Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/8F4399FAD7CFDD22EED57A67E415219961466CBC.mft
File:                     8F4399FAD7CFDD22EED57A67E415219961466CBC.mft (raw, json)
Hash identifier:          PNyr/6tPr370PrfodEvol4uQoKW7P50ZQaAultnEeKY=
Subject key identifier:   FF:AD:E9:C9:69:CA:FF:3B:82:32:80:BA:F3:EE:3D:89:0C:22:BE:FB
Authority key identifier: 8F:43:99:FA:D7:CF:DD:22:EE:D5:7A:67:E4:15:21:99:61:46:6C:BC
Certificate issuer:       /CN=8F4399FAD7CFDD22EED57A67E415219961466CBC
Certificate serial:       2B3A570792AA1A81F5940BA7EBC379132E9FB7EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4399FAD7CFDD22EED57A67E415219961466CBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/8F4399FAD7CFDD22EED57A67E415219961466CBC.mft
Manifest number:          52
Signing time:             Sat 21 Dec 2024 00:28:16 +0000
Manifest this update:     Sat 21 Dec 2024 00:23:16 +0000
Manifest next update:     Sun 22 Dec 2024 01:40:16 +0000
Files and hashes:         1: 3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (hash: 75Gz6OCn5ii87HsvBKgnrwqZnS2iX+ikx+eCfMUTENc=)
                          2: 8F4399FAD7CFDD22EED57A67E415219961466CBC.crl (hash: RhLbCnEP0XubnkIpUVdCnVwQXnXSKU9rHlpoNXrejZk=)
                          3: 323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (hash: lDVOFtapATJJoIry2rIEongLi0luAd/7bAOdjTlNN+U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3a:57:07:92:aa:1a:81:f5:94:0b:a7:eb:c3:79:13:2e:9f:b7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4399FAD7CFDD22EED57A67E415219961466CBC
        Validity
            Not Before: Dec 21 00:23:16 2024 GMT
            Not After : Dec 22 01:40:16 2024 GMT
        Subject: CN=FFADE9C969CAFF3B823280BAF3EE3D890C22BEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:c5:f1:f4:84:cc:d6:1e:49:c5:4f:73:2d:
                    b4:d8:bc:47:1f:ad:93:83:cc:4a:df:8c:6f:49:93:
                    69:fe:ce:c7:78:55:97:87:c1:3e:d8:74:cd:88:4f:
                    8f:c9:2c:a9:1c:ff:97:41:89:b6:eb:11:14:d0:6a:
                    f4:b6:b0:ee:4c:a0:52:a9:8e:f9:31:90:42:61:45:
                    7e:97:ec:61:78:44:cc:c0:d4:86:0e:40:44:04:f1:
                    de:9d:48:bf:28:2f:7f:89:3c:e7:ec:1e:ed:b5:3f:
                    29:97:82:43:17:90:d0:a4:94:53:8a:ae:ea:27:b6:
                    17:3d:46:7e:fb:e5:19:3b:91:f3:75:f4:10:b7:8b:
                    24:b7:ad:3c:3f:9a:b0:3b:c5:4c:a9:fa:cd:a7:97:
                    a1:56:35:fc:2f:74:83:e6:a7:de:4c:34:c4:a4:40:
                    ed:10:2c:ee:59:e3:68:eb:2b:28:6e:88:d0:e9:05:
                    cb:fa:82:d3:d7:aa:41:2c:e9:0c:a8:35:d1:ec:90:
                    2b:28:e6:16:7c:71:b2:a3:35:e7:a7:cf:e8:0d:1e:
                    22:12:be:dc:26:00:3c:84:fc:cf:76:bb:02:cb:be:
                    be:cb:bb:a4:f9:e2:7d:3f:30:2d:42:a4:44:28:58:
                    83:15:f5:45:b1:74:c4:23:93:a0:a4:e5:12:97:ba:
                    6a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AD:E9:C9:69:CA:FF:3B:82:32:80:BA:F3:EE:3D:89:0C:22:BE:FB
            X509v3 Authority Key Identifier:
                keyid:8F:43:99:FA:D7:CF:DD:22:EE:D5:7A:67:E4:15:21:99:61:46:6C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/8F4399FAD7CFDD22EED57A67E415219961466CBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4399FAD7CFDD22EED57A67E415219961466CBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/8F4399FAD7CFDD22EED57A67E415219961466CBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:27:6b:34:f5:3a:0e:bc:60:dd:85:ab:55:c3:11:9f:2a:88:
         bc:0b:a2:95:1f:f7:1d:c3:e5:de:5b:3d:9d:e5:2e:3e:80:21:
         99:96:1a:71:8e:b7:c6:f7:b7:46:d8:b2:cb:a5:62:f9:ea:71:
         0e:f7:b2:25:11:3a:ff:2f:65:87:cf:1c:65:fe:32:cc:78:03:
         d3:12:d9:75:08:f7:41:8d:0c:33:3c:96:ea:68:91:c9:35:78:
         b2:9c:b0:84:7e:c5:07:58:d9:93:13:ce:2e:9e:4e:aa:b2:68:
         9d:9e:6d:eb:7f:83:de:e8:36:97:9e:8f:d2:27:80:bb:0f:ee:
         89:09:95:d5:3a:51:40:bc:65:88:fe:e4:27:af:2c:59:65:a4:
         6b:03:8a:d3:44:9c:15:a3:f2:52:ce:11:76:ad:a1:b7:68:bf:
         94:ed:d8:f2:c4:6c:60:e5:b9:90:86:39:a8:10:6c:21:fd:ea:
         72:a3:3f:a3:af:77:85:d7:38:3f:7c:4a:49:1b:72:7d:da:32:
         7a:7b:31:f2:d7:2a:e1:c9:90:61:f0:9e:b6:15:d1:9d:4f:69:
         f5:f9:05:ff:ca:8c:2a:c5:1c:fe:68:df:bb:5a:4c:28:80:a9:
         34:71:da:d4:75:d6:45:55:fe:04:45:d6:3b:28:60:00:21:60:
         89:d1:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----