Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.mft
File:                     21F94622ABB07C40B00A61480B9A8AE148AE33AE.mft (raw, json)
Hash identifier:          q8qYkCx5NikYiWyP2SAHXqbO0o5oU1gmt/NqdlDtIBo=
Subject key identifier:   6E:B5:E3:9E:65:A4:57:02:37:5B:F3:F8:89:3A:BD:3E:31:D9:C8:87
Authority key identifier: 21:F9:46:22:AB:B0:7C:40:B0:0A:61:48:0B:9A:8A:E1:48:AE:33:AE
Certificate issuer:       /CN=21F94622ABB07C40B00A61480B9A8AE148AE33AE
Certificate serial:       6DBCE927C2D0262CC9E923F853C59E9FBDC5AA9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.mft
Manifest number:          0149
Signing time:             Mon 16 Dec 2024 20:53:28 +0000
Manifest this update:     Mon 16 Dec 2024 20:48:28 +0000
Manifest next update:     Tue 17 Dec 2024 20:53:28 +0000
Files and hashes:         1: 3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa (hash: yUpm3HNV1QhJM4OcE/T4FME0K8Fc7rMQSPuA4rASYag=)
                          2: 21F94622ABB07C40B00A61480B9A8AE148AE33AE.crl (hash: lDxaFXOO5Ll0BJqA3Z6HefoQbloSSupMEI/nCnFvgzM=)
                          3: 323830343a363934633a3a2f33322d313238203d3e20323730323631.roa (hash: A+IFDKa9SLIpE22SrOE7Wj13aiz0DtIGUXyjM8JKc04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bc:e9:27:c2:d0:26:2c:c9:e9:23:f8:53:c5:9e:9f:bd:c5:aa:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F94622ABB07C40B00A61480B9A8AE148AE33AE
        Validity
            Not Before: Dec 16 20:48:28 2024 GMT
            Not After : Dec 17 20:53:28 2024 GMT
        Subject: CN=6EB5E39E65A45702375BF3F8893ABD3E31D9C887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:45:00:33:97:ed:03:35:d7:47:de:38:4c:
                    af:5f:2d:50:8b:af:ee:96:67:0f:9b:ba:46:0e:79:
                    24:17:0a:c3:25:0d:21:06:9a:58:4b:7b:64:84:09:
                    37:b6:e2:cf:32:be:32:0b:ef:f1:70:73:77:e1:61:
                    f7:bc:91:67:b2:0f:e9:d8:2c:a5:8c:42:34:06:6d:
                    9a:89:aa:8a:8f:c9:7b:aa:0c:46:53:80:00:92:4f:
                    50:a9:c7:7b:7a:e3:45:03:b0:8e:85:4f:73:4e:1e:
                    ec:df:2c:09:e4:17:d4:7b:6b:31:34:8c:a6:fc:f1:
                    3f:4d:5a:1d:34:83:92:b4:e4:5b:17:29:fd:8e:f8:
                    4e:d1:3d:a8:2b:af:b9:4d:3a:85:d2:ca:44:b6:52:
                    f1:df:46:43:f3:55:62:a6:bf:42:d3:03:66:b6:7b:
                    d1:38:26:d4:8d:40:6a:5c:18:83:df:0d:00:5c:a2:
                    59:06:ee:35:4b:a9:37:10:d8:16:15:84:38:88:be:
                    20:e3:4a:a1:94:d5:ec:ee:26:47:1a:bd:6b:13:a4:
                    25:10:70:9b:5e:53:63:ae:d8:d0:d4:f1:55:c3:ee:
                    08:49:59:a5:bb:a0:4b:37:d2:17:c9:fc:12:c2:06:
                    62:85:f7:14:eb:85:c4:45:95:76:79:37:87:03:1e:
                    54:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B5:E3:9E:65:A4:57:02:37:5B:F3:F8:89:3A:BD:3E:31:D9:C8:87
            X509v3 Authority Key Identifier:
                keyid:21:F9:46:22:AB:B0:7C:40:B0:0A:61:48:0B:9A:8A:E1:48:AE:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d7:f0:a4:5d:d6:12:77:31:f7:5d:19:3b:d6:7f:66:a4:ce:
         d2:72:1b:74:2b:3e:c3:db:30:7e:b8:7a:70:0e:c8:26:51:4b:
         96:75:b1:a8:82:f6:e9:09:6b:0b:5a:ef:c8:0e:a7:61:d6:67:
         7f:88:59:26:42:92:b8:15:c3:64:7b:2d:cb:ce:75:f6:35:23:
         da:ad:a2:00:49:7e:b0:ba:94:8c:6e:26:61:75:dc:cb:cb:18:
         7e:d8:b5:8a:13:30:56:c3:35:bf:25:5f:bc:55:95:7e:55:69:
         33:07:10:2c:ef:74:2f:71:fd:2e:ca:8c:28:54:62:cd:f3:1e:
         d4:89:a3:95:f9:28:44:91:cc:35:6d:5a:67:c4:7a:5b:cd:e4:
         f0:76:d7:04:8c:48:e1:e6:3c:d4:c3:95:2d:87:41:91:c9:00:
         ee:8d:ee:8a:da:53:83:83:63:b7:da:99:b0:7c:87:d9:7e:78:
         fa:1c:24:32:1b:d3:da:54:74:8e:7e:68:28:a0:8a:a2:35:d6:
         e3:28:f6:62:1c:1d:74:0b:2e:d2:99:97:22:44:83:0d:f1:46:
         92:8d:e3:db:64:cb:ae:47:da:6e:d2:36:72:89:0d:0c:f3:c9:
         f6:e6:bd:9d:f8:13:46:0f:9c:07:61:60:d3:db:e2:01:da:08:
         da:66:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----