Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.mft
File:                     21079D52F0579C141357012117FF7963C76BBFC2.mft (raw, json)
Hash identifier:          CtveVo+R+C7R3m+gN+2dmFZ+dQBP7DyiOem3PuU7ayU=
Subject key identifier:   BA:FC:62:84:0A:7D:73:E0:FE:F9:DC:23:7D:F2:01:3D:8A:B7:52:AE
Authority key identifier: 21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2
Certificate issuer:       /CN=21079D52F0579C141357012117FF7963C76BBFC2
Certificate serial:       AD2B8B9FFBF716DA538F245509E546FC9275F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.mft
Manifest number:          24
Signing time:             Mon 17 Feb 2025 21:25:00 +0000
Manifest this update:     Mon 17 Feb 2025 21:20:00 +0000
Manifest next update:     Tue 18 Feb 2025 23:21:00 +0000
Files and hashes:         1: 323830343a323430303a3a2f33322d313238203d3e20323634313935.roa (hash: tPsfdLFH2AZ0D5SdsAEop/8Y2WZH4B78cQpprt+Ua5Y=)
                          2: 3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa (hash: z/FXtdoXgpxFyyg3njJInHrAucsvXYWfGUsDYHzfgMA=)
                          3: 21079D52F0579C141357012117FF7963C76BBFC2.crl (hash: TgoEsjGWNV9GGmqPF3h/6qTkwPP0Jj3H5+opmgbET7c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ad:2b:8b:9f:fb:f7:16:da:53:8f:24:55:09:e5:46:fc:92:75:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21079D52F0579C141357012117FF7963C76BBFC2
        Validity
            Not Before: Feb 17 21:20:00 2025 GMT
            Not After : Feb 18 23:21:00 2025 GMT
        Subject: CN=BAFC62840A7D73E0FEF9DC237DF2013D8AB752AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:62:58:95:1e:96:94:03:2b:45:34:78:87:
                    47:95:90:d4:a6:bc:4a:93:0d:91:5f:9f:f2:10:8d:
                    c8:d1:36:ec:85:80:1f:b4:6b:c6:97:ea:fb:fa:48:
                    e7:c8:96:9f:f1:f3:27:ab:40:90:27:b6:d7:8d:b3:
                    c3:ef:b6:81:dc:e0:b3:68:52:23:c8:e0:13:95:1b:
                    e0:cf:e3:50:a6:2a:e4:92:b1:63:13:6d:c9:51:3f:
                    6a:87:ad:ef:43:35:f1:9c:b7:9d:05:f5:4c:d7:d1:
                    60:20:a7:49:b8:53:ee:65:72:57:fb:4f:57:ee:75:
                    a8:09:c6:60:e9:b1:1b:b7:dc:ca:53:8f:1e:6c:b4:
                    d3:e8:e8:ed:e0:5f:57:aa:8d:66:6e:31:e5:75:ff:
                    8c:59:db:a3:f3:7a:4a:9e:aa:47:14:ad:56:4a:85:
                    92:fe:14:fa:b1:58:05:bb:7a:15:77:a5:94:26:fc:
                    c0:55:a2:4d:a5:10:c4:af:7b:1e:29:f2:5c:a6:fb:
                    a0:d3:95:4e:11:ff:71:cc:ab:90:be:a1:fe:10:9a:
                    3b:99:f7:27:3b:e6:32:4a:eb:90:51:96:a3:ef:3b:
                    c0:b0:9b:29:55:21:66:8c:70:32:0e:a3:7f:23:49:
                    0a:36:de:af:58:fa:91:92:b1:73:8d:aa:0b:12:f6:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:62:84:0A:7D:73:E0:FE:F9:DC:23:7D:F2:01:3D:8A:B7:52:AE
            X509v3 Authority Key Identifier:
                keyid:21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:1f:44:13:69:10:79:69:aa:77:fb:5f:e7:40:69:6d:ee:
         d5:89:80:71:84:e7:b5:97:7d:2f:ec:ae:2c:31:8f:81:90:10:
         d1:80:b2:66:26:7e:bf:ae:ad:88:07:ff:36:1b:2e:3f:e1:84:
         d2:49:aa:5d:d8:a8:5c:44:7f:6e:f2:2e:b8:44:0f:fc:55:08:
         6d:b1:42:2b:e4:42:2d:25:a3:c7:83:db:74:7e:1a:25:9e:3d:
         8c:8c:3a:0c:b1:ef:a8:7e:7c:4f:48:08:8a:df:4d:55:ef:3d:
         9d:77:a2:06:85:98:87:c6:39:ff:fa:e7:4f:f5:f0:c5:a6:3e:
         6e:d5:4b:af:27:15:9d:59:ce:a9:18:55:2a:b9:2a:21:2a:f8:
         2f:62:bb:04:f5:c4:b6:2f:f9:35:61:36:36:b8:8a:3e:e6:88:
         e3:a0:e3:70:1f:b5:a2:95:32:de:c7:43:c7:51:79:b6:ac:64:
         66:e6:83:01:63:2a:6f:3d:a3:f9:d4:7b:06:24:c9:9f:01:ab:
         65:4f:ca:22:b0:57:42:85:5b:f9:fc:e5:6a:1e:b8:ef:fa:8f:
         71:a0:f3:20:6f:46:ad:bf:8d:a5:5d:5c:8b:57:d0:3b:54:9f:
         f3:08:3d:15:5b:16:b1:73:78:5e:72:33:bf:8e:8b:27:de:6c:
         22:83:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----