Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft
File:                     B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft (raw, json)
Hash identifier:          HVLaTXNWOuiqC80BrcBW4m7gJ33pusU1zaH96e+2rHk=
Subject key identifier:   A3:85:99:20:52:4F:0E:2F:04:8B:5D:8C:60:F5:12:B1:7F:F1:AD:EE
Authority key identifier: B0:AA:59:C2:F8:67:6F:E9:8E:CD:BD:7D:6D:55:78:22:D8:DD:49:F2
Certificate issuer:       /CN=B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2
Certificate serial:       3D30ED0A40B6F6C25E3D4239A89E9EBECD09688A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft
Manifest number:          0190
Signing time:             Tue 28 Jan 2025 18:29:42 +0000
Manifest this update:     Tue 28 Jan 2025 18:24:42 +0000
Manifest next update:     Wed 29 Jan 2025 19:28:42 +0000
Files and hashes:         1: B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.crl (hash: vlDBCIflyqlbFq0Qz5r+N0PJ8HsewfifbGPk2NtPQCE=)
                          2: 323830343a356362633a3a2f33322d3438203d3e20323638393237.roa (hash: V3XWoSVwSGQLGjskTFA+qGbuw+TyuOzAH4L8fcf2nHU=)
                          3: 34352e3137362e32382e302f32322d3234203d3e20323638393237.roa (hash: mnlu2xpRVfY9cxyl9dfNwtYiTOcKExs3Td90G3GIPS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:30:ed:0a:40:b6:f6:c2:5e:3d:42:39:a8:9e:9e:be:cd:09:68:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2
        Validity
            Not Before: Jan 28 18:24:42 2025 GMT
            Not After : Jan 29 19:28:42 2025 GMT
        Subject: CN=A3859920524F0E2F048B5D8C60F512B17FF1ADEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:8c:ea:e2:69:eb:52:35:c1:cb:fd:4e:a6:
                    bf:7f:85:2f:87:e3:70:4f:aa:91:ee:ca:63:71:3d:
                    c7:41:47:1c:6a:64:72:cb:ca:89:cf:3f:a4:30:9e:
                    c5:31:f0:e3:8a:24:a8:c5:76:f2:b6:cf:a6:b2:3f:
                    88:3a:de:fe:d6:23:d0:e2:83:c9:66:44:dd:c0:47:
                    03:e1:05:2a:e9:a9:d2:fe:f4:eb:80:e1:87:56:dc:
                    43:21:b1:d3:3d:cd:22:2d:30:b7:7d:59:d3:30:5a:
                    91:01:35:9d:93:93:3d:b4:d8:59:83:a2:58:2d:45:
                    23:13:31:0b:01:a4:88:d3:1a:94:e0:33:2a:13:c3:
                    e2:3e:8e:cf:5e:f4:44:e1:7f:84:ad:05:50:c0:d3:
                    63:02:65:e5:5b:a5:5d:2c:45:a0:c8:f7:b7:8a:e7:
                    61:f7:04:13:28:d1:22:ea:b6:81:75:0e:82:5e:db:
                    0c:41:e7:ac:08:a4:58:f7:0b:2f:32:bf:28:c2:3a:
                    1d:c3:b9:3e:71:bf:49:72:a2:81:1b:aa:22:a6:20:
                    5f:29:d7:a4:05:05:ab:ca:74:51:e0:42:7e:2b:c0:
                    11:d9:e9:64:0c:0f:35:c7:09:0b:d6:75:21:1b:c9:
                    2f:ae:00:5a:2a:98:7e:4a:93:cd:9b:c0:95:83:b1:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:85:99:20:52:4F:0E:2F:04:8B:5D:8C:60:F5:12:B1:7F:F1:AD:EE
            X509v3 Authority Key Identifier:
                keyid:B0:AA:59:C2:F8:67:6F:E9:8E:CD:BD:7D:6D:55:78:22:D8:DD:49:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6e:08:71:cf:7a:59:d3:4d:e0:c8:3b:d9:dc:9d:b4:19:9a:
         b4:78:83:d8:18:89:51:43:e1:cb:89:3b:4f:90:12:77:f0:f4:
         c4:87:24:ec:2d:bf:ed:e7:fc:29:50:32:d7:ef:e9:dd:69:57:
         35:ac:6e:3a:e7:bd:6e:cb:4b:19:72:3f:e6:b9:ae:49:cd:8f:
         44:32:9b:e3:b4:3b:d6:dd:36:74:77:d1:9f:80:f2:ae:a3:48:
         a4:55:14:7f:0e:ad:35:a6:ef:bd:e1:9d:14:14:ea:14:fe:41:
         52:92:31:07:29:8a:01:79:94:99:c3:fe:98:7e:a2:c1:dc:ed:
         3b:e1:04:ee:cd:bf:7f:0c:6c:75:c3:ed:44:cf:c8:dc:6e:bc:
         a9:74:07:30:4a:c4:0f:98:36:55:25:d9:e8:3b:0e:aa:1d:72:
         2e:48:24:ce:ea:e5:98:2c:11:c4:18:ea:ca:08:bd:60:46:d4:
         28:2b:7d:e0:4a:ce:ee:40:c5:c0:61:28:a6:91:59:dc:10:cf:
         4b:e8:02:5e:a9:16:ed:1f:83:c3:bb:5e:80:35:f6:80:39:5f:
         55:5b:9e:1f:fa:f7:2d:77:bc:b1:be:52:11:c0:ef:52:2b:4e:
         e5:95:39:f4:7d:14:bd:23:a1:c5:d9:c6:db:67:ee:44:c2:f0:
         21:67:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----