Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.mft
File:                     F8BE8E8099EB9AD83487E36532BAD57E3162EE73.mft (raw, json)
Hash identifier:          Vs1ID81qQS0+2/JgIfi8lYjr0Do0KzInu92lgFroMN0=
Subject key identifier:   D9:6E:4B:CC:8F:52:4E:8E:F5:F5:46:DC:F7:12:02:75:B3:60:9C:10
Authority key identifier: F8:BE:8E:80:99:EB:9A:D8:34:87:E3:65:32:BA:D5:7E:31:62:EE:73
Certificate issuer:       /CN=F8BE8E8099EB9AD83487E36532BAD57E3162EE73
Certificate serial:       08E8756A7B6284D57E2F9EAC6315ADBDFD64FB8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.mft
Manifest number:          94
Signing time:             Fri 28 Mar 2025 19:06:08 +0000
Manifest this update:     Fri 28 Mar 2025 19:01:08 +0000
Manifest next update:     Sat 29 Mar 2025 19:13:08 +0000
Files and hashes:         1: 323830343a363066633a3a2f33322d3332203d3e20323639323034.roa (hash: 7QeoRBrDQ78M0ZVJBZmns7jETlLxUMnHvI+ZCpD1jYg=)
                          2: F8BE8E8099EB9AD83487E36532BAD57E3162EE73.crl (hash: vQmpWtGWS+eElKHLwW01lnYRXyL2Bq7hgk9GIJNLSR0=)
                          3: 34352e3138312e3231372e302f32342d3234203d3e20323639323034.roa (hash: 5wdupopTp/bbNizOjmUfgSFfv8hqsMqYadH5P7ZvQaY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e8:75:6a:7b:62:84:d5:7e:2f:9e:ac:63:15:ad:bd:fd:64:fb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8BE8E8099EB9AD83487E36532BAD57E3162EE73
        Validity
            Not Before: Mar 28 19:01:08 2025 GMT
            Not After : Mar 29 19:13:08 2025 GMT
        Subject: CN=D96E4BCC8F524E8EF5F546DCF7120275B3609C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:e7:4f:d7:47:0b:c2:08:93:27:28:a2:e0:
                    38:13:55:b6:5b:6d:00:a0:0a:ca:c4:bb:b0:c3:98:
                    0c:88:a8:e5:4d:c6:af:8e:c3:8c:19:0f:c5:13:18:
                    99:05:36:ba:82:b6:39:ef:e2:27:29:af:41:b0:70:
                    46:7f:65:e6:ce:98:b3:81:a0:0f:2f:fa:4b:4f:c3:
                    ce:2d:50:a4:55:ca:b0:9d:49:b0:5f:15:a4:1a:b3:
                    3e:23:86:10:7d:44:82:0b:6a:81:66:ce:d5:b2:44:
                    f4:4d:c7:e6:b7:54:7b:07:75:4e:d8:a0:01:3d:97:
                    11:39:3f:4f:38:cb:cc:97:98:40:1a:4a:c9:a4:a5:
                    6d:05:f4:ea:3a:96:c9:78:f5:e4:90:a0:d6:23:0a:
                    62:ad:70:2d:8c:e4:84:50:c4:b7:50:3a:b7:0f:8a:
                    28:4b:8b:4c:f5:df:2e:e1:2e:f7:56:0a:26:e1:0b:
                    64:02:f2:bb:33:24:88:ac:d1:ef:30:42:da:fe:68:
                    18:41:4b:65:f0:6d:da:4c:8b:5f:f3:ed:58:c4:39:
                    df:bf:e1:63:7b:c2:c7:2c:4b:d2:23:fe:e1:91:8b:
                    f2:91:bf:be:7f:44:82:d7:6e:cc:2d:7a:a7:a1:13:
                    fa:2f:24:dd:44:da:54:7e:7e:5e:15:98:17:30:21:
                    f4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6E:4B:CC:8F:52:4E:8E:F5:F5:46:DC:F7:12:02:75:B3:60:9C:10
            X509v3 Authority Key Identifier:
                keyid:F8:BE:8E:80:99:EB:9A:D8:34:87:E3:65:32:BA:D5:7E:31:62:EE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:13:c2:51:f8:0e:16:92:fe:f1:15:c9:e2:4f:f6:d2:15:5d:
         66:5c:58:d1:3f:67:e9:d3:4c:5c:df:80:76:57:56:ce:d5:1e:
         6d:93:67:16:9a:35:65:a5:c2:f6:b2:b2:31:d8:c7:71:50:94:
         aa:c6:86:3b:1d:91:a0:7f:4c:b7:df:16:a4:0f:27:b6:25:c1:
         7a:64:1c:d1:82:b1:e9:e6:ac:47:1e:e5:c5:36:af:94:32:e8:
         1d:eb:51:df:5b:8c:f5:92:38:a6:39:39:37:85:eb:aa:6b:ca:
         f1:64:3a:58:fe:38:dc:69:3c:b9:8a:7c:e1:f5:ee:14:90:2b:
         f9:a2:ec:f8:0b:8a:ce:7f:21:82:cf:80:25:7f:38:56:14:b3:
         a3:d0:12:ee:fa:30:de:a2:81:ac:ee:d9:a1:c5:c5:10:f6:2f:
         25:64:3a:89:45:b6:42:4e:58:f7:b6:d6:42:c7:11:40:95:84:
         ef:cb:91:66:31:cb:1e:cf:a4:26:81:e6:79:eb:7c:0e:61:4a:
         97:f8:c8:95:2b:31:6e:cc:10:c8:23:86:80:9a:45:73:c7:af:
         f9:22:e9:5c:4e:9b:b3:4c:5f:98:22:06:c5:b7:97:01:a0:eb:
         37:4d:40:19:d8:d6:b7:f5:ed:71:31:d7:b4:ee:db:37:fd:0c:
         9d:df:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----