Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/21317B968DE960854B42AE9B658633BC7E54EBDE.mft
File:                     21317B968DE960854B42AE9B658633BC7E54EBDE.mft (raw, json)
Hash identifier:          u4V7PNy/y+MGIeM0hIYixew4TFwAP+DbXezYb4oZ0mI=
Subject key identifier:   CB:95:64:09:F2:3E:13:68:61:D9:AF:F7:D3:B3:F0:C7:51:15:BD:74
Authority key identifier: 21:31:7B:96:8D:E9:60:85:4B:42:AE:9B:65:86:33:BC:7E:54:EB:DE
Certificate issuer:       /CN=21317B968DE960854B42AE9B658633BC7E54EBDE
Certificate serial:       42254D6F4DDFF2FF27522569ECF771F770723E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21317B968DE960854B42AE9B658633BC7E54EBDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/21317B968DE960854B42AE9B658633BC7E54EBDE.mft
Manifest number:          16
Signing time:             Thu 23 Jan 2025 01:18:54 +0000
Manifest this update:     Thu 23 Jan 2025 01:13:54 +0000
Manifest next update:     Fri 24 Jan 2025 02:20:54 +0000
Files and hashes:         1: 323830343a333133303a3a2f33322d3334203d3e20323634393939.roa (hash: ILNo8ozv0lHpKIhQt79KlVNbTr4NPcCcFSdZz7YRXKM=)
                          2: 3137302e38342e37362e302f32322d3234203d3e20323634393939.roa (hash: bwawhv1ItENEbGtMi8joxvKCs/cw3eT4xnuzcdlQSYg=)
                          3: 21317B968DE960854B42AE9B658633BC7E54EBDE.crl (hash: w1qd449meLN6Kv86xNfBfLYLPG/pzt6yjuIc0zb05kA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:4d:6f:4d:df:f2:ff:27:52:25:69:ec:f7:71:f7:70:72:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21317B968DE960854B42AE9B658633BC7E54EBDE
        Validity
            Not Before: Jan 23 01:13:54 2025 GMT
            Not After : Jan 24 02:20:54 2025 GMT
        Subject: CN=CB956409F23E136861D9AFF7D3B3F0C75115BD74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:b7:44:f9:b2:21:91:00:c7:3f:d1:16:20:
                    57:91:79:da:67:2c:ec:38:ce:21:83:d7:75:b0:72:
                    99:be:35:0b:20:be:68:4b:4f:bc:09:aa:0e:a8:2e:
                    c3:c1:0b:00:85:98:90:3a:22:cf:2b:55:bc:90:18:
                    0d:17:13:8e:23:ad:2b:81:ca:49:44:74:9d:07:78:
                    08:bc:13:72:08:31:45:db:f5:ae:e0:f3:b7:18:d0:
                    96:24:b3:0d:cf:96:7e:b1:c3:22:83:d2:36:5e:6b:
                    27:ad:5e:cd:e1:38:70:b0:05:99:52:e3:e7:8b:ff:
                    ab:6f:c8:68:53:d7:2b:9d:ea:df:91:64:49:6a:7f:
                    b1:0f:07:5c:b9:a7:5c:08:58:fc:1b:aa:0c:e3:b9:
                    f6:92:56:93:0d:6e:ec:58:fe:99:00:52:b1:ff:e4:
                    9d:58:9b:4e:26:8e:46:44:09:45:98:ac:17:49:a2:
                    b9:60:cd:e6:1c:7c:08:04:01:02:a4:65:58:ec:de:
                    32:d9:5f:d0:73:0c:06:73:2f:2c:95:45:8c:d4:8e:
                    b3:7d:97:51:8e:91:c8:a2:8b:15:d7:6b:41:3e:d7:
                    51:fe:44:9e:1d:3e:b7:d2:39:11:32:bb:7a:35:f0:
                    ee:6a:8c:db:00:a0:b4:38:0b:df:78:f2:ac:e3:fb:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:64:09:F2:3E:13:68:61:D9:AF:F7:D3:B3:F0:C7:51:15:BD:74
            X509v3 Authority Key Identifier:
                keyid:21:31:7B:96:8D:E9:60:85:4B:42:AE:9B:65:86:33:BC:7E:54:EB:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/21317B968DE960854B42AE9B658633BC7E54EBDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21317B968DE960854B42AE9B658633BC7E54EBDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/21317B968DE960854B42AE9B658633BC7E54EBDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a3:8d:7c:02:1b:92:90:1a:69:8b:2c:fc:9c:2d:c5:99:a2:
         30:81:2f:6c:8a:c1:5b:7f:ac:42:a2:e4:a7:07:01:2e:4d:d3:
         cf:1f:0a:57:0f:01:99:79:0d:88:ed:29:aa:95:4f:c0:18:65:
         e3:d4:dc:1b:9e:26:b8:4a:3f:c6:4e:83:15:24:13:c4:2a:fc:
         ce:df:8e:e8:0c:07:73:28:87:3c:24:21:c0:6c:b2:0d:32:d1:
         c7:b3:4b:ce:b9:d1:54:2f:69:4a:3c:f4:25:d2:36:80:79:4d:
         cd:e0:70:1f:80:41:d8:0e:da:8f:43:c6:08:62:96:40:2c:3d:
         71:3f:a2:46:09:bc:5b:21:4b:4e:f2:3e:d1:7c:b1:76:0d:1b:
         93:83:a0:68:b7:ac:f0:c3:ad:19:26:c6:37:22:1b:a0:eb:38:
         0b:2b:43:4b:77:52:d8:54:42:fc:e2:50:b1:87:5d:9b:5c:64:
         20:9b:e1:11:e5:ea:41:50:61:9d:52:29:af:fd:07:d7:f2:54:
         b4:20:f4:bb:ba:4b:c1:c4:89:88:d7:12:41:4d:7a:e4:22:c1:
         20:2c:eb:d0:09:60:f8:ff:69:d5:48:19:4c:07:05:51:38:d7:
         51:52:9d:22:eb:81:34:98:22:5e:7d:73:ae:64:7e:bd:ac:f5:
         a0:92:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----