Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.mft
File:                     D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.mft (raw, json)
Hash identifier:          M4Qm4mgC9uNKbTWzhL8RmURh1aBhpVMuil29/q7fkKc=
Subject key identifier:   16:59:05:B7:74:D8:57:48:98:5C:A6:71:E1:72:20:59:DD:B6:D3:0E
Authority key identifier: D3:93:B0:F5:EB:55:52:13:6D:6D:9C:1D:AC:00:12:8C:7C:E0:75:0B
Certificate issuer:       /CN=D393B0F5EB5552136D6D9C1DAC00128C7CE0750B
Certificate serial:       1FCFC3538F4617696DDCDAE6AAC963CF76025EFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.mft
Manifest number:          7E
Signing time:             Sun 22 Sep 2024 19:00:24 +0000
Manifest this update:     Sun 22 Sep 2024 18:55:24 +0000
Manifest next update:     Mon 23 Sep 2024 20:07:24 +0000
Files and hashes:         1: D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.crl (hash: WJASiE+rozi4dKQSI+mMYvVIYDSzjTzveY2cAXJG9OM=)
                          2: 323830343a353233343a3a2f33322d313238203d3e20323638353032.roa (hash: 4BsK3Tk36oTjrPyfD/WgD9uXPA8YMCkm1FWQ/edBS18=)
                          3: 34352e3136312e38302e302f32322d3332203d3e20323638353032.roa (hash: 8vBPsRC9ORS3hEhLdYFwsTZCeEBY4Y5C9GufhXBwITQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:c3:53:8f:46:17:69:6d:dc:da:e6:aa:c9:63:cf:76:02:5e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D393B0F5EB5552136D6D9C1DAC00128C7CE0750B
        Validity
            Not Before: Sep 22 18:55:24 2024 GMT
            Not After : Sep 23 20:07:24 2024 GMT
        Subject: CN=165905B774D85748985CA671E1722059DDB6D30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:c5:5e:dc:bd:f8:0e:d6:23:4d:04:c4:d9:
                    65:34:bb:3e:b4:fd:9d:5c:6d:6b:9f:6d:8d:18:97:
                    64:f3:a7:a7:d9:aa:17:f7:7f:85:15:7d:b7:09:a2:
                    b6:58:79:e9:54:9e:1a:53:71:ef:56:95:fb:01:93:
                    57:97:f5:8c:9d:db:9e:10:ea:b4:ad:f6:e4:3a:f9:
                    9c:74:e5:56:f2:01:33:04:ae:14:48:c1:fe:ce:9b:
                    4e:28:2d:0f:c9:e9:3a:c3:0a:9b:de:1c:5a:b2:87:
                    90:71:c5:3d:41:17:7b:2f:4b:4d:27:c1:89:a8:a4:
                    1c:1a:16:65:f9:8f:2c:2e:fe:fb:3e:a8:4f:d1:ef:
                    12:d5:04:e9:3c:e6:8d:65:ea:29:df:55:e1:7f:29:
                    47:05:b1:ff:83:c6:6e:b2:5d:68:16:39:55:b4:fc:
                    1b:7a:7c:59:dd:1c:72:db:2d:33:58:21:8c:31:77:
                    99:4a:b2:65:d0:30:1e:48:d9:87:73:b0:0f:a2:53:
                    78:f2:4f:8e:4b:fa:7e:dd:96:72:be:e5:c0:e3:e8:
                    30:68:1f:90:ca:09:3a:5e:17:c2:7a:17:7c:14:25:
                    be:09:d4:18:cd:c3:61:86:76:a1:52:e6:8a:21:83:
                    ad:3e:b5:93:3c:83:c3:2d:81:6e:41:91:5e:62:2e:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:59:05:B7:74:D8:57:48:98:5C:A6:71:E1:72:20:59:DD:B6:D3:0E
            X509v3 Authority Key Identifier:
                keyid:D3:93:B0:F5:EB:55:52:13:6D:6D:9C:1D:AC:00:12:8C:7C:E0:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:7e:00:fb:d1:b2:4d:f1:fd:7f:98:cf:a9:a0:ac:a3:6c:
         d1:da:6d:e5:b6:57:b3:7d:4e:12:cf:5a:30:e2:73:77:13:a8:
         cb:1f:dd:f1:b5:9c:70:20:c4:a7:a4:36:7f:77:20:de:8b:e3:
         c9:91:f2:f5:4d:45:f3:6a:79:f8:64:e0:e7:59:db:ec:8e:ba:
         68:6e:53:b3:ab:fe:b2:6d:15:02:93:42:a8:33:02:5b:86:ac:
         92:8b:1b:cd:47:3f:82:b2:8c:2b:ec:5b:29:2a:2a:1e:19:5d:
         c4:76:1f:b6:ef:e6:9a:c8:21:05:c3:a2:84:88:13:a0:ca:cd:
         fa:a4:fd:55:73:ec:4c:16:d6:8f:3e:f5:84:6d:96:87:4c:f0:
         63:e7:7d:13:3c:d9:55:af:06:e2:af:b4:41:bb:6a:d5:68:2a:
         de:22:ce:e5:18:f1:43:b8:f6:39:ec:ae:14:ec:5c:04:b5:91:
         a9:5a:2f:da:e2:1d:d3:7e:fc:c2:31:b3:83:eb:12:7f:4b:d9:
         5e:fc:31:df:9c:92:aa:c3:a8:90:c2:57:d7:e2:5c:49:f9:5a:
         58:64:bb:c0:56:ef:ce:86:5a:21:6c:56:40:94:82:9d:1d:c3:
         23:97:65:a4:8c:b3:e0:9a:bd:a2:69:3c:ea:e6:e4:04:27:0b:
         a7:34:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----