Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.mft
File:                     8E2D0A435995B551D35CAD14D4DFAA748CE93C61.mft (raw, json)
Hash identifier:          7+/3zbMMFc4yYS/4HEBy/4s3F03ShNt/lzX8bm0aly8=
Subject key identifier:   DF:13:A2:E5:29:6D:44:8E:34:B6:4D:50:AA:68:D1:D5:F1:BF:5A:2F
Authority key identifier: 8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61
Certificate issuer:       /CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
Certificate serial:       2AF709AAA2633ECAC9320BA43C979DE1CB29E8B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.mft
Manifest number:          3E
Signing time:             Fri 31 Jan 2025 07:41:13 +0000
Manifest this update:     Fri 31 Jan 2025 07:36:13 +0000
Manifest next update:     Sat 01 Feb 2025 10:53:13 +0000
Files and hashes:         1: 8E2D0A435995B551D35CAD14D4DFAA748CE93C61.crl (hash: BP8FZc653DLb1gnc9aar6nSKTxSZ0DS9Gd0LQTS2IJk=)
                          2: 3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa (hash: Tg+TwMt16eX3zZB3gakSky/srqySn8z28UHZ1axsvBo=)
                          3: 3133382e3132322e34302e302f32322d3232203d3e20323634333136.roa (hash: 3DQwIe2Xggsf+q3EMJ3hIacHk9fsVU4mKyEuI6kz70g=)
                          4: 323830343a323566633a3a2f33322d3332203d3e20323634333136.roa (hash: /a1W8aTktqxj23cP3u4d1SH/57KjUnBZDiDdwEhv2Io=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f7:09:aa:a2:63:3e:ca:c9:32:0b:a4:3c:97:9d:e1:cb:29:e8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
        Validity
            Not Before: Jan 31 07:36:13 2025 GMT
            Not After : Feb  1 10:53:13 2025 GMT
        Subject: CN=DF13A2E5296D448E34B64D50AA68D1D5F1BF5A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:c4:80:b3:56:2a:96:bb:d0:ca:37:79:b6:
                    17:0a:6a:36:84:0b:52:c0:e3:c4:c7:4c:18:83:fe:
                    23:84:eb:0d:a0:f5:9c:4e:90:7c:72:1e:93:fd:10:
                    b5:74:0f:11:65:2d:1d:7f:c4:04:c6:a3:9a:69:84:
                    a4:13:da:b5:84:5e:28:a4:2a:42:c6:ba:28:b9:e4:
                    2c:b5:89:bb:c8:1c:09:50:63:4b:27:ae:87:7a:32:
                    3e:82:89:e9:6f:78:10:a8:f9:28:77:28:f0:46:dd:
                    dd:a2:0b:7f:38:ed:93:de:d0:08:0d:fd:a6:13:1a:
                    00:54:6e:22:5a:fd:29:e8:29:52:f5:d0:fc:43:d0:
                    92:73:31:e0:4c:5d:72:4a:f0:80:49:e8:30:6b:54:
                    32:3c:dc:c4:8c:d5:f9:5d:bb:39:e7:41:3b:7f:8c:
                    43:eb:bd:7b:78:da:0e:28:58:ce:b1:6c:db:fd:9d:
                    2a:ae:05:b2:8f:9a:50:0d:bc:2d:d6:6e:11:74:c9:
                    bd:df:6e:ce:f8:ba:85:57:26:4e:96:4b:a6:1b:a7:
                    8a:ce:33:51:76:15:8b:dc:78:63:5b:d6:24:25:d9:
                    b4:3a:d6:f1:6a:98:41:00:4a:35:ae:93:da:03:91:
                    e0:28:0c:2b:e9:3d:49:cc:6d:82:98:d5:d3:8e:55:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:13:A2:E5:29:6D:44:8E:34:B6:4D:50:AA:68:D1:D5:F1:BF:5A:2F
            X509v3 Authority Key Identifier:
                keyid:8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:d8:d1:5f:a8:a3:44:4e:59:56:6c:70:39:9e:7d:e4:29:
         df:f5:ea:b6:88:b3:c3:00:72:4f:0e:5b:0a:d6:84:f0:1d:34:
         2b:93:39:30:df:86:0c:4f:af:b4:f2:70:b1:39:0a:91:03:68:
         b7:53:e7:ba:b4:d2:72:04:b2:63:35:60:26:b4:fd:df:91:9f:
         a3:8b:ca:18:dc:9a:d7:14:22:e0:11:12:24:36:0e:86:01:fa:
         ad:be:b7:38:32:a0:cc:05:3e:a5:ec:f4:a1:28:05:13:b7:b3:
         e0:34:14:94:cb:e1:99:b7:ce:10:1b:8c:dc:83:46:bf:49:ae:
         a1:21:a7:90:fa:da:57:c3:70:06:57:73:1d:c0:87:99:01:10:
         fe:ce:4b:e1:66:c8:83:88:fe:74:2b:f5:b7:78:bd:30:1d:92:
         11:01:e8:e4:0c:97:a3:b0:21:91:f7:ed:34:5e:b8:8a:ee:fb:
         d6:c2:c7:46:b3:15:0c:fc:71:19:9b:dc:95:04:18:aa:8b:d6:
         39:f3:48:01:38:b6:46:ee:7b:e0:ef:4a:66:7f:f4:73:b7:3f:
         fc:26:c4:eb:f3:2e:78:1f:73:e9:0a:58:90:29:51:37:67:f7:
         84:1c:19:95:09:69:90:31:5d:d5:50:68:e4:88:b5:9b:8b:f9:
         78:0a:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----