Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/0DB751E0CAE739A39DF93010294055009B1755DA.mft
File:                     0DB751E0CAE739A39DF93010294055009B1755DA.mft (raw, json)
Hash identifier:          QKOPpgRZxtI0v+wpHDYyyKkM5LBcttgMghg174scYjE=
Subject key identifier:   8F:33:80:BE:32:1F:EC:1D:A5:A0:00:0C:37:8B:4C:6A:9B:B8:98:75
Authority key identifier: 0D:B7:51:E0:CA:E7:39:A3:9D:F9:30:10:29:40:55:00:9B:17:55:DA
Certificate issuer:       /CN=0DB751E0CAE739A39DF93010294055009B1755DA
Certificate serial:       66A887D91E315F4F827EA2FEF8D48AA08E43A021
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DB751E0CAE739A39DF93010294055009B1755DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/0DB751E0CAE739A39DF93010294055009B1755DA.mft
Manifest number:          0159
Signing time:             Thu 19 Dec 2024 02:39:20 +0000
Manifest this update:     Thu 19 Dec 2024 02:34:20 +0000
Manifest next update:     Fri 20 Dec 2024 05:29:20 +0000
Files and hashes:         1: 323830343a313764383a3a2f33322d3438203d3e203631393139.roa (hash: EQ43Aj0nFfLSpOVXxocA6ymFgCQu15uFzfXFkYSLxKY=)
                          2: 0DB751E0CAE739A39DF93010294055009B1755DA.crl (hash: LuNBcH6stSr7KZV+zDg6+gxEdjNz4SmFZ1PqJfnEwEU=)
                          3: 3139302e3131322e3230342e302f32322d3234203d3e203631393139.roa (hash: WVPJ6oUx/Dc4idXamPo8T6OUCp61WOZ72XTLoqGDbR4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a8:87:d9:1e:31:5f:4f:82:7e:a2:fe:f8:d4:8a:a0:8e:43:a0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DB751E0CAE739A39DF93010294055009B1755DA
        Validity
            Not Before: Dec 19 02:34:20 2024 GMT
            Not After : Dec 20 05:29:20 2024 GMT
        Subject: CN=8F3380BE321FEC1DA5A0000C378B4C6A9BB89875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:d6:4d:c9:4b:a9:e6:f8:31:67:7d:59:08:
                    48:8a:42:a7:3b:f1:7d:31:39:5e:02:2f:ac:7a:c7:
                    39:94:f3:2c:13:69:b6:0e:7a:cd:00:3c:fe:4b:da:
                    3f:10:b7:a3:08:11:36:92:ad:5b:74:10:2d:6e:9b:
                    bf:91:9e:d2:16:57:77:03:68:6d:4f:8e:58:a5:8c:
                    e5:42:33:fd:56:5a:ca:ca:f1:81:5b:82:15:5b:4c:
                    88:fe:c4:7b:7c:4b:1b:2b:7a:53:e6:c2:d9:d3:19:
                    47:27:d2:d9:84:93:2a:be:ba:55:90:e7:40:99:5d:
                    ec:3e:70:ed:93:e3:34:4c:2a:7c:f3:7c:7e:88:ab:
                    eb:50:cc:d0:07:6c:c4:54:9b:16:90:12:1d:96:5c:
                    cd:82:dc:f8:1b:95:b7:e5:8a:c8:6e:b2:d0:00:ad:
                    e6:87:98:58:ec:70:3f:70:c8:76:84:ee:c6:10:73:
                    ba:58:da:0a:96:c0:25:0b:88:f2:fd:22:4d:c8:7a:
                    f3:29:fc:bf:c3:e3:14:d3:39:60:89:5a:62:ec:70:
                    95:30:9f:80:ff:20:34:a4:6a:bb:55:e1:76:94:b0:
                    9c:b0:49:cc:45:73:09:c8:90:61:aa:ab:f2:f3:fe:
                    8f:6c:f2:54:e4:5f:c9:29:06:74:dd:d9:10:5e:2f:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:33:80:BE:32:1F:EC:1D:A5:A0:00:0C:37:8B:4C:6A:9B:B8:98:75
            X509v3 Authority Key Identifier:
                keyid:0D:B7:51:E0:CA:E7:39:A3:9D:F9:30:10:29:40:55:00:9B:17:55:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/0DB751E0CAE739A39DF93010294055009B1755DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DB751E0CAE739A39DF93010294055009B1755DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/0DB751E0CAE739A39DF93010294055009B1755DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fc:d1:64:fb:33:f2:0c:dd:7d:66:62:31:d8:91:af:72:48:
         4e:96:9e:73:0f:f8:98:06:ac:e5:a5:6c:d6:84:0e:d2:41:8a:
         1f:dc:54:69:ac:84:b0:3e:c1:07:38:a0:ec:01:89:72:b7:6b:
         0b:5c:9e:f5:f6:a5:fb:9b:a6:e7:48:23:ef:f2:ab:5f:96:9a:
         86:4a:5a:77:e9:15:11:22:24:b1:ac:99:30:eb:e7:33:07:6d:
         a6:4a:9e:d2:64:ea:80:22:42:89:74:0d:7a:d5:06:4d:a6:dc:
         93:b4:38:26:8c:b6:b3:42:2d:4e:1c:4b:c2:ab:b8:a3:ee:c3:
         0b:70:35:17:22:76:96:fc:dd:a4:3b:2a:d3:c8:e0:1c:e3:d8:
         ba:37:fa:0d:8f:d6:74:3b:bc:d8:f3:ac:14:9d:6e:e5:41:dc:
         2a:bd:26:c9:28:a8:cd:ff:0e:83:77:a9:eb:ee:f9:28:ef:37:
         c3:ab:a4:48:a3:37:14:6e:6d:df:9f:9f:48:8c:49:d8:64:d0:
         a9:a4:1c:e5:f1:a9:04:b0:57:0e:16:86:b8:52:cb:b7:9b:a8:
         3c:13:f4:fa:fa:3c:6a:ad:e0:2d:a4:83:78:b9:5c:fe:05:29:
         3b:d2:cd:bc:18:5b:1a:65:79:3d:fd:96:2e:0a:00:ce:96:7a:
         a6:95:16:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZqiH2R4xX0+CfqL++NSKoI5DoCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERCNzUxRTBDQUU3MzlBMzlERjkzMDEwMjk0MDU1MDA5
QjE3NTVEQTAeFw0yNDEyMTkwMjM0MjBaFw0yNDEyMjAwNTI5MjBaMDMxMTAvBgNV
BAMTKDhGMzM4MEJFMzIxRkVDMURBNUEwMDAwQzM3OEI0QzZBOUJCODk4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4tZNyUup5vgxZ31ZCEiKQqc7
8X0xOV4CL6x6xzmU8ywTabYOes0APP5L2j8Qt6MIETaSrVt0EC1um7+RntIWV3cD
aG1PjliljOVCM/1WWsrK8YFbghVbTIj+xHt8SxsrelPmwtnTGUcn0tmEkyq+ulWQ
50CZXew+cO2T4zRMKnzzfH6Iq+tQzNAHbMRUmxaQEh2WXM2C3PgblbflishustAA
reaHmFjscD9wyHaE7sYQc7pY2gqWwCULiPL9Ik3IevMp/L/D4xTTOWCJWmLscJUw
n4D/IDSkartV4XaUsJywScxFcwnIkGGqq/Lz/o9s8lTkX8kpBnTd2RBeL9BXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjzOAvjIf7B2loAAMN4tMapu4mHUwHwYDVR0j
BBgwFoAUDbdR4MrnOaOd+TAQKUBVAJsXVdowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEs0b2RuYTdHVFc2ZlU5cEdHUzVNVHFORmg0Y3VTZXpaSzh2QkFSNkhC
NXEvMS8wREI3NTFFMENBRTczOUEzOURGOTMwMTAyOTQwNTUwMDlCMTc1NURBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBEQjc1MUUwQ0FFNzM5QTM5
REY5MzAxMDI5NDA1NTAwOUIxNzU1REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEs0b2RuYTdHVFc2ZlU5cEdHUzVNVHFORmg0Y3VTZXpaSzh2QkFSNkhCNXEvMS8w
REI3NTFFMENBRTczOUEzOURGOTMwMTAyOTQwNTUwMDlCMTc1NURBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC/zRZPsz8gzdfWZiMdiRr3JITpaecw/4mAas5aVs1oQO0kGKH9xUaayEsD7B
Bzig7AGJcrdrC1ye9fal+5um50gj7/KrX5aahkpad+kVESIksayZMOvnMwdtpkqe
0mTqgCJCiXQNetUGTabck7Q4Joy2s0ItThxLwqu4o+7DC3A1FyJ2lvzdpDsq08jg
HOPYujf6DY/WdDu82POsFJ1u5UHcKr0mySiozf8Og3ep6+75KO83w6ukSKM3FG5t
35+fSIxJ2GTQqaQc5fGpBLBXDhaGuFLLt5uoPBP0+vo8aq3gLaSDeLlc/gUpO9LN
vBhbGmV5Pf2WLgoAzpZ6ppUWFQ==
-----END CERTIFICATE-----