Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/04E9838264C8C3EFF1299FCE9474ACE037A792A2.mft
File:                     04E9838264C8C3EFF1299FCE9474ACE037A792A2.mft (raw, json)
Hash identifier:          duWNwBxpV9HK9Nqyw+qdOdKRdmUqWw8IwW3ZkbJXiN0=
Subject key identifier:   6A:93:2B:95:7A:08:E1:91:46:BD:B0:1E:BC:5D:C1:73:E5:67:21:38
Authority key identifier: 04:E9:83:82:64:C8:C3:EF:F1:29:9F:CE:94:74:AC:E0:37:A7:92:A2
Certificate issuer:       /CN=04E9838264C8C3EFF1299FCE9474ACE037A792A2
Certificate serial:       08F21A03F8B7C7622ACA1A1B4B6CE56D0A4D290B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E9838264C8C3EFF1299FCE9474ACE037A792A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/04E9838264C8C3EFF1299FCE9474ACE037A792A2.mft
Manifest number:          21
Signing time:             Thu 21 Nov 2024 04:40:30 +0000
Manifest this update:     Thu 21 Nov 2024 04:35:30 +0000
Manifest next update:     Fri 22 Nov 2024 08:23:30 +0000
Files and hashes:         1: 323830343a316435303a3a2f33322d3332203d3e20323634333630.roa (hash: XCD1ipR+oE4aGuFMWg8+zZ6F+dgmX1Nsml8jb9UgWdQ=)
                          2: 3133312e3136312e32382e302f32322d3234203d3e20323634333630.roa (hash: FYQNfCKMaEQ1WvzK3D+jBDyDs1h6p69+/3gfQ+inE8s=)
                          3: 3133382e3235352e3133322e302f32322d3234203d3e20323634333630.roa (hash: klrquLcfsAOh03D3xsHgqOopDYH28iRfpXJwo7uPYh4=)
                          4: 04E9838264C8C3EFF1299FCE9474ACE037A792A2.crl (hash: oWup4LDkq/Idf1cakiR2MjFQxKD8Lybf5w8pkSoKUFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:1a:03:f8:b7:c7:62:2a:ca:1a:1b:4b:6c:e5:6d:0a:4d:29:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E9838264C8C3EFF1299FCE9474ACE037A792A2
        Validity
            Not Before: Nov 21 04:35:30 2024 GMT
            Not After : Nov 22 08:23:30 2024 GMT
        Subject: CN=6A932B957A08E19146BDB01EBC5DC173E5672138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:11:b5:e8:8f:bd:27:b9:a5:81:3b:df:ca:
                    27:fe:bb:60:5f:e6:3d:9f:6e:84:19:02:36:f5:6f:
                    36:0a:67:86:4b:1a:1a:46:c3:07:70:fe:36:c8:8b:
                    a7:3c:36:18:34:38:e8:a8:c9:59:b2:12:fa:a3:fa:
                    ac:f3:5c:58:77:6e:e0:17:a6:97:2e:4f:89:d6:34:
                    95:15:e0:f1:df:cf:cd:7e:10:45:59:aa:39:01:ff:
                    56:41:a4:aa:ca:1d:85:8c:f1:09:aa:b1:c0:b5:e5:
                    1b:c2:1a:93:4f:0d:e7:9b:09:f6:cb:8d:ad:59:8c:
                    c7:07:3c:5c:e7:8e:c6:19:d0:33:32:71:59:b5:eb:
                    db:d4:e8:ec:a4:5e:9d:68:4d:3e:1d:d9:34:93:f3:
                    35:9d:38:bf:6b:35:1c:2f:0f:37:62:12:52:16:51:
                    fc:1f:4d:2b:4a:af:d0:2e:7c:5b:c1:85:5c:b3:3d:
                    47:5f:54:2a:65:af:06:0d:e1:76:4d:99:82:ec:74:
                    75:fa:55:10:79:e2:45:1c:7d:00:e7:aa:b4:32:9b:
                    f0:dd:af:38:2d:2a:f4:a7:b6:67:a1:34:b7:57:d4:
                    6c:58:43:c1:b3:b4:7d:75:1e:8f:82:f6:b4:70:f8:
                    44:b8:7c:f6:e6:2c:27:09:9f:9b:36:52:1a:3c:66:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:93:2B:95:7A:08:E1:91:46:BD:B0:1E:BC:5D:C1:73:E5:67:21:38
            X509v3 Authority Key Identifier:
                keyid:04:E9:83:82:64:C8:C3:EF:F1:29:9F:CE:94:74:AC:E0:37:A7:92:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/04E9838264C8C3EFF1299FCE9474ACE037A792A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E9838264C8C3EFF1299FCE9474ACE037A792A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/04E9838264C8C3EFF1299FCE9474ACE037A792A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:86:31:df:ee:e4:60:d9:56:79:b2:77:73:9d:ad:81:37:24:
         b4:7b:08:00:7f:14:f3:c7:59:36:5e:62:9d:5e:a5:a6:a5:c4:
         6f:6c:5f:1b:b5:2f:1e:50:43:43:de:e4:28:21:df:b5:4b:4c:
         62:1f:f9:f2:f1:6e:ab:a3:30:5d:04:c3:b5:67:48:39:3b:0c:
         e4:7c:65:1f:9a:7f:c2:75:b3:6e:e2:b5:5d:0f:3c:ea:8d:23:
         d1:0f:13:f7:b3:a9:59:ee:54:09:4c:d2:22:17:46:59:e4:bb:
         d2:79:d2:16:0a:af:32:0b:d5:d9:27:c3:86:0d:6a:96:17:36:
         00:5e:85:90:03:96:f1:4c:94:d1:74:48:82:d3:35:91:c8:82:
         64:3c:4c:e7:3a:78:1c:b1:32:fd:24:ca:d7:e3:51:2e:06:50:
         1f:90:29:20:e7:2b:85:28:c6:f6:70:ad:75:c5:53:a4:45:94:
         7a:1a:6a:cc:e8:ed:6f:ec:6d:c0:50:9e:50:2f:85:81:5d:2b:
         c3:59:22:4e:82:d9:e5:a7:77:d5:fc:2a:37:5b:68:e4:e1:8a:
         47:00:98:7c:45:a9:9c:3a:13:3a:22:46:5b:2f:e9:65:f5:e2:
         91:c0:2e:3d:01:0a:a9:33:0c:f0:3e:a1:f4:b3:56:52:ff:f2:
         49:bb:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----