Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.mft
File:                     69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.mft (raw, json)
Hash identifier:          FUru4SzP2AdfuH9ryqPiDsQL6XlTgd6Hf08VMA+IFFc=
Subject key identifier:   E0:9E:FF:B0:AA:D1:E7:03:5C:53:A6:1B:A9:06:76:F2:D5:8F:DB:12
Authority key identifier: 69:CD:8F:9F:14:C7:92:DC:1F:86:C8:3F:2E:B2:E2:3E:9C:07:4A:72
Certificate issuer:       /CN=69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72
Certificate serial:       16B0398E16C20D559E62A9B657E250D0280F3194
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.mft
Manifest number:          5E
Signing time:             Thu 20 Feb 2025 01:43:10 +0000
Manifest this update:     Thu 20 Feb 2025 01:38:10 +0000
Manifest next update:     Fri 21 Feb 2025 04:18:10 +0000
Files and hashes:         1: 323830343a323637633a3a2f33322d313238203d3e20323634333435.roa (hash: SzNWtzRTaeBhKRsnuU2DEjwe+eItzcB3KhOQQtcUfxY=)
                          2: 3133382e3138352e3134342e302f32322d3332203d3e20323634333435.roa (hash: hzA5kpG+I13/GJGf3Bh0h1HRghTNatSKcAqLcUBI+Z0=)
                          3: 69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.crl (hash: XQ8icHkd4WJ4kkDor1hXBzxC7ABiHNj8NPldWErJIoQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b0:39:8e:16:c2:0d:55:9e:62:a9:b6:57:e2:50:d0:28:0f:31:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72
        Validity
            Not Before: Feb 20 01:38:10 2025 GMT
            Not After : Feb 21 04:18:10 2025 GMT
        Subject: CN=E09EFFB0AAD1E7035C53A61BA90676F2D58FDB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:a5:46:18:d4:33:30:9d:7a:a0:ee:cc:51:
                    d0:ce:c5:b9:9c:1d:aa:bf:5e:0a:96:09:a4:e9:91:
                    29:43:e5:37:f8:42:63:fb:26:94:1b:e4:70:62:f5:
                    f9:23:0c:7c:7a:a6:8f:e6:2a:38:79:04:d1:4f:e5:
                    0b:92:9e:a5:67:65:2b:ad:43:18:2a:0e:78:cd:ef:
                    64:bf:ed:f9:c9:06:8e:46:84:44:ff:ec:80:0a:08:
                    31:2b:6e:69:1c:84:1b:be:76:75:c5:d0:15:a3:d6:
                    9a:6e:c4:23:40:d6:8f:b2:69:29:aa:fd:8b:89:84:
                    3b:80:f7:9b:b1:0b:d9:2c:51:87:0c:95:39:51:ae:
                    b9:8a:ec:0e:a3:9f:08:6d:11:5b:89:1b:15:2c:e4:
                    00:94:b8:c6:be:57:e4:b0:40:02:27:52:5e:e6:c1:
                    62:eb:01:bb:05:4c:5d:62:a8:c3:a6:8a:40:91:17:
                    5d:ae:29:e2:65:fd:a6:90:cd:b4:76:78:8a:a6:9c:
                    e1:ea:a2:c7:3d:3b:51:b6:21:a3:da:35:21:8f:2e:
                    1f:5f:e3:3f:be:3a:9d:6f:43:3e:1a:3d:33:04:8d:
                    03:63:5c:5e:43:f9:0c:f6:a6:89:a7:ec:61:2a:a8:
                    b6:c3:eb:95:f4:a5:7f:61:7b:a8:21:d4:b3:47:4b:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9E:FF:B0:AA:D1:E7:03:5C:53:A6:1B:A9:06:76:F2:D5:8F:DB:12
            X509v3 Authority Key Identifier:
                keyid:69:CD:8F:9F:14:C7:92:DC:1F:86:C8:3F:2E:B2:E2:3E:9C:07:4A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/69CD8F9F14C792DC1F86C83F2EB2E23E9C074A72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:87:45:e7:6e:6f:33:6c:84:07:63:83:33:ef:0c:96:b9:
         0e:f9:d4:b9:18:be:28:d6:63:f0:3e:59:ac:43:6d:23:05:a0:
         d3:a2:f7:42:bf:f4:ff:2f:01:69:f6:a6:ff:a3:04:9a:ba:da:
         0e:a2:7b:51:ae:b5:b8:9e:4b:95:46:d5:3d:3e:b9:ca:85:e9:
         83:26:98:1f:99:c9:3f:08:61:d7:c6:73:14:72:7b:57:41:e1:
         fb:1e:fc:c9:80:9a:71:4f:d9:93:ca:5f:44:a4:8e:a9:34:e9:
         93:b6:eb:af:07:b9:47:2e:e7:34:3f:8c:a6:1d:92:df:8d:a4:
         50:9f:6c:87:88:6d:e2:66:f1:0a:84:c6:81:76:a2:05:fb:f6:
         64:10:dc:49:12:ae:ad:77:0a:e7:57:d7:69:17:1e:89:10:fd:
         c8:ff:36:31:86:bd:6d:25:f3:41:c4:0f:d3:47:82:cb:59:8e:
         c2:50:09:b0:31:02:5d:8a:df:94:93:21:b2:df:0b:e7:91:36:
         bf:df:74:ea:4b:d2:04:9a:c0:43:b8:f8:51:fc:e6:ac:32:ec:
         50:dc:fe:a8:47:36:f7:bf:47:ea:67:56:a1:6c:6c:f8:1e:92:
         4f:cc:29:aa:17:1d:c9:83:b5:2b:86:50:5f:12:d3:3b:5d:fe:
         f7:df:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----