Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.mft
File:                     2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.mft (raw, json)
Hash identifier:          Vbx2uyVvMDCo+Fy1OULRvDdHO5oH7lIxYugVcNvEeoc=
Subject key identifier:   36:4D:B5:72:5C:59:EC:C0:82:8E:86:02:6F:CD:69:C8:75:C1:5E:2E
Authority key identifier: 2C:8B:93:2A:8C:0C:2B:F6:73:EC:E8:BA:5A:EA:BD:93:F1:B2:4C:71
Certificate issuer:       /CN=2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71
Certificate serial:       281741728B754809330C7FBE7631B37158504E5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.mft
Manifest number:          E9
Signing time:             Tue 24 Dec 2024 04:23:19 +0000
Manifest this update:     Tue 24 Dec 2024 04:18:19 +0000
Manifest next update:     Wed 25 Dec 2024 07:10:19 +0000
Files and hashes:         1: 323830343a386665383a3a2f33322d3332203d3e20323733353231.roa (hash: hSumTaIP/5/CIEgQhsQ0DuXcwze2rtr5eXdtPwX18l0=)
                          2: 2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.crl (hash: XjBPRZEAcp6hoPu8caf9fGVZwObO9o/WydrgE4Y30jc=)
                          3: 3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa (hash: 9EmK8kI5VSwYEFvrR9660R6UlHZK/QzKIvlyKoArrrQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:17:41:72:8b:75:48:09:33:0c:7f:be:76:31:b3:71:58:50:4e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71
        Validity
            Not Before: Dec 24 04:18:19 2024 GMT
            Not After : Dec 25 07:10:19 2024 GMT
        Subject: CN=364DB5725C59ECC0828E86026FCD69C875C15E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:a1:9a:55:6b:65:fa:f9:ff:a3:f0:3a:10:
                    50:dc:5a:d9:fb:33:7c:2c:11:33:32:52:ab:17:d0:
                    7e:23:68:e9:a1:40:e6:df:a4:f0:c9:63:d0:55:cd:
                    f4:b0:e1:b1:25:c3:c4:a8:11:b3:73:66:d5:a1:9e:
                    32:d3:5f:23:2e:78:7f:a9:a2:57:8f:10:10:ad:a3:
                    8b:a4:cf:c7:ea:b5:38:44:66:b2:a1:07:c9:6a:78:
                    d2:3b:b4:e5:25:15:86:f2:bd:38:5f:5b:a0:32:60:
                    c3:eb:8d:be:ee:16:56:f7:e1:69:38:5e:f0:88:3a:
                    bb:86:d6:17:6b:c3:17:f9:ca:62:82:2b:07:cd:21:
                    ec:4f:ee:11:66:18:63:57:b9:57:56:3a:c3:17:2e:
                    b0:fd:4e:5b:2c:8f:42:4a:72:f9:5a:1a:63:8d:28:
                    49:fc:ed:f8:3b:7c:16:b8:c7:fc:bb:55:3f:e5:de:
                    b7:35:17:7b:58:79:37:5f:62:1f:6d:8b:08:63:e3:
                    4e:39:fc:69:9e:71:11:7e:74:d8:2b:51:72:58:3e:
                    09:69:a1:99:17:86:ea:2e:df:b6:1a:dd:83:9b:70:
                    4d:91:71:29:4d:ca:17:b0:76:29:b9:77:ce:f3:f0:
                    d9:04:70:fc:fe:33:f3:1b:eb:62:b6:a8:44:6b:bc:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4D:B5:72:5C:59:EC:C0:82:8E:86:02:6F:CD:69:C8:75:C1:5E:2E
            X509v3 Authority Key Identifier:
                keyid:2C:8B:93:2A:8C:0C:2B:F6:73:EC:E8:BA:5A:EA:BD:93:F1:B2:4C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d0:11:9c:70:bf:23:73:be:0d:cc:16:74:57:57:8e:7e:c1:
         b0:02:9e:7f:44:66:f8:8b:ac:8e:ca:44:f9:9f:f3:9b:d5:2f:
         42:12:92:49:09:bb:3d:53:e9:a2:a1:04:aa:47:ce:1a:94:94:
         29:8d:99:f9:a8:64:e7:4f:77:dd:ae:fc:94:40:45:90:42:71:
         19:92:f5:a0:11:95:20:d0:87:f4:de:09:d1:d8:80:1c:0e:1e:
         dd:9c:93:79:8a:6f:0d:84:19:19:a1:e2:26:b0:d4:66:d3:12:
         50:24:3e:18:21:62:d4:ec:12:a2:bb:89:80:5c:d9:96:3a:a6:
         e6:bb:1c:b1:71:17:a1:91:fd:d3:3a:ee:85:0b:36:81:90:43:
         e8:59:9f:9d:e2:b0:26:14:23:71:5e:9b:af:d8:72:56:92:23:
         8a:11:5b:d9:38:86:f0:f4:ff:4d:46:d1:3c:51:34:7f:89:79:
         0d:d0:43:40:20:5c:88:4e:0c:f2:6f:b9:41:e4:7c:db:b0:cd:
         06:ab:c1:7e:d1:57:c7:28:6f:f5:9b:2f:04:d5:4a:09:5d:df:
         48:51:03:9d:5e:63:42:13:a4:f9:7b:9b:9d:5c:4b:ad:51:70:
         fb:e6:47:a6:cf:2b:03:21:68:50:79:21:4b:f0:6e:44:d6:e9:
         f5:ae:86:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----