Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft
File:                     BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft (raw, json)
Hash identifier:          V6J59ZGVyc7bhzcHCHCZpKgR3Vj10xfkUqtLu6tfV44=
Subject key identifier:   0B:9F:82:65:29:7E:72:15:B2:7E:3D:F4:01:A5:A1:9E:8D:D6:56:ED
Authority key identifier: BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47
Certificate issuer:       /CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
Certificate serial:       1FE05619CEDD801FC7D48E3742EA28026BCD4C43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft
Manifest number:          0119
Signing time:             Fri 20 Dec 2024 06:05:10 +0000
Manifest this update:     Fri 20 Dec 2024 06:00:10 +0000
Manifest next update:     Sat 21 Dec 2024 08:39:10 +0000
Files and hashes:         1: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: r7GyhJoh7IymK1Q+TRngP8C2wvATMmzGYQhWO7GO43I=)
                          2: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: 2SZ2FV6EXfsEXoQZVnoDAEAsg7M1xB2Unjvw7abk61k=)
                          3: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: rHAAXYRvgpSWFW4k8CaWfgfjx4viqExlRwaRLhnbx04=)
                          4: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: 7r1yTMbmV5zbTArmtLhKr2vM17ET7y6U2BNYYeoFSdA=)
                          5: BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl (hash: AtzqnepVK+A2oZ8na0rIhMU0TWb86c8CyVGu31JSMqQ=)
                          6: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: u7q8Jef4c6xst2tPFiq5MPeOL2OA8gAJNW6xz5M5Dsc=)
                          7: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: TbTAkVSTlzUrOTHObWcf4t3QrhiiYqyc4CnFV8K6OU0=)
                          8: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: QOxfagp1QYbTlVQ1FnjU7jzqxVQZbOJfWe8t2uMZKtk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e0:56:19:ce:dd:80:1f:c7:d4:8e:37:42:ea:28:02:6b:cd:4c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
        Validity
            Not Before: Dec 20 06:00:10 2024 GMT
            Not After : Dec 21 08:39:10 2024 GMT
        Subject: CN=0B9F8265297E7215B27E3DF401A5A19E8DD656ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:70:3b:d5:10:17:a3:f2:02:77:9c:70:92:
                    70:a7:bd:91:a2:fe:a2:bc:2c:8e:41:c4:14:69:f7:
                    09:74:f2:78:d9:49:8f:56:31:de:be:66:08:cc:00:
                    fa:57:13:c7:66:48:71:a6:10:d1:b1:79:5f:f6:9e:
                    7d:eb:26:62:ff:b3:e0:b9:ee:8e:4e:33:0c:91:d3:
                    cf:92:69:36:75:d4:66:0e:fc:04:31:8c:2f:0e:85:
                    af:b0:49:3a:4e:06:68:e2:15:44:85:1a:e5:ed:32:
                    91:5f:d6:d2:82:26:9a:a1:ec:43:ac:c0:5a:35:d8:
                    be:ee:2a:74:1c:0d:3e:ba:ae:1f:15:5e:d6:9f:c1:
                    49:8a:82:30:78:2c:c8:21:a4:b5:40:79:ca:a3:82:
                    a2:23:a8:ee:f7:aa:81:57:79:c1:8d:3a:89:e8:b7:
                    d5:a1:fc:36:30:67:54:62:73:92:44:1b:f2:75:97:
                    b2:24:b1:77:a1:2f:20:47:08:af:05:5c:4f:fe:a3:
                    de:80:4c:82:b9:f8:d1:21:47:3c:17:77:97:2b:4e:
                    d5:01:1c:71:9b:7b:68:14:75:2f:82:c9:bf:d1:db:
                    95:e4:84:c0:4e:a1:32:c5:a7:b4:3b:5b:b7:c2:ff:
                    4e:08:dd:db:59:02:44:cf:66:cb:e5:2a:ba:1f:75:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9F:82:65:29:7E:72:15:B2:7E:3D:F4:01:A5:A1:9E:8D:D6:56:ED
            X509v3 Authority Key Identifier:
                keyid:BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:71:e3:2c:63:0a:49:f1:7d:ae:0c:2e:57:78:f4:a4:df:
         71:08:3a:4d:e6:76:67:37:8a:b5:30:0e:a3:70:5f:76:9f:1d:
         2c:4c:93:05:5d:4b:45:f3:f3:bc:83:68:6a:32:81:24:c2:36:
         14:f9:58:b4:23:61:21:d7:53:82:4f:4c:8a:23:01:f7:6f:0f:
         af:6a:01:77:98:b5:6b:f5:e4:67:b8:fb:14:f0:d0:c6:fb:e4:
         f9:f6:71:51:52:0a:2d:a3:4f:b6:71:eb:e0:4e:b2:f6:d7:ed:
         46:ed:a2:3f:44:13:3d:3d:9a:5c:bb:f8:9a:9b:61:c7:7b:c6:
         9c:11:71:35:f1:ec:bb:36:63:76:52:1c:27:fa:da:b5:94:d0:
         b6:92:bb:8b:ec:cb:be:f7:2c:26:cd:1e:39:b7:a2:e4:43:45:
         84:d2:30:83:d0:b7:ec:d6:a9:12:4f:fe:ee:bd:03:d6:75:e7:
         07:db:0c:a7:e2:41:a1:f0:55:79:e8:ff:46:57:60:ce:9a:6c:
         57:96:9f:68:e1:1b:a5:ba:7f:61:f8:a4:ef:5b:4e:6d:1e:c8:
         a7:e2:38:71:84:86:0d:e9:89:f1:40:fa:08:51:2b:a2:8b:15:
         3e:28:74:a5:88:14:32:84:e9:77:36:23:37:c6:72:fe:f5:1e:
         34:51:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----