Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/89E716714E2913BC93A153D5DC34AEF510481495.mft
File:                     89E716714E2913BC93A153D5DC34AEF510481495.mft (raw, json)
Hash identifier:          4SlKq9xQPGhI2lHVW2Ou2ewEt0CZQeV3i4q0I34efZc=
Subject key identifier:   1F:9B:89:51:73:4F:85:F0:29:DF:45:E0:07:20:72:E3:F6:27:3A:6D
Authority key identifier: 89:E7:16:71:4E:29:13:BC:93:A1:53:D5:DC:34:AE:F5:10:48:14:95
Certificate issuer:       /CN=89E716714E2913BC93A153D5DC34AEF510481495
Certificate serial:       5B6E7C797DE5C54E501473EDCDD540A7F254F362
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89E716714E2913BC93A153D5DC34AEF510481495.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/89E716714E2913BC93A153D5DC34AEF510481495.mft
Manifest number:          0139
Signing time:             Sat 21 Dec 2024 00:17:37 +0000
Manifest this update:     Sat 21 Dec 2024 00:12:37 +0000
Manifest next update:     Sun 22 Dec 2024 03:05:37 +0000
Files and hashes:         1: 323830343a353064343a3a2f33322d3438203d3e20323638343133.roa (hash: d9z4FSjPE9cAPX7aJ4SI6JYizPenWQlK/Vw6alAzE7E=)
                          2: 89E716714E2913BC93A153D5DC34AEF510481495.crl (hash: tLKrWk6ssgIAIiMU8Q1LX4QOa9Trl/yCIhXXtJVkgkQ=)
                          3: 34352e3136302e3138302e302f32322d3234203d3e20323638343133.roa (hash: Rve40BqP0Zb5eKbrlXYXZHjYx362BOVQLax5WhnObuI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6e:7c:79:7d:e5:c5:4e:50:14:73:ed:cd:d5:40:a7:f2:54:f3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89E716714E2913BC93A153D5DC34AEF510481495
        Validity
            Not Before: Dec 21 00:12:37 2024 GMT
            Not After : Dec 22 03:05:37 2024 GMT
        Subject: CN=1F9B8951734F85F029DF45E0072072E3F6273A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:18:f5:58:e0:11:30:5d:f8:6a:2d:fa:17:be:
                    00:9c:3e:dc:cf:16:fc:f8:99:ea:83:b7:b2:b5:ec:
                    46:41:41:8b:91:27:0c:57:0b:dc:a3:bd:85:0d:a1:
                    67:44:00:be:df:61:71:bf:53:af:83:15:87:1c:23:
                    55:f4:7e:c1:fd:44:38:44:b3:22:07:9c:4d:97:99:
                    18:d5:d5:02:ba:4b:18:46:2e:45:88:46:80:ba:33:
                    db:2a:0e:dd:0d:b2:70:d9:1e:6b:52:56:48:ed:f3:
                    0e:93:ad:00:13:a9:8f:d5:e2:0c:08:63:65:f7:5d:
                    1d:ff:20:64:41:b1:58:b0:9a:7b:2e:bf:ac:fe:72:
                    90:90:97:8a:33:71:04:21:52:b6:57:82:8e:9b:82:
                    24:f5:5c:85:ba:6b:59:47:09:c4:d0:c8:9e:04:b6:
                    57:99:60:7c:f3:0f:cf:44:bc:eb:4d:1d:26:22:f2:
                    08:97:b8:f4:b3:0f:ab:d8:dc:60:df:05:7e:eb:80:
                    44:32:13:f8:4d:8d:23:1e:f7:72:bd:80:c2:bb:48:
                    66:76:91:83:4f:32:c7:35:7c:af:da:73:6f:cf:88:
                    b2:9d:e5:c7:cc:3a:2f:4b:c0:64:0f:5c:f7:dd:a7:
                    fd:8c:02:2a:9d:d8:e0:2c:ed:68:75:29:77:5a:91:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:89:51:73:4F:85:F0:29:DF:45:E0:07:20:72:E3:F6:27:3A:6D
            X509v3 Authority Key Identifier:
                keyid:89:E7:16:71:4E:29:13:BC:93:A1:53:D5:DC:34:AE:F5:10:48:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/89E716714E2913BC93A153D5DC34AEF510481495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89E716714E2913BC93A153D5DC34AEF510481495.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/89E716714E2913BC93A153D5DC34AEF510481495.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:3a:80:37:8e:c1:82:e3:35:24:d7:31:c2:5c:70:7c:3a:
         7e:b5:6e:96:49:d6:21:17:01:95:af:75:08:e6:3a:d4:ef:12:
         10:95:60:f6:ae:44:91:cf:a6:9f:03:2c:f5:28:21:52:6d:04:
         5a:ab:4c:9c:7c:e9:5f:94:70:c0:e4:4b:4c:69:4e:0f:50:07:
         27:6d:49:a6:ec:8c:b5:fa:dd:74:b7:7d:55:d2:6f:10:82:33:
         5f:fd:a6:27:78:5d:39:f5:a1:e2:89:11:66:3e:fc:8f:45:b6:
         0c:39:b8:c5:21:8a:82:b8:78:24:55:91:7a:29:c6:65:d5:f6:
         cd:02:dd:1e:6c:94:9c:51:d6:c7:1c:a2:09:95:37:42:e7:e7:
         8c:de:f6:42:59:fd:b7:77:1b:d7:d9:5b:0e:97:68:d4:30:aa:
         9b:42:97:31:23:cb:49:2b:6d:9e:ed:1a:c5:2f:40:cf:00:13:
         b1:9c:59:38:a4:02:f1:ed:95:59:65:1d:88:a7:3e:d2:39:37:
         bf:f0:3f:8a:0d:98:35:ee:4c:0e:7f:af:3d:c5:e6:e0:fa:7c:
         6c:9a:a4:5f:00:0b:db:5e:a8:c6:95:a6:4b:fb:a7:d4:15:eb:
         e5:8f:d0:41:45:98:74:09:39:c2:a8:d3:13:92:ab:45:7c:ac:
         0e:78:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----