Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft
File:                     AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft (raw, json)
Hash identifier:          WWkmUOINDebr0GE6KA4yAw7EGSxXOtmyt7ayZvJnjjE=
Subject key identifier:   2C:5A:DE:C5:90:7B:3E:25:55:53:E1:B3:73:27:47:79:15:5A:3A:B6
Authority key identifier: AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00
Certificate issuer:       /CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00
Certificate serial:       75C8874DB2174CC130B713A4A9EB36DC80A147FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft
Manifest number:          0183
Signing time:             Sun 19 Jan 2025 17:18:43 +0000
Manifest this update:     Sun 19 Jan 2025 17:13:43 +0000
Manifest next update:     Mon 20 Jan 2025 21:10:43 +0000
Files and hashes:         1: AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl (hash: HKQgEnIu47OrDP2ehZNfh2M/in+72IBveKFm5kaIzss=)
                          2: 323830343a323561343a3a2f33322d313238203d3e203532383231.roa (hash: vGZtWWS5AEZQpMfNacnb+qPe45FThe3Jq4bvoGAIzLg=)
                          3: 3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa (hash: O/qHNecssVRYbjZulTpy095JErTkyj5kg7hkcQNt5tE=)
                          4: 3137372e37322e3135362e302f32322d3332203d3e203532383231.roa (hash: UsmNJMkM0SxDwYyq2HRU5y7FaPmFEPQqoTvFTByUrdo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c8:87:4d:b2:17:4c:c1:30:b7:13:a4:a9:eb:36:dc:80:a1:47:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00
        Validity
            Not Before: Jan 19 17:13:43 2025 GMT
            Not After : Jan 20 21:10:43 2025 GMT
        Subject: CN=2C5ADEC5907B3E255553E1B373274779155A3AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:11:7c:62:05:99:29:87:12:d3:1b:90:11:
                    1a:89:5b:f2:c6:57:f6:8c:f3:b6:19:36:24:dc:8f:
                    c8:ed:c2:c7:fa:52:2c:10:d5:e7:88:c4:a0:c1:42:
                    b6:f3:85:ba:36:63:dc:22:d7:4f:7b:fe:f6:a0:71:
                    dc:85:04:28:d4:e1:5a:b9:fa:90:23:93:a9:e2:0e:
                    2c:6b:14:9f:22:6f:c8:92:e5:75:00:4c:16:d4:33:
                    d0:50:b9:5f:94:7b:91:69:74:17:d3:b6:78:0a:76:
                    6a:f9:70:e4:3f:5c:43:75:47:4c:e4:a9:f8:7e:59:
                    5f:73:6f:d1:e0:3f:5a:04:f3:a5:67:c5:2f:1b:40:
                    d1:9a:d9:6f:c0:fe:b0:47:3e:09:71:6f:d3:8f:ff:
                    8a:7c:4e:e5:8e:f4:6a:b0:f2:be:12:b5:3e:7d:6c:
                    d4:6b:c7:2d:7e:c3:60:84:6e:a3:07:7b:b7:8d:03:
                    6d:8d:23:ba:75:af:e3:9b:85:76:0c:d9:a9:7c:f2:
                    4b:62:b9:da:63:fa:e2:f2:79:ee:be:98:35:e1:4f:
                    02:5b:ad:ee:e9:15:0a:33:cb:87:3e:3a:a1:fa:1e:
                    61:63:d8:4f:f0:26:98:67:1a:5d:42:12:3a:16:b5:
                    8e:b7:46:5c:72:b4:16:e9:e6:fd:17:91:4e:70:5e:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5A:DE:C5:90:7B:3E:25:55:53:E1:B3:73:27:47:79:15:5A:3A:B6
            X509v3 Authority Key Identifier:
                keyid:AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:06:1a:fe:7c:4d:4a:2a:a1:dd:b7:f9:8a:11:32:db:c7:3e:
         bb:93:d0:7e:31:03:54:4e:3d:b5:5a:8c:ae:e4:9e:33:71:f0:
         3a:94:53:45:60:5c:73:15:19:4b:b1:34:ca:af:c2:dc:49:35:
         f0:a2:3a:6b:b6:2d:9e:31:3e:f8:05:68:58:85:60:80:ab:6c:
         36:b9:8e:4e:2e:d7:e3:01:6a:3c:02:b0:d2:04:7f:46:88:fd:
         af:cf:ae:1d:cf:2e:2b:d3:5b:d7:9c:ff:ff:63:90:34:9c:cd:
         91:9a:f3:79:d6:d9:77:00:df:05:d2:6f:d2:2f:9c:6b:cd:c1:
         7c:27:da:35:78:ad:23:ca:cc:96:d6:40:40:01:73:48:e5:61:
         c4:8d:e4:3d:79:71:83:70:84:0e:fd:a3:30:29:c6:f2:88:2d:
         bc:d8:f4:1e:9b:3d:67:60:b6:e3:82:ae:9a:6e:72:a9:c5:e3:
         34:2e:b1:ff:9c:4f:61:47:67:9e:64:98:e4:db:84:1c:a3:a3:
         d0:5b:eb:ac:c2:b5:b5:59:10:d6:16:64:d2:b7:ee:dc:a6:2c:
         12:6d:74:01:b3:97:72:ce:77:74:c7:4a:5c:52:1b:d4:ef:1c:
         e0:48:4d:29:aa:05:21:35:d6:9a:e8:c4:54:75:48:ef:3f:97:
         78:47:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----