Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft
File:                     BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft (raw, json)
Hash identifier:          4rz5xC6oUNfYIdK7sdJkd1fwgaGw4yn+6HYbi6wcf/M=
Subject key identifier:   33:B7:81:FF:17:CF:5F:AD:D8:A6:7A:54:E4:1D:0F:9B:9D:0A:2D:D7
Authority key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA
Certificate issuer:       /CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
Certificate serial:       17E4FA983C5513DFD8DEED3D9E1C102C5D5C374B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft
Manifest number:          01C7
Signing time:             Fri 31 Jan 2025 09:10:01 +0000
Manifest this update:     Fri 31 Jan 2025 09:05:01 +0000
Manifest next update:     Sat 01 Feb 2025 09:10:01 +0000
Files and hashes:         1: 3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa (hash: OMcbuwv/e+BNPe7AZKiZCuB14pGyFGVfr3XCI6Ti5h8=)
                          2: 323830343a343166633a3a2f33322d3334203d3e20323637343730.roa (hash: WSFO1Irm3Rs95MMfNlDPQ21wk7nI4+VQ5QWLYmwiUkY=)
                          3: BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl (hash: 5Cq9Od02r9Dl5xc4yYgqj/y0yhaJnOmLxfCrqs8r4ys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e4:fa:98:3c:55:13:df:d8:de:ed:3d:9e:1c:10:2c:5d:5c:37:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
        Validity
            Not Before: Jan 31 09:05:01 2025 GMT
            Not After : Feb  1 09:10:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:10:f2:c5:c1:6c:2b:c5:ac:67:f6:6b:9f:29:
                    37:73:18:6d:bb:9e:9b:5a:96:98:03:d2:ca:94:fd:
                    e0:e0:7f:34:1b:24:c0:f7:cc:23:af:40:d4:3c:2d:
                    78:29:65:c1:e0:68:15:d6:88:0c:03:3e:fc:7c:54:
                    00:e1:9f:ef:1e:30:bf:cd:2e:27:e6:6d:cb:fe:8a:
                    6b:19:a6:0a:44:2b:df:00:04:f1:ac:36:31:71:bb:
                    a2:83:b1:df:76:f0:8c:86:93:45:f4:0d:ee:ad:7a:
                    f1:41:d5:26:39:d2:c3:4e:10:63:29:2d:a7:57:37:
                    3a:68:48:5e:38:d2:58:6e:20:34:7f:9a:f7:77:62:
                    76:88:1b:1e:e2:e3:41:ea:65:0d:24:46:ce:8f:56:
                    92:09:21:86:9d:9c:0d:1b:ec:fe:f6:bb:e3:eb:db:
                    ae:57:bb:69:af:81:42:ff:c3:62:cb:5a:96:3b:fe:
                    cd:28:1c:77:65:cd:03:b4:52:03:31:8e:7e:08:95:
                    68:a1:a7:f1:15:d3:ab:78:23:41:12:51:53:d0:c4:
                    aa:eb:8f:9b:73:7c:5f:d2:85:f7:45:4a:9c:d8:45:
                    4e:58:a0:cd:c5:a9:14:14:68:27:07:69:60:9d:f4:
                    2d:16:67:42:c6:7e:72:c0:18:67:70:85:51:1a:b4:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:81:FF:17:CF:5F:AD:D8:A6:7A:54:E4:1D:0F:9B:9D:0A:2D:D7
            X509v3 Authority Key Identifier:
                keyid:BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:40:60:96:c0:3b:34:1b:8b:e1:d9:cd:cd:3c:3a:42:57:39:
         50:8c:56:64:66:4a:c0:8d:d3:c5:24:f0:e3:7d:86:b6:77:2a:
         5f:bb:00:45:3c:20:45:94:13:9f:f1:e0:30:b0:46:70:05:56:
         1e:5d:4a:aa:fe:32:06:fe:ce:f2:90:09:46:55:74:ff:1c:68:
         c5:8d:c9:e4:3c:6a:e7:bc:f0:52:38:7d:b0:ef:18:90:6c:70:
         51:4d:d8:af:43:0d:f7:2f:51:16:f8:19:2f:4e:d5:d1:70:81:
         d1:b4:64:b1:b4:51:3e:d4:ef:80:8e:ab:85:a3:d3:6e:03:9c:
         8c:34:a7:01:ca:7f:88:c9:a0:14:fb:6a:f7:68:91:8f:54:2e:
         c9:97:09:30:10:e0:66:c2:68:6d:00:30:80:86:fb:2e:ea:4d:
         8f:1f:09:6b:27:fc:03:9e:bc:95:ba:fe:62:29:58:92:aa:05:
         b6:81:ca:16:d3:0e:28:c5:2c:7a:a7:31:9f:7d:80:36:11:7e:
         e1:7b:9d:62:a5:5e:79:9d:cd:47:2b:b0:bd:ff:f8:35:4a:b7:
         3e:f3:c3:42:e1:40:a1:2d:d0:67:ca:0c:b7:d3:5b:bf:18:64:
         43:d1:f7:6a:b3:40:ba:9f:a6:4a:62:1b:48:b2:47:e9:ed:8e:
         8e:a2:37:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----