Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/0987FE7E059538E349FA075F2AA95C4802BD35EF.mft
File:                     0987FE7E059538E349FA075F2AA95C4802BD35EF.mft (raw, json)
Hash identifier:          R9v6eqv0d9DuH7feHryjwYJMLd+t6qUmWrx/LElusjc=
Subject key identifier:   54:96:D6:5E:A1:6B:11:FE:81:BA:0E:91:76:66:7A:8A:A3:BC:8F:AB
Authority key identifier: 09:87:FE:7E:05:95:38:E3:49:FA:07:5F:2A:A9:5C:48:02:BD:35:EF
Certificate issuer:       /CN=0987FE7E059538E349FA075F2AA95C4802BD35EF
Certificate serial:       47FB29624A4CC63F1BAAC54F46B20E7B3B85F776
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0987FE7E059538E349FA075F2AA95C4802BD35EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/0987FE7E059538E349FA075F2AA95C4802BD35EF.mft
Manifest number:          04
Signing time:             Sun 12 Jan 2025 23:19:02 +0000
Manifest this update:     Sun 12 Jan 2025 23:14:02 +0000
Manifest next update:     Tue 14 Jan 2025 00:32:02 +0000
Files and hashes:         1: 323830343a386539383a3a2f33322d313238203d3e20323733343336.roa (hash: yVXjc66prn1Q/vcWk5mx/yDuSyES70lC2WYoc7oe3to=)
                          2: 0987FE7E059538E349FA075F2AA95C4802BD35EF.crl (hash: WOh8wwLmsi9Lona1bn+WsHR3DgO+nSSw+/cU0hoiJKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fb:29:62:4a:4c:c6:3f:1b:aa:c5:4f:46:b2:0e:7b:3b:85:f7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0987FE7E059538E349FA075F2AA95C4802BD35EF
        Validity
            Not Before: Jan 12 23:14:02 2025 GMT
            Not After : Jan 14 00:32:02 2025 GMT
        Subject: CN=5496D65EA16B11FE81BA0E9176667A8AA3BC8FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:78:40:c2:b5:41:e9:13:ac:0c:1e:b3:dd:
                    27:2b:20:90:9d:bf:eb:3c:ef:d1:3c:97:d9:d7:61:
                    56:8a:19:af:80:00:69:15:dd:b7:a6:42:44:18:f1:
                    6b:f8:35:2e:50:99:68:f4:1b:a1:b3:ef:fe:a7:fc:
                    40:0e:6d:60:9f:48:06:9d:63:b0:63:d7:be:54:f0:
                    89:78:ea:3d:33:03:d3:03:49:39:6c:25:1b:8c:53:
                    77:ea:b4:bb:02:c1:4f:56:d8:05:6c:77:0a:54:43:
                    fe:2b:82:ba:0b:27:e6:1c:c9:34:9f:14:45:e3:c8:
                    9e:ae:7f:ce:c3:a0:22:ed:16:32:04:1c:35:59:42:
                    a9:b6:35:22:a2:fc:f8:b2:8d:81:82:fd:2f:61:87:
                    f9:10:da:6e:c6:66:52:06:f6:7d:f7:86:34:f1:08:
                    a9:32:5f:06:5d:c7:6f:67:2e:6d:1c:02:ae:a4:72:
                    3c:2b:02:d8:aa:ab:8e:20:0e:2d:c1:b2:8c:59:20:
                    ef:5c:3d:f1:f1:07:38:44:f7:6d:bb:5a:8c:34:01:
                    51:3e:72:d2:5f:7c:38:bd:19:de:d2:25:be:46:c6:
                    1d:35:0b:eb:ef:3e:92:d1:c7:92:ae:ca:2c:17:c7:
                    b4:1c:9c:b8:f9:79:66:8b:60:05:d2:81:28:22:20:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:96:D6:5E:A1:6B:11:FE:81:BA:0E:91:76:66:7A:8A:A3:BC:8F:AB
            X509v3 Authority Key Identifier:
                keyid:09:87:FE:7E:05:95:38:E3:49:FA:07:5F:2A:A9:5C:48:02:BD:35:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/0987FE7E059538E349FA075F2AA95C4802BD35EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0987FE7E059538E349FA075F2AA95C4802BD35EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/0987FE7E059538E349FA075F2AA95C4802BD35EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:a2:48:70:9a:38:cc:0f:28:e6:56:ee:76:25:24:14:7e:
         da:15:b8:6a:81:5c:f7:78:b7:da:d1:70:5b:ae:7d:a6:b0:5d:
         a3:e0:b1:64:c4:05:e2:a1:57:f1:3c:f6:cb:5c:ec:50:17:b5:
         3e:65:04:c3:a1:26:db:47:21:47:3c:9c:1f:97:a5:0c:b4:63:
         82:71:62:47:c0:ab:5e:fd:0a:12:c9:91:58:0d:c8:41:66:ec:
         56:a0:ff:12:e8:f5:cf:83:75:40:7b:25:2e:24:d4:39:1c:20:
         34:47:f5:1a:05:28:30:28:18:b0:53:df:2b:27:13:a0:cb:d5:
         70:89:4d:5f:88:9e:c1:1c:57:d6:1b:0f:ad:af:b9:e7:e7:1c:
         b8:e6:ca:68:da:03:a5:07:4f:4d:d9:49:7a:b5:18:54:85:99:
         b0:63:cc:9b:32:98:c4:53:f9:1f:2f:be:dd:dc:f4:88:11:a7:
         b4:6a:fa:48:e8:d9:dc:af:ad:8e:b3:71:e2:cb:0c:62:09:ce:
         28:cc:ba:36:c2:84:cd:d7:2c:2e:8f:ea:01:03:2b:73:66:4f:
         96:56:79:fa:8c:a1:0b:ea:d7:8b:99:48:de:3b:27:7d:25:f0:
         18:d2:68:d9:9e:fb:34:55:1f:e2:96:d1:84:e6:ad:56:07:d9:
         7e:da:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----