Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft
File:                     1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft (raw, json)
Hash identifier:          1y6qStokMRFw7xS8D7lFmw9yEiD9fL1UjmC7CVb5yAk=
Subject key identifier:   4D:96:21:59:D4:F5:F2:C8:83:FA:43:B2:61:07:D8:3F:D9:77:FA:11
Authority key identifier: 1B:09:EB:B6:7C:9B:35:E1:95:84:F3:CF:38:01:F0:C7:FA:94:19:4F
Certificate issuer:       /CN=1B09EBB67C9B35E19584F3CF3801F0C7FA94194F
Certificate serial:       1E9D26547195B5DB98CEDD40B88646A6E9D059B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft
Manifest number:          0111
Signing time:             Sat 29 Mar 2025 04:26:49 +0000
Manifest this update:     Sat 29 Mar 2025 04:21:49 +0000
Manifest next update:     Sun 30 Mar 2025 06:15:49 +0000
Files and hashes:         1: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: NydpSSGwHYwR6tRDXWYNNtUDsqDtW7qP/wQ6Jndj65U=)
                          2: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: 5WnVwzHmnHzJ489Kb5IHXwg3EpsZRZa2lwHb+mc1UxI=)
                          3: 1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.crl (hash: AUbUXj6ZzGjY+4B8P5yhx0ZJq5ZYffBSYHlA6Ea8No8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9d:26:54:71:95:b5:db:98:ce:dd:40:b8:86:46:a6:e9:d0:59:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B09EBB67C9B35E19584F3CF3801F0C7FA94194F
        Validity
            Not Before: Mar 29 04:21:49 2025 GMT
            Not After : Mar 30 06:15:49 2025 GMT
        Subject: CN=4D962159D4F5F2C883FA43B26107D83FD977FA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:63:e3:7b:c2:00:a1:b0:bc:6c:a7:da:90:
                    45:c6:45:ad:73:b4:b6:92:14:5a:97:6f:18:d4:aa:
                    c5:99:0a:c4:23:44:89:88:fa:73:72:e7:e4:d9:3b:
                    4f:93:de:9e:8c:a2:e0:bd:26:bc:97:4f:e2:0f:70:
                    5e:d3:64:38:bd:0e:c6:dc:42:79:26:db:35:42:89:
                    f2:37:5b:a8:09:f1:5f:16:73:d6:c2:35:a5:8c:d1:
                    c2:4f:4c:3b:ca:9b:ab:92:fe:6b:39:a8:5c:b9:b3:
                    cf:a1:46:97:14:74:32:96:c5:ed:32:80:ad:19:f6:
                    93:fa:fa:17:4c:24:87:3d:b6:e1:78:1d:4c:da:bd:
                    84:b7:57:27:dc:9d:e1:8a:98:7f:6a:5b:0e:b2:e3:
                    61:56:ba:7c:76:3a:6f:04:f4:5b:7f:0b:6a:e4:36:
                    d5:ff:57:67:bb:02:c6:c1:cd:77:fd:db:fb:56:c5:
                    5e:b9:9d:19:c1:c2:0d:df:13:7d:48:e7:58:74:76:
                    fe:ba:fd:29:f0:9b:69:80:35:75:47:40:3d:52:91:
                    33:c4:f1:fb:58:0b:90:71:5f:22:b7:db:a8:c9:82:
                    e1:c2:fb:9f:46:1d:d0:16:ee:99:c0:22:b9:d3:6a:
                    14:11:45:86:3b:b7:a7:b9:05:52:72:89:a0:3c:26:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:96:21:59:D4:F5:F2:C8:83:FA:43:B2:61:07:D8:3F:D9:77:FA:11
            X509v3 Authority Key Identifier:
                keyid:1B:09:EB:B6:7C:9B:35:E1:95:84:F3:CF:38:01:F0:C7:FA:94:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d6:ac:03:b5:6e:57:fa:a2:bd:c8:38:d5:63:3b:42:ff:16:
         3f:f8:6f:1a:cf:2d:be:1c:b6:a2:0d:f2:dd:b5:2e:e5:6f:91:
         5f:c4:e4:0c:eb:7a:65:13:19:1f:b6:2f:d3:e4:49:9e:c1:33:
         bd:59:fe:a8:ac:a8:40:60:2b:46:da:3f:35:75:e0:8c:01:4c:
         14:ca:89:2d:29:c1:e9:0e:55:69:eb:ac:02:4a:bb:70:e0:be:
         0f:f6:9d:2a:d1:64:c9:b7:b8:22:79:8c:19:7d:89:81:67:42:
         6a:c0:78:36:e3:65:18:3c:7c:11:7a:38:b5:95:72:55:cf:b9:
         c7:a8:c1:53:f7:b1:ec:01:b3:42:5d:11:91:15:bb:90:eb:c1:
         2a:2c:59:ec:9b:49:24:88:01:35:52:ab:8d:c4:3e:c7:fb:98:
         05:5d:bd:dc:57:c3:2e:7e:82:74:92:e0:95:1e:73:29:3d:fd:
         b7:f1:ca:da:e5:be:0d:f4:03:f3:a7:b8:d6:a2:e5:66:3c:e3:
         92:55:e8:8d:ca:70:b8:10:e9:b1:45:7d:32:27:83:52:67:c6:
         19:e1:b0:a7:17:fc:0b:f2:7c:35:34:27:e5:ed:04:16:04:80:
         99:30:27:08:9d:28:bb:61:70:0c:ad:0d:fc:c8:3d:42:a0:fe:
         71:f7:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----