Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.mft
File:                     E069EE1BA9C7A36827171560AD990CCC81000EA7.mft (raw, json)
Hash identifier:          ufpLVPx6H5FHC436J22mI62vY6OqjfanyjGMkZsTppY=
Subject key identifier:   52:88:48:76:4F:3C:9C:F5:CF:63:7E:FD:2F:2A:4C:49:33:5C:FE:A0
Authority key identifier: E0:69:EE:1B:A9:C7:A3:68:27:17:15:60:AD:99:0C:CC:81:00:0E:A7
Certificate issuer:       /CN=E069EE1BA9C7A36827171560AD990CCC81000EA7
Certificate serial:       6F564BD1E252B8F66247334F0F5EEC36DC19661D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.mft
Manifest number:          BF
Signing time:             Thu 30 Jan 2025 16:29:59 +0000
Manifest this update:     Thu 30 Jan 2025 16:24:59 +0000
Manifest next update:     Fri 31 Jan 2025 17:45:59 +0000
Files and hashes:         1: E069EE1BA9C7A36827171560AD990CCC81000EA7.crl (hash: q8+YpLha8xr4EjgUAL+5YI1lAl5Vk4ajkqNZjhgm9S8=)
                          2: 3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa (hash: M2gph0kR39VwaTahB+4VGccJBcRaOChYxBhZpfrsGdk=)
                          3: 323830343a333231303a3a2f33322d313238203d3e20323632373739.roa (hash: zG878TrgyV+0ISLLjvlCVZXkLKWMN06Be20vEAVVT+4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:56:4b:d1:e2:52:b8:f6:62:47:33:4f:0f:5e:ec:36:dc:19:66:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E069EE1BA9C7A36827171560AD990CCC81000EA7
        Validity
            Not Before: Jan 30 16:24:59 2025 GMT
            Not After : Jan 31 17:45:59 2025 GMT
        Subject: CN=528848764F3C9CF5CF637EFD2F2A4C49335CFEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:38:b0:6b:f1:9d:06:3b:81:bd:cd:2e:0d:
                    73:9a:49:ab:80:60:18:82:8a:ee:74:dd:26:6a:69:
                    93:fb:58:44:d9:d2:32:28:89:c3:1d:42:a0:60:f8:
                    a1:a6:49:f2:aa:eb:a8:12:e2:ee:67:14:68:89:a8:
                    b7:55:05:5d:76:b2:38:35:c5:74:59:6b:9a:0e:85:
                    d4:d1:27:ad:9f:78:45:6e:9d:ec:76:46:99:e3:07:
                    11:29:c0:d1:5b:9b:ae:f2:f0:da:cd:72:75:b6:5b:
                    04:08:fa:5d:36:f3:f4:cd:d3:24:b7:b2:5f:b7:79:
                    5d:b3:d5:94:55:bf:80:e9:2a:43:a3:22:fa:c6:9c:
                    d3:35:bb:21:5d:66:55:43:38:4c:c5:56:5b:9a:b0:
                    03:05:9b:cd:09:4c:70:38:b6:9a:ca:83:75:ca:04:
                    d7:9a:91:90:3e:17:df:31:54:52:0c:ce:fc:38:42:
                    8d:34:63:6f:bc:bd:34:8a:2e:fd:4d:02:92:9b:9f:
                    9c:f7:ca:d1:67:f3:eb:1e:8f:59:10:5c:d9:2b:89:
                    9d:c7:f1:dd:96:d6:63:9f:74:a0:a7:16:e4:e1:0f:
                    57:e1:93:54:3c:9b:08:b2:d9:4b:d2:cc:6d:0b:b8:
                    00:9a:da:cc:ee:5c:7f:fa:cd:44:24:00:21:1a:b1:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:48:76:4F:3C:9C:F5:CF:63:7E:FD:2F:2A:4C:49:33:5C:FE:A0
            X509v3 Authority Key Identifier:
                keyid:E0:69:EE:1B:A9:C7:A3:68:27:17:15:60:AD:99:0C:CC:81:00:0E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:ea:e4:86:44:a7:f4:f8:37:5c:fd:b2:11:8d:4a:bb:5e:
         a4:68:b0:09:b3:d3:81:7e:52:b3:b4:56:f0:67:6d:03:a9:75:
         7a:d4:b0:7f:f2:4e:b5:7f:fb:37:5e:b4:6b:b4:4f:93:2b:30:
         e1:e2:f2:74:dc:20:11:37:eb:0f:0e:fb:ed:17:00:62:45:d0:
         63:aa:94:1c:0d:e2:90:37:30:cc:a8:0e:2d:ea:83:bc:bd:5e:
         97:2d:5f:0a:e7:97:07:e6:97:1c:c6:57:99:96:a7:0f:1e:98:
         bb:92:b8:8e:57:7c:fc:ec:86:94:98:c3:74:56:a9:8b:6b:f0:
         a4:50:b9:06:f4:c7:f6:f2:57:8b:5a:98:c2:bc:fa:be:82:60:
         75:b7:47:82:2d:02:42:73:3a:89:4d:16:ee:d3:22:3e:c0:e6:
         96:8d:8d:2e:f4:58:c1:44:a9:00:35:fe:c0:2f:9d:85:23:d9:
         c0:d9:40:3c:c4:75:62:6e:a7:8e:b1:b3:87:af:45:1a:63:b2:
         00:2a:4c:f5:6e:80:9c:4c:7b:9d:db:b3:c5:f4:c8:ea:51:39:
         f3:8e:83:81:cc:19:2d:46:bb:81:93:db:ce:c9:bd:75:ce:c3:
         0c:7a:62:da:bd:07:5c:6a:01:d7:69:ee:3b:ce:36:86:e6:06:
         cd:b2:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----