Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.mft
File:                     95D85AE78879E9C1F337A939AFF0652A7EF31796.mft (raw, json)
Hash identifier:          65X/UuWfQajdbYiJlt5ftRVCZBSeGjBe4kk7SBlVUUI=
Subject key identifier:   FA:B0:6D:28:77:D5:9A:C6:C9:AC:55:1D:FD:66:38:6D:02:BC:CE:34
Authority key identifier: 95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96
Certificate issuer:       /CN=95D85AE78879E9C1F337A939AFF0652A7EF31796
Certificate serial:       24DCD7D6C014CCA43A9424383247F3589AA3E82C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D85AE78879E9C1F337A939AFF0652A7EF31796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.mft
Manifest number:          7D
Signing time:             Tue 15 Oct 2024 11:45:37 +0000
Manifest this update:     Tue 15 Oct 2024 11:40:37 +0000
Manifest next update:     Wed 16 Oct 2024 12:57:37 +0000
Files and hashes:         1: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: E7ZdeBIT/LvPnsvn3epYZ+1EVZkdcvaVLF9mB+zw48I=)
                          2: 95D85AE78879E9C1F337A939AFF0652A7EF31796.crl (hash: YxVqP3mcVj73dwmDr/U6dCbAls9XdZUI/CzEhVZijZU=)
                          3: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: NecEvJvrSGsQ292faM4SNikVaWHbprToQDQqJOV3OwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dc:d7:d6:c0:14:cc:a4:3a:94:24:38:32:47:f3:58:9a:a3:e8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D85AE78879E9C1F337A939AFF0652A7EF31796
        Validity
            Not Before: Oct 15 11:40:37 2024 GMT
            Not After : Oct 16 12:57:37 2024 GMT
        Subject: CN=FAB06D2877D59AC6C9AC551DFD66386D02BCCE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:77:3c:b0:45:53:ce:25:08:67:b7:46:e2:
                    9d:4a:0b:01:b3:a4:45:b6:7a:aa:21:5d:ce:90:04:
                    21:02:25:14:2b:b8:07:10:df:b1:36:b2:e7:4e:b8:
                    4a:7d:fc:8d:6b:ee:f3:b5:42:08:f1:d8:ff:a4:e3:
                    b1:7a:59:3b:74:3b:86:ee:94:4c:be:1a:1b:5a:8a:
                    e8:7b:d3:a8:27:76:b1:57:28:c3:a4:8d:79:9a:53:
                    af:9f:0e:c6:df:94:61:c9:1d:68:5e:23:ac:76:29:
                    40:73:c5:95:91:07:f2:a8:05:b7:37:f1:82:68:23:
                    4c:22:b5:d8:72:a6:9f:11:80:68:c1:af:7c:ac:a7:
                    c9:fc:5e:3c:d3:d7:9e:3d:1a:09:66:d8:74:05:00:
                    47:25:5e:39:ed:2e:18:65:87:a4:2a:ce:8c:bb:36:
                    50:13:ec:4b:b5:0b:51:ee:57:3c:3d:81:b0:63:a8:
                    ca:b3:64:92:f9:59:a1:ec:6c:3b:43:2d:b3:7e:3a:
                    75:e2:d7:e3:c9:c7:c9:12:7d:00:4c:58:4d:68:39:
                    68:10:97:20:f9:53:34:4d:c2:c9:0a:65:a7:5d:f6:
                    67:5b:cb:a4:78:1c:01:ef:04:37:1c:79:1c:78:b4:
                    35:a6:73:16:78:c5:87:db:93:f4:aa:b8:10:85:22:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:6D:28:77:D5:9A:C6:C9:AC:55:1D:FD:66:38:6D:02:BC:CE:34
            X509v3 Authority Key Identifier:
                keyid:95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D85AE78879E9C1F337A939AFF0652A7EF31796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ab:5f:8c:e8:5a:ff:33:e3:8c:e7:c8:ae:82:d0:d3:0e:27:
         db:38:60:8d:75:c6:dc:3c:f0:3f:78:c7:3e:ae:fe:ef:dc:af:
         2e:a1:e3:f9:3a:fb:60:24:0a:4f:2e:2a:96:b4:10:2e:b7:3b:
         f8:b1:7a:dd:66:e3:53:01:bf:6f:8f:91:4d:0f:0e:15:16:15:
         4b:31:04:86:b4:14:ac:2b:08:bd:23:62:18:1c:8e:9a:7a:4e:
         bc:14:4d:0b:52:d7:24:c8:95:fb:bd:e3:9d:2f:9c:83:43:4a:
         fa:af:f4:23:67:86:ea:eb:c3:97:a7:21:70:26:2b:db:c2:46:
         67:2a:3a:1f:cb:86:27:03:b2:37:4d:e8:b0:be:fa:7b:00:6c:
         b9:40:b2:be:e9:c9:a5:ee:ea:fa:82:96:9e:de:bd:45:d8:49:
         70:ad:84:70:b3:9d:3d:94:52:c3:56:75:13:06:47:6d:da:20:
         6e:71:4c:4f:45:b8:e1:a8:00:b7:85:ad:c5:6c:ab:53:4c:2d:
         50:73:c9:6a:a8:54:a1:72:07:cf:1c:3a:f4:8f:00:31:0b:ac:
         d0:fe:3b:23:fa:f4:c9:b4:16:74:10:c5:d1:2a:18:f7:a4:52:
         d5:4c:ff:48:4d:5a:c5:cf:f7:22:b2:34:93:9c:77:83:c5:ca:
         74:a5:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----