Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.mft
File:                     7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.mft (raw, json)
Hash identifier:          sVl1b484tcn0+LiiZy/YE6KUKzAo2psFdJnPqc2Obgg=
Subject key identifier:   BE:49:4F:68:11:0B:7C:93:01:5C:09:21:96:F7:41:3D:D6:33:2B:02
Authority key identifier: 71:24:EA:9F:A2:0E:DE:3C:28:0A:7A:DD:E8:3C:45:6C:5F:33:0A:1C
Certificate issuer:       /CN=7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C
Certificate serial:       76EC0A8CE083324F817C1064FA46D4D18B3E1314
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.mft
Manifest number:          01A1
Signing time:             Mon 17 Feb 2025 12:43:17 +0000
Manifest this update:     Mon 17 Feb 2025 12:38:17 +0000
Manifest next update:     Tue 18 Feb 2025 15:02:17 +0000
Files and hashes:         1: 323830343a383064303a3a2f33322d3438203d3e20323732343134.roa (hash: 8WnVstw4Cj3tTwPqCalbntboqjj+1zmREw5nRIGBRZE=)
                          2: 7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.crl (hash: S5CmcA/1C6oYobXi2VKloMX/nnBCtMEtl3VB+qbC/Rk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ec:0a:8c:e0:83:32:4f:81:7c:10:64:fa:46:d4:d1:8b:3e:13:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C
        Validity
            Not Before: Feb 17 12:38:17 2025 GMT
            Not After : Feb 18 15:02:17 2025 GMT
        Subject: CN=BE494F68110B7C93015C092196F7413DD6332B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:ec:37:70:b0:88:1d:98:48:e5:c7:79:aa:
                    f9:d8:44:8e:8e:38:f9:61:9d:12:ca:9f:18:b2:6b:
                    9e:2e:9e:e4:74:1d:84:ef:9a:10:c0:76:73:09:4c:
                    23:e1:2e:03:0d:31:c3:8f:99:2d:56:54:0f:ef:4e:
                    ab:a6:fc:7a:50:03:9f:fb:f8:fd:92:41:d1:71:7f:
                    f6:7c:9c:d9:93:ac:52:63:f9:64:47:08:7d:de:92:
                    54:c5:40:f3:cd:5d:8d:3b:2e:cb:2d:44:f2:bf:ea:
                    58:55:e2:8e:6e:70:66:c8:6a:d0:6d:f1:59:4f:f3:
                    7b:dd:88:7f:40:20:b1:3d:ea:25:48:0c:ae:e0:70:
                    36:b7:bb:34:37:98:1b:8c:41:b1:c9:e9:9f:18:8f:
                    74:d6:32:73:4e:61:1a:2a:fa:bf:9f:e8:94:d2:60:
                    11:90:95:a9:6a:9e:9d:b4:51:00:88:6f:d0:98:b3:
                    bc:51:b5:79:51:1c:3a:c5:53:4d:0c:8e:b2:d1:9e:
                    33:38:3d:6c:e5:bb:64:36:51:6a:10:ef:74:7d:b7:
                    10:fe:2f:a4:0c:02:9a:38:c8:30:39:66:50:f7:8f:
                    db:57:08:93:db:be:b9:1b:c5:2f:6a:63:d6:53:68:
                    10:d0:a2:09:08:af:b8:b8:ed:73:eb:36:41:e2:fb:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:49:4F:68:11:0B:7C:93:01:5C:09:21:96:F7:41:3D:D6:33:2B:02
            X509v3 Authority Key Identifier:
                keyid:71:24:EA:9F:A2:0E:DE:3C:28:0A:7A:DD:E8:3C:45:6C:5F:33:0A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:62:2c:74:3f:82:94:f4:3d:a0:9d:ad:dd:1b:65:f0:5b:
         59:75:a1:ba:11:b1:15:51:e5:9d:a3:18:0e:99:fe:f4:0e:99:
         e2:81:76:5d:07:e3:a3:0b:01:53:9f:8e:5e:06:45:f8:7f:25:
         c7:65:03:ea:b2:fe:af:23:49:bb:04:26:c5:00:7d:f6:8c:b2:
         ae:76:f2:50:b3:b5:83:73:a3:bc:b8:73:0b:80:d3:f0:c4:75:
         42:9e:a5:aa:a5:e6:a5:d1:e1:a9:90:6d:5c:e6:91:47:20:82:
         a4:fa:f8:10:ec:9f:7c:86:ad:5e:cf:0f:e4:26:8b:c9:3b:14:
         01:98:2d:6b:ae:0a:a6:ad:68:7f:ac:ce:c5:32:c2:2f:f8:a1:
         90:b9:51:bc:19:44:c3:90:9b:76:a5:17:1b:c8:95:ea:1a:f2:
         1c:80:29:6a:3c:e7:90:4f:05:f1:14:18:c3:cd:6b:58:c3:14:
         0b:d3:86:bc:73:8f:7c:70:7b:33:77:ed:da:f1:e1:b5:0a:fa:
         47:d3:33:db:07:64:7d:1f:c8:25:54:b1:33:df:7c:a5:7a:6c:
         a3:22:ed:56:67:a2:3c:05:0b:c4:ea:8f:ec:a0:7c:84:9b:55:
         a5:58:83:b3:e9:0a:c9:cf:ae:d1:78:02:ef:ec:85:22:0b:d4:
         f4:16:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----