Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.mft
File:                     5BCF4800DEF286925CD099151DD28B25A8A11EDB.mft (raw, json)
Hash identifier:          mCLtCzBi5tsYiQnIgZVIIyVCKJwgeNkEZO+fiQ53lyM=
Subject key identifier:   81:C9:83:75:6C:FD:AC:88:5C:F7:B6:B3:74:6F:1F:EF:75:B3:D9:66
Authority key identifier: 5B:CF:48:00:DE:F2:86:92:5C:D0:99:15:1D:D2:8B:25:A8:A1:1E:DB
Certificate issuer:       /CN=5BCF4800DEF286925CD099151DD28B25A8A11EDB
Certificate serial:       3245792D3FBA6C931797259B70E5F51CFBC8F7B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BCF4800DEF286925CD099151DD28B25A8A11EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.mft
Manifest number:          D9
Signing time:             Fri 27 Dec 2024 03:49:22 +0000
Manifest this update:     Fri 27 Dec 2024 03:44:22 +0000
Manifest next update:     Sat 28 Dec 2024 05:36:22 +0000
Files and hashes:         1: 5BCF4800DEF286925CD099151DD28B25A8A11EDB.crl (hash: jPpSdJzmETipKEKEGitN1yCm/Eq9niVpFnrAq7u+Pkw=)
                          2: 323830343a353665303a3a2f33322d313238203d3e20323638303239.roa (hash: wi9KPj8IO8MQ7rHKJTMaq64CFFju7fC8xuAIO//mGu8=)
                          3: 34352e3136382e35322e302f32322d3332203d3e20323638303239.roa (hash: XjrusaT33M4Z0w/4Z4i2AmJbds57/sj239M0fXwXC6k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:45:79:2d:3f:ba:6c:93:17:97:25:9b:70:e5:f5:1c:fb:c8:f7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BCF4800DEF286925CD099151DD28B25A8A11EDB
        Validity
            Not Before: Dec 27 03:44:22 2024 GMT
            Not After : Dec 28 05:36:22 2024 GMT
        Subject: CN=81C983756CFDAC885CF7B6B3746F1FEF75B3D966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:09:7a:a3:a4:5e:7c:ef:dd:6d:b0:bc:af:
                    e0:de:76:84:d0:8d:46:5c:54:a7:8b:45:41:36:65:
                    f8:53:21:d5:33:d1:9e:6a:b9:90:3c:e7:c6:89:d8:
                    90:43:8f:38:dc:4a:7b:0c:64:ce:cc:09:f4:26:c5:
                    a8:23:0a:31:e6:d0:97:7b:9f:7e:35:87:b1:8b:8e:
                    63:43:94:4b:9a:82:8d:f9:6e:d9:38:eb:af:06:a6:
                    42:79:6a:31:0b:9f:c8:44:a1:0e:0f:3b:db:51:4c:
                    e8:ac:e3:ab:94:52:95:a8:7d:7e:c8:a8:87:74:11:
                    27:10:9f:ea:77:a8:b7:5e:2f:c8:72:04:9e:87:21:
                    2e:f2:f0:75:40:21:c3:f2:6e:a0:38:08:17:1b:50:
                    35:35:de:1e:3d:1d:aa:4d:a7:fb:75:39:87:1b:44:
                    be:e1:81:78:77:21:17:a3:20:40:08:54:30:9b:0a:
                    4f:ac:72:f7:a2:f8:74:aa:d0:16:24:98:2a:b0:00:
                    b7:3a:8a:96:da:04:06:02:10:bf:93:dc:93:25:af:
                    eb:43:24:26:00:9e:34:47:07:da:1f:9c:03:dd:83:
                    82:f0:07:17:20:c6:b1:3a:34:ae:a6:50:14:88:79:
                    b2:61:6e:c3:96:fc:fa:30:55:67:13:d9:32:e8:de:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:83:75:6C:FD:AC:88:5C:F7:B6:B3:74:6F:1F:EF:75:B3:D9:66
            X509v3 Authority Key Identifier:
                keyid:5B:CF:48:00:DE:F2:86:92:5C:D0:99:15:1D:D2:8B:25:A8:A1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BCF4800DEF286925CD099151DD28B25A8A11EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:25:f0:e7:53:ec:0a:51:c5:3a:96:23:51:97:34:4e:98:
         f3:3a:d6:3e:b7:88:53:28:0e:84:6d:9c:2d:3e:13:bc:66:e2:
         39:84:98:f9:bb:51:51:59:09:cf:68:42:5e:21:93:bf:d6:f7:
         ac:fb:81:00:3a:81:30:5a:db:2e:33:28:2a:78:41:66:3f:8b:
         e8:2b:df:d5:f5:69:2f:41:00:8e:de:cb:2e:aa:19:17:73:7b:
         b1:27:68:7e:f3:1c:19:b8:89:57:68:50:60:cc:b9:cf:c4:03:
         2c:f8:1c:0c:48:0e:c0:3f:a1:4f:9d:72:6c:14:77:26:b7:1c:
         f0:25:26:91:92:4d:bc:23:6e:7b:a2:0f:82:a1:21:df:ce:fd:
         ee:4c:bc:1d:ef:07:d4:22:9c:8f:f5:69:d5:ba:7f:2b:c7:39:
         7c:2a:d4:27:f5:a1:4f:10:21:a3:10:a1:37:34:6a:f6:43:d9:
         b7:55:17:e8:22:42:35:c8:a4:e1:3e:8d:5b:9c:ff:30:0d:20:
         3a:42:20:58:c5:8c:32:8c:7d:cf:f5:e1:8b:2a:f1:87:10:e6:
         ec:04:16:d0:37:9d:57:44:92:10:6e:a7:02:a9:5a:f0:4b:5c:
         1e:60:5b:21:2b:94:fd:4a:f7:fe:c0:4e:06:b0:e5:ac:35:20:
         ed:91:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----