Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.mft
File:                     148870ED8BFB6BE8F6D0A9E969336D8D39D40081.mft (raw, json)
Hash identifier:          P8DIEt35/QtDgdVLTrG+9Pt5uHyuMQygoNetEa9NyJg=
Subject key identifier:   D9:83:AE:1A:3E:D2:A3:5F:4A:8F:7C:59:58:10:7F:AC:B2:81:8C:05
Authority key identifier: 14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81
Certificate issuer:       /CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
Certificate serial:       72CF9CA8D5125142048411D4603F6793B120CB4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.mft
Manifest number:          2D
Signing time:             Tue 07 Jan 2025 06:35:14 +0000
Manifest this update:     Tue 07 Jan 2025 06:30:14 +0000
Manifest next update:     Wed 08 Jan 2025 08:18:14 +0000
Files and hashes:         1: 323830343a356230633a3a2f33322d3332203d3e20323638383135.roa (hash: rDAAUxyN6fR3dwEMm5P/glLKK6XtLhCO/xAtKnkYMbI=)
                          2: 148870ED8BFB6BE8F6D0A9E969336D8D39D40081.crl (hash: OKb3KKgs6upNI/gSHRU57eBr7fZbGFyhj1ZkKOsB1LY=)
                          3: 34352e3137332e3135322e302f32322d3234203d3e20323638383135.roa (hash: bTuqWUTZj7B/XMd3dKedk/Y5Yfztm5UmOUU2b5k8NMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cf:9c:a8:d5:12:51:42:04:84:11:d4:60:3f:67:93:b1:20:cb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
        Validity
            Not Before: Jan  7 06:30:14 2025 GMT
            Not After : Jan  8 08:18:14 2025 GMT
        Subject: CN=D983AE1A3ED2A35F4A8F7C5958107FACB2818C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:ef:09:d1:50:12:0a:23:b5:8d:d4:e1:05:
                    4e:bc:c9:48:0c:e0:26:d7:f7:e1:60:83:3f:cf:10:
                    9b:a3:89:1c:51:ce:38:42:53:30:6b:7e:60:59:89:
                    d9:7e:cc:73:2a:1e:35:f5:5e:10:bb:f3:c2:83:ee:
                    10:70:ba:a2:f6:84:d4:aa:0d:a2:6c:d4:b4:3f:d8:
                    17:35:87:3d:9f:8c:3c:3b:47:21:e0:08:11:9f:e1:
                    66:7a:21:8f:7b:bd:67:ad:55:1d:20:57:3f:6c:ab:
                    67:17:3f:85:59:86:26:30:db:12:fc:91:18:5a:e1:
                    d9:5b:d9:97:48:a4:fd:7a:ce:be:ae:42:d6:c7:f0:
                    f9:10:d0:92:6a:ea:52:b4:dc:fe:a6:82:ae:51:1f:
                    e6:39:b2:c7:77:8b:19:e4:8d:d2:f3:51:01:9b:c0:
                    70:0f:ba:5d:16:6a:ed:21:0d:d0:5e:d0:1d:03:e9:
                    39:d2:98:5d:aa:b2:74:6a:78:6c:c8:d5:bf:ac:a9:
                    cf:a9:d8:df:9f:0b:90:4b:d4:05:a7:52:0e:90:7b:
                    ae:fc:ed:27:01:f5:78:f9:48:7d:74:5b:cd:70:e0:
                    39:a2:44:4f:dc:f4:35:b4:e6:ae:e5:ca:d7:d9:70:
                    27:3d:00:65:0f:e7:0f:cf:8c:b3:cf:f6:fa:9c:3d:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:83:AE:1A:3E:D2:A3:5F:4A:8F:7C:59:58:10:7F:AC:B2:81:8C:05
            X509v3 Authority Key Identifier:
                keyid:14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0d:4b:3b:fd:1f:a1:35:e1:73:84:3d:6d:61:58:24:d7:9a:
         70:6f:aa:c6:40:0b:a5:99:55:1c:1b:11:4c:1d:bb:3e:7e:ce:
         31:e5:a6:0e:e8:b3:25:3b:4a:d8:f2:7d:64:de:ac:3b:34:bf:
         5d:f3:2b:39:9f:6f:63:d1:18:17:f4:ce:0b:6c:05:65:ff:1f:
         ac:7a:d1:52:dc:a4:6f:da:55:6d:88:0e:5c:57:44:b6:74:b7:
         a5:1a:9b:74:69:5e:dc:ef:57:3d:0a:82:5b:06:4d:a8:3f:c6:
         71:9a:37:8b:5a:8a:f7:02:de:3d:93:fd:03:44:03:a7:76:12:
         40:2c:3d:32:05:ea:6b:b4:57:fa:93:bd:ea:4d:63:ff:05:7b:
         07:ee:d4:9c:3b:30:8f:a9:91:13:66:fd:00:42:31:7b:32:57:
         c8:96:9b:05:b0:36:52:ec:03:2f:70:62:b1:84:a3:d7:57:60:
         df:90:81:d8:dc:3a:cc:f0:46:9c:79:22:e0:ee:d5:98:f0:1d:
         d0:b4:ca:f5:e2:87:2a:08:30:4c:e6:fc:a8:72:1d:85:7c:a0:
         a0:c2:78:b0:fb:65:db:f7:8a:40:c9:4a:fd:69:e4:5a:7c:59:
         b4:df:58:3c:30:0a:63:63:16:11:d8:89:6d:c8:b6:45:6c:56:
         56:db:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----