Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
File:                     BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json)
Hash identifier:          JWKBOdsBcctmstUMQ1ZRhKkpj/vgedy3vbMagFXmaoY=
Subject key identifier:   1B:33:06:7D:77:AD:B1:0C:9B:55:65:49:B5:10:3B:E8:79:0B:2D:26
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       10F00D7777DF91AAB4F440BFE805742B2FC6C32D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
Manifest number:          019D
Signing time:             Fri 31 Jan 2025 15:57:03 +0000
Manifest this update:     Fri 31 Jan 2025 15:52:03 +0000
Manifest next update:     Sat 01 Feb 2025 17:31:03 +0000
Files and hashes:         1: 34352e3138372e3137302e302f32332d3233203d3e20323639343733.roa (hash: Lx7nSCgj5dOCOPrurXvE2HW2gQpQataNP9dJX4pXSJY=)
                          2: 34352e3138372e3136382e302f32322d3232203d3e20323639343733.roa (hash: TrflTOrAEA0IXJ5LPk1kfqTy9TQ37HqB/RyjVvbmBEg=)
                          3: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: pO92ZTA6JgI7SZJqWBqtXgNp8h8anIZBL3tkPi+xJ8U=)
                          4: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: NNCPK0nxJlE9GX0moyUehMYjkNE5SXVaH5rMXKOAB9M=)
                          5: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: 5R/H/qjBOtiki6Dgdr+5995eHS0FePuqQzGxf2kkY94=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f0:0d:77:77:df:91:aa:b4:f4:40:bf:e8:05:74:2b:2f:c6:c3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Jan 31 15:52:03 2025 GMT
            Not After : Feb  1 17:31:03 2025 GMT
        Subject: CN=1B33067D77ADB10C9B556549B5103BE8790B2D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:70:17:31:e4:8c:0a:f3:22:24:40:8f:19:
                    85:bd:bd:19:7e:fc:8b:8d:eb:52:cd:38:48:4f:d6:
                    3e:5d:90:72:fc:33:1d:54:60:03:02:7e:dc:fb:59:
                    8e:50:6a:dd:a6:89:4d:cc:66:c5:e2:a0:9f:19:df:
                    50:8a:a1:c3:77:c9:ea:88:c6:b3:a3:39:14:c4:2a:
                    29:6f:9d:3e:bb:af:98:d4:89:9d:11:1f:fd:cb:e2:
                    22:cc:3e:87:0d:39:0a:64:82:23:77:f5:7e:a6:3c:
                    99:34:0a:b3:39:a1:97:86:3f:c7:55:af:40:ab:9e:
                    3b:a4:ee:9a:25:a1:28:6c:dc:60:3a:2a:f3:2f:fb:
                    5d:2a:4e:6e:06:ee:0c:c1:a4:e0:cc:18:9d:d1:2d:
                    bd:66:8d:9a:58:80:24:e5:ec:9d:d1:60:51:77:f3:
                    b1:06:f9:73:bb:4e:1c:e6:76:ae:4c:5d:6c:13:c6:
                    1c:57:df:0d:1b:82:70:73:1d:0f:5a:32:35:e5:76:
                    72:de:a5:c3:52:70:56:6e:5a:e2:2e:f5:6f:5f:51:
                    10:a1:6c:9e:62:cb:d0:c8:03:f3:ef:14:3a:85:5f:
                    ac:ba:2d:f9:8f:95:bd:b5:0e:eb:50:9d:63:77:67:
                    c3:72:03:b8:0f:59:26:85:01:f7:e8:03:92:21:b9:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:33:06:7D:77:AD:B1:0C:9B:55:65:49:B5:10:3B:E8:79:0B:2D:26
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:29:0e:76:20:ef:52:e0:9b:d0:da:77:a3:7b:02:53:4a:
         38:d8:ca:df:5a:fb:bf:a0:a2:26:b5:d2:fa:ae:93:16:70:9f:
         c8:5a:d3:be:e7:e5:68:9d:a1:9d:1e:82:ae:4b:81:36:48:5e:
         24:06:61:07:c6:cf:5a:d0:58:20:d0:ae:40:25:15:eb:f1:d9:
         ce:40:76:9c:77:8c:81:1f:79:e9:2e:2a:49:8c:69:99:f1:74:
         d0:04:4d:49:36:89:3b:4e:12:13:10:e2:84:da:6e:65:06:d1:
         7e:e8:e1:86:19:e5:2d:7d:9c:ef:60:fb:e4:5f:f2:2a:24:8f:
         e1:a4:8c:41:4c:67:82:a1:5c:bc:84:e1:9a:46:c8:cb:d7:fc:
         35:dd:a0:c2:4c:dc:96:ac:7e:31:43:6b:75:bf:0c:89:8f:4b:
         71:0e:6e:34:2c:ce:68:a5:fa:8b:18:37:1d:1a:e7:53:d2:6a:
         38:90:ae:b9:c8:44:c6:31:41:66:74:b3:86:da:84:32:39:e8:
         75:c4:46:23:51:d1:0c:b1:ba:a7:09:0d:59:96:f4:2a:45:f5:
         f1:97:b0:83:68:bd:81:49:48:fb:6f:b0:d5:82:e6:ab:26:d5:
         e6:54:6a:55:be:49:f8:b2:22:f0:1d:56:33:eb:de:eb:37:82:
         92:7e:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----