Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
File:                     1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft (raw, json)
Hash identifier:          cwnfdDIA52HR9ORDbgRqx4HRr7uU6tiPy5RDIqU2tKU=
Subject key identifier:   CF:24:8E:B5:92:04:77:06:17:A2:DA:29:E6:D2:E2:35:01:5D:D9:C9
Authority key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
Certificate issuer:       /CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Certificate serial:       6951A222B1641B13C319281BA1BEF9BDA415CE64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 12:05:39 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 14:16:39 +0000
Files and hashes:         1: 323830343a326665303a3a2f33322d3438203d3e20323634393138.roa (hash: 71C7Ns93wj0HbNGwfkVZ1ke/w0tCyHABFNqJiIDFCPc=)
                          2: 3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa (hash: 5TmttIpFCp5/VvfzpeWWxPc9kOWOfa17Udr1XVelIbo=)
                          3: 1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl (hash: /hNvlsK8mpJNmO7Ud9XPRo0FiYN1HYfTZF5Nsn3bPxc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:51:a2:22:b1:64:1b:13:c3:19:28:1b:a1:be:f9:bd:a4:15:ce:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
        Validity
            Not Before: Jan 31 12:00:39 2025 GMT
            Not After : Feb  1 14:16:39 2025 GMT
        Subject: CN=CF248EB59204770617A2DA29E6D2E235015DD9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7c:2e:11:12:73:b5:d1:15:1c:18:37:46:52:
                    9c:03:a5:eb:27:99:98:b0:73:e8:a2:1c:e1:f0:56:
                    a4:d0:fc:e8:fa:6e:ed:c5:43:f4:79:d4:1a:01:c8:
                    be:6d:1f:6c:69:c1:16:40:32:f5:14:8e:b4:2d:13:
                    de:7e:dd:d7:94:81:a5:96:58:95:61:fc:45:5c:1d:
                    5d:6f:0b:a9:22:ae:9c:78:0d:20:a5:d9:4d:e4:68:
                    55:46:15:48:ba:bc:bb:a2:17:18:4b:37:87:bc:d6:
                    d2:40:1b:ec:9d:4e:13:e2:cf:06:a4:d3:6b:32:90:
                    23:6a:83:91:09:04:63:dc:09:a1:12:b9:6d:e4:0e:
                    aa:2d:30:fc:2c:14:8f:2e:f6:16:da:0d:3e:fa:57:
                    86:b4:d3:6f:3f:0b:40:94:e8:8c:5b:7d:0c:8d:20:
                    5c:76:fd:6a:2e:75:4d:cf:a2:7d:f1:7c:2e:5c:ba:
                    b8:2e:65:30:26:12:71:98:6b:a3:0a:49:ef:85:0d:
                    22:72:df:72:ae:a5:ee:2a:d9:f7:77:d5:04:3a:8f:
                    30:58:74:21:43:30:c9:c3:59:b1:de:ae:1f:14:71:
                    ec:25:dc:cf:5a:63:53:dc:d3:0a:69:3a:c4:09:c6:
                    ff:a1:75:75:2d:8a:63:db:58:3d:11:81:fa:92:a6:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:24:8E:B5:92:04:77:06:17:A2:DA:29:E6:D2:E2:35:01:5D:D9:C9
            X509v3 Authority Key Identifier:
                keyid:1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e0:98:ba:e5:24:46:6f:9f:a0:0c:f6:0d:13:96:8e:81:08:
         e6:c8:f0:5c:df:b0:ef:8c:7f:fc:82:98:ed:45:2b:2f:5e:87:
         99:ba:5f:a5:69:87:ac:ea:d8:61:c6:3a:b0:a6:a1:0a:5a:a8:
         9e:06:58:37:ca:d2:03:d5:05:df:40:7b:70:2f:79:db:d7:69:
         99:ad:94:24:41:2a:3e:a4:58:de:fb:7d:d4:53:42:cb:d2:61:
         60:be:6e:06:dd:a3:ed:85:f5:39:45:80:48:ba:2b:c7:a2:4a:
         36:ac:6a:88:97:29:c5:9d:08:10:5d:a5:d5:87:31:46:07:43:
         29:62:a7:ba:00:cf:61:34:ee:32:96:f7:60:5b:ed:44:41:0e:
         9a:20:1b:06:f1:a5:eb:67:1d:6e:ee:c7:97:08:6d:10:e6:69:
         25:68:d5:ae:98:eb:fb:2a:99:a8:9e:ce:fc:d2:2a:d3:7c:10:
         55:32:6d:67:83:52:2f:fb:e2:d3:2d:8d:7c:33:f2:88:0e:32:
         71:95:1a:42:f9:c6:2b:52:b6:fb:99:0e:02:4f:19:c8:81:cc:
         55:97:fc:35:a3:46:bd:84:fe:96:fa:54:59:4d:13:5c:42:62:
         79:e4:e0:7f:33:24:3f:48:b8:c2:56:20:4e:5d:0f:26:12:69:
         8e:da:d4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----