Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.mft
File:                     61AD0EDC55E74D73B77ED252B44E764D2028B7A4.mft (raw, json)
Hash identifier:          ghlGcU3+veRThdseYYj4Zg0iu7m9HuwWDzmdHzwDIFE=
Subject key identifier:   E6:A7:79:7B:96:6D:C3:97:BE:BE:A5:65:D6:47:F5:E2:73:D8:5F:91
Authority key identifier: 61:AD:0E:DC:55:E7:4D:73:B7:7E:D2:52:B4:4E:76:4D:20:28:B7:A4
Certificate issuer:       /CN=61AD0EDC55E74D73B77ED252B44E764D2028B7A4
Certificate serial:       40C55067E0E60DAC1E52BA798B9F51116C0DF0AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.mft
Manifest number:          014F
Signing time:             Thu 12 Dec 2024 05:16:02 +0000
Manifest this update:     Thu 12 Dec 2024 05:11:02 +0000
Manifest next update:     Fri 13 Dec 2024 07:20:02 +0000
Files and hashes:         1: 34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa (hash: zIkSu2b5BXWwP3j/7oDDFVEcHPRoOWvm+sr/zkFpI8I=)
                          2: 61AD0EDC55E74D73B77ED252B44E764D2028B7A4.crl (hash: AkbjXlLlbLmAQ3AhGwS1WXj3Tjmf3MHJPOekGp7+niU=)
                          3: 323830343a343838303a3a2f33322d3438203d3e20323637313235.roa (hash: Cz3GPQyS6PoYIuudlbAzWULr2FVSUxkFZuLNqlZVuh8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c5:50:67:e0:e6:0d:ac:1e:52:ba:79:8b:9f:51:11:6c:0d:f0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61AD0EDC55E74D73B77ED252B44E764D2028B7A4
        Validity
            Not Before: Dec 12 05:11:02 2024 GMT
            Not After : Dec 13 07:20:02 2024 GMT
        Subject: CN=E6A7797B966DC397BEBEA565D647F5E273D85F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:c9:91:25:a4:e9:25:3c:30:a9:54:ea:a4:
                    20:95:60:d1:c6:ef:a2:82:fd:f5:56:8d:6b:6d:d6:
                    2e:e6:98:d0:ef:a1:c6:fa:0d:e2:1c:b2:a1:e5:ea:
                    df:20:e2:cf:13:30:39:29:54:a4:67:25:ea:cc:4a:
                    74:58:a9:a4:f6:c3:3c:e1:e0:13:4a:4c:25:1d:04:
                    78:8e:fd:2e:43:6b:f1:60:d2:98:2c:30:57:e2:37:
                    31:55:9f:32:2f:8b:ac:2f:ce:81:fe:96:1e:10:26:
                    49:90:5b:3e:40:9d:46:dd:e7:23:e7:23:01:e6:3d:
                    45:a3:74:c7:72:17:30:40:ce:25:c8:a7:99:5e:55:
                    b7:b2:6f:cf:7c:b1:40:9e:55:c2:16:4a:9a:1e:11:
                    0b:40:86:ba:cf:c2:03:3c:48:c0:8f:54:6e:e9:e7:
                    c0:34:b9:e6:4f:29:e1:89:ae:90:66:25:6c:26:e9:
                    d2:2a:fd:ae:46:d5:eb:c5:0d:83:50:de:be:fa:15:
                    6a:8c:36:8c:23:9d:2d:5e:34:b2:74:5a:9f:5b:af:
                    b6:43:bf:b0:a1:3e:2d:f8:3c:21:06:d4:6a:fe:67:
                    6c:f3:1c:7b:f9:0a:c9:1b:c5:09:76:39:70:3b:61:
                    d9:c1:7c:74:fc:5b:32:f5:82:dc:47:df:ce:08:16:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:79:7B:96:6D:C3:97:BE:BE:A5:65:D6:47:F5:E2:73:D8:5F:91
            X509v3 Authority Key Identifier:
                keyid:61:AD:0E:DC:55:E7:4D:73:B7:7E:D2:52:B4:4E:76:4D:20:28:B7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:2b:ff:34:6a:1e:a9:3b:36:d8:e6:a1:7f:88:e0:16:58:
         ea:c7:e1:da:3a:11:51:3d:3d:06:f3:ab:a1:ec:2d:78:2d:33:
         be:e0:69:10:15:26:34:d6:4c:cf:0e:75:ea:d4:c0:47:a5:9a:
         30:8f:71:49:f7:f8:23:11:04:51:d8:1c:4c:0a:50:66:0f:32:
         da:74:69:4d:9a:cb:a4:e5:e1:27:a6:a4:22:82:2d:93:49:1a:
         4d:79:cb:00:58:57:14:93:a4:3b:62:8a:5f:79:83:41:3a:d0:
         70:03:34:8d:47:b3:1d:7e:97:6b:5c:cc:61:74:36:fe:34:ea:
         4d:f7:08:fb:43:17:8c:d4:09:ae:3b:fb:06:b3:35:72:82:0a:
         8d:b4:17:ce:c2:da:e6:27:73:da:bd:35:e6:c5:f3:a5:a3:d0:
         ce:5a:bb:62:5c:af:b3:48:6a:3f:fd:61:77:19:8e:a6:d9:7a:
         9a:9e:49:cd:a2:27:77:d9:f1:16:79:1a:7f:95:8c:38:4c:bb:
         74:8f:23:10:83:8e:63:55:c8:95:7d:4c:92:85:25:4a:8a:60:
         2c:5f:27:16:da:91:63:cc:3a:1c:a8:0b:1a:e1:54:f5:1c:f5:
         6f:a9:47:5d:2e:87:33:24:f7:be:18:9d:de:a7:6d:1d:b3:4a:
         8d:40:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----