Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File:                     98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier:          9GtePi4TDPqK8IweMrHmD/XYIakBd80MzXPUR3lPJiE=
Subject key identifier:   E1:40:19:21:17:0D:A7:37:44:3F:BD:E9:D6:4F:F1:8B:CD:46:44:DC
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       1E8D6D7347CCECC53FB1B99DBCBBC95560D8FFAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number:          018E
Signing time:             Fri 31 Jan 2025 03:43:40 +0000
Manifest this update:     Fri 31 Jan 2025 03:38:40 +0000
Manifest next update:     Sat 01 Feb 2025 05:13:40 +0000
Files and hashes:         1: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: 1U9ph4nvTaz+a9ZOyLvCbHB8AabwBEi1DLLj+KI8/xI=)
                          2: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: /oJFEb0VqVmdJS1vlOBKwkWqPUR+PCgVu5P/jreeJLs=)
                          3: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: XWO5cq2lW+0P/hRFzjfukYhOeMs1T+o49xcfeI+QNPI=)
                          4: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: KRA0vKDhE2I61TboKgWv+Jx7vekLF5XKxnTt/grWlY4=)
                          5: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: XdOAho787E4CbjSKlTlKYiAURxZc4iynbhqjGuJQq8A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8d:6d:73:47:cc:ec:c5:3f:b1:b9:9d:bc:bb:c9:55:60:d8:ff:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Jan 31 03:38:40 2025 GMT
            Not After : Feb  1 05:13:40 2025 GMT
        Subject: CN=E1401921170DA737443FBDE9D64FF18BCD4644DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:9a:56:e6:11:a0:2c:1f:22:18:85:89:7f:
                    1e:6f:4b:f1:5b:c9:7e:b9:ef:eb:62:80:40:7b:3e:
                    07:bd:a8:e0:e1:b6:97:f4:79:45:77:2a:b2:dd:e6:
                    26:da:49:97:34:db:86:75:ef:ff:41:c7:80:6e:ad:
                    c8:17:61:32:39:b7:96:f8:8b:b4:8a:bd:42:f9:3c:
                    16:1c:62:8a:e5:2b:d5:84:71:f8:5e:2e:ae:45:15:
                    d0:93:9a:7c:c4:07:d5:b5:20:69:dc:88:f3:d8:db:
                    8b:95:42:66:d3:94:e1:76:a0:3b:e9:c1:e9:dd:06:
                    45:a4:87:60:43:37:51:5a:f3:f1:ce:51:b1:81:2c:
                    ba:18:16:ca:05:39:47:b5:6d:d2:fc:54:67:d2:1d:
                    61:f0:81:71:17:37:fa:89:fc:16:47:8c:bc:33:08:
                    87:ca:5d:f6:e5:4c:4f:23:b8:06:60:30:10:77:2a:
                    88:55:30:74:22:d5:51:3d:0a:22:33:2b:38:ed:9a:
                    b2:02:5d:31:e3:6a:ff:30:6d:90:1e:f1:8f:f5:33:
                    36:33:88:16:ad:dd:3e:14:5b:22:49:ad:40:7c:5a:
                    af:a7:f2:a9:0f:83:e1:c1:0c:f9:cf:04:a7:49:25:
                    ed:cd:ce:2d:00:a5:11:08:ac:1b:1a:1d:bb:91:18:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:40:19:21:17:0D:A7:37:44:3F:BD:E9:D6:4F:F1:8B:CD:46:44:DC
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b4:2a:c2:a4:29:20:b0:90:58:e6:32:e7:55:85:93:e6:15:
         38:9d:15:b9:4d:89:c6:fd:33:dd:10:cd:4a:69:1c:5f:24:87:
         96:a4:9a:4c:66:50:63:ec:aa:c8:7d:46:71:4f:f3:d0:95:11:
         b0:9e:aa:e8:f6:ac:2b:eb:db:5b:1c:8a:27:e6:c1:01:27:0c:
         8f:86:f1:9b:88:10:18:0f:99:13:62:89:4d:ef:2d:30:d5:51:
         8d:e7:f9:83:75:f0:d1:d6:dc:96:b8:dc:62:47:d5:07:72:6f:
         c1:d4:15:1e:28:a4:17:0f:75:4b:7e:f1:3c:d0:fe:e9:40:56:
         6d:71:d3:56:cc:cd:b7:37:ff:fa:66:6d:7a:5b:89:09:d1:e5:
         de:77:e3:2d:a0:f5:51:fe:da:99:e4:24:82:af:18:36:9c:66:
         c9:52:3e:c0:69:f9:5c:22:40:40:b1:0e:8a:84:99:be:db:74:
         86:7d:22:72:f6:0f:99:7c:3d:4b:0f:90:df:e7:5b:b0:f7:04:
         b2:cb:da:e9:a3:cf:c6:62:42:b7:34:4f:f6:75:2e:bb:c0:ae:
         e2:e9:d1:d0:68:c6:25:26:7d:2b:b5:49:f8:b5:17:fd:ef:6c:
         fc:75:39:91:0d:a2:6d:83:6b:79:27:ea:9d:82:4a:aa:a2:ad:
         53:a2:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----