Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.mft
File:                     84A0648C9B9519DD03662E46C02F5297FC855EEE.mft (raw, json)
Hash identifier:          mvRPSGgZQQ6XVLpt3AQX2X9ZqHdukRBWAgoOHI3oQG8=
Subject key identifier:   15:04:60:B0:EC:29:82:2B:63:E1:31:BA:F6:BE:C8:C6:CD:46:E6:8B
Authority key identifier: 84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE
Certificate issuer:       /CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
Certificate serial:       5EBEC2FE76890EE9CDCB00E6405952D24DD61C37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.mft
Manifest number:          18
Signing time:             Fri 31 Jan 2025 04:52:42 +0000
Manifest this update:     Fri 31 Jan 2025 04:47:42 +0000
Manifest next update:     Sat 01 Feb 2025 07:30:42 +0000
Files and hashes:         1: 3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa (hash: GDa9RHeLLD+9TAgWgn71vFe1Y13k/9tVURsuevId9KY=)
                          2: 3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa (hash: HkAHbjqkTMWIBkr1udNeimsctVcUATBe/3nY0rf+5ZQ=)
                          3: 3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa (hash: ekhGCkCLR0tzLsTQJ5STB+gSAwxFP0YLBUbEr+aHm4E=)
                          4: 84A0648C9B9519DD03662E46C02F5297FC855EEE.crl (hash: 6CHCVwCUnk1U3OlGZSdbiohrL1uW4FF1jk5NYUgYACE=)
                          5: 3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa (hash: 8eTT4lUOyP5bZ3F+1djGsiObdgM7I3l3JVHiGRdO7O8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:be:c2:fe:76:89:0e:e9:cd:cb:00:e6:40:59:52:d2:4d:d6:1c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
        Validity
            Not Before: Jan 31 04:47:42 2025 GMT
            Not After : Feb  1 07:30:42 2025 GMT
        Subject: CN=150460B0EC29822B63E131BAF6BEC8C6CD46E68B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:3f:ba:70:5e:52:83:28:7c:6f:db:96:ee:
                    54:af:8a:54:c0:a7:d4:f7:43:17:5f:29:be:8b:81:
                    6e:36:e9:f6:bf:da:9b:96:47:59:51:c7:98:36:40:
                    65:87:2c:32:4c:9f:b8:fe:b0:0d:da:8d:e8:ad:df:
                    38:6d:b1:b7:11:8e:32:d4:82:5f:64:ea:69:a0:6e:
                    33:39:51:78:1f:f2:77:d6:ab:b5:90:21:ef:1c:1f:
                    e2:61:78:08:18:d3:a3:1b:cb:8e:0c:62:0e:55:61:
                    d8:11:d6:44:5b:2a:94:8a:16:9a:7a:a8:4d:5c:92:
                    ec:92:af:61:ec:b0:c6:3c:45:ed:ed:f5:b7:dd:09:
                    d4:7f:49:7e:75:f4:c7:17:51:61:e6:aa:83:e2:75:
                    2d:94:84:4d:4d:4f:d4:35:e4:89:62:e4:d7:b1:16:
                    c8:44:d4:df:42:00:c5:0a:cb:6d:a8:00:4f:02:06:
                    6c:20:49:02:09:52:e2:e8:64:18:87:04:5b:44:28:
                    8d:89:4c:a1:81:ae:89:ca:52:8b:56:5f:94:fa:cb:
                    b7:0b:ed:9c:16:f2:bb:c7:01:be:fc:10:d2:2c:07:
                    ca:98:d1:ca:d2:cc:82:e2:6d:a5:e0:33:08:77:f3:
                    6f:a3:0d:99:01:76:7b:c4:c4:d0:c8:8f:a6:07:b8:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:60:B0:EC:29:82:2B:63:E1:31:BA:F6:BE:C8:C6:CD:46:E6:8B
            X509v3 Authority Key Identifier:
                keyid:84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:45:db:15:2c:94:0c:25:7d:e4:6c:34:4e:00:0a:08:ad:21:
         ac:54:b0:f0:8c:12:c3:2c:34:26:5d:f9:a4:3e:ec:9a:f5:b3:
         7a:a9:c5:f0:11:81:14:40:1b:04:d2:32:be:c8:f0:38:b7:90:
         1c:05:09:66:ea:38:2a:70:ba:dc:2e:06:04:78:38:69:04:43:
         21:e1:2a:41:74:76:4c:8c:8f:34:88:da:46:d1:db:fa:fe:bc:
         83:28:b9:5b:fb:c6:1e:e3:64:3a:51:30:36:99:2d:db:42:29:
         c3:5b:8e:e9:ec:40:89:91:34:5e:59:2c:50:18:cf:6b:fc:90:
         c4:4f:8a:83:18:40:49:aa:4f:56:47:4f:64:f0:ce:b2:b3:5b:
         7e:c4:d4:0d:f7:29:9f:ba:c8:d8:d0:f5:76:14:68:25:b8:9a:
         ea:02:54:c8:4f:52:fa:cc:a9:05:e6:ff:94:75:f7:67:ee:51:
         2a:ec:ce:1d:89:e2:75:b4:49:46:69:e1:c8:37:46:c6:41:6f:
         83:6c:5f:ca:94:c6:68:40:f9:8c:74:ae:0e:59:10:24:e6:e8:
         99:9c:fa:75:dc:5e:2b:6f:bb:64:7a:b4:62:9f:b8:fd:3f:7f:
         09:a5:aa:0d:15:e1:a4:7d:ad:1b:fa:fb:3f:04:8e:6e:c2:65:
         6c:43:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----