Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft
File:                     2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft (raw, json)
Hash identifier:          bXVDMfcmbvFVwzNSH/Mhvcj4+5OPnDNh1F8cITb6uZo=
Subject key identifier:   EF:F0:AF:0D:EB:AD:DE:04:D0:8F:10:56:9F:3C:41:DB:23:2A:39:F3
Authority key identifier: 2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85
Certificate issuer:       /CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
Certificate serial:       2F68CD4E51F6D179D5F5E503C44EB5761C91958F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 08:30:33 +0000
Manifest this update:     Fri 31 Jan 2025 08:25:33 +0000
Manifest next update:     Sat 01 Feb 2025 08:59:33 +0000
Files and hashes:         1: 3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa (hash: Xnz3apn38ZPFROVlwP9QbpqchK0malnw4gHttLds+/A=)
                          2: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl (hash: YrSBYDE0CgfXCO+LBKbME5DgUvQwxA9cBoZqdUP/kgE=)
                          3: 323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (hash: CtTtJ+jMicWLJgzOVe2HhIGjkg7lMhcB2RxeD2K2fZE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:68:cd:4e:51:f6:d1:79:d5:f5:e5:03:c4:4e:b5:76:1c:91:95:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
        Validity
            Not Before: Jan 31 08:25:33 2025 GMT
            Not After : Feb  1 08:59:33 2025 GMT
        Subject: CN=EFF0AF0DEBADDE04D08F10569F3C41DB232A39F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:9f:bd:05:a3:8a:0c:ff:94:67:8f:d4:44:
                    30:11:8f:37:b1:af:56:2d:67:f5:a9:a0:4b:98:64:
                    82:d7:bd:0e:17:64:86:8d:b9:d3:fd:f0:c3:9d:ba:
                    39:b2:f0:c9:ef:f2:96:2c:e6:d5:90:6d:eb:ba:97:
                    e4:64:32:db:9d:29:4c:a1:ea:2c:4e:22:a0:96:cf:
                    11:61:41:5a:ca:41:56:51:dd:af:50:1c:0f:21:d4:
                    cb:5f:13:f6:85:3c:76:06:0b:56:de:16:85:74:63:
                    99:92:ce:0b:4a:45:a7:cc:ea:57:cd:04:98:b1:17:
                    7b:35:f7:16:01:fc:36:20:bf:fd:de:59:2a:ba:db:
                    6e:79:17:da:b5:9e:7d:ce:7d:9a:88:b6:f6:b4:38:
                    6c:b4:6f:c2:b9:05:f7:f2:ff:5c:c5:b1:9d:ab:f8:
                    90:55:63:bc:f3:61:a2:d9:97:bb:ce:a4:79:17:01:
                    c3:0d:9c:7e:c6:69:a1:4c:48:a1:4b:63:12:18:7c:
                    a3:c0:5b:5b:34:d7:58:30:6b:b3:37:5d:a9:bc:55:
                    84:31:37:72:b5:38:3d:fa:c1:c1:fc:fd:9a:e8:aa:
                    f8:be:1d:8e:a8:4a:26:45:59:8f:65:4e:72:4c:5c:
                    37:b4:37:8a:9f:69:e3:ab:9e:a5:d2:b0:47:cc:4a:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F0:AF:0D:EB:AD:DE:04:D0:8F:10:56:9F:3C:41:DB:23:2A:39:F3
            X509v3 Authority Key Identifier:
                keyid:2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:06:ee:f0:75:22:fc:9b:65:41:a7:8f:5d:92:1c:ce:0e:d5:
         db:23:ae:e3:64:f2:55:14:fa:37:97:81:07:7d:9a:fe:f7:15:
         e9:35:da:d2:0b:3c:ab:a8:24:77:74:b5:63:bb:d5:2e:c1:79:
         e2:28:ff:a9:6e:dc:ac:f6:16:5d:75:5f:76:c4:20:0e:11:3d:
         0f:b6:99:a7:31:fe:6c:21:ac:52:28:a0:11:92:1e:e5:49:16:
         cd:f9:c5:3e:00:f3:fd:fa:88:13:f1:99:8d:c5:58:3c:ba:fc:
         fc:1a:09:58:fc:d1:11:da:ef:e6:00:39:25:a2:fb:01:04:5a:
         2b:09:39:bf:86:24:d2:d9:ee:af:d5:ac:c6:5a:a2:4f:41:9d:
         39:61:4b:a7:df:56:37:f8:f1:52:4d:a8:84:40:3d:6e:08:aa:
         0b:d7:80:20:a5:bb:fe:f4:b1:f9:f5:1a:6c:7d:05:27:dc:5d:
         4c:3c:f5:4b:99:2d:7e:b7:8d:45:d4:cc:e5:43:f7:81:14:e2:
         4c:c5:08:9f:07:23:85:6c:d0:4b:9c:f3:2e:56:ad:6b:1d:7f:
         d7:15:b3:48:fa:b2:3d:a9:04:17:93:d7:72:6c:3e:b8:08:a3:
         3f:94:42:30:9e:4f:e3:08:77:33:37:97:28:11:9d:38:11:b9:
         f9:42:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----