b:9d:21:f6:66:26:2c:13:41:e0:
         05:b5:05:dd:97:e4:94:22:de:f1:9d:02:92:60:02:0b:da:69:
         a8:dc:b6:6c:69:25:59:a9:18:06:be:5e:ae:4b:3f:b6:b9:33:
         2f:03:75:aa:03:a9:55:df:3b:df:b9:24:22:37:cd:e9:f8:3b:
         b7:c5:22:48:1d:f3:8f:bb:e4:f0:48:3a:19:15:ce:f4:14:d9:
         6e:a2:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----