Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.mft
File:                     2288FF0341950A63A6215C01F2FF9D9291FEB946.mft (raw, json)
Hash identifier:          7zT4PaN1c2sSmOgwgUVWmbb3Ll+4g4lzmNI+w9KS2vo=
Subject key identifier:   97:F3:B9:8E:B9:BB:DC:42:F4:7D:1D:D5:42:E8:95:ED:66:DA:99:3B
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       7FF267A508236D4A9DBFA5C061D62A00DEC68363
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.mft
Manifest number:          49
Signing time:             Thu 25 Jul 2024 13:03:14 +0000
Manifest this update:     Thu 25 Jul 2024 12:58:14 +0000
Manifest next update:     Fri 26 Jul 2024 16:26:14 +0000
Files and hashes:         1: 3137372e3132382e3138342e302f32312d3234203d3e203238353837.roa (hash: XV3VKhZwaNyauXAo5WvOZYe8BI+dxR+8yY3ujjywf7U=)
                          2: 323830343a6461303a3a2f33322d3332203d3e203238353837.roa (hash: QQ1hRWDGEXc9Py18LbHPyRb/uj4DU8KKaCXxdEgcGho=)
                          3: 2288FF0341950A63A6215C01F2FF9D9291FEB946.crl (hash: eJbqWsDbIks/EHm+SLehriKAPpZpqhSMUIteE3Es/XI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f2:67:a5:08:23:6d:4a:9d:bf:a5:c0:61:d6:2a:00:de:c6:83:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 25 12:58:14 2024 GMT
            Not After : Jul 26 16:26:14 2024 GMT
        Subject: CN=97F3B98EB9BBDC42F47D1DD542E895ED66DA993B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:a2:3a:51:ad:f0:eb:f3:1c:58:7c:af:00:
                    03:17:bc:4b:27:aa:f4:9c:44:e1:fc:f7:09:ff:50:
                    45:99:68:70:63:64:b8:de:80:61:3d:d1:f7:14:4d:
                    9b:ca:b8:b0:1b:50:06:85:d9:33:3a:5f:7b:79:77:
                    f6:22:94:f6:d4:ff:8e:59:b4:84:ab:08:18:d6:80:
                    dc:3d:66:f9:60:94:f9:75:2c:34:48:07:36:1a:16:
                    f7:50:8e:49:0e:2e:c5:7c:72:9d:c7:f8:d7:02:ab:
                    c3:4d:b6:76:c6:11:38:11:2f:56:48:05:24:b2:a4:
                    62:f9:c7:9d:00:49:20:58:72:7d:06:bc:ce:42:6f:
                    47:87:0a:8e:55:b0:05:22:b1:69:81:fc:15:65:1e:
                    4e:23:66:e5:a2:cd:10:0c:1b:a9:90:42:ad:b6:63:
                    42:4f:b8:2c:2d:bc:20:c4:37:3a:63:5a:59:ef:5e:
                    02:91:90:a5:85:48:fa:4d:9f:66:3f:da:4c:bd:f4:
                    64:d0:3f:bd:0d:68:b2:2b:91:67:12:9c:07:5b:b5:
                    78:43:d5:1b:68:ae:1c:b7:4a:da:9a:a7:0c:70:75:
                    a2:ba:97:d4:95:90:d3:a3:b1:55:1e:d4:b1:6d:dc:
                    04:7e:62:16:f1:1d:13:ca:22:2f:f4:6e:24:b1:ea:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F3:B9:8E:B9:BB:DC:42:F4:7D:1D:D5:42:E8:95:ED:66:DA:99:3B
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:26:e3:34:25:12:37:a7:71:fb:43:b1:fb:71:42:dd:2a:
         d7:9b:45:cd:51:57:63:42:b0:c6:d7:96:88:4c:c5:a5:19:7e:
         60:46:6e:69:3c:92:b5:78:d8:78:b2:d7:2f:8e:5d:25:97:fa:
         ab:f8:e2:aa:db:76:3d:29:b3:6b:cf:31:06:ee:b3:e5:4c:ad:
         69:e5:ac:69:6e:cf:36:2f:72:b5:e3:38:e1:81:7a:ca:47:6d:
         0f:08:27:8e:1f:eb:35:99:95:1d:96:17:26:1c:fb:9c:69:a5:
         70:cd:aa:96:a4:d5:98:be:6e:73:a4:de:1f:d1:5c:60:0a:70:
         fb:49:41:8f:f0:5d:ba:c3:91:d5:fb:98:3f:2d:19:d8:b7:bc:
         a6:72:df:68:85:04:4f:35:4d:70:13:27:04:f4:0e:cc:ca:9f:
         6e:16:4d:5f:08:0c:8a:e6:10:3f:8a:fd:9d:15:ce:10:01:2b:
         5e:0b:e9:61:e5:12:2d:d4:04:81:10:b2:05:db:b5:83:c9:2a:
         4f:77:78:50:70:0e:af:62:6f:6c:5f:dd:4b:b0:9a:31:5c:d5:
         53:33:44:a7:1b:07:57:bd:fc:f0:e5:af:44:05:cd:46:5a:0c:
         26:98:35:8f:63:b9:2b:73:51:0a:51:b1:b9:6e:5c:04:a8:3d:
         01:44:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----