Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.mft
File:                     2BE906475F069D2DBF48668B72C827DA2CA8E470.mft (raw, json)
Hash identifier:          FGQ1f6QJnl4q9f2KVObRXvQbYK+d3jPdGY2ZD93t7Ks=
Subject key identifier:   14:7F:96:AA:51:BE:05:BF:39:85:3C:CA:29:5E:5E:5B:C1:6F:ED:3A
Authority key identifier: 2B:E9:06:47:5F:06:9D:2D:BF:48:66:8B:72:C8:27:DA:2C:A8:E4:70
Certificate issuer:       /CN=2BE906475F069D2DBF48668B72C827DA2CA8E470
Certificate serial:       0D7B185DF9F861CB8FC55FCC52E5EBC4E4F05B83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE906475F069D2DBF48668B72C827DA2CA8E470.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.mft
Manifest number:          81
Signing time:             Thu 06 Mar 2025 18:25:50 +0000
Manifest this update:     Thu 06 Mar 2025 18:20:50 +0000
Manifest next update:     Fri 07 Mar 2025 20:10:50 +0000
Files and hashes:         1: 3137392e3132372e39362e302f32302d3234203d3e20323632343639.roa (hash: 4Dpc0fv+7P2m68jWU74nVR8kkteYDcvoPizul9s+qEg=)
                          2: 2BE906475F069D2DBF48668B72C827DA2CA8E470.crl (hash: I0GRJl0qzZtDnos9FwToOwzX6orAatQlqaXuWad+2VM=)
                          3: 3137372e34372e3136302e302f32302d3234203d3e20323632343639.roa (hash: i9FHc4pGFmqtn38z5llonbzW8xyiAPtIn7U5JDBCtzQ=)
                          4: 323830343a3464343a3a2f33322d3438203d3e20323632343639.roa (hash: cU7aFAYCTU+yUm5Bzt+4ygHwzmtx7OSepnXCQy4kS+Q=)
                          5: 3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa (hash: WIM5YpzOJ9Ig0wMVsvTX0Vx9G5/m/3HReHGfBamVwak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7b:18:5d:f9:f8:61:cb:8f:c5:5f:cc:52:e5:eb:c4:e4:f0:5b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE906475F069D2DBF48668B72C827DA2CA8E470
        Validity
            Not Before: Mar  6 18:20:50 2025 GMT
            Not After : Mar  7 20:10:50 2025 GMT
        Subject: CN=147F96AA51BE05BF39853CCA295E5E5BC16FED3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:3d:c2:f7:cd:c8:1b:69:99:9d:27:c7:b2:
                    3e:8d:8b:06:5b:35:8b:6d:bd:09:53:2e:63:e0:69:
                    18:6e:95:5f:ca:2e:07:0e:51:cc:29:33:04:64:5f:
                    73:61:2b:95:be:a2:55:3a:b4:e9:e6:0e:db:1c:b8:
                    7a:4b:f9:ff:9d:98:94:9b:6d:c5:bc:09:36:1e:4b:
                    94:95:b4:55:7f:7b:54:d3:1f:ee:eb:50:bf:5e:77:
                    e7:0a:cb:44:92:f3:c8:a8:7b:8d:6d:3b:2d:ee:48:
                    43:c1:b6:02:00:d1:09:21:eb:6b:ca:0a:a1:95:5d:
                    91:a9:21:ff:cc:0e:9c:d2:2f:53:af:9c:8d:06:96:
                    5a:0b:4a:37:cc:8d:2b:73:12:1a:fd:18:47:f4:72:
                    8d:da:41:8e:46:e2:d4:dd:f5:56:ab:39:ac:a6:92:
                    2c:be:1b:58:c0:99:07:fa:78:4c:c2:db:75:cc:0b:
                    4a:b1:20:2b:04:36:dc:7c:a4:f1:4b:90:32:b8:2e:
                    49:c2:01:a7:fb:81:ff:11:e2:93:14:f3:95:26:1c:
                    6b:15:42:85:f5:32:b3:fc:d4:8f:65:12:5e:ac:83:
                    35:af:b4:c4:83:ca:7f:fc:19:4a:8a:a9:1e:cb:4e:
                    49:00:f2:47:d2:46:be:2c:30:1b:08:4c:61:a9:96:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7F:96:AA:51:BE:05:BF:39:85:3C:CA:29:5E:5E:5B:C1:6F:ED:3A
            X509v3 Authority Key Identifier:
                keyid:2B:E9:06:47:5F:06:9D:2D:BF:48:66:8B:72:C8:27:DA:2C:A8:E4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE906475F069D2DBF48668B72C827DA2CA8E470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:6d:ed:c4:2a:9f:cf:de:0f:db:6a:f4:d5:b7:e5:09:c0:
         a4:b0:33:8f:9f:6c:6b:ee:79:b7:f8:30:0c:a7:44:ae:f3:aa:
         17:22:ed:a0:8a:9c:0e:51:3b:fe:f5:13:81:d6:45:9a:29:dd:
         6a:2d:48:bb:32:44:5e:09:7b:80:ed:9c:a0:fe:fd:db:bd:1e:
         a8:fe:73:77:c1:67:e9:94:d2:a6:55:95:b3:2d:e9:4c:10:fd:
         b5:df:ed:06:ef:78:ac:54:98:12:d9:15:bf:b8:f3:8b:60:61:
         71:c6:3d:29:fb:7c:09:19:66:10:65:c7:a0:38:bd:9b:23:81:
         8b:d6:85:d2:9e:68:81:0d:34:3c:25:13:ef:a3:d2:a2:cc:fc:
         fe:d4:bc:d4:b9:fd:61:e1:cf:48:1b:29:96:ca:64:55:1b:30:
         67:50:d6:d3:f9:5a:17:25:93:80:6e:71:4d:8e:6e:18:51:5f:
         2f:fa:5b:36:b5:70:5d:e7:3d:ae:b5:70:0b:79:b6:df:59:26:
         29:db:84:ef:34:c2:d3:41:75:4f:b3:1a:74:d3:d4:f4:d0:c0:
         2f:db:c2:85:2d:e5:7d:56:55:86:67:5f:7a:6b:76:e4:4b:fb:
         0d:64:99:81:c6:70:63:25:9d:97:f9:af:00:64:eb:78:f1:dc:
         3b:3c:b3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----