Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
File:                     8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft (raw, json)
Hash identifier:          bFNPd+AYQc1LMFpLf6PH2ntDdEsnkE/uKDNRy78I6qY=
Subject key identifier:   4B:72:92:C5:91:80:ED:AB:25:FC:86:D2:DA:89:6B:70:1A:3C:5A:28
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       02125FF1A99EFF994ACAA4A4121254BCC2F876B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
Manifest number:          01F4
Signing time:             Mon 17 Mar 2025 18:39:11 +0000
Manifest this update:     Mon 17 Mar 2025 18:34:11 +0000
Manifest next update:     Tue 18 Mar 2025 20:54:11 +0000
Files and hashes:         1: 8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl (hash: P1HQ8pUy9Lc1MPSLYryQrcO5IJveIzW2k0scyuLCA+o=)
                          2: 3138372e36332e3233362e302f32322d3234203d3e20323633363631.roa (hash: tTwp6jy2TRBGl7YLLZxGCf/N/GEDZcTvcVTD06YzEOo=)
                          3: 34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (hash: Mn4FRWaoSmiJg/tN0fuPn5tXtY3kLc+NG2HraHJnNog=)
                          4: 3137372e3232312e35362e302f32322d3234203d3e20323633363631.roa (hash: eZy1/TSUj3jRTKjL+Odr0qWkzGlyxrKbjBRsdp8hfVI=)
                          5: 34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (hash: 19jiWVa4Wx+Uwvb5EljeauXJYWVHoXH4mlDaOOaYwGs=)
                          6: 323830343a313132383a3a2f33322d313238203d3e20323633363631.roa (hash: HwPBtqW5vhEBd8koAzFK9LedqHixBcZSsXLmwZ7Cp68=)
                          7: 3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa (hash: vNSubwtK60o9rYRpR0VaiUHReLizG/wZIwPIP1jnakA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:12:5f:f1:a9:9e:ff:99:4a:ca:a4:a4:12:12:54:bc:c2:f8:76:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Mar 17 18:34:11 2025 GMT
            Not After : Mar 18 20:54:11 2025 GMT
        Subject: CN=4B7292C59180EDAB25FC86D2DA896B701A3C5A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:bf:2a:b7:53:45:45:e8:f4:ce:78:f8:ee:
                    49:b9:c3:b7:67:86:f8:93:ab:b7:c7:40:42:60:e2:
                    2e:2e:27:10:81:ee:b5:54:6d:7b:a2:3f:5c:bf:63:
                    ef:e5:32:94:e9:94:43:70:91:06:33:c3:f8:4e:c8:
                    0a:b4:3f:ec:53:64:9b:af:8b:1e:db:06:2c:07:99:
                    26:6b:ff:b7:25:06:ce:c8:d2:4f:c3:71:67:7a:ba:
                    a0:82:e7:59:27:6a:71:3d:f0:63:b9:00:d7:0d:f2:
                    36:ed:e2:45:2a:59:95:92:9d:42:8b:db:29:1a:55:
                    50:2d:15:96:34:5a:af:0f:a0:6e:24:bf:a8:9d:a4:
                    e1:33:81:fe:c8:47:70:98:4a:cc:17:9b:80:1d:2b:
                    b0:3a:35:23:14:84:8d:f1:c6:69:d7:f5:f6:ab:2d:
                    f6:ea:31:57:30:32:fb:bb:11:25:2c:53:17:13:21:
                    63:48:ac:81:02:aa:33:e0:e3:5e:d3:7e:ee:25:dd:
                    61:88:af:f8:4c:ea:0c:1c:ce:c5:8c:07:70:44:39:
                    50:05:65:23:80:c4:e0:53:f3:05:53:69:6f:81:5c:
                    f1:ea:44:0f:ee:71:95:db:d6:e9:3a:31:d4:b6:46:
                    3b:d1:92:a5:0f:c2:29:83:81:1b:4e:00:6b:bc:3e:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:72:92:C5:91:80:ED:AB:25:FC:86:D2:DA:89:6B:70:1A:3C:5A:28
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b5:ca:e5:d0:78:18:56:53:25:a9:09:32:19:3c:df:e3:03:
         df:b0:60:18:cc:75:f5:f3:87:b0:ce:d0:18:17:bb:5c:4b:8d:
         74:f0:63:b0:08:37:47:bc:f6:3f:74:9c:94:bc:b1:7b:a6:11:
         d7:c6:98:63:ff:4f:5c:1b:0a:ea:70:09:ce:d9:0d:ca:96:04:
         aa:a4:da:66:fe:1f:be:65:55:01:b7:0e:c2:83:d6:a3:94:0e:
         f2:14:7b:3a:74:e9:f7:0f:75:97:f5:b4:cc:20:ba:e4:a2:e3:
         4b:7c:11:d8:6e:d2:a5:8e:64:63:34:8e:cb:dd:27:9a:56:2b:
         74:7b:ec:18:07:62:f9:1f:20:c9:b8:6a:8b:32:95:f1:0b:d1:
         70:6d:3e:89:75:ef:b9:c0:f5:9d:db:8d:8f:e3:eb:48:7d:f0:
         a6:bf:28:52:b8:46:c1:24:60:c5:69:24:47:fb:22:5c:29:b3:
         ba:f6:bf:e0:e0:12:73:a8:fd:b4:f1:78:11:47:8f:05:53:c7:
         23:f6:ea:1b:de:a3:8a:0b:17:58:fd:52:1c:91:2e:4b:3e:cd:
         c6:0a:aa:83:f5:87:f2:85:e2:5a:61:9f:37:eb:d2:d6:1e:e9:
         8a:5c:a9:28:ed:09:10:3a:43:56:4b:92:f7:dd:16:00:55:5c:
         3f:70:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----