Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.mft
File:                     8E2D0A435995B551D35CAD14D4DFAA748CE93C61.mft (raw, json)
Hash identifier:          UPoiaDKgc2oFFpAwJSd7S6kTcCRFpur6vS9L29i0t9g=
Subject key identifier:   B9:38:61:6A:ED:90:10:72:2E:79:E8:AD:7C:74:9B:A1:F6:66:39:A2
Authority key identifier: 8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61
Certificate issuer:       /CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
Certificate serial:       7863D95729BE78270801F5400EEC6B850A7B450C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.mft
Manifest number:          8F
Signing time:             Sun 30 Mar 2025 10:12:50 +0000
Manifest this update:     Sun 30 Mar 2025 10:07:50 +0000
Manifest next update:     Mon 31 Mar 2025 12:07:50 +0000
Files and hashes:         1: 3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (hash: NUvXbRY7hRZ43SAuC1w24aM8dkyI/qjVj79d8KSPcLY=)
                          2: 323830343a323566633a3a2f33322d3332203d3e20323634333136.roa (hash: /a1W8aTktqxj23cP3u4d1SH/57KjUnBZDiDdwEhv2Io=)
                          3: 8E2D0A435995B551D35CAD14D4DFAA748CE93C61.crl (hash: SkP3thnynMclqDAWRLxOtTrylJuJ5ivkX3ztc5puHN8=)
                          4: 3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (hash: MeqRuYDa1FamiFLsc2+xlsUrfHdrLE40JI7lhsltVbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:63:d9:57:29:be:78:27:08:01:f5:40:0e:ec:6b:85:0a:7b:45:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
        Validity
            Not Before: Mar 30 10:07:50 2025 GMT
            Not After : Mar 31 12:07:50 2025 GMT
        Subject: CN=B938616AED9010722E79E8AD7C749BA1F66639A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:80:0b:36:d2:7e:a6:2e:f6:6e:66:57:04:
                    85:08:d3:9f:a2:5d:f6:28:92:49:67:4a:93:22:e6:
                    54:b0:91:8b:60:e8:e5:63:85:e9:27:5e:dd:56:dc:
                    10:a3:b8:bd:52:e8:7a:3c:39:02:0b:be:67:2c:5f:
                    51:15:ae:f0:8e:4f:62:86:85:27:31:0f:82:f9:25:
                    6a:ae:f0:84:d1:f5:25:0c:4e:98:60:d5:a4:a6:3e:
                    99:34:63:53:e5:b2:c6:82:12:07:a6:8e:eb:49:88:
                    7c:8a:fa:7b:83:fe:92:d7:02:fa:cb:1a:ac:78:e5:
                    a3:b0:0d:b5:32:c0:44:75:fc:df:ee:87:1f:d4:81:
                    be:f2:63:6f:e5:c7:b9:1f:1e:3b:78:53:78:86:a4:
                    03:82:d0:b1:d1:6d:6b:97:8f:c9:36:b7:00:ea:78:
                    29:c3:91:62:b8:76:75:f2:d1:01:3e:b6:25:ca:29:
                    53:17:21:2b:4c:a3:4c:c1:27:9a:75:0e:f2:b2:d5:
                    f2:2c:df:83:58:43:3b:c0:c9:ab:c3:18:60:1a:07:
                    ca:d5:38:60:a4:cf:91:83:d4:3f:47:1e:3d:ba:ee:
                    64:fe:72:96:35:38:7a:3a:14:1d:2d:29:1c:c9:0c:
                    ef:dc:a5:79:14:e2:33:36:f4:c1:46:2c:e3:10:9b:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:38:61:6A:ED:90:10:72:2E:79:E8:AD:7C:74:9B:A1:F6:66:39:A2
            X509v3 Authority Key Identifier:
                keyid:8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:f0:29:a8:14:7c:ab:d8:5a:17:cd:75:af:97:d5:4d:34:
         72:aa:cb:a5:46:aa:69:87:d7:e8:20:79:4e:7d:f2:6a:b7:db:
         6b:62:9f:79:96:a6:a3:32:b9:d3:a4:96:6a:f0:f3:6b:f5:ed:
         bb:93:3c:ee:07:36:a6:b0:c9:cd:40:0d:f7:09:86:13:10:1d:
         8d:f1:09:46:b5:1b:e8:e3:bf:1b:dc:f4:a6:d7:81:7c:d8:f4:
         47:ab:78:83:90:a7:8d:80:e2:c2:52:2e:3a:4d:c7:e3:d4:27:
         3c:91:ae:e9:e1:dd:26:89:54:d3:70:a4:90:a0:ad:f0:8e:0d:
         18:07:3b:a1:85:5b:b6:ca:bc:3f:fe:f8:c5:3b:d8:66:eb:04:
         e4:0c:0c:34:c5:21:40:4b:8c:cf:06:4b:1e:2a:00:42:16:42:
         ea:b5:e2:b8:4c:e0:57:7b:15:71:66:00:33:4d:92:df:6a:d2:
         21:eb:37:80:02:39:82:84:10:1b:ba:ee:00:55:69:9d:35:fa:
         7c:a4:ec:fb:6d:0e:4d:7e:18:bd:b9:c5:ea:6c:d7:fe:6b:1d:
         58:59:d2:61:74:75:cd:e2:db:cd:f3:24:49:42:c6:d5:46:ef:
         1d:82:2a:b8:a0:59:35:42:24:6b:0c:0e:3b:1b:04:86:80:69:
         b3:d2:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----