Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA.mft
File:                     AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA.mft (raw, json)
Hash identifier:          szGEolG/ViSjB6omdGrE1lflHUSbTFSxl1iI9VWwv+Y=
Subject key identifier:   33:C7:93:41:75:6D:F7:9A:B1:FE:14:77:C4:AC:02:C4:3E:37:D6:94
Authority key identifier: AF:48:88:9F:E5:48:FA:42:7F:D9:D4:8F:8E:C7:D3:AC:37:C9:CB:FA
Certificate issuer:       /CN=AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA
Certificate serial:       08ABB2CAD6A6C20FFF09283811E740A704CE50D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA.mft
Manifest number:          0133
Signing time:             Wed 22 Jan 2025 14:56:27 +0000
Manifest this update:     Wed 22 Jan 2025 14:51:27 +0000
Manifest next update:     Thu 23 Jan 2025 15:48:27 +0000
Files and hashes:         1: AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA.crl (hash: CJORPBZICfykbNNNCXD1t+r2yBVaDDAwFAoEvBzfu6U=)
                          2: 3138362e32362e3130302e302f32322d3234203d3e20323730393533.roa (hash: imKoId6LZ4WxrVCwFMocj2TbmmX9rI7/UKimhoMhFwI=)
                          3: 323830343a373430343a3a2f33322d3438203d3e20323730393533.roa (hash: DB7wocyBCUZ7/n1Tj80WOuWVL4gPs3m7kVOR50OoSb4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ab:b2:ca:d6:a6:c2:0f:ff:09:28:38:11:e7:40:a7:04:ce:50:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA
        Validity
            Not Before: Jan 22 14:51:27 2025 GMT
            Not After : Jan 23 15:48:27 2025 GMT
        Subject: CN=33C79341756DF79AB1FE1477C4AC02C43E37D694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:90:bf:21:c9:ae:11:1a:f0:a6:a8:69:30:d1:
                    28:9b:37:05:ba:e8:1f:6b:5e:86:09:47:86:e3:74:
                    a1:a6:a5:b9:3f:a9:0b:88:aa:2c:c7:39:4b:aa:b2:
                    9e:c0:63:a2:30:73:86:ca:f6:8a:c7:d3:b6:bf:5b:
                    e4:d9:90:54:9b:bb:ef:73:c9:f0:82:8a:fe:ea:6c:
                    bb:1b:e4:73:9a:b0:4f:cb:81:4f:3a:9c:ea:75:db:
                    f6:2c:18:87:27:c1:54:fb:7a:e7:b0:c5:d0:84:28:
                    a8:36:ed:9c:a9:11:cc:ef:9e:18:7e:32:42:32:a4:
                    ac:61:0e:8e:7f:d9:6a:40:2c:fc:74:9b:29:db:92:
                    07:51:af:31:ef:c2:9c:ca:de:97:81:d7:39:be:6a:
                    03:2a:46:6f:d7:e9:e6:1f:a2:0a:2c:90:b4:20:41:
                    37:a0:8b:8c:83:e7:b2:da:86:4a:09:82:af:45:2b:
                    46:c1:5a:03:20:69:2e:71:61:f5:27:8e:f7:76:0d:
                    b8:9e:b7:05:a1:75:b9:aa:7b:ad:68:57:b1:97:e0:
                    41:6e:02:f7:4f:7f:e0:cd:c2:aa:0e:b1:e3:92:be:
                    28:da:58:43:fc:0e:bd:38:c3:9b:f1:47:9e:71:33:
                    3c:cb:ce:17:3c:cf:7b:af:ba:39:ef:33:f7:0d:a3:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:93:41:75:6D:F7:9A:B1:FE:14:77:C4:AC:02:C4:3E:37:D6:94
            X509v3 Authority Key Identifier:
                keyid:AF:48:88:9F:E5:48:FA:42:7F:D9:D4:8F:8E:C7:D3:AC:37:C9:CB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/AF48889FE548FA427FD9D48F8EC7D3AC37C9CBFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:c5:e1:db:74:60:02:f5:83:8b:5d:15:1a:f9:58:cb:e0:
         5c:a3:40:3e:77:3b:26:fd:3d:7e:db:21:6a:09:e6:9b:34:be:
         c7:22:f0:03:8b:95:21:9b:ee:3e:87:8a:a2:1b:e6:50:e3:28:
         d5:5b:10:5e:06:e2:59:94:79:78:28:25:78:09:75:55:4c:fc:
         b0:6f:13:69:de:b8:56:55:db:56:b6:e1:b9:e6:d0:ca:10:bc:
         e2:3a:04:c6:cf:6f:d5:f2:72:ef:6d:f3:e1:40:41:eb:f4:6e:
         64:33:8c:27:c6:9c:3f:66:1d:b6:61:4e:1b:f0:4d:b6:b6:e8:
         a1:fc:ca:d4:2b:5f:b0:7b:d7:d4:9f:82:24:0f:34:d7:d0:7f:
         9a:75:38:04:de:9f:be:c8:1d:5d:1b:97:5f:b9:9d:38:f6:97:
         55:9b:bb:eb:0b:ce:22:91:ca:63:dd:8f:c3:78:5b:7e:c6:15:
         8c:28:24:80:03:b1:8e:ac:0a:29:cb:5b:21:21:ce:be:40:34:
         1c:d7:52:e1:10:80:f0:aa:48:fc:44:82:7f:68:c9:7d:62:aa:
         f4:c3:1f:df:30:24:81:cf:d0:73:0c:8b:c3:69:be:f5:50:40:
         95:cf:c9:a0:1b:ec:18:88:b9:fc:bb:2c:88:44:9d:5a:d5:7f:
         06:46:00:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----