Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft
File:                     CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft (raw, json)
Hash identifier:          UmUt3MOK2EwV0Ub7Fuu6/ndT5bV+6YZETKNWnFEKs6c=
Subject key identifier:   1B:F0:15:FA:1C:FB:F9:61:59:C8:16:06:85:E7:6A:FE:B3:46:3E:D0
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Certificate issuer:       /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial:       24BEADC1F2438B30A69415E9652656E5871F6C90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft
Manifest number:          01DE
Signing time:             Tue 25 Mar 2025 09:16:45 +0000
Manifest this update:     Tue 25 Mar 2025 09:11:45 +0000
Manifest next update:     Wed 26 Mar 2025 12:53:45 +0000
Files and hashes:         1: 34352e36352e3132382e302f32322d3234203d3e20323636353238.roa (hash: aJH/wSL08NehPiCekubLad5Y374l2+W8Z6uBljlZSg4=)
                          2: 323830343a336436343a3a2f33322d3438203d3e20323636353238.roa (hash: dPDRZUuyCNAERLEW1uzp1kTsm2RpRcwRO5Ac4u15fIk=)
                          3: CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl (hash: 8VGK7ooQXw2rv8bVkwpdTUub7QNoPKvFHnbVoPVuHY8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:be:ad:c1:f2:43:8b:30:a6:94:15:e9:65:26:56:e5:87:1f:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
        Validity
            Not Before: Mar 25 09:11:45 2025 GMT
            Not After : Mar 26 12:53:45 2025 GMT
        Subject: CN=1BF015FA1CFBF96159C8160685E76AFEB3463ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:dc:d4:0b:88:37:ab:23:dc:05:22:c1:66:
                    c5:a1:df:84:06:4a:62:7c:ec:f8:59:14:1d:6c:97:
                    d3:40:45:c2:6c:ae:cd:0c:f7:ad:25:6f:59:ae:b9:
                    ab:03:e5:dc:f6:c5:d9:d9:2b:f3:8a:07:5d:bc:54:
                    37:bc:43:e1:98:84:0f:7a:e3:ea:5b:b9:d1:7e:74:
                    86:9a:bb:d0:02:12:f8:66:df:28:ef:c6:7a:a4:bd:
                    d7:39:c7:5d:55:2a:e5:d3:c1:fc:05:b0:e5:38:7f:
                    c2:7d:9f:21:39:25:4b:cb:39:66:c8:86:ed:65:2a:
                    d8:4a:c6:83:94:36:18:a5:34:7a:c3:94:69:97:b4:
                    08:e6:2b:8c:1b:a1:ff:a9:4e:76:f0:43:04:69:a9:
                    1d:ed:b9:9f:98:e2:51:10:02:67:7b:7e:5d:81:19:
                    c8:06:10:31:0b:c9:14:0d:69:4e:dd:f9:c5:2d:b9:
                    02:1e:f2:7c:b9:da:d7:ef:8e:9b:e8:83:54:af:81:
                    38:ae:dc:9d:0e:5e:16:70:5c:54:4f:e8:da:52:5c:
                    14:da:d5:9a:08:b8:15:47:8c:e1:f8:5d:8a:39:ff:
                    3d:6e:7b:7f:c1:bf:e2:26:ca:66:34:77:0d:d2:b6:
                    e2:9d:33:02:b2:8f:5c:ea:8b:3a:1f:89:c5:cb:39:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F0:15:FA:1C:FB:F9:61:59:C8:16:06:85:E7:6A:FE:B3:46:3E:D0
            X509v3 Authority Key Identifier:
                keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:a0:47:73:7b:a3:e7:9a:99:3c:b8:f1:58:51:50:b7:ea:
         25:16:79:82:fd:fe:ca:95:1e:13:ef:e1:0f:86:da:2d:67:bd:
         2c:d6:d8:ce:52:70:c0:c0:62:73:38:f4:5b:11:80:5d:2f:48:
         66:a0:e4:60:c4:0c:af:95:00:61:1f:1d:42:df:31:cd:04:11:
         a2:6e:05:3c:71:fc:7a:fe:6e:e1:8a:01:72:fa:4e:e6:12:12:
         e4:7c:09:db:b1:5e:6e:95:6b:ac:12:c8:53:16:38:47:82:9e:
         ca:9e:fc:79:4c:f3:aa:ec:17:29:91:3b:23:db:16:16:59:92:
         97:da:44:4b:88:81:cf:ea:4a:68:a8:32:8c:52:37:32:05:25:
         07:6f:d8:2a:83:66:c1:91:8d:99:ab:34:f5:fe:2d:5c:04:ab:
         7e:7c:c5:ba:c9:a1:6c:43:1c:62:b1:2d:c8:87:6b:6c:88:12:
         62:d4:fc:c6:3d:0a:f1:fd:b6:f6:84:de:9a:f1:62:85:33:d1:
         38:bc:06:89:04:9e:53:e7:dc:66:51:99:1b:8c:46:03:1b:81:
         2a:79:b8:b7:93:2a:f8:1b:2d:7f:28:65:29:07:6d:08:e5:c0:
         0b:ef:2b:e8:cd:07:b6:23:61:da:70:62:09:fb:80:88:e1:16:
         c0:91:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----