Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.mft
File:                     2BE906475F069D2DBF48668B72C827DA2CA8E470.mft (raw, json)
Hash identifier:          rYXUDkmw+CfcozEm2ktpn3Jp3GLi6cmFZi55zsSsvJ0=
Subject key identifier:   E4:81:EF:A4:43:C9:8B:E6:8A:58:62:8C:61:94:CB:F2:F0:9E:EF:5B
Authority key identifier: 2B:E9:06:47:5F:06:9D:2D:BF:48:66:8B:72:C8:27:DA:2C:A8:E4:70
Certificate issuer:       /CN=2BE906475F069D2DBF48668B72C827DA2CA8E470
Certificate serial:       1C8AF9B36506D87AFEB40E303DDB7457E53982F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE906475F069D2DBF48668B72C827DA2CA8E470.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.mft
Manifest number:          77
Signing time:             Thu 27 Feb 2025 06:20:31 +0000
Manifest this update:     Thu 27 Feb 2025 06:15:31 +0000
Manifest next update:     Fri 28 Feb 2025 06:27:31 +0000
Files and hashes:         1: 3137392e3132372e39362e302f32302d3234203d3e20323632343639.roa (hash: 4Dpc0fv+7P2m68jWU74nVR8kkteYDcvoPizul9s+qEg=)
                          2: 323830343a3464343a3a2f33322d3438203d3e20323632343639.roa (hash: cU7aFAYCTU+yUm5Bzt+4ygHwzmtx7OSepnXCQy4kS+Q=)
                          3: 3137372e34372e3136302e302f32302d3234203d3e20323632343639.roa (hash: i9FHc4pGFmqtn38z5llonbzW8xyiAPtIn7U5JDBCtzQ=)
                          4: 3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa (hash: WIM5YpzOJ9Ig0wMVsvTX0Vx9G5/m/3HReHGfBamVwak=)
                          5: 2BE906475F069D2DBF48668B72C827DA2CA8E470.crl (hash: Q8/ikTkGoEJw5OX5ZbhgFTcIJLTQBL5UDwSh3pWiXBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8a:f9:b3:65:06:d8:7a:fe:b4:0e:30:3d:db:74:57:e5:39:82:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE906475F069D2DBF48668B72C827DA2CA8E470
        Validity
            Not Before: Feb 27 06:15:31 2025 GMT
            Not After : Feb 28 06:27:31 2025 GMT
        Subject: CN=E481EFA443C98BE68A58628C6194CBF2F09EEF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:5d:f5:64:c9:47:e5:0d:58:94:b4:70:0b:
                    df:54:94:8c:3b:f3:9c:5b:ff:46:64:46:f0:55:49:
                    f5:3b:0e:26:1e:e2:3e:a6:22:fb:56:2a:e7:dc:c9:
                    9e:62:25:ba:07:64:c4:40:4b:1b:d7:ee:0e:fc:73:
                    a2:61:2a:1f:e6:87:c9:37:ff:01:69:9e:3f:43:7b:
                    85:d0:b0:ea:1c:b6:7a:31:11:51:8b:6b:c6:46:ac:
                    c2:26:21:10:96:3e:0d:39:0d:85:b0:38:f5:ee:16:
                    10:9d:e1:7d:76:2e:5b:1f:78:31:7e:e5:b0:54:8a:
                    9d:e5:28:4d:d6:b4:a9:0f:85:ac:ad:cc:af:75:37:
                    d4:53:6b:fb:1a:c0:29:60:0c:5e:62:12:ba:f1:2a:
                    f2:ab:59:3f:6f:13:82:77:08:bf:f6:7a:28:4c:b2:
                    f9:54:1f:6f:04:42:aa:c5:85:66:b9:da:f1:f4:0d:
                    cc:75:f2:80:5e:e4:37:8c:6b:78:ac:3e:ee:91:38:
                    15:06:09:6a:e9:4c:a9:51:f9:d9:8a:62:25:11:d7:
                    bd:49:3c:2f:81:d5:68:f1:51:c8:57:b3:c8:1d:80:
                    f5:c5:08:78:b8:a4:42:70:53:20:53:d9:e3:ab:f2:
                    11:37:4f:33:be:79:fa:6c:ea:7b:da:28:67:9c:f7:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:81:EF:A4:43:C9:8B:E6:8A:58:62:8C:61:94:CB:F2:F0:9E:EF:5B
            X509v3 Authority Key Identifier:
                keyid:2B:E9:06:47:5F:06:9D:2D:BF:48:66:8B:72:C8:27:DA:2C:A8:E4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE906475F069D2DBF48668B72C827DA2CA8E470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:13:ea:1b:42:78:13:0b:aa:1e:40:6d:1a:3e:76:f1:75:
         2c:fb:b4:42:5d:ef:e7:33:a4:1a:19:5d:24:0f:4c:72:f4:02:
         c5:61:e6:ae:8c:0e:d6:6f:53:61:10:49:18:90:ae:2d:6b:7a:
         d3:78:69:b5:44:f2:76:cf:d4:cf:53:e6:32:e4:7b:7f:6f:47:
         fd:70:34:b7:52:fb:aa:eb:b7:a8:ff:2a:ea:8a:d4:30:a0:47:
         80:0d:df:bb:3a:6a:73:3d:1c:f4:a6:51:2b:df:4a:c9:0f:2b:
         5c:66:ff:26:4a:0c:5b:4b:da:10:92:db:03:11:af:00:05:eb:
         1c:b4:95:8d:d3:ab:a8:63:7f:e4:43:40:5d:73:ed:6e:bd:08:
         6d:53:5e:05:52:6b:42:f8:eb:f7:8c:cc:24:89:7c:d3:35:40:
         af:cb:51:82:a4:45:81:f8:b6:ad:63:b2:67:e9:c9:5f:b3:99:
         0b:86:99:1d:4b:f6:17:1b:0f:5d:1e:64:35:7d:95:20:68:13:
         4f:5b:a6:be:99:21:8d:0a:ec:14:88:bd:93:b4:52:e6:d3:14:
         23:41:05:a4:e9:44:75:e5:f0:17:ed:bd:a7:cd:e8:79:01:4d:
         88:49:3a:99:6a:9d:04:0b:c1:a4:b4:58:c3:a1:73:ee:1f:bf:
         c9:95:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----