Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/850B9B1F006AF477CB0A41524901057E62779AF9.mft
File:                     850B9B1F006AF477CB0A41524901057E62779AF9.mft (raw, json)
Hash identifier:          ZXWWnYk5ISQ2qtnXZHroKEieoYXRk8MlbSvZof6PFdY=
Subject key identifier:   4A:91:9D:C7:73:10:AE:AA:30:29:C0:61:EE:80:2C:9C:F8:5E:CF:8D
Authority key identifier: 85:0B:9B:1F:00:6A:F4:77:CB:0A:41:52:49:01:05:7E:62:77:9A:F9
Certificate issuer:       /CN=850B9B1F006AF477CB0A41524901057E62779AF9
Certificate serial:       09D1E08EC63E8A5ABA1AEB1E4AF97555CAEEEA0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/850B9B1F006AF477CB0A41524901057E62779AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/850B9B1F006AF477CB0A41524901057E62779AF9.mft
Manifest number:          0B
Signing time:             Sat 26 Oct 2024 07:01:31 +0000
Manifest this update:     Sat 26 Oct 2024 06:56:31 +0000
Manifest next update:     Sun 27 Oct 2024 07:07:31 +0000
Files and hashes:         1: 34352e3233362e3231362e302f32322d3234203d3e20323638323437.roa (hash: /qdnTiMxHUC6aG4r4h2QH9Vx3Ptb2S1nduNijQgHTqc=)
                          2: 323830343a346533383a3a2f33322d3634203d3e20323638323437.roa (hash: C0beF4wQYZMS6wge7v2CksBJbYHHR3RB5OCkdqGpcZw=)
                          3: 850B9B1F006AF477CB0A41524901057E62779AF9.crl (hash: 0X8fIifw4Ek4cPKJi4WyVd1fCi4Dq16z8xVQI7N7IF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d1:e0:8e:c6:3e:8a:5a:ba:1a:eb:1e:4a:f9:75:55:ca:ee:ea:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=850B9B1F006AF477CB0A41524901057E62779AF9
        Validity
            Not Before: Oct 26 06:56:31 2024 GMT
            Not After : Oct 27 07:07:31 2024 GMT
        Subject: CN=4A919DC77310AEAA3029C061EE802C9CF85ECF8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:6b:16:76:34:b5:c1:36:39:e1:b6:71:9a:
                    53:91:64:8f:b7:2b:59:46:ef:dc:ed:d2:e0:39:ee:
                    9e:24:e5:af:4c:24:d2:be:a8:32:4e:03:70:f3:d8:
                    fc:34:21:d3:ea:63:18:df:36:47:a1:2f:0a:6c:fa:
                    82:6b:3d:64:70:8e:a3:3c:d1:70:4d:4a:2d:b2:fc:
                    e0:3e:9e:a2:50:66:c2:82:62:54:52:95:5a:dc:7f:
                    93:16:56:b8:56:39:bd:8f:36:6a:14:80:5a:a6:32:
                    74:56:a3:21:f9:7d:88:d6:08:cd:27:d1:d4:55:08:
                    d3:6c:57:b2:cc:9a:d4:30:94:fc:7c:7e:8b:0c:aa:
                    88:69:19:54:bd:72:65:ce:d5:83:63:b6:10:3c:1e:
                    b1:91:9f:a7:ab:c6:9f:cc:fa:9a:85:be:5e:5c:02:
                    60:f0:0c:cf:d3:14:08:05:70:ff:86:49:17:0f:ef:
                    3e:43:b9:2a:22:1d:d3:00:cd:42:d1:ce:22:10:bf:
                    1b:6b:0a:a1:d4:b5:c4:c0:70:1e:0b:0c:b8:35:38:
                    f8:99:f7:95:19:8c:9c:06:a6:d8:e5:01:0d:ea:b1:
                    bc:64:4d:c9:35:f2:11:0a:b8:e0:36:57:37:a7:55:
                    21:5b:68:bb:dd:7d:dd:3a:c3:bf:b1:cb:b8:e7:1f:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:91:9D:C7:73:10:AE:AA:30:29:C0:61:EE:80:2C:9C:F8:5E:CF:8D
            X509v3 Authority Key Identifier:
                keyid:85:0B:9B:1F:00:6A:F4:77:CB:0A:41:52:49:01:05:7E:62:77:9A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/850B9B1F006AF477CB0A41524901057E62779AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/850B9B1F006AF477CB0A41524901057E62779AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/850B9B1F006AF477CB0A41524901057E62779AF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:17:01:f7:0a:0a:d9:e6:32:24:59:79:ac:5e:a3:d5:2d:
         28:ab:62:f1:c2:0c:9c:92:69:59:79:c6:4c:84:c6:51:82:30:
         a8:d9:26:1f:6c:e6:bb:78:eb:ee:28:df:67:94:92:7e:5b:b4:
         90:82:3f:77:f6:aa:e0:23:07:b6:e2:f6:4c:d8:a0:fb:24:37:
         40:7a:8f:33:99:d8:e6:3f:41:7c:87:53:a3:9e:f9:7a:b8:3f:
         6a:89:7c:7a:b0:ed:8d:c4:4b:c0:98:fc:2a:9a:5a:00:09:c0:
         39:63:86:fd:df:ef:fa:f5:5b:65:84:a9:36:7b:cb:a8:fa:fe:
         6c:10:02:1c:59:70:7d:3a:78:16:e0:10:58:75:23:74:73:4a:
         75:63:7a:1b:20:20:03:d1:95:26:f8:83:9e:7c:4c:2f:55:3e:
         95:89:d6:f7:07:58:76:ca:ab:fe:6e:d0:58:0d:a8:05:53:dc:
         78:59:a9:78:5f:45:70:25:67:dc:86:03:30:d7:8e:01:7f:4f:
         d3:92:14:fc:25:4a:b8:7d:62:f8:6d:58:a5:52:69:6c:74:7c:
         95:5a:25:09:db:27:8a:dc:de:16:84:ae:ba:05:ac:00:85:d0:
         09:0f:90:ad:ab:28:0d:f6:fd:d7:37:16:a2:bf:6a:5f:2e:60:
         13:80:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----