Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
File:                     D903348767481BAEFE2C4B534D22308FC61456DE.mft (raw, json)
Hash identifier:          zKMMtYhJ+rQdR10vwd5ZT9Pi3hLQctu+U+CwW2rv/Ig=
Subject key identifier:   58:B2:B0:2E:38:C9:7C:3D:EE:4C:35:72:33:46:FC:EC:84:81:55:16
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       570C1E206015BA40076A38B918C597DC07B8C7F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 13:58:42 +0000
Manifest this update:     Fri 31 Jan 2025 13:53:42 +0000
Manifest next update:     Sat 01 Feb 2025 16:16:42 +0000
Files and hashes:         1: 323830343a333364633a3a2f33322d3438203d3e20323635343231.roa (hash: tJ57NvFADt9k89BFKH0BAiUOCUa7z9MLxdiSJejVBC4=)
                          2: D903348767481BAEFE2C4B534D22308FC61456DE.crl (hash: 0BzCD/1jRpGTjjtju/dCXtHaWCjeMZ5p5NuNulwQHyw=)
                          3: 3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (hash: apj7iu4/kIUArDa8fmZGeq0Q5bqaXW6C8fcXlPYz/NU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0c:1e:20:60:15:ba:40:07:6a:38:b9:18:c5:97:dc:07:b8:c7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Jan 31 13:53:42 2025 GMT
            Not After : Feb  1 16:16:42 2025 GMT
        Subject: CN=58B2B02E38C97C3DEE4C35723346FCEC84815516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:56:12:01:52:28:f0:94:b2:21:c4:6d:c9:
                    ce:94:cc:3b:01:d5:bb:e1:1e:45:eb:1a:09:fe:31:
                    70:c7:d3:04:16:b0:21:8c:91:07:f6:d8:09:83:08:
                    c3:2e:ae:ef:c0:87:8f:b8:13:2f:67:51:a2:a0:5d:
                    33:74:17:96:f3:d6:9f:76:e2:89:43:07:2f:38:cb:
                    98:4f:89:f1:b1:5f:be:16:a1:cf:e9:c2:37:5f:89:
                    41:c1:20:1e:5c:f6:fc:cc:0e:b1:9e:06:5a:95:fe:
                    07:61:1e:65:2c:8c:10:89:69:3a:8c:7f:b9:07:a3:
                    f0:27:9a:89:5a:69:29:35:5a:55:d4:02:be:98:86:
                    3f:65:3b:7b:94:7e:ef:c0:d6:6d:d2:69:17:a8:63:
                    c4:e6:84:ed:18:43:09:47:46:b2:ad:d7:09:d9:c8:
                    b3:62:fc:39:a6:06:78:97:d5:30:40:2c:d5:cd:54:
                    e2:ff:28:cf:a0:5e:76:18:22:c0:90:a5:6f:a7:32:
                    46:0e:15:b1:6e:4a:6d:4e:9e:24:d4:08:73:96:e5:
                    8f:70:6c:a1:e4:d4:b0:b9:0e:79:0f:ca:e3:56:77:
                    6e:02:d5:18:bf:7b:8a:0c:1a:3d:69:c0:6e:7d:a2:
                    6e:a7:cd:46:6a:40:b7:2d:46:8b:87:bf:41:fa:3c:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B2:B0:2E:38:C9:7C:3D:EE:4C:35:72:33:46:FC:EC:84:81:55:16
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:00:7b:6d:86:84:8a:61:a4:8f:7b:f1:cb:53:a6:df:4d:7d:
         8d:dc:a6:6a:2c:56:c6:bb:84:80:ab:a9:db:80:34:f2:5e:06:
         f0:0b:ab:56:c4:15:18:18:a8:c6:c0:3e:27:c6:a4:03:d8:57:
         28:e2:0e:54:60:c8:f3:79:44:85:f3:2a:1a:69:09:b3:d0:1e:
         bf:8d:5b:9f:f8:f5:af:63:5e:37:02:91:ec:67:78:ff:a6:8d:
         b2:01:de:9e:a8:06:b6:62:cb:9a:00:dc:4b:79:fb:3c:df:ec:
         ca:95:5c:f4:41:fa:3c:78:0c:c5:ee:08:b2:57:94:b3:b7:2c:
         5f:e3:2a:d7:b8:74:16:1f:e7:d1:1d:ec:d8:f0:cc:bc:c6:9e:
         44:39:7e:90:c6:1a:99:a2:34:bc:c1:c5:7f:65:fc:32:9d:8f:
         ac:47:05:29:36:35:6c:91:9f:a8:61:e6:bd:d7:68:16:ce:d6:
         eb:2b:25:56:f6:39:5a:95:8a:45:5b:c6:be:1f:71:b5:7e:d9:
         e9:a4:ab:b6:69:94:47:19:9c:98:8f:46:25:85:b9:9e:33:a5:
         b4:31:f2:ab:f0:d4:32:bf:91:be:0b:94:1f:c8:be:72:27:cd:
         fb:6c:15:53:a4:78:e4:f9:9a:6c:49:bc:f2:af:28:c4:c2:3b:
         85:74:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----