Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2PskwQAb9frboyZp9KCLhgfZAMZr3FXrSo9DWdHvHFxE/0/17B0703CF43E4F88D4D2ED4650E59CC37E726D79.mft
File:                     17B0703CF43E4F88D4D2ED4650E59CC37E726D79.mft (raw, json)
Hash identifier:          Sz7WVi+puokIOOlJ1aUuBancOpbaxC0o0yvzvwcnBgk=
Subject key identifier:   EE:55:B3:F8:E3:B7:1F:0F:3A:74:07:DB:7C:29:F5:8E:04:7A:0F:E6
Authority key identifier: 17:B0:70:3C:F4:3E:4F:88:D4:D2:ED:46:50:E5:9C:C3:7E:72:6D:79
Certificate issuer:       /CN=17B0703CF43E4F88D4D2ED4650E59CC37E726D79
Certificate serial:       13B2349AC12EF68790811E5E3FF2E9567BF5E5C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17B0703CF43E4F88D4D2ED4650E59CC37E726D79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PskwQAb9frboyZp9KCLhgfZAMZr3FXrSo9DWdHvHFxE/0/17B0703CF43E4F88D4D2ED4650E59CC37E726D79.mft
Manifest number:          04C9
Signing time:             Sat 15 Jul 2023 15:58:37 +0000
Manifest this update:     Sat 15 Jul 2023 15:53:37 +0000
Manifest next update:     Sun 16 Jul 2023 18:43:37 +0000
Files and hashes:         1: 323830343a363731303a3a2f33322d3438203d3e20323639363031.roa (hash: +jOjpEZe6iwpe6ZcCv7OHR/b2SWS0bxNuqvB4TjTDOE=)
                          2: 17B0703CF43E4F88D4D2ED4650E59CC37E726D79.crl (hash: W1eS8/9AZYni1y4FK1EktDKkDCawRS5NJVQiLfQhRds=)
                          3: 34352e3138392e3230342e302f32322d3234203d3e20323639363031.roa (hash: 0MEl0Qsf9tZ1slOC6z9vCGCQLGV8iF+w6+p58tolh7A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b2:34:9a:c1:2e:f6:87:90:81:1e:5e:3f:f2:e9:56:7b:f5:e5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B0703CF43E4F88D4D2ED4650E59CC37E726D79
        Validity
            Not Before: Jul 15 15:53:37 2023 GMT
            Not After : Jul 16 18:43:37 2023 GMT
        Subject: CN=EE55B3F8E3B71F0F3A7407DB7C29F58E047A0FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:5f:f6:7a:51:d8:06:7c:21:0d:08:04:77:
                    31:70:85:00:2c:f7:11:a6:9d:e9:38:90:16:f6:07:
                    c4:dd:38:ad:26:dc:f4:51:3a:5a:c3:96:30:02:47:
                    07:70:e3:6e:26:f0:78:4e:86:aa:4e:ff:d1:09:2c:
                    7c:98:99:ee:cc:38:8a:4e:c0:a7:a3:52:df:54:0b:
                    fd:8b:3f:d6:80:c8:fb:34:49:50:79:0c:8e:87:52:
                    ce:14:47:a5:b3:21:22:ac:66:06:8c:42:c8:86:75:
                    8a:2c:98:b6:04:5a:f7:0c:fe:61:fa:48:5d:1d:5c:
                    19:4c:9f:2e:b5:bc:e0:20:7b:f3:05:c9:ee:1e:4b:
                    e8:7d:d3:4b:4b:65:73:c0:27:e2:92:48:c5:39:30:
                    ef:c6:65:8e:ac:b9:96:a3:d0:51:ea:ed:79:21:f0:
                    2b:ce:a4:56:77:2f:4b:ab:31:54:2b:3b:4e:f0:e3:
                    fd:d2:dc:74:15:a4:94:90:3a:2e:ce:f7:9f:80:d5:
                    64:50:08:54:ad:62:74:0a:6a:67:ab:07:eb:fd:3b:
                    9b:0c:19:5a:8a:e5:ac:d9:a1:7b:a2:af:32:75:9c:
                    26:f0:fe:ee:a4:99:d7:51:d1:1d:5e:da:de:c0:b1:
                    67:7b:b7:18:66:ac:fb:c9:3e:0b:ca:12:85:d2:11:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:55:B3:F8:E3:B7:1F:0F:3A:74:07:DB:7C:29:F5:8E:04:7A:0F:E6
            X509v3 Authority Key Identifier:
                keyid:17:B0:70:3C:F4:3E:4F:88:D4:D2:ED:46:50:E5:9C:C3:7E:72:6D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PskwQAb9frboyZp9KCLhgfZAMZr3FXrSo9DWdHvHFxE/0/17B0703CF43E4F88D4D2ED4650E59CC37E726D79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17B0703CF43E4F88D4D2ED4650E59CC37E726D79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PskwQAb9frboyZp9KCLhgfZAMZr3FXrSo9DWdHvHFxE/0/17B0703CF43E4F88D4D2ED4650E59CC37E726D79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:3e:da:5e:8c:d9:79:a1:0e:f1:6e:b6:18:96:1b:ab:77:
         c1:0b:64:d7:9c:ed:01:99:5f:d8:30:86:5f:f0:5c:d2:88:3c:
         c7:aa:86:27:9c:30:25:16:81:dc:fc:3e:8a:8e:01:61:b2:5a:
         88:d5:3c:b6:37:a3:d9:f7:b7:56:c8:3e:28:3a:4e:81:3e:1b:
         0c:dd:0f:fd:db:22:0b:b3:87:9e:20:f0:57:a1:b2:64:e4:a6:
         b0:a1:1e:56:67:55:48:d2:f2:f0:61:21:4d:65:6f:7d:32:76:
         fd:85:79:bf:23:32:2e:36:63:cd:8a:f3:2e:27:16:e3:b2:82:
         54:61:32:30:a4:d9:9a:f5:b4:44:0a:5a:1f:c6:fc:a8:22:62:
         8d:d2:e7:84:c0:44:0d:8d:92:54:29:e6:1e:9e:10:97:c3:3a:
         a3:6a:63:4b:65:80:51:ff:e5:f6:13:bb:90:8b:2c:26:f3:77:
         98:72:cc:b1:6b:42:38:e1:ce:d9:43:96:ac:73:bf:5c:d3:69:
         1c:38:63:a3:8e:a2:9f:29:07:da:cc:ba:3a:e3:10:d8:7c:78:
         15:7e:74:59:5a:a5:e8:6f:2e:ef:cb:ed:41:a6:ed:55:41:ab:
         c0:e8:18:8c:80:1c:9b:2c:4d:bb:65:61:28:41:49:ac:c4:31:
         04:f9:25:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----