Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.mft
File:                     B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.mft (raw, json)
Hash identifier:          WD7b23WwASUC5VI7R54ROWHvmMiEEcj8yTGja91snE8=
Subject key identifier:   11:0F:4A:58:7E:8D:54:E7:A0:54:2A:25:35:E2:A0:33:5E:7B:BE:42
Authority key identifier: B0:9D:CE:D1:42:BB:7E:79:D1:05:26:DD:0A:21:AC:6C:61:E6:5A:9E
Certificate issuer:       /CN=B09DCED142BB7E79D10526DD0A21AC6C61E65A9E
Certificate serial:       6D235DAA6DDEC6137392CC8404AB551EBAE52039
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.mft
Manifest number:          0150
Signing time:             Mon 30 Dec 2024 07:13:13 +0000
Manifest this update:     Mon 30 Dec 2024 07:08:13 +0000
Manifest next update:     Tue 31 Dec 2024 11:04:13 +0000
Files and hashes:         1: B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.crl (hash: DBsczasmIy2XM6B/Yv0wccoUbtCPwEk94Wrv2bHA39w=)
                          2: 34352e3233392e3232342e302f32322d3234203d3e20323638333836.roa (hash: BWUqUvcjOn6Uwkoq8Knu1YwlG72yhXcKCQNE6Lz9fr4=)
                          3: 323830343a353036343a3a2f33322d3438203d3e20323638333836.roa (hash: umjPLm3aKQc21Mewo1LoN/iHfx9uvMOc4dd982JnISA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:23:5d:aa:6d:de:c6:13:73:92:cc:84:04:ab:55:1e:ba:e5:20:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09DCED142BB7E79D10526DD0A21AC6C61E65A9E
        Validity
            Not Before: Dec 30 07:08:13 2024 GMT
            Not After : Dec 31 11:04:13 2024 GMT
        Subject: CN=110F4A587E8D54E7A0542A2535E2A0335E7BBE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:34:35:2c:4e:f8:b8:09:1c:af:7c:c7:04:
                    15:8c:70:9f:86:0f:70:e2:41:b7:5d:66:ef:56:9b:
                    a3:20:08:66:8b:ee:64:c2:0f:0b:41:be:cf:e4:dc:
                    c7:b8:9a:64:93:f7:9f:46:a6:82:d9:0d:54:d9:3f:
                    06:4a:f1:db:91:57:0e:be:33:e7:a4:b6:76:22:0a:
                    3a:7b:18:de:2a:65:74:51:01:b5:01:2a:06:79:79:
                    97:4f:ca:65:bd:7e:2e:ed:f0:2b:ab:92:fa:ba:de:
                    57:0d:bf:be:60:75:2d:63:72:7b:4d:b4:00:95:76:
                    59:a4:0f:d8:8c:52:4a:a3:62:93:a5:70:22:74:59:
                    89:27:e3:53:fa:ed:bc:70:1c:bc:c5:cf:0a:97:ef:
                    bd:c4:5e:2c:7b:f6:19:1f:06:54:ff:88:28:1d:ea:
                    3a:06:71:99:e1:20:3c:19:d2:dc:56:fc:0d:2d:ea:
                    8a:b1:f6:61:0f:37:62:18:3e:0f:26:f8:a6:63:9e:
                    8e:87:08:cd:7d:bf:3e:f8:c6:9c:c7:4f:5a:a5:5a:
                    83:4d:26:dd:8c:f5:73:81:fb:b3:f3:fc:e8:e5:57:
                    11:b4:da:29:77:71:ec:52:46:86:09:4c:bd:87:d0:
                    c1:10:2d:b6:fd:24:d6:27:2d:db:a8:47:18:0f:38:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:4A:58:7E:8D:54:E7:A0:54:2A:25:35:E2:A0:33:5E:7B:BE:42
            X509v3 Authority Key Identifier:
                keyid:B0:9D:CE:D1:42:BB:7E:79:D1:05:26:DD:0A:21:AC:6C:61:E6:5A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:9a:47:a9:fd:ad:d0:17:94:8f:51:df:7a:65:f9:95:2d:
         27:80:59:a7:49:c6:81:99:b8:ad:2f:11:9e:1a:96:7a:0c:3b:
         3d:3e:f8:47:96:0b:26:f0:ac:e7:9a:01:87:bf:5f:1a:9c:b2:
         ae:75:c9:3c:6e:79:f4:03:af:d4:97:22:92:4a:81:dd:d5:0c:
         2b:80:8c:58:e8:83:f6:53:10:a3:bd:8f:03:f5:e5:e1:df:45:
         f8:64:bd:7a:9c:30:a1:b1:32:0f:0f:b9:8c:f2:a4:1f:1b:4f:
         2f:de:94:e1:70:5d:95:6f:96:dc:a9:b2:de:20:bf:19:64:91:
         bc:0b:3e:a5:6e:05:ec:d4:e3:d6:b0:a1:a7:86:22:cf:fa:44:
         78:3d:f2:ef:5e:27:21:83:d6:09:db:f3:8e:ba:12:fd:31:c9:
         75:27:ab:c7:b9:c9:24:4f:bb:ec:0a:b3:35:3e:fd:9c:13:d0:
         33:5a:c6:35:b4:72:de:91:11:dd:d3:ee:3c:3e:18:cc:ab:96:
         5e:e3:5e:03:6c:4e:63:68:97:5d:74:00:66:f9:bf:10:74:8f:
         d6:ce:ab:ff:04:fe:26:da:04:b0:ee:4b:31:62:b0:37:d7:56:
         ad:79:b3:0f:36:90:fb:0b:d1:55:55:a8:09:ad:cd:ca:5e:58:
         8f:12:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----