Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.mft
File:                     AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.mft (raw, json)
Hash identifier:          poJzGOpo4KGWpTMtHWjL90pszuXWxx2y6yBYoyRxwTg=
Subject key identifier:   8C:EC:B5:23:0A:DD:DE:A6:94:29:43:10:0A:7A:50:FE:65:01:6E:D5
Authority key identifier: AF:B3:AA:DF:BD:2A:7A:D0:DE:D7:E0:30:0C:9C:AC:A7:C5:DF:5B:DE
Certificate issuer:       /CN=AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE
Certificate serial:       1324D57E486E6F8045CADB0AA3CF3B23F7CDF2EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.mft
Manifest number:          0A
Signing time:             Thu 28 Nov 2024 10:18:13 +0000
Manifest this update:     Thu 28 Nov 2024 10:13:13 +0000
Manifest next update:     Fri 29 Nov 2024 10:24:13 +0000
Files and hashes:         1: AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.crl (hash: Ic5n2buK3tFIXskAQ68p0OSbG+u3HXL35LyUFSd/3go=)
                          2: 3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa (hash: RoEDUMDqCGyWOTwbHn8PCnIp3gWUCGjy9Yc0l/7aR1Y=)
                          3: 323830343a373765633a3a2f33322d313238203d3e20323731323038.roa (hash: K7s6jNumeAP1+COsMYmkURgxMbBNkAcN0vZmEI4m9Hg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:24:d5:7e:48:6e:6f:80:45:ca:db:0a:a3:cf:3b:23:f7:cd:f2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE
        Validity
            Not Before: Nov 28 10:13:13 2024 GMT
            Not After : Nov 29 10:24:13 2024 GMT
        Subject: CN=8CECB5230ADDDEA6942943100A7A50FE65016ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:ad:fb:fe:11:5e:c3:2e:a4:df:3b:44:7d:
                    dc:cb:1a:90:6f:6f:1e:1c:74:37:10:93:51:92:91:
                    49:5d:cd:99:7d:89:26:42:2b:69:25:d6:f7:49:57:
                    76:4d:aa:57:1c:52:27:67:6d:70:44:3b:5e:2e:11:
                    40:33:c2:1f:66:ec:86:d9:df:b8:10:f5:5b:8f:6c:
                    76:1a:2f:ea:ce:81:66:89:94:4a:88:14:5d:21:11:
                    43:ce:7f:bc:05:e5:af:85:9b:70:76:7f:72:70:22:
                    8e:95:b0:d5:ff:a8:2c:aa:cd:41:e5:07:6d:73:5a:
                    38:21:96:81:17:2f:99:5a:96:2f:3a:7b:fb:b7:35:
                    47:f9:94:c5:e4:40:59:c5:66:2f:27:d7:7a:34:6f:
                    a7:ce:24:51:c0:0b:ea:45:fe:92:00:13:26:88:d0:
                    c6:d6:20:ec:b0:82:95:b8:72:3e:c6:17:df:bd:e7:
                    6c:a4:a5:bb:98:5c:93:ca:24:9c:94:f0:a4:cf:de:
                    e6:ad:b6:62:f0:17:7e:2a:04:ce:3b:46:63:a7:e2:
                    5c:a6:8e:5f:36:86:bb:e0:4c:c7:2b:a3:c9:0a:27:
                    a6:c6:67:6a:6f:72:60:ab:aa:c5:ca:08:69:0d:e3:
                    ea:78:05:fb:b0:52:aa:7c:70:92:83:06:de:fd:bb:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EC:B5:23:0A:DD:DE:A6:94:29:43:10:0A:7A:50:FE:65:01:6E:D5
            X509v3 Authority Key Identifier:
                keyid:AF:B3:AA:DF:BD:2A:7A:D0:DE:D7:E0:30:0C:9C:AC:A7:C5:DF:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:f4:ee:66:3d:8c:64:be:5d:ca:97:93:7c:88:ac:29:16:
         32:4a:9d:c8:99:09:8f:de:57:2e:ab:aa:d1:e2:4e:17:d0:be:
         eb:2d:85:ea:1a:ce:21:b7:5a:8c:3a:cc:0b:a7:ed:20:20:cb:
         64:31:b4:f5:41:13:ae:ee:d6:eb:8b:cb:56:a3:fa:6f:28:bb:
         30:25:8d:25:7e:fb:35:92:13:d6:b1:30:3b:99:e2:a1:9d:ba:
         5a:0e:be:72:9e:cc:0a:87:a7:bc:c4:fd:0c:d1:11:70:33:c2:
         ec:e2:f3:4b:b7:4d:53:7e:13:6b:09:f4:90:c2:d0:76:7b:a5:
         f6:12:33:0b:e3:6d:b7:b9:60:e4:21:1f:c8:9e:ac:ef:09:d2:
         25:76:d1:b6:17:ad:6e:fc:1e:0a:09:ef:09:a0:06:a8:d7:00:
         f1:2d:6a:cf:02:cf:8f:32:36:61:00:a9:64:5f:bd:75:f9:fe:
         f3:00:6b:86:69:a6:2b:4e:b5:8f:65:3e:51:2d:d1:96:c9:c1:
         ba:d2:65:35:f9:dc:78:16:68:0d:40:e6:9f:99:17:30:e0:1d:
         0c:12:b1:af:83:4d:4f:46:13:53:3a:e4:9e:a1:e3:37:61:0d:
         b2:d3:17:f0:4c:4d:31:12:e9:43:dc:d9:d6:07:cb:3e:de:90:
         6a:24:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----