Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.mft
File:                     B8D4C69F88BC4238C7A92B57634EE1E3AA837140.mft (raw, json)
Hash identifier:          tArss15WB1lfzD8/dNshbsbES0R1l5/hOFOZUBvMqy4=
Subject key identifier:   66:DC:76:61:02:F4:34:E9:0A:6E:0B:9F:F0:24:9E:2D:D8:21:4B:DF
Authority key identifier: B8:D4:C6:9F:88:BC:42:38:C7:A9:2B:57:63:4E:E1:E3:AA:83:71:40
Certificate issuer:       /CN=B8D4C69F88BC4238C7A92B57634EE1E3AA837140
Certificate serial:       682E03809DF384C0A1A3338BC4C649AABFC7B233
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.mft
Manifest number:          34
Signing time:             Sun 14 Apr 2024 19:54:57 +0000
Manifest this update:     Sun 14 Apr 2024 19:49:57 +0000
Manifest next update:     Mon 15 Apr 2024 22:58:57 +0000
Files and hashes:         1: 34352e3233392e302e302f32322d3232203d3e203532383538.roa (hash: VJ8nOcenlY48rYXnQ2ZnemB6sFaXyug+Z3pJ/9DjR/s=)
                          2: B8D4C69F88BC4238C7A92B57634EE1E3AA837140.crl (hash: Nt2d+daGnGvzcT6tE+1UWDDc6dE89QGGV80GF9giTtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2e:03:80:9d:f3:84:c0:a1:a3:33:8b:c4:c6:49:aa:bf:c7:b2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D4C69F88BC4238C7A92B57634EE1E3AA837140
        Validity
            Not Before: Apr 14 19:49:57 2024 GMT
            Not After : Apr 15 22:58:57 2024 GMT
        Subject: CN=66DC766102F434E90A6E0B9FF0249E2DD8214BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:dc:47:d3:71:d7:75:cd:2d:c6:3e:98:a3:
                    54:5b:0a:2d:03:77:56:ae:dd:03:a5:71:22:6b:cd:
                    d8:d3:9f:a6:3e:ef:b9:78:ca:76:e0:57:3a:65:b1:
                    ed:f3:cd:91:3e:82:49:cd:be:1d:a2:4c:91:2f:b9:
                    21:d3:68:27:10:72:20:c5:d2:80:6d:b8:d5:64:02:
                    d9:57:b2:3a:4b:c9:29:12:eb:d2:3a:25:51:32:5c:
                    7b:2d:ab:25:23:7a:a5:59:43:2a:ea:bc:c7:09:9a:
                    1f:a0:85:06:dc:2f:6b:8d:f3:fc:c1:2d:81:fb:3a:
                    27:04:ad:f1:58:82:75:e4:3e:0a:ca:a0:aa:36:58:
                    92:7f:48:f2:3f:9f:10:a8:6c:27:f1:1a:b0:e1:4b:
                    7d:6d:d6:59:66:3e:eb:d5:40:f5:49:5f:bf:09:b3:
                    39:93:8c:ed:c9:54:54:7a:ea:2b:6f:ec:2c:cd:d1:
                    2b:22:43:1a:ee:5c:82:19:03:75:17:f1:37:b1:ad:
                    ff:22:4b:dc:81:38:d5:3c:2d:3a:1c:99:95:6d:0f:
                    08:49:0a:1a:b4:2d:a7:f0:e5:67:6a:f1:e0:30:98:
                    3d:d9:3e:6f:10:a5:5e:ae:e9:23:34:96:63:f9:c1:
                    78:b5:2c:a5:8a:18:7a:ee:06:21:22:2f:9b:91:9e:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:76:61:02:F4:34:E9:0A:6E:0B:9F:F0:24:9E:2D:D8:21:4B:DF
            X509v3 Authority Key Identifier:
                keyid:B8:D4:C6:9F:88:BC:42:38:C7:A9:2B:57:63:4E:E1:E3:AA:83:71:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:82:15:0a:9e:44:5e:6e:80:f4:3e:10:e9:a3:ac:cc:ae:
         f2:eb:6b:fa:23:16:2e:40:f0:d0:d1:4c:de:15:e7:7d:63:7c:
         5e:c8:69:d2:b9:79:50:b8:f4:af:00:c2:81:f4:ad:17:b9:7b:
         55:e4:db:89:2a:61:0d:a5:24:f3:6b:70:83:77:2d:30:e9:ec:
         67:77:f3:11:5d:14:70:b4:4a:e6:01:4f:ef:78:77:22:20:b0:
         e9:d2:7b:f6:2a:ac:c9:8d:1e:8c:11:53:8e:ec:5a:7d:dd:cb:
         3f:8c:77:92:9c:e5:e4:e9:87:9e:14:36:36:70:39:ec:2f:14:
         b3:5e:22:63:96:0b:44:f2:dc:ee:d8:f4:88:d6:6b:db:60:9f:
         23:d6:17:64:d8:6a:5e:62:61:3b:b5:fb:a7:c2:81:f7:85:49:
         e9:cb:b7:3e:15:d2:9f:71:91:1a:a7:e4:9c:f9:93:35:86:97:
         59:74:e9:e7:9d:c4:fc:57:b5:71:99:37:38:e6:c0:d2:5b:01:
         bb:37:ea:ce:6d:e3:54:28:1d:f6:8b:df:92:3e:90:a1:dc:bb:
         b8:b2:3c:a9:85:93:77:31:0e:1d:29:08:fb:4e:5b:f2:e6:5f:
         8d:9a:68:2e:db:0a:62:22:16:f0:83:ab:f7:bc:2e:43:db:22:
         2e:f3:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----