Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.mft
File:                     3035C70EBA626EEE8D4401EB8BE427BA12210EE1.mft (raw, json)
Hash identifier:          QFNUGnjBM6HclJmZs7PqgbJ/yVz8YzgsmaQb8Nyr620=
Subject key identifier:   F9:FF:7F:C8:CF:7A:49:3F:6F:F7:A5:AA:F8:E6:50:08:35:23:D8:6D
Authority key identifier: 30:35:C7:0E:BA:62:6E:EE:8D:44:01:EB:8B:E4:27:BA:12:21:0E:E1
Certificate issuer:       /CN=3035C70EBA626EEE8D4401EB8BE427BA12210EE1
Certificate serial:       76095E2AADF3E23F95BBB678255F9C595809AC33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.mft
Manifest number:          0258
Signing time:             Wed 13 Mar 2024 06:25:33 +0000
Manifest this update:     Wed 13 Mar 2024 06:20:33 +0000
Manifest next update:     Thu 14 Mar 2024 07:14:33 +0000
Files and hashes:         1: 3035C70EBA626EEE8D4401EB8BE427BA12210EE1.crl (hash: mZv9WisZEDACt4YNKWRJVZmKLckkftMnnUzsdycchiI=)
                          2: 34352e362e3230382e302f32322d3332203d3e20323636323530.roa (hash: TbM80j4e0QZR06xZnblgNy8Jvbt6qLFspR7+KhHJJxk=)
                          3: 323830343a336430633a3a2f33322d313238203d3e20323636323530.roa (hash: f6h1Pm/UzdzJ7Er192uf6nuOaovdChBafWWTSg6Tv5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:09:5e:2a:ad:f3:e2:3f:95:bb:b6:78:25:5f:9c:59:58:09:ac:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3035C70EBA626EEE8D4401EB8BE427BA12210EE1
        Validity
            Not Before: Mar 13 06:20:33 2024 GMT
            Not After : Mar 14 07:14:33 2024 GMT
        Subject: CN=F9FF7FC8CF7A493F6FF7A5AAF8E650083523D86D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:18:8d:38:46:4d:3a:0a:26:75:f5:37:2d:
                    c4:f6:d1:fd:4c:12:8c:14:66:85:38:5d:f3:17:26:
                    05:f4:54:40:74:c4:f5:e8:24:59:a6:4a:12:6e:df:
                    17:43:90:44:df:db:42:26:66:8b:83:4e:15:be:ea:
                    75:d2:38:60:05:5b:91:de:87:75:90:ad:51:bd:68:
                    14:df:12:c4:8b:7c:27:56:60:bd:d9:f5:53:ac:54:
                    73:96:e4:e7:52:66:a2:27:d9:50:eb:08:a5:d2:02:
                    6e:4b:f1:ed:ad:39:50:37:89:fc:d4:4f:53:70:2a:
                    c4:a2:0d:b0:cd:73:df:71:94:e7:7e:28:93:5c:ea:
                    1b:6d:e0:1a:1b:bf:95:b9:e2:73:92:27:2f:d3:2e:
                    c5:b8:26:6e:9f:aa:18:5f:85:0d:79:73:32:99:78:
                    95:aa:62:41:97:b1:dc:24:0a:58:fa:42:b3:bb:db:
                    b1:29:13:da:2c:f5:a0:f9:de:ca:d6:0b:b3:91:4e:
                    09:be:81:0a:ed:e0:cf:9b:ca:3c:b8:2a:66:c2:69:
                    67:40:20:21:f9:9f:5a:98:fa:58:7b:79:05:5f:00:
                    7d:9b:b1:a0:e2:66:29:31:af:80:8d:23:cb:21:5e:
                    4a:93:ab:f2:dd:4f:48:13:c8:78:c6:88:3b:db:a9:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:7F:C8:CF:7A:49:3F:6F:F7:A5:AA:F8:E6:50:08:35:23:D8:6D
            X509v3 Authority Key Identifier:
                keyid:30:35:C7:0E:BA:62:6E:EE:8D:44:01:EB:8B:E4:27:BA:12:21:0E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:c2:17:b2:10:8a:9e:e8:b7:b2:5b:42:b6:ae:bc:ab:6a:
         f4:88:b6:e0:cb:b6:7f:d3:3d:50:c8:06:2c:40:3e:55:10:73:
         7c:28:b4:11:71:56:ff:26:c5:d6:48:7f:9f:a5:f6:4f:6d:b8:
         46:42:9d:16:05:b8:c8:0e:c2:0a:10:a8:20:f2:e5:69:0a:26:
         4f:f4:13:ef:12:c5:62:4c:ee:f6:2d:bc:08:2f:92:0f:d3:80:
         2b:8f:28:01:ce:48:21:64:4c:6f:63:e0:39:7b:bd:b1:28:4a:
         9b:9c:5e:46:11:45:80:f6:50:7c:a5:5e:be:7d:39:57:69:bd:
         b2:2b:8a:f4:e2:64:74:c8:8a:04:c4:6f:3f:a0:88:eb:97:31:
         d4:70:18:2b:7b:6d:77:63:d9:8f:cc:e3:4d:f5:1f:1e:1d:e7:
         d7:92:28:81:71:3b:b6:2f:e1:50:9a:fc:b7:90:3d:f6:8a:11:
         ca:3e:55:13:a7:b9:81:08:c5:b7:8b:0e:a9:cd:84:74:cb:8a:
         19:ea:8c:44:14:ef:71:3c:d9:4d:fc:ff:6c:c3:be:95:94:a4:
         95:f9:15:8f:2b:ab:b7:9d:40:a8:2d:b9:fa:56:b6:e4:4b:94:
         7b:bc:a1:c3:6b:35:cd:13:5b:1f:bf:a5:3f:11:79:9b:9a:66:
         58:65:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----