Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft
File:                     F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft (raw, json)
Hash identifier:          bM/uhwHWcvHObyzZyu+mtjLwRwkOqkL0IfPrn+IujxA=
Subject key identifier:   5B:3C:C4:5B:C7:1F:DF:01:E0:42:AA:D1:74:FE:50:CE:98:6E:1F:FE
Authority key identifier: F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9
Certificate issuer:       /CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9
Certificate serial:       2EB291370C4AFE243D0D6812FD9C7C4BE9002431
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft
Manifest number:          98
Signing time:             Fri 31 Jan 2025 14:02:46 +0000
Manifest this update:     Fri 31 Jan 2025 13:57:46 +0000
Manifest next update:     Sat 01 Feb 2025 17:22:46 +0000
Files and hashes:         1: F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl (hash: ZR3l7S6K6u+Ke48xqPmqLLMTv+llf5F5ELAtWQ/mwFA=)
                          2: 34352e3138392e34342e302f32322d3332203d3e20323639353737.roa (hash: Rf3BTNhW6ds0CCs+sP1N9FAz9/qxm/HLqNUGyMkh2tU=)
                          3: 323830343a363662343a3a2f33322d313238203d3e20323639353737.roa (hash: +sXnJB+hcCpYGssTGbpiRLtpI3LZEh+8pDlt/9egBUI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b2:91:37:0c:4a:fe:24:3d:0d:68:12:fd:9c:7c:4b:e9:00:24:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9
        Validity
            Not Before: Jan 31 13:57:46 2025 GMT
            Not After : Feb  1 17:22:46 2025 GMT
        Subject: CN=5B3CC45BC71FDF01E042AAD174FE50CE986E1FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:9b:45:2e:0f:71:d7:9f:90:fa:a4:5d:70:
                    1b:85:e0:1c:92:10:15:a7:48:f8:e7:e8:30:a6:20:
                    99:eb:4d:bf:67:d5:0f:5d:03:77:41:f5:25:cc:f3:
                    74:1f:75:cf:bb:06:48:7a:c6:8f:f3:38:f7:7e:c8:
                    70:38:bd:83:21:58:11:81:ea:ca:fa:35:46:ea:66:
                    21:08:7f:e8:d7:3f:de:57:54:29:94:b5:19:80:f5:
                    6d:3a:c0:07:9b:22:dd:ab:2c:8e:d3:9b:b9:56:f5:
                    a3:66:d7:58:09:be:7f:95:c3:33:4a:3f:e7:68:8b:
                    f4:25:75:c6:58:86:78:58:2d:eb:31:9b:4c:52:4a:
                    3a:3e:ad:c5:ad:81:28:84:3d:93:32:ba:9a:d1:c7:
                    96:a9:b7:d4:5d:48:54:75:b4:e0:ff:de:f6:df:0e:
                    69:ed:c8:9c:db:5f:8f:ec:f2:5a:19:b6:95:24:26:
                    2d:d7:f3:a8:a0:e7:f4:97:fd:8a:ef:4e:f4:e4:f6:
                    c3:f5:35:4d:c9:61:94:74:4e:46:b3:a4:6b:cf:a9:
                    f2:33:bd:fd:69:b2:0f:3e:1c:95:8b:50:7a:39:1f:
                    6e:09:ac:66:77:fc:3e:2b:f2:de:f1:e3:57:44:30:
                    b1:e1:04:b7:06:4a:18:a0:97:c6:98:11:32:e0:90:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:C4:5B:C7:1F:DF:01:E0:42:AA:D1:74:FE:50:CE:98:6E:1F:FE
            X509v3 Authority Key Identifier:
                keyid:F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cb:5b:11:cc:07:c7:f6:d4:17:bb:cd:98:9d:98:e5:8a:0f:
         ba:92:0b:ca:a0:54:1c:b2:20:6a:a2:b6:bd:46:41:09:1e:40:
         be:87:fc:45:fa:b0:bf:f0:7b:8d:df:9e:74:5d:d5:f5:e4:01:
         43:3d:32:19:29:21:84:75:f9:72:1d:56:85:64:e7:67:60:51:
         26:32:ac:12:04:78:f3:b3:63:5f:65:32:7f:4f:ac:89:24:a4:
         c8:a3:26:f8:c2:ab:ff:6f:30:aa:e0:5b:01:49:3f:b0:50:ec:
         5b:49:ce:97:1b:76:f6:16:99:a5:d9:c6:64:f5:44:8a:f9:94:
         75:3e:82:c3:fc:64:63:3d:64:d9:3b:ad:1c:ec:3b:ff:00:60:
         46:69:f0:bb:c2:cc:15:00:fb:ab:7d:e5:7a:1a:8b:79:81:da:
         4a:b3:01:6a:5a:2a:58:4c:18:4f:93:3c:ad:bf:bb:1a:1f:8d:
         86:8d:f5:ce:6d:9e:ee:46:df:06:81:a7:52:57:c0:d6:b7:65:
         2b:03:9f:5c:de:43:a8:a6:3b:20:d1:10:c6:ba:42:3f:bf:24:
         8c:0a:56:88:7a:ef:19:a4:6c:f4:63:96:b8:3d:f4:32:96:39:
         8d:91:4d:6a:7c:cd:dd:1d:c9:8d:1f:ba:3a:f5:97:8d:47:a7:
         7c:3f:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----