Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.mft
File:                     EB3DDB9DA271DDC34000AF73E9188813B8EE650A.mft (raw, json)
Hash identifier:          aMDRnCNugXr6q3w1hM3PfeRtCuNH+0m2E2z6IRxGt6U=
Subject key identifier:   08:0B:C1:2F:93:25:05:8D:C4:C0:12:B9:74:1E:62:58:2E:DD:DA:DC
Authority key identifier: EB:3D:DB:9D:A2:71:DD:C3:40:00:AF:73:E9:18:88:13:B8:EE:65:0A
Certificate issuer:       /CN=EB3DDB9DA271DDC34000AF73E9188813B8EE650A
Certificate serial:       35ADBA8916BA77DFDAA19B49AFCE45BBAF84A849
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.mft
Manifest number:          5E
Signing time:             Wed 11 Dec 2024 17:03:31 +0000
Manifest this update:     Wed 11 Dec 2024 16:58:31 +0000
Manifest next update:     Thu 12 Dec 2024 18:20:31 +0000
Files and hashes:         1: 323830343a366531303a3a2f33322d313238203d3e20323730353733.roa (hash: UCx/hpS5TkHJjDZDVLZ6NQce3/Xuq6QV8i4zW/UIMwI=)
                          2: EB3DDB9DA271DDC34000AF73E9188813B8EE650A.crl (hash: 3tRHuvbAHqZ3sB3CxzKHTLVJ0nF7hoWr0t26smcm/7k=)
                          3: 3230302e31342e3132302e302f32322d3332203d3e20323730353733.roa (hash: R3bYxB4yN3oC/bG6ccKLZXaf1YgZS94vJpyuyDRVfgY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ad:ba:89:16:ba:77:df:da:a1:9b:49:af:ce:45:bb:af:84:a8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB3DDB9DA271DDC34000AF73E9188813B8EE650A
        Validity
            Not Before: Dec 11 16:58:31 2024 GMT
            Not After : Dec 12 18:20:31 2024 GMT
        Subject: CN=080BC12F9325058DC4C012B9741E62582EDDDADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:4a:a6:22:96:77:e6:9e:4b:19:f3:cf:d6:
                    c1:6e:ee:82:cc:4c:90:3e:2a:66:93:0a:51:94:b8:
                    53:4a:9c:97:81:a4:3e:5c:06:71:22:13:fc:34:4f:
                    a9:9f:24:6d:0a:18:20:68:69:46:2f:44:e3:db:7a:
                    08:36:e0:7d:88:cc:a3:bf:5d:d1:a1:0e:2a:f6:9b:
                    a0:e0:07:f5:1b:47:df:19:3e:a4:e6:c1:8d:d1:f6:
                    d6:ed:c2:76:83:b1:24:3c:4c:f3:a4:85:4b:a3:80:
                    36:78:0c:36:e0:07:41:6a:bb:28:4e:28:31:00:3f:
                    4b:68:74:c4:c6:bb:c8:06:01:83:10:03:46:c9:3c:
                    a9:5b:51:f6:89:a1:da:4d:1f:26:14:5b:e8:92:8a:
                    40:b7:93:12:47:52:36:eb:3c:6e:88:c3:1c:e0:28:
                    02:b2:f8:40:84:ab:84:ee:01:c6:6d:b0:5a:37:10:
                    63:ba:4a:a9:28:23:79:b8:0a:e5:95:c6:5e:b0:06:
                    7f:1d:73:7e:9b:60:9b:e3:82:65:fc:40:7f:e2:d2:
                    2e:c2:c2:90:94:49:c2:7e:6c:76:df:4f:46:27:66:
                    86:2f:cd:03:48:a0:ec:94:b6:a5:6a:91:f5:13:bc:
                    0a:c7:54:a1:b7:9d:ef:d2:b6:a2:bb:b5:79:3d:43:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0B:C1:2F:93:25:05:8D:C4:C0:12:B9:74:1E:62:58:2E:DD:DA:DC
            X509v3 Authority Key Identifier:
                keyid:EB:3D:DB:9D:A2:71:DD:C3:40:00:AF:73:E9:18:88:13:B8:EE:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:63:84:e8:36:59:fe:d1:32:b0:79:bd:bb:d5:64:25:f0:
         5e:3e:66:a6:10:5b:87:ea:e5:3c:d1:86:31:37:a9:d9:04:b6:
         28:f9:69:b9:cd:b4:2f:96:32:43:f4:83:74:59:b9:c9:c2:51:
         67:12:15:42:85:0c:5a:78:1a:9c:33:f8:f7:cb:f1:98:47:4e:
         32:ec:c5:08:09:89:2a:c8:a5:ce:1b:79:65:32:29:cf:6a:56:
         ce:54:2e:0f:3b:68:a7:bf:26:20:e3:0e:8b:4f:1f:91:52:ab:
         2c:52:56:b8:e5:19:da:fa:21:0c:82:ab:3e:4d:dd:da:a6:b4:
         5b:0e:3d:cc:1b:8e:d8:b7:70:12:92:e0:d7:28:4a:d9:5c:34:
         39:fc:f5:ce:26:71:55:11:9b:07:b8:21:f5:85:2f:36:28:9c:
         9c:67:0d:b2:6b:eb:00:da:bb:ef:a3:82:91:49:69:bf:cd:f1:
         86:3a:dc:15:74:36:0b:ee:de:72:03:d9:a0:d0:71:22:7b:d0:
         e5:6e:60:0e:24:8b:81:1a:50:50:06:a9:63:56:ac:a5:7e:2c:
         74:fe:aa:27:34:b6:46:ae:05:ed:45:92:bb:ba:ce:7f:30:d4:
         3d:0d:0b:b0:82:62:5c:3a:28:5d:88:61:16:0a:89:75:c6:f1:
         91:ac:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----