Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.mft
File:                     11DBA150DA3969CE822352214139847D219FDEF0.mft (raw, json)
Hash identifier:          cz7oGP8B2dKLyvfeHvTtTCQf2ouxVosnnXPti6bg9gM=
Subject key identifier:   AF:24:F4:E9:F8:59:B9:6D:43:F3:82:57:FF:C7:C0:F9:56:BE:D5:69
Authority key identifier: 11:DB:A1:50:DA:39:69:CE:82:23:52:21:41:39:84:7D:21:9F:DE:F0
Certificate issuer:       /CN=11DBA150DA3969CE822352214139847D219FDEF0
Certificate serial:       3321AE2A17BBD3CE6ACEBBBF4DF22ACC0AFA9219
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11DBA150DA3969CE822352214139847D219FDEF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.mft
Manifest number:          4B
Signing time:             Sat 29 Mar 2025 06:26:49 +0000
Manifest this update:     Sat 29 Mar 2025 06:21:49 +0000
Manifest next update:     Sun 30 Mar 2025 09:27:49 +0000
Files and hashes:         1: 323830343a356538303a3a2f33322d3438203d3e20323639303337.roa (hash: CUmtFUQxCO3O55/cH5OBY6a0IC32UQW5aA6n7arz36o=)
                          2: 11DBA150DA3969CE822352214139847D219FDEF0.crl (hash: QFpPsA7JdhzGMNZG92DoIAtX5vHwX3bhtGk7mbRJfx4=)
                          3: 34352e3137382e3131322e302f32322d3234203d3e20323639303337.roa (hash: amaSCzqn/xsXH/EbydyXEyMXSLaknBb8dbflAj98/oM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:21:ae:2a:17:bb:d3:ce:6a:ce:bb:bf:4d:f2:2a:cc:0a:fa:92:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11DBA150DA3969CE822352214139847D219FDEF0
        Validity
            Not Before: Mar 29 06:21:49 2025 GMT
            Not After : Mar 30 09:27:49 2025 GMT
        Subject: CN=AF24F4E9F859B96D43F38257FFC7C0F956BED569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:7f:63:2e:4d:44:41:c5:33:37:8d:26:b1:
                    d1:b1:6b:55:41:2e:ed:e3:29:35:99:04:55:a8:46:
                    d7:7b:78:60:a0:ce:33:dc:81:2d:ee:0e:03:cc:be:
                    32:59:83:28:63:14:d5:92:4c:1a:11:7e:cc:ba:c2:
                    d6:72:7b:21:bb:3e:7f:33:e4:fc:ea:43:7a:24:36:
                    80:76:30:fd:7b:9c:cd:5c:9e:68:32:69:b6:1c:36:
                    5e:05:26:21:df:89:23:01:c5:46:6d:63:2e:47:b2:
                    07:5c:22:e4:4a:9d:79:84:4d:21:e9:1c:b4:e4:3b:
                    6e:11:7a:37:fe:49:22:21:35:60:39:e9:5d:0f:61:
                    25:da:07:ee:57:6f:8d:a0:42:42:72:48:02:55:e3:
                    2e:2e:63:08:b2:a3:f9:b5:26:b0:e5:9d:c6:45:d0:
                    30:c7:a5:92:05:cd:d9:14:04:36:7e:a0:a2:fe:4c:
                    66:83:44:37:b9:ac:f1:3d:7b:ed:23:e0:01:60:dc:
                    17:a9:b7:d9:35:ae:a4:6b:72:d6:37:f4:ed:ac:1e:
                    3c:59:2d:a1:91:f2:97:b1:b1:1f:cc:79:f7:77:3c:
                    43:99:cb:b9:8b:7a:71:5e:f0:42:0f:07:47:77:81:
                    cd:a6:25:c9:39:bd:d0:85:bd:06:74:de:43:e5:47:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:24:F4:E9:F8:59:B9:6D:43:F3:82:57:FF:C7:C0:F9:56:BE:D5:69
            X509v3 Authority Key Identifier:
                keyid:11:DB:A1:50:DA:39:69:CE:82:23:52:21:41:39:84:7D:21:9F:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11DBA150DA3969CE822352214139847D219FDEF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:55:c7:7a:f4:d7:9d:d6:78:07:66:b0:af:a8:63:6a:50:a7:
         42:7b:12:25:1a:05:ee:c8:cd:5d:fd:d4:65:e4:6f:24:3f:76:
         50:ca:0e:ca:1c:d3:4e:a1:24:06:f9:c3:f3:cd:58:1b:83:95:
         b5:f0:4b:85:d8:7f:7e:f4:c1:40:9a:12:e2:63:14:13:fa:eb:
         e2:d6:4d:95:5d:18:53:8a:47:a7:0e:e2:68:51:17:40:1a:3c:
         ab:b0:bc:b5:9d:18:1e:5c:97:81:dd:8f:0c:2b:82:6d:fe:81:
         ce:3a:85:ee:89:4c:94:8e:24:e2:3c:40:28:e4:c0:14:1f:58:
         4b:d5:04:fb:88:70:2f:9a:7c:14:22:be:db:cc:31:03:bc:75:
         b7:3c:57:0b:37:9f:d2:45:93:32:79:bd:70:33:67:e7:2c:49:
         2e:20:91:79:36:ab:7a:91:9b:f0:26:fb:31:90:f1:e3:28:5a:
         c6:ab:b3:af:29:31:ce:ca:43:a9:e2:0a:49:1b:5c:f7:f8:9d:
         03:76:19:39:d3:bb:c1:28:47:50:ce:f2:75:3f:5c:0b:9e:b8:
         43:46:8d:ee:89:d5:b2:f1:62:2b:21:dc:d1:a7:75:d5:c9:ab:
         4b:46:ae:b6:f8:76:f9:ae:55:97:c9:d0:06:f8:74:4a:92:0b:
         5f:52:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----