Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/4B24DAE5BBC1CE502464B38322786ED4AC9BD088.mft
File:                     4B24DAE5BBC1CE502464B38322786ED4AC9BD088.mft (raw, json)
Hash identifier:          nV5ywh0so6EpsnNhP8BDqW9Tw6Ty0tDBHn1T580y4OE=
Subject key identifier:   FD:65:D2:9D:37:99:4A:03:20:F0:23:BE:C7:B8:5A:33:C0:22:E4:DE
Authority key identifier: 4B:24:DA:E5:BB:C1:CE:50:24:64:B3:83:22:78:6E:D4:AC:9B:D0:88
Certificate issuer:       /CN=4B24DAE5BBC1CE502464B38322786ED4AC9BD088
Certificate serial:       23E40CBEA1B6255F561189B04F00138A7A2E6EB5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B24DAE5BBC1CE502464B38322786ED4AC9BD088.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/4B24DAE5BBC1CE502464B38322786ED4AC9BD088.mft
Manifest number:          0E
Signing time:             Sun 26 Jan 2025 22:10:31 +0000
Manifest this update:     Sun 26 Jan 2025 22:05:31 +0000
Manifest next update:     Tue 28 Jan 2025 01:59:31 +0000
Files and hashes:         1: 323830343a386261633a3a2f33322d313238203d3e20323733373438.roa (hash: mmVmtUY1Q4z0MUwgHQXRT0Q8eFDGg8Hzgc/QOfBB4Xk=)
                          2: 4B24DAE5BBC1CE502464B38322786ED4AC9BD088.crl (hash: b3nWPUP/czvm9/jGTBoyvGr09UbZDtVL2HPuwNaEyIw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e4:0c:be:a1:b6:25:5f:56:11:89:b0:4f:00:13:8a:7a:2e:6e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B24DAE5BBC1CE502464B38322786ED4AC9BD088
        Validity
            Not Before: Jan 26 22:05:31 2025 GMT
            Not After : Jan 28 01:59:31 2025 GMT
        Subject: CN=FD65D29D37994A0320F023BEC7B85A33C022E4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:67:80:bc:54:c9:46:2a:00:06:3d:a8:b3:
                    50:41:78:a0:b6:c9:26:97:6d:ed:ad:3f:c5:fd:23:
                    ff:dc:b1:58:18:77:2c:2d:84:2c:72:58:17:c3:6f:
                    12:cb:0f:f2:8f:b1:59:f5:e6:56:ec:10:4b:7e:c7:
                    5c:97:0b:91:b5:d1:a7:2f:67:69:5e:de:8f:9f:da:
                    17:7d:78:5e:32:b8:75:4c:9d:b7:80:8c:ab:dd:45:
                    74:6d:81:24:62:0e:52:b5:e5:75:e7:c6:f8:ac:de:
                    11:92:82:85:f3:c2:9a:a8:6b:66:30:1a:42:eb:6c:
                    3d:88:f0:79:a9:17:e9:4f:29:65:72:42:62:10:71:
                    09:c2:70:90:02:e3:2e:73:c0:f4:3c:a5:9c:bd:66:
                    fb:2d:bb:bb:0f:04:21:d6:b8:99:19:4f:c7:f5:58:
                    47:ef:3f:77:52:16:bf:4e:9c:07:b4:52:74:8a:34:
                    f0:b7:e2:b5:c8:8a:49:3b:e0:fe:20:ed:d5:8d:fe:
                    53:0b:24:3d:4a:ac:fd:af:b1:ee:26:96:7b:4e:9e:
                    5b:af:26:ef:32:17:7e:ca:4c:a9:a3:55:29:60:8f:
                    ba:cd:a6:73:17:3f:8d:31:6b:2d:75:15:31:c9:bd:
                    a8:6c:cb:a6:07:18:84:cc:58:15:d1:73:2c:db:5a:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:65:D2:9D:37:99:4A:03:20:F0:23:BE:C7:B8:5A:33:C0:22:E4:DE
            X509v3 Authority Key Identifier:
                keyid:4B:24:DA:E5:BB:C1:CE:50:24:64:B3:83:22:78:6E:D4:AC:9B:D0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/4B24DAE5BBC1CE502464B38322786ED4AC9BD088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B24DAE5BBC1CE502464B38322786ED4AC9BD088.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/4B24DAE5BBC1CE502464B38322786ED4AC9BD088.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:15:8e:af:8e:b5:70:dd:e0:e0:b8:40:24:56:8a:94:77:14:
         49:d9:58:35:cc:d8:05:d1:3e:14:47:4a:d4:12:c5:94:45:be:
         51:7b:15:61:b9:b5:09:58:32:e0:03:49:b8:b7:1d:86:72:48:
         03:63:07:89:f2:7b:6d:d8:02:2a:29:9f:01:48:46:ab:7a:e3:
         f1:8b:e0:d1:0b:0e:77:f2:f8:08:8a:25:fb:e8:73:53:36:4e:
         58:76:4a:97:b9:f1:b8:11:69:0e:1e:10:08:7f:2b:75:03:6b:
         9d:ff:1c:83:2d:5a:8c:e0:03:65:42:ce:fc:59:82:46:42:72:
         11:2d:67:23:71:d0:45:b8:1c:b7:ce:02:6d:9d:20:44:b8:65:
         27:12:be:73:4f:7b:87:a3:6a:ae:e9:b5:d4:15:c9:c5:3f:63:
         00:33:11:16:e7:db:06:48:ba:d7:43:8c:65:23:e8:4b:ed:d9:
         74:c6:bd:38:4e:b0:af:b4:db:d4:d6:2c:3f:c5:bb:cd:84:96:
         0c:c4:96:cd:c3:8a:b9:9f:2a:f9:2c:3a:24:1b:6c:3b:b3:aa:
         0a:83:00:10:c4:00:d2:6a:e2:95:8c:68:65:c9:d5:b0:f1:59:
         eb:8e:14:d1:d1:2b:16:c2:d5:bd:cc:23:35:e6:a1:63:fe:38:
         fa:8f:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----