Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft
File:                     8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft (raw, json)
Hash identifier:          NAwXhFxIU3McQoiF5V5E2pklVXBtOJtounXlK5gGfMo=
Subject key identifier:   88:44:B7:FC:B7:D9:4B:CF:3C:DE:63:95:C3:86:B9:EC:9E:66:59:A9
Authority key identifier: 8D:8F:EF:42:CB:67:1E:03:2C:CE:70:21:06:5F:7C:E0:2A:10:A5:52
Certificate issuer:       /CN=8D8FEF42CB671E032CCE7021065F7CE02A10A552
Certificate serial:       3391185C14ACBC6D5F1A9786F8DC56E24DE32CFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8FEF42CB671E032CCE7021065F7CE02A10A552.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft
Manifest number:          01A2
Signing time:             Wed 12 Feb 2025 22:00:00 +0000
Manifest this update:     Wed 12 Feb 2025 21:55:00 +0000
Manifest next update:     Thu 13 Feb 2025 22:51:00 +0000
Files and hashes:         1: 34352e3233362e36372e302f32342d3234203d3e20323638323234.roa (hash: heNw41QdIkMbT7I19imT+6LgPUwCou1X5ucZv4gxee0=)
                          2: 323830343a346464633a3a2f33322d3332203d3e20323638323234.roa (hash: fqFP6MhniXAZOyA9hWUsDDT8nyUxevFQTOHIUkdg4XE=)
                          3: 34352e3233362e36342e302f32342d3234203d3e20323638323234.roa (hash: T1xnffg/JW/ZkxvAHx6Qfigjzrp1ROZpNOg/283aics=)
                          4: 8D8FEF42CB671E032CCE7021065F7CE02A10A552.crl (hash: oCceW0KoSdeXN+HFLV7SelNZu+PZcpZgge8o+TMbGrA=)
                          5: 34352e3233362e36362e302f32342d3234203d3e20323638323234.roa (hash: Rf8/eKphH+8ZUOHqrYm374OgLWcbD6VyPr3rgiaBvWE=)
                          6: 34352e3233362e36352e302f32342d3234203d3e20323638323234.roa (hash: R4xMRXw4E5WuerUyxjyZfBn/gSFLpwJ/0NQFTGqrIqA=)
                          7: 34352e3233362e36342e302f32322d3232203d3e20323638323234.roa (hash: 6apui4qi81HF09PRxRrsU/eBCwKrfO+teFNqLW1P/ao=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:91:18:5c:14:ac:bc:6d:5f:1a:97:86:f8:dc:56:e2:4d:e3:2c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8FEF42CB671E032CCE7021065F7CE02A10A552
        Validity
            Not Before: Feb 12 21:55:00 2025 GMT
            Not After : Feb 13 22:51:00 2025 GMT
        Subject: CN=8844B7FCB7D94BCF3CDE6395C386B9EC9E6659A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:55:f1:1d:5a:02:20:72:93:2e:8e:95:3c:
                    4d:89:cf:51:e6:59:07:91:94:bf:6a:6f:4d:c0:b6:
                    6f:c0:47:e6:fc:bf:02:e3:37:f3:eb:51:c6:05:68:
                    aa:7e:f0:ca:15:48:58:6e:b0:4c:85:92:7e:be:3e:
                    b9:4b:8d:ef:f2:e2:0e:41:ac:72:91:c2:6c:26:74:
                    e1:de:76:f8:a8:b3:5d:e0:e9:5d:dd:97:ce:21:77:
                    d1:f3:24:44:9b:bb:3c:32:7c:b2:dc:cb:16:9d:a9:
                    f7:a2:67:a4:de:9b:01:a2:53:88:fb:f8:94:56:42:
                    b4:fd:6e:f6:b2:2b:80:71:c1:ac:6c:e8:cb:ed:cb:
                    22:ba:7a:5f:6c:28:08:52:ba:4c:ab:56:71:28:64:
                    de:0a:e6:78:7d:59:f9:42:40:62:b1:c6:47:c9:4e:
                    f6:c4:e9:d7:4a:63:38:7f:03:90:9d:c1:c7:fd:c0:
                    a1:4a:1d:d5:a4:6d:3a:6c:ad:43:b8:9a:4a:52:06:
                    74:12:bc:49:42:59:1e:c6:b3:1c:12:1f:63:4b:74:
                    86:14:ca:03:b0:34:1e:1b:db:46:af:4a:a9:5e:0d:
                    57:d7:25:5f:d6:af:b3:49:ac:95:e6:9c:9e:30:17:
                    e5:63:bd:cf:3b:63:4a:7c:a3:76:29:59:a7:24:47:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:44:B7:FC:B7:D9:4B:CF:3C:DE:63:95:C3:86:B9:EC:9E:66:59:A9
            X509v3 Authority Key Identifier:
                keyid:8D:8F:EF:42:CB:67:1E:03:2C:CE:70:21:06:5F:7C:E0:2A:10:A5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8FEF42CB671E032CCE7021065F7CE02A10A552.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/2/8D8FEF42CB671E032CCE7021065F7CE02A10A552.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:57:c5:c5:e9:6c:a1:63:f9:b3:54:9e:32:a1:df:d5:5f:f7:
         95:13:b0:95:cf:85:28:09:42:5a:7c:32:4a:e1:80:2e:f6:05:
         de:24:96:46:ce:94:a4:37:4c:ba:3d:f1:32:17:d4:5f:db:0f:
         51:da:d0:96:13:27:e0:c0:dc:73:07:76:ce:26:69:71:29:b5:
         e6:32:86:08:63:7e:98:4b:ba:8b:3a:cd:21:e4:38:d5:7d:fc:
         1c:70:0e:6e:60:95:69:04:2c:da:e6:86:ac:51:ba:fb:42:5b:
         2b:1b:e0:e2:c0:39:54:a7:1d:34:23:36:fe:0b:2c:89:f5:96:
         fd:ed:75:58:bb:1e:98:2c:0f:89:d6:4b:4f:bf:f7:58:3b:31:
         6e:ac:c4:af:d9:5c:78:4a:69:7e:3a:53:04:c1:c6:1b:37:39:
         4f:44:d7:cf:c3:57:6e:46:3a:eb:60:e7:2b:3f:89:68:77:e9:
         33:05:a5:25:91:be:84:10:fc:2c:86:d8:94:39:12:b1:c6:9b:
         d5:99:75:b5:4a:ff:d2:d5:07:33:1f:1a:fc:18:ce:f3:ec:8a:
         94:41:8f:4a:38:3c:c6:13:d8:8f:38:83:d2:b0:90:0f:c6:78:
         07:73:22:b7:1d:42:e8:2f:ff:f1:04:0f:dd:89:f3:ad:bd:8e:
         4c:0a:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----