Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.mft
File:                     711709BC181DF6689D366E1B328D3907419DF9AA.mft (raw, json)
Hash identifier:          X5nL2/vR2vq9wbpkWugMIMmlgLlpRD0GyU+KT66FPm8=
Subject key identifier:   6E:F1:4F:3B:99:7F:BA:A3:68:38:57:B9:21:23:BC:8F:EB:59:B7:60
Authority key identifier: 71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA
Certificate issuer:       /CN=711709BC181DF6689D366E1B328D3907419DF9AA
Certificate serial:       424E325EF290316022AB71D525AAD6BB2CB21DCB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.mft
Manifest number:          35
Signing time:             Mon 15 Apr 2024 03:34:57 +0000
Manifest this update:     Mon 15 Apr 2024 03:29:57 +0000
Manifest next update:     Tue 16 Apr 2024 05:02:57 +0000
Files and hashes:         1: 34352e3136382e36342e302f32322d3234203d3e20323638313338.roa (hash: t0R9frv8harkCDhlUxezfdv3poy75E0SjU8knQP3e2U=)
                          2: 711709BC181DF6689D366E1B328D3907419DF9AA.crl (hash: kEHI3HaOSZjDfr9GDdPrD2QNOiTfggy1y9l2skl/eQo=)
                          3: 323830343a353839383a3a2f33322d3430203d3e20323638313338.roa (hash: t5ZMV1l81haS/5v+Ja1oUuI4TXN/+e2tyU2qFlB7EZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4e:32:5e:f2:90:31:60:22:ab:71:d5:25:aa:d6:bb:2c:b2:1d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711709BC181DF6689D366E1B328D3907419DF9AA
        Validity
            Not Before: Apr 15 03:29:57 2024 GMT
            Not After : Apr 16 05:02:57 2024 GMT
        Subject: CN=6EF14F3B997FBAA3683857B92123BC8FEB59B760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:48:47:31:c3:af:ec:c8:f5:2b:a4:f8:b7:
                    c3:c0:f3:7d:4b:50:fe:c2:56:9a:48:91:90:76:03:
                    ff:ce:17:8b:5f:3b:1e:dd:04:d4:17:f1:e8:c0:83:
                    cf:f1:3e:ce:e2:53:82:c7:20:96:ce:a0:78:80:db:
                    84:cc:0c:02:3a:5d:90:fe:6f:60:01:52:c9:9d:87:
                    1e:38:d8:7f:70:58:14:0b:44:61:2a:ba:56:d7:7c:
                    38:3c:c1:9c:91:e8:af:00:9d:47:14:6a:9b:4a:be:
                    55:b6:e9:d2:e8:a5:28:78:99:a0:d9:fd:79:af:a3:
                    4b:ff:7c:dd:6a:a4:d6:95:d5:fc:65:d4:b5:cc:cf:
                    29:5c:22:0f:67:10:77:80:38:29:6c:07:18:85:74:
                    b7:5e:b3:23:b3:a7:5d:33:2e:4e:b7:b0:03:1b:61:
                    41:56:3c:77:c2:3a:c9:19:42:0e:18:48:05:82:21:
                    0c:75:89:f0:6c:42:4e:a5:88:d4:b0:47:79:ce:95:
                    8c:db:89:cb:83:43:4a:81:6e:6d:36:f8:b5:94:8d:
                    43:aa:15:54:b8:72:f1:e3:a9:b4:10:1a:b3:0c:8d:
                    1d:41:75:fd:a9:1b:2a:a8:ff:97:5f:73:07:1f:8e:
                    87:f4:46:15:b7:4f:7d:e6:7e:5b:3f:60:25:ec:d5:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F1:4F:3B:99:7F:BA:A3:68:38:57:B9:21:23:BC:8F:EB:59:B7:60
            X509v3 Authority Key Identifier:
                keyid:71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:47:28:e6:20:b3:5c:ac:a2:20:cb:e2:67:50:6a:67:bd:cb:
         96:88:58:f4:75:78:03:44:f1:09:c1:55:90:1a:0c:59:31:1e:
         5a:f2:d9:2d:4e:6a:83:11:55:29:17:64:af:fe:1b:64:0f:f6:
         9d:d9:25:16:65:1f:64:f2:4d:73:78:11:34:25:63:59:5a:31:
         d1:7b:80:81:37:78:55:03:40:cf:23:d8:ea:52:c0:6b:84:46:
         69:2a:b7:ef:01:6a:6d:96:86:c0:21:8d:a6:5a:86:9a:f9:15:
         99:5e:7b:73:2f:0f:54:bf:0f:cf:46:13:2b:80:d2:b9:58:47:
         ff:3f:da:28:62:4b:96:19:89:88:ed:e8:73:75:d3:48:c8:81:
         e0:f3:d5:d0:da:99:a7:a1:a6:44:b6:14:76:6f:7a:a5:4c:09:
         fd:ff:83:c6:20:bb:42:6c:92:53:6d:68:f4:fb:b4:6c:66:5d:
         cf:23:ff:c6:5f:1c:71:e5:24:48:90:1d:6e:b4:27:1f:a0:86:
         0c:57:9b:d2:58:bb:61:bf:68:6e:51:b3:9c:bf:82:c0:83:eb:
         64:5d:4b:13:9b:57:56:a9:e3:31:64:3f:c1:69:8d:ce:39:36:
         29:ad:47:bf:f3:d5:b9:34:92:79:a5:c3:2b:f8:06:8c:0b:bc:
         9c:e4:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----