Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft
File:                     2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft (raw, json)
Hash identifier:          LEYW9u5IZzqSPt/ux655loxBde8w0CCW/cycVt6T/v0=
Subject key identifier:   52:03:75:28:09:22:97:DC:3E:46:39:3F:CD:24:23:77:12:CA:94:AF
Authority key identifier: 2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90
Certificate issuer:       /CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
Certificate serial:       37C50EF0814014B5ADCDB2244DFA88085C93CD09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft
Manifest number:          97
Signing time:             Sat 29 Mar 2025 07:43:16 +0000
Manifest this update:     Sat 29 Mar 2025 07:38:16 +0000
Manifest next update:     Sun 30 Mar 2025 07:48:16 +0000
Files and hashes:         1: 3137372e35352e39342e302f32332d3234203d3e20323633353731.roa (hash: bYvg0kFdsfucxw1/Pt9E5OokHapXzzwsubWMBSiW2kQ=)
                          2: 3137372e35352e38382e302f32322d3234203d3e20323633353731.roa (hash: qBbLCGll6jATW+1P+n9QWcr7BZ1CCjGXFFq5Z6MEdRM=)
                          3: 323830343a6633383a3a2f33322d3334203d3e20323633353731.roa (hash: Yvv9Hn107i9LnqcY9t05ycJ3ifxR7YaVw34sJmXpG+w=)
                          4: 2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.crl (hash: ztk9lp8V+eTfUqm3TR0KnoICPwWTkkkohRP/2xCBcHI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c5:0e:f0:81:40:14:b5:ad:cd:b2:24:4d:fa:88:08:5c:93:cd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
        Validity
            Not Before: Mar 29 07:38:16 2025 GMT
            Not After : Mar 30 07:48:16 2025 GMT
        Subject: CN=52037528092297DC3E46393FCD24237712CA94AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:ad:f8:b3:3b:88:91:15:97:9c:cd:b3:b7:
                    94:3c:31:be:fb:f0:08:99:79:79:3a:09:10:db:b5:
                    b9:fa:25:1f:bf:2c:1d:65:f9:65:6a:0a:16:85:04:
                    a6:b4:ce:eb:30:ec:a9:a3:76:b5:4e:0c:3a:41:01:
                    48:b4:54:14:61:cc:bf:a2:70:63:73:19:f5:d8:92:
                    46:41:94:8c:8c:3b:35:7d:d5:19:68:36:56:9a:82:
                    c3:a5:17:f9:2e:83:77:c6:b4:43:2d:13:67:fa:78:
                    b2:d9:43:2f:41:24:cc:99:ee:ce:86:2b:d4:7c:d7:
                    88:c5:98:41:7e:d9:ea:8b:8a:9d:7a:5d:2a:2b:f9:
                    ee:d0:ec:4c:58:5d:fc:e2:d8:16:f0:f6:6b:b3:9a:
                    6d:51:3e:1e:19:82:03:58:85:75:b9:d6:e9:1d:45:
                    2c:b0:c5:2f:4b:f2:ba:f3:e3:20:f5:55:b6:de:52:
                    e4:c4:25:74:6a:9c:a2:5e:68:b5:17:64:23:cc:5d:
                    ee:d1:a4:26:1a:5b:73:31:11:92:da:1b:ee:f9:03:
                    f4:22:4a:77:93:25:7a:dc:86:f4:94:cd:a0:f6:a4:
                    8f:de:98:5e:3a:83:63:88:dd:aa:05:e4:09:69:82:
                    e8:e8:aa:ae:b3:a2:0a:90:f3:3e:fc:92:22:96:84:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:03:75:28:09:22:97:DC:3E:46:39:3F:CD:24:23:77:12:CA:94:AF
            X509v3 Authority Key Identifier:
                keyid:2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e9:24:ef:03:59:58:4d:10:d4:64:07:62:21:a1:74:de:76:
         96:34:c1:0f:42:a3:77:d1:3b:8f:79:38:53:19:76:9d:a9:49:
         6e:56:47:52:41:14:ee:a1:d1:8b:24:f0:89:c8:34:59:95:f2:
         99:d2:e4:63:6e:88:a5:46:ca:83:01:ac:56:73:8c:87:ad:e3:
         47:71:83:11:fa:ae:27:1d:c2:89:45:55:7d:89:b8:0b:cc:da:
         69:30:e7:bc:6f:06:72:95:4d:f7:df:22:a9:a0:23:ae:c8:6e:
         59:c6:7f:93:70:3a:6b:b5:6f:c3:04:2c:64:b8:8e:70:80:d6:
         1d:99:6f:84:30:54:f7:6b:f2:c4:9f:0c:39:4e:68:e8:2a:6d:
         08:7b:36:89:3d:a8:cb:bc:c8:19:ba:1b:bc:b3:78:9e:fe:72:
         6b:50:58:fd:89:9c:cc:39:0e:3f:39:3f:87:fe:b7:7d:bd:68:
         14:55:36:47:5b:08:db:ed:e6:c8:ea:0d:d1:64:f3:7e:49:a6:
         d5:1f:0b:e9:87:12:3a:6a:b4:b4:d2:fe:32:7e:96:48:71:ad:
         c6:30:13:62:88:95:43:97:98:70:2a:76:8a:3f:04:7e:f0:83:
         f5:3d:b1:5b:ec:2b:ad:2c:cf:6e:49:c5:80:55:2e:0e:d1:b3:
         98:f0:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----