Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.mft
File:                     2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.mft (raw, json)
Hash identifier:          hOTLVme2M1pEY/XBbONRW1PHC38+dpIILkElbPoH+JE=
Subject key identifier:   C5:14:DF:45:7E:8E:9D:78:B3:A6:A7:67:D5:9F:31:FC:58:C2:0A:DD
Authority key identifier: 2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
Certificate issuer:       /CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Certificate serial:       41AC7753EDAA2D1A750A56A03D45CBF42DE9DC4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.mft
Manifest number:          85
Signing time:             Sat 29 Mar 2025 07:40:35 +0000
Manifest this update:     Sat 29 Mar 2025 07:35:35 +0000
Manifest next update:     Sun 30 Mar 2025 08:49:35 +0000
Files and hashes:         1: 3138362e322e3235302e302f32342d3234203d3e20323636313633.roa (hash: dvfswkfMTtavK1xap8ZucaPCNcB1fh0JaFJDJL4hmts=)
                          2: 2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl (hash: H8HSX6UIBEnGFQIXx4fgUFqhxctEiI394iBZln6XPh8=)
                          3: 3138362e322e3234382e302f32342d3234203d3e20323636313633.roa (hash: 7Ejb9b7BDRxR7fzJC1mhDcFMMhd1RaDL643IBylGpik=)
                          4: 3138362e322e3234382e302f32332d3233203d3e20323636313633.roa (hash: QpHeZw0wMJNXdmeyBB6R3bydW4rkQJ36r+PVX69Wfzo=)
                          5: 323830343a336261383a3a2f33332d3333203d3e20323636313633.roa (hash: 82imZE+KlN3HPwqC4ek53/W1MHGvlf4jFY5lcdX3IpY=)
                          6: 3138362e322e3234392e302f32342d3234203d3e20323636313633.roa (hash: 6MXlPH9fjSEAa18wwXN2da6S697XSntOEbYqwJyKXT8=)
                          7: 3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (hash: +B6xTtJoyYgU6fxmMl2J8vbVf6+p2ej684EJdzOvRNs=)
                          8: 323830343a336261383a666630303a3a2f34302d3430203d3e20323636313633.roa (hash: R0LskdA7TOQ/HNVxlbKEDLp4Zg/M0wQW+QoNWDq18po=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ac:77:53:ed:aa:2d:1a:75:0a:56:a0:3d:45:cb:f4:2d:e9:dc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
        Validity
            Not Before: Mar 29 07:35:35 2025 GMT
            Not After : Mar 30 08:49:35 2025 GMT
        Subject: CN=C514DF457E8E9D78B3A6A767D59F31FC58C20ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:30:b8:cc:27:33:5d:e4:59:c8:8a:ad:5a:a6:
                    df:86:31:8d:87:39:41:c3:ac:77:6c:b7:97:8e:0e:
                    28:62:90:3c:f2:52:d6:59:e9:e1:8a:b1:8b:02:fb:
                    c1:22:e4:e0:8b:c4:e5:1f:47:de:bc:07:38:66:c7:
                    0b:b0:fc:69:61:8f:2a:97:44:6a:19:29:47:9b:3a:
                    aa:41:16:26:c7:0a:39:fd:96:28:cf:d9:8f:4a:e7:
                    9e:8d:0a:36:a3:0f:dc:f3:58:a9:a1:19:fe:92:e5:
                    15:ce:14:03:04:4b:d9:9e:d5:05:78:d2:51:af:d6:
                    89:3e:ab:8f:c4:40:ff:87:c5:ce:7c:1f:64:da:52:
                    3a:46:ff:1a:01:68:b4:8e:39:c7:ba:4e:38:0c:13:
                    60:e3:30:9c:16:71:11:9b:43:c0:8a:b8:80:53:ff:
                    36:4a:27:eb:61:32:5b:34:c5:2c:e6:c0:7a:ed:e1:
                    93:4d:72:f2:ad:03:81:24:58:f5:42:b5:54:c9:5d:
                    c1:7c:81:fd:f1:58:8b:51:2f:ad:8a:23:43:67:d9:
                    ee:98:85:58:56:16:48:fa:f1:36:72:11:af:16:7d:
                    c7:ae:ad:db:e8:93:b5:55:4e:32:40:d1:dd:1e:15:
                    93:f9:b5:af:26:ca:e7:48:e7:a0:74:95:f9:b9:b6:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:14:DF:45:7E:8E:9D:78:B3:A6:A7:67:D5:9F:31:FC:58:C2:0A:DD
            X509v3 Authority Key Identifier:
                keyid:2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:d1:40:85:5d:dd:2e:c6:3a:e2:17:99:26:7a:70:9f:77:
         7d:16:9f:b2:4e:49:ee:c8:39:56:df:2c:c1:f2:d4:a5:ec:35:
         a6:56:6b:77:99:f6:59:c6:0d:6b:6e:e3:98:f8:59:a9:d7:6c:
         f1:94:69:8b:f6:4d:c1:b9:04:cb:30:7c:a1:80:f1:a5:e0:7f:
         bc:3f:f6:b3:93:03:1c:b5:a0:f3:80:c8:ee:93:e9:23:b6:ec:
         02:83:2a:e6:d9:03:a2:6d:f3:56:81:47:31:8c:a4:bb:4d:6a:
         44:67:72:9f:50:76:2c:72:df:23:ed:e4:31:16:da:e8:f6:ab:
         b2:3b:96:d4:2c:89:ea:8e:53:f7:53:ba:f8:36:a0:a1:3f:aa:
         1c:5a:cd:44:e4:e6:0a:32:14:79:a1:ff:9a:a1:cc:12:0e:e9:
         fe:cf:04:e4:b8:f7:4c:e8:59:d4:50:4d:ef:26:c0:00:4f:23:
         41:a0:a5:df:b4:43:97:69:ec:ef:75:c9:c9:98:ec:9f:d5:af:
         1a:42:f9:d7:47:1d:87:8d:5c:07:d0:19:d8:40:09:a6:4b:80:
         1c:19:4c:3f:84:eb:ce:55:d0:69:f8:0a:0b:45:4e:d8:0b:3f:
         0f:11:e2:17:f7:48:b5:db:05:bb:93:79:a8:ce:b8:83:63:b8:
         69:b4:cb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----