Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
File:                     2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft (raw, json)
Hash identifier:          YjZkFJs3QGw9MkVGMXOM5sb1clbjaTlwCSHQJOls98k=
Subject key identifier:   BB:DA:93:CC:31:B9:AE:AC:C4:73:5E:DA:1B:D1:22:40:7B:AF:09:37
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Certificate issuer:       /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial:       1B658A0B2C4489E22F283C269FFF145AB55583A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
Manifest number:          01B2
Signing time:             Fri 31 Jan 2025 11:00:00 +0000
Manifest this update:     Fri 31 Jan 2025 10:55:00 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:00 +0000
Files and hashes:         1: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl (hash: 7mhs483H0bEEZ+PT58mgInRpEymwFAR8L0RR1OPVPpI=)
                          2: 323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa (hash: 8le1JRkAJqTfk1xZ9IZHePGtDkl9cf3yxhJWEkVE/rU=)
                          3: 3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (hash: qBVARldTtKCcp9mDxY47YIfh3qW7D1iRiLXiY8LIlpg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:65:8a:0b:2c:44:89:e2:2f:28:3c:26:9f:ff:14:5a:b5:55:83:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Validity
            Not Before: Jan 31 10:55:00 2025 GMT
            Not After : Feb  7 11:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:fa:3c:ca:ca:86:5a:e8:2d:20:e8:93:d8:
                    80:c8:86:94:5c:5e:58:6a:0e:15:dc:2f:0c:f2:7b:
                    36:ab:28:70:16:89:d1:d6:26:5e:ed:bf:56:27:22:
                    1c:2c:ff:02:fe:61:38:c9:f6:5e:db:33:d7:a8:9a:
                    3b:9f:b8:1c:14:e8:fa:02:7f:16:ab:a8:a5:5c:0c:
                    ce:00:f7:3a:99:d9:0d:d9:d6:b6:1e:72:86:58:5e:
                    2f:2e:e0:44:36:be:d0:c2:ca:ca:27:7b:0c:56:35:
                    a2:13:7d:f4:ef:b7:2e:a9:e8:ae:d6:36:ed:19:8e:
                    fc:21:d6:c8:7e:19:67:54:77:0f:2e:5a:d8:69:ba:
                    e1:38:d0:12:7a:a5:f5:8f:8f:f2:a7:23:08:a4:d8:
                    85:9c:26:0c:e7:d1:bb:66:ae:4c:ef:87:76:61:80:
                    68:fe:76:6f:13:65:63:a6:ed:8c:10:0b:14:4c:49:
                    39:65:06:1a:76:7b:e7:7a:fe:b7:24:dc:66:c9:1f:
                    39:d4:c2:02:81:3f:f3:73:32:76:ad:64:83:f6:8f:
                    be:6c:c6:eb:bd:e0:48:92:ab:2e:2a:ff:26:ac:29:
                    46:02:31:7b:f3:76:70:7b:77:6d:f2:58:98:1e:bd:
                    cd:57:6b:2b:59:77:41:d4:e6:85:b5:5f:c6:d1:81:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DA:93:CC:31:B9:AE:AC:C4:73:5E:DA:1B:D1:22:40:7B:AF:09:37
            X509v3 Authority Key Identifier:
                keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:72:20:d3:46:61:13:1e:a9:60:5d:60:96:bb:b2:31:e1:
         79:3d:d8:93:b2:33:be:a1:d7:7a:fb:e3:a8:1d:97:69:0a:b0:
         21:52:98:e5:5f:a6:40:18:3e:95:8f:26:bb:f6:06:43:3c:f5:
         9e:bc:e1:e4:ed:1f:88:97:ef:03:6d:22:00:a0:e0:60:75:f7:
         45:46:50:28:ce:a8:b5:66:86:2c:3a:71:6c:b4:6e:8d:59:10:
         fc:57:41:e6:46:09:53:53:2b:30:a0:6f:11:47:da:a5:1c:73:
         55:62:f0:d0:6a:5d:ec:99:13:8b:f7:80:57:31:30:f4:a4:92:
         3f:de:ce:51:2a:d2:7d:00:e0:9b:95:eb:58:43:3a:c8:9d:ac:
         eb:2b:0d:77:02:e4:7b:94:ce:c4:ae:b4:bc:ca:fe:b3:bf:35:
         c3:6b:91:69:3c:17:ea:ab:0d:f3:8c:89:2c:fd:0b:26:21:d1:
         5b:1a:0a:e1:62:17:1e:ec:2f:a2:b7:59:7d:21:f8:76:b3:ff:
         54:cf:04:8d:2d:7d:c2:1c:6b:b1:9f:d0:52:40:15:f2:a1:51:
         b3:9e:7d:03:d1:be:8f:c2:cd:75:86:f4:dd:bc:b5:42:c6:df:
         e7:fa:1c:e5:d2:a8:cb:89:4a:4d:8f:66:2b:59:bc:fa:fc:0d:
         cd:e3:ea:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----