Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.mft
File:                     BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.mft (raw, json)
Hash identifier:          tOLF9qxT24hcM4w0hN6wQqVt8FioFyCfpwTnSXmeh3Y=
Subject key identifier:   7D:EB:71:65:3D:C3:31:DC:18:F0:69:17:92:B0:D1:F8:B7:02:1F:16
Authority key identifier: BE:01:49:EC:EE:B6:F9:83:32:5D:D2:BB:C2:A1:44:7D:08:EF:0E:32
Certificate issuer:       /CN=BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32
Certificate serial:       49048677D0EE843DBC0BD4583AA5DFD27242B950
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.mft
Manifest number:          0115
Signing time:             Sat 16 Nov 2024 06:21:05 +0000
Manifest this update:     Sat 16 Nov 2024 06:16:05 +0000
Manifest next update:     Sun 17 Nov 2024 08:19:05 +0000
Files and hashes:         1: 34352e3139302e382e302f32322d3332203d3e20323639363137.roa (hash: ooqfZcM7HKELIV1mQA+2nqRrxVYC/2b5qVGitlio0JE=)
                          2: 323830343a363734343a3a2f33322d313238203d3e20323639363137.roa (hash: 0mrDIGUNtBTKPFc0wnp6tcVg7nJis+o5pgNaL6cwpks=)
                          3: BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.crl (hash: j0EI9gbY7CKm1tCCDJ+eWZLY146Pdn3qUMY+GuDMh6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:04:86:77:d0:ee:84:3d:bc:0b:d4:58:3a:a5:df:d2:72:42:b9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32
        Validity
            Not Before: Nov 16 06:16:05 2024 GMT
            Not After : Nov 17 08:19:05 2024 GMT
        Subject: CN=7DEB71653DC331DC18F0691792B0D1F8B7021F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:5f:54:1c:66:87:71:66:ec:cb:8b:cc:c2:
                    66:d0:e7:4f:6e:fb:cb:f9:c7:c3:ae:0a:d8:4f:67:
                    e8:83:5a:c3:08:1d:6b:a6:06:99:9f:3c:74:f3:9d:
                    94:8a:65:fd:bf:f0:87:74:51:3e:ee:3d:42:11:55:
                    24:64:76:8d:67:e9:4a:9a:53:7a:c6:2f:db:b0:ac:
                    0d:17:12:8a:5a:98:16:cb:df:53:49:7a:b0:90:37:
                    7d:42:bf:26:69:cc:56:d9:5d:23:37:d2:26:c8:d7:
                    2d:ad:c3:66:92:c7:73:20:17:12:8a:bc:1f:cc:f7:
                    6b:ea:b6:c9:e9:60:d1:14:ca:17:58:1f:98:15:c1:
                    ca:9b:e4:41:38:0e:6d:0e:4f:b0:eb:b6:fb:38:2f:
                    3e:7f:34:61:54:69:02:d2:6b:a1:e6:6d:af:56:37:
                    18:d7:b5:dd:42:2b:e0:d0:b1:97:ba:75:73:eb:e5:
                    16:16:a4:25:4d:0a:c0:aa:06:af:06:cf:02:77:2b:
                    00:67:2f:92:20:57:95:b8:41:59:c8:c1:ea:19:b7:
                    8b:23:25:0b:2c:0a:ec:5a:16:e4:2c:8b:04:9d:a8:
                    01:81:cf:8b:ea:64:d7:7e:c9:8d:c3:5c:ab:0e:90:
                    ae:6d:1f:61:39:6c:e2:2c:9c:2a:90:fb:93:a9:85:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EB:71:65:3D:C3:31:DC:18:F0:69:17:92:B0:D1:F8:B7:02:1F:16
            X509v3 Authority Key Identifier:
                keyid:BE:01:49:EC:EE:B6:F9:83:32:5D:D2:BB:C2:A1:44:7D:08:EF:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:51:40:56:8c:0e:1d:50:c8:94:1a:ce:5b:4c:bb:37:be:27:
         95:0a:d8:40:42:32:67:c1:84:f1:5f:56:e4:79:e9:94:fe:9f:
         ed:78:a6:3e:8b:fa:44:89:46:31:27:4d:43:af:5b:2b:95:7a:
         f1:51:4e:b1:0a:4c:2a:30:5a:b9:9c:2e:e6:21:d9:64:5e:56:
         5e:a0:82:cd:53:be:71:14:a9:ba:4f:95:2a:e5:06:58:54:ac:
         df:bd:48:6c:f6:83:fb:c9:59:3b:c6:c2:d1:e8:27:8b:50:b8:
         af:02:9a:1b:20:b9:e1:a9:9f:91:22:4d:26:22:f6:28:0d:00:
         14:d1:e8:0b:56:af:16:ce:45:95:e3:ad:04:fe:8a:f3:c1:7c:
         e1:d2:2c:42:38:9a:cd:5d:62:c0:3f:4c:45:6e:e7:59:1d:e9:
         a8:8c:9b:f9:f3:b5:3c:69:99:05:e3:33:18:ff:3f:b1:26:55:
         62:34:92:71:a5:c6:05:d8:2b:c4:c2:20:95:d9:ea:61:6a:9b:
         31:d5:bb:28:b9:b9:66:9e:53:3d:9a:23:e4:2c:0a:aa:68:f5:
         d9:41:1b:3f:f1:fe:be:42:b6:0e:44:2c:61:05:58:86:2a:82:
         f2:8c:bd:bd:28:6b:25:b4:d9:fb:5a:08:48:c4:54:bd:1f:7e:
         99:8a:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----