Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.mft
File:                     FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.mft (raw, json)
Hash identifier:          K6SdsiFesAk2/v+4x8Vld2qNaK2Ow3cqqmnrbQuxnAs=
Subject key identifier:   85:39:DC:B2:7C:3B:9F:63:23:55:EF:25:44:CD:0E:DC:D8:8A:89:08
Authority key identifier: FB:46:1D:57:9A:CE:C1:68:E1:A2:51:E1:0C:7B:BC:D0:BF:4E:7B:33
Certificate issuer:       /CN=FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33
Certificate serial:       1145D887BBBDB76BD42277428F825C13D0BC2023
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.mft
Manifest number:          E2
Signing time:             Thu 16 Jan 2025 06:32:20 +0000
Manifest this update:     Thu 16 Jan 2025 06:27:20 +0000
Manifest next update:     Fri 17 Jan 2025 09:26:20 +0000
Files and hashes:         1: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: 3UeqMVwwe5B1c8hsD1N/KmaOsgaw0XKlJl/guX6WfWk=)
                          2: FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.crl (hash: QoxTZZEvWy75UP6NcBMkChwDwV6ZgG2pNyg6G2qkSfQ=)
                          3: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: UP1Fg1f1ObibaRK8Ba31miiZw8g0ZKp+6WnrZk5PB/Y=)
                          4: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: yLxLuOXmf5YgOjb2HzovX5BV9ILPjNcibxqffb/vnzg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:45:d8:87:bb:bd:b7:6b:d4:22:77:42:8f:82:5c:13:d0:bc:20:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33
        Validity
            Not Before: Jan 16 06:27:20 2025 GMT
            Not After : Jan 17 09:26:20 2025 GMT
        Subject: CN=8539DCB27C3B9F632355EF2544CD0EDCD88A8908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:d1:aa:b9:04:ae:11:f3:7f:fe:02:c3:59:
                    28:51:fc:d5:65:76:f8:48:93:84:bd:30:1f:98:aa:
                    b3:31:75:f9:0d:63:92:8a:5e:b9:f8:6e:5f:19:20:
                    6a:dc:6b:81:3a:dc:80:3f:bd:01:bd:cb:a3:f7:83:
                    d7:c3:51:7b:b0:79:ba:6d:7f:ab:5a:48:a6:89:99:
                    32:ea:62:e0:ca:5c:da:a0:7d:12:d2:d7:2c:08:e6:
                    72:a0:e9:47:2f:d7:43:4d:f6:71:a3:7d:81:e5:a7:
                    71:aa:93:40:9c:7b:0e:8b:53:be:2e:90:f0:c6:95:
                    f2:e7:a2:d6:42:bc:12:83:36:33:06:3c:41:08:70:
                    ca:37:6e:5d:83:34:b6:a0:b2:7e:d4:37:fe:f3:c1:
                    56:e8:3d:a5:f5:a0:6f:ce:9a:92:f2:3b:aa:1b:df:
                    b8:6a:f4:2a:89:1c:d0:f9:e3:99:16:2e:4e:08:a6:
                    bb:ff:d0:83:d3:41:79:6d:5e:2a:6f:59:09:15:72:
                    a9:ce:03:da:63:1b:df:15:af:48:a7:72:e3:e5:74:
                    4d:7e:8f:ee:62:f4:4f:52:e4:ae:c4:0a:e3:11:dc:
                    5c:c1:ca:df:77:64:5a:18:a2:cc:40:63:ba:eb:a4:
                    1a:93:ce:1d:9a:1c:94:82:74:24:db:d8:15:1d:82:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:39:DC:B2:7C:3B:9F:63:23:55:EF:25:44:CD:0E:DC:D8:8A:89:08
            X509v3 Authority Key Identifier:
                keyid:FB:46:1D:57:9A:CE:C1:68:E1:A2:51:E1:0C:7B:BC:D0:BF:4E:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:18:6c:ac:21:b3:f5:b9:02:e9:db:6b:4d:b6:ff:43:90:ac:
         80:09:e3:1b:49:1a:23:36:3e:77:67:c0:cd:dd:44:b1:0f:9d:
         94:05:42:89:d4:c5:31:d1:1a:cc:55:0a:79:fa:6c:8a:78:9a:
         f1:fe:1e:18:cf:af:a3:8b:26:a9:36:81:f2:5a:14:74:5b:64:
         d0:3e:4e:69:e5:4c:e1:26:7d:bb:29:de:38:fc:82:fc:4d:ae:
         d5:80:2a:2e:53:90:5b:12:e3:47:ff:22:f6:e3:ef:c6:5e:0e:
         f6:b5:c5:07:76:e1:ec:31:01:fe:da:aa:58:ee:ba:fe:68:c4:
         7e:d3:fa:bc:71:44:bf:b4:0a:62:f7:d4:8f:cc:e3:fc:59:a5:
         64:3e:14:70:e9:c1:71:fd:a6:9a:23:96:59:3d:92:55:73:e1:
         f2:ee:64:a9:2d:43:7e:5a:43:89:ef:34:f0:47:b6:46:53:c3:
         88:96:93:4f:9a:50:00:32:a7:33:61:44:b4:cd:0a:bd:f4:08:
         a3:79:53:70:8f:5a:ad:5a:94:00:55:7a:5e:8a:66:38:0a:e9:
         c0:7f:8a:4f:4e:7c:19:26:5b:04:51:3e:6b:f5:3f:cd:77:b7:
         3d:76:9b:d4:03:7e:c4:74:ab:8c:40:53:7f:d7:36:6c:99:04:
         08:80:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----