Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A.mft
File:                     8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A.mft (raw, json)
Hash identifier:          3Vy/lbB+0SMFtx1QyHkxomxGNl6/bMbS3n0MUj25w78=
Subject key identifier:   99:18:F1:39:D7:E1:8A:12:16:5F:8E:C1:79:C9:A3:40:BE:22:A3:8C
Authority key identifier: 8B:EB:09:8D:63:87:F0:DD:FA:9E:5B:D8:D3:79:4B:1D:8D:C9:47:8A
Certificate issuer:       /CN=8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A
Certificate serial:       0690B456F6C413EAF701EBFF6EA11B1B16CE28DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A.mft
Manifest number:          13
Signing time:             Tue 26 Nov 2024 11:12:24 +0000
Manifest this update:     Tue 26 Nov 2024 11:07:24 +0000
Manifest next update:     Wed 27 Nov 2024 13:04:24 +0000
Files and hashes:         1: 3137302e38302e3139322e302f32322d3332203d3e20323636333931.roa (hash: UNPYMnoUpcH0ynGryOSIvKp28/2uvzu5AO1lxX2g4Ss=)
                          2: 323830343a333732303a3a2f33322d313238203d3e20323636333931.roa (hash: xGIQ6O4+bK/v4iMoBbk4a2HvjL2qS8rdurCX6oHWILo=)
                          3: 8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A.crl (hash: iPmJ1zfzzhEnDFAMiHAwxUP4A53x4Vxt8PGr4kA9D2w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:90:b4:56:f6:c4:13:ea:f7:01:eb:ff:6e:a1:1b:1b:16:ce:28:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A
        Validity
            Not Before: Nov 26 11:07:24 2024 GMT
            Not After : Nov 27 13:04:24 2024 GMT
        Subject: CN=9918F139D7E18A12165F8EC179C9A340BE22A38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:04:f9:c9:fb:e0:70:7c:47:84:e1:2d:a0:
                    ae:44:c8:05:e2:02:6c:c6:b2:e4:49:5d:77:7f:75:
                    4a:25:66:37:d3:59:c9:d0:83:ef:29:9b:5b:7e:2c:
                    20:50:65:1a:44:27:c7:3a:17:c5:14:e5:e0:e3:bd:
                    6d:66:38:cf:3d:45:09:63:53:74:ba:ab:9a:4b:7b:
                    e6:18:c2:ff:95:51:74:4d:a4:a7:51:de:32:26:6f:
                    2f:4c:0d:3a:37:aa:64:b4:d2:02:e0:55:02:a0:af:
                    76:dc:97:8c:64:2f:a8:47:d5:2a:f6:c0:96:33:38:
                    49:54:61:b0:db:37:fd:23:c3:f7:51:8e:3a:7b:7b:
                    44:1c:5c:1c:10:bc:ae:1e:6c:6b:d8:d9:a5:e1:f6:
                    2e:69:2d:f4:ee:07:36:52:69:29:b2:5b:89:e8:38:
                    0b:6e:34:ee:4f:79:f1:5d:f1:1a:c0:59:d0:36:5b:
                    d7:58:63:7a:ad:95:cd:4d:c0:5f:00:f6:28:1f:76:
                    d1:fb:dc:94:07:a8:1a:d9:e7:08:b4:8b:a4:1a:65:
                    41:b8:95:ff:f8:34:4d:63:64:45:86:e0:df:bd:7b:
                    46:51:ae:cb:0a:7b:9c:5a:58:50:22:75:53:7e:48:
                    90:df:65:17:ad:14:f2:eb:34:f7:62:66:2b:b2:70:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:18:F1:39:D7:E1:8A:12:16:5F:8E:C1:79:C9:A3:40:BE:22:A3:8C
            X509v3 Authority Key Identifier:
                keyid:8B:EB:09:8D:63:87:F0:DD:FA:9E:5B:D8:D3:79:4B:1D:8D:C9:47:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/8BEB098D6387F0DDFA9E5BD8D3794B1D8DC9478A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:ce:f6:b4:a5:71:49:aa:53:24:a9:0f:1c:75:cd:f3:a2:
         54:f9:57:61:4d:9c:a1:f9:c2:c0:86:a3:c8:a4:9d:ea:a7:df:
         8f:11:8a:c6:66:a5:fc:be:74:08:1d:be:d3:e0:e5:c2:f4:53:
         28:34:0a:9d:90:bb:d9:1c:d0:f3:23:58:fc:d5:6e:94:d8:1f:
         85:ba:94:5b:b5:54:d3:94:d1:03:fb:86:bf:04:0e:fa:d1:68:
         0e:f9:0b:60:a9:43:b9:e4:bb:ca:32:46:2e:a5:c3:0d:d1:dc:
         f7:20:de:11:02:b7:79:eb:b7:5a:b1:a0:4d:58:01:51:1a:b7:
         fb:1e:eb:c6:e4:15:c5:e7:4e:db:fb:a3:90:a6:79:c8:72:c2:
         c8:f5:84:ce:2e:e6:a3:60:5a:c9:82:cd:88:fa:c3:73:5c:37:
         b8:9a:7e:6a:e8:59:4d:25:79:60:a7:08:f0:9c:bc:c8:42:11:
         9e:a8:ef:8b:6c:39:ac:af:5e:d5:6f:30:6f:33:f8:c8:be:57:
         88:0d:a8:b5:c0:92:67:2b:b0:b7:96:f5:d6:fb:02:e7:cf:e3:
         ea:10:65:32:49:5e:41:01:b9:ca:d1:16:bc:92:e9:a6:09:ce:
         34:fb:b5:74:92:dc:db:5d:16:15:e5:d3:b6:de:54:80:d8:f3:
         99:6e:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----