Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.mft
File:                     5047F902BACA932C3B81B997C030811D3F845FB9.mft (raw, json)
Hash identifier:          RYqZ4Z3MDdXLU8s5b7g8mylZwMX42hfM7xxvos+jipc=
Subject key identifier:   11:9C:A0:16:B4:9D:D4:6D:F4:E0:DF:B5:C0:97:B3:CF:B1:8A:2A:F4
Authority key identifier: 50:47:F9:02:BA:CA:93:2C:3B:81:B9:97:C0:30:81:1D:3F:84:5F:B9
Certificate issuer:       /CN=5047F902BACA932C3B81B997C030811D3F845FB9
Certificate serial:       02E2F13927C122BEC1327546B23AD0A6269A531E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5047F902BACA932C3B81B997C030811D3F845FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.mft
Manifest number:          01B9
Signing time:             Thu 27 Feb 2025 09:54:59 +0000
Manifest this update:     Thu 27 Feb 2025 09:49:59 +0000
Manifest next update:     Fri 28 Feb 2025 13:03:59 +0000
Files and hashes:         1: 323830343a386535343a3a2f33322d313236203d3e203532353637.roa (hash: QQdV8qSV7rH8MtDUDO7L+P2XWbQdWFnmmX6N0WGr/Gk=)
                          2: 3137372e38362e35362e302f32322d3332203d3e203532353637.roa (hash: NQK8e/GLnqtpGm/C2prAsvSna53fBnRufCg6tNC8cbI=)
                          3: 5047F902BACA932C3B81B997C030811D3F845FB9.crl (hash: YtZ+6LozHNjgw2zyb727+aYxyAJDXoqc/sitCf9ASJw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e2:f1:39:27:c1:22:be:c1:32:75:46:b2:3a:d0:a6:26:9a:53:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5047F902BACA932C3B81B997C030811D3F845FB9
        Validity
            Not Before: Feb 27 09:49:59 2025 GMT
            Not After : Feb 28 13:03:59 2025 GMT
        Subject: CN=119CA016B49DD46DF4E0DFB5C097B3CFB18A2AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:f7:48:81:55:ea:b9:6d:b0:eb:54:39:37:
                    92:53:10:60:5e:12:b5:03:5c:1f:3d:c4:04:b6:ec:
                    d6:57:71:05:a6:4c:de:c1:68:c8:ad:4b:1c:70:81:
                    2a:01:ef:a9:1d:d0:a4:80:c5:3a:59:18:c0:94:a7:
                    77:dc:eb:48:57:fc:fc:92:fb:5b:b2:55:f1:a3:2c:
                    60:fd:1a:01:4b:97:bf:1b:d6:4c:8d:41:3f:39:d9:
                    1f:b6:67:b2:92:87:3f:fb:35:82:22:cf:52:99:93:
                    15:10:2f:55:18:ed:9a:ed:e6:b0:91:11:0c:fd:64:
                    c5:ee:8a:0a:6b:b6:bc:06:92:26:1c:4c:72:5b:3d:
                    99:47:38:29:e7:ce:e3:58:d9:a7:bb:00:c8:91:e5:
                    88:43:20:46:48:24:36:6d:44:b4:b3:78:1d:93:df:
                    4e:0c:08:6f:c3:92:d0:fa:ee:30:db:f6:51:32:24:
                    3c:0c:14:c4:a6:93:32:47:33:62:54:f5:32:af:f9:
                    17:f9:0e:83:1b:32:a2:11:29:5f:d8:d1:46:1d:cb:
                    75:d9:07:02:2e:5b:21:0d:4b:77:4c:b8:f6:dc:db:
                    9e:87:d6:40:76:3c:39:7a:05:82:d2:22:df:cf:27:
                    7e:60:80:a6:12:66:89:0a:51:40:33:0b:d5:b0:f3:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9C:A0:16:B4:9D:D4:6D:F4:E0:DF:B5:C0:97:B3:CF:B1:8A:2A:F4
            X509v3 Authority Key Identifier:
                keyid:50:47:F9:02:BA:CA:93:2C:3B:81:B9:97:C0:30:81:1D:3F:84:5F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5047F902BACA932C3B81B997C030811D3F845FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d6:25:49:f0:7d:2c:a4:8f:3c:0f:92:f8:b8:cf:64:ff:9d:
         aa:78:b6:e8:f2:4d:44:46:d8:25:cc:b6:b8:22:8a:7b:50:b7:
         be:57:23:a5:51:24:9a:46:f7:81:38:fd:04:14:eb:17:96:6d:
         08:97:64:b6:85:76:a8:aa:84:b5:d9:45:f0:9e:eb:84:99:59:
         94:cf:60:53:96:b7:c2:e6:57:5f:e2:10:6d:49:7e:a3:3f:71:
         8d:f2:04:61:3d:38:b1:a1:c6:d1:04:24:27:6f:19:ee:83:a1:
         15:da:25:ad:43:3d:6b:34:5e:d1:ed:85:46:17:c4:58:62:32:
         54:cc:ed:11:c9:83:f2:02:d6:71:30:a9:54:1f:3e:8e:c9:de:
         1e:06:0e:28:a2:04:b2:26:e7:c2:78:57:8f:7f:c7:1a:15:d7:
         d9:05:4e:a1:8d:cd:4e:ff:66:d0:97:2b:b1:26:15:89:b9:c6:
         99:8b:0d:9d:78:a6:f2:ad:c9:f4:54:d2:97:5d:c8:27:49:b2:
         70:ff:41:6d:a8:61:9b:db:e0:fb:02:d5:69:33:c2:d4:60:56:
         13:b6:1a:f6:af:98:76:f6:c3:9f:5d:cc:ad:4a:4f:0c:6b:b9:
         db:a9:04:b4:13:08:e1:98:43:96:68:93:bf:1b:99:81:c9:e7:
         26:65:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----