Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/93AA409873588A897219AA9BBC5D2F7353819FFD.mft
File:                     93AA409873588A897219AA9BBC5D2F7353819FFD.mft (raw, json)
Hash identifier:          0Yr5mO5XAyr28UlTAhszvK/m6r9DSueOvjsz5jdewhk=
Subject key identifier:   E2:A5:ED:11:15:86:C3:86:B8:D1:47:1F:8A:8D:9C:52:C0:BA:74:89
Authority key identifier: 93:AA:40:98:73:58:8A:89:72:19:AA:9B:BC:5D:2F:73:53:81:9F:FD
Certificate issuer:       /CN=93AA409873588A897219AA9BBC5D2F7353819FFD
Certificate serial:       345BDB79F44A4A1B39A3ED9E4736935053CFA8CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AA409873588A897219AA9BBC5D2F7353819FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/93AA409873588A897219AA9BBC5D2F7353819FFD.mft
Manifest number:          CC
Signing time:             Tue 03 Sep 2024 13:31:20 +0000
Manifest this update:     Tue 03 Sep 2024 13:26:20 +0000
Manifest next update:     Wed 04 Sep 2024 15:29:20 +0000
Files and hashes:         1: 323830343a6331383a3a2f33322d3333203d3e203532363737.roa (hash: hEQIyGgHrb8i8uUFt7B4PdWzt9xu2pZXz9m5YzQgwCU=)
                          2: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: U5rq+FcbZiNrQdJ/EJzqd8YnQLTChfHx5zonvPD3LKM=)
                          3: 93AA409873588A897219AA9BBC5D2F7353819FFD.crl (hash: wuG5L9WblfcqdLQ2Rn7vWZ6zFGX3/veHS1iy2IGTtdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5b:db:79:f4:4a:4a:1b:39:a3:ed:9e:47:36:93:50:53:cf:a8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93AA409873588A897219AA9BBC5D2F7353819FFD
        Validity
            Not Before: Sep  3 13:26:20 2024 GMT
            Not After : Sep  4 15:29:20 2024 GMT
        Subject: CN=E2A5ED111586C386B8D1471F8A8D9C52C0BA7489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:06:8e:fc:0d:45:04:c4:d0:20:44:d9:b0:
                    cf:fa:13:14:a3:8b:29:5b:c0:fc:66:f8:7a:0c:f7:
                    fa:ee:5f:f5:b9:43:8d:34:04:f6:2e:18:3d:3e:1f:
                    68:28:0e:a2:96:1e:be:04:24:b5:6c:9b:c7:8f:5a:
                    10:54:eb:ca:35:04:13:f2:fa:3b:84:c0:ce:80:91:
                    fa:91:42:69:83:be:b8:23:7b:45:6d:1e:48:e5:45:
                    b6:e9:09:54:96:5c:d6:10:de:36:45:3a:9b:7d:dd:
                    d5:c0:66:5d:64:f0:78:a6:e1:e6:a3:7e:7d:fa:1e:
                    c3:10:7e:3d:96:ca:38:ca:53:b4:d0:20:e8:3f:1e:
                    e5:59:0e:6e:92:0f:7e:92:6b:a4:fb:ac:f9:81:6f:
                    ee:84:ff:43:30:df:f2:66:df:a6:20:1c:96:ef:8f:
                    58:57:87:1e:16:44:12:55:41:5a:13:07:f7:20:2e:
                    85:cf:2c:d8:49:20:c1:88:65:48:fb:2d:50:9a:e4:
                    d9:06:60:9b:4e:76:97:16:37:5c:4c:26:48:d2:b1:
                    a4:3b:7f:01:f0:8a:ab:2d:be:c0:fb:1f:4f:e8:cc:
                    f0:95:94:d5:45:28:e1:8f:3b:0d:07:0c:64:86:2e:
                    57:98:65:89:3d:35:3e:80:b4:e6:68:c4:69:d1:f2:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:ED:11:15:86:C3:86:B8:D1:47:1F:8A:8D:9C:52:C0:BA:74:89
            X509v3 Authority Key Identifier:
                keyid:93:AA:40:98:73:58:8A:89:72:19:AA:9B:BC:5D:2F:73:53:81:9F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/93AA409873588A897219AA9BBC5D2F7353819FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AA409873588A897219AA9BBC5D2F7353819FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/93AA409873588A897219AA9BBC5D2F7353819FFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:71:4a:fd:c5:a2:3b:27:a7:bf:87:a9:79:98:d1:21:b8:
         65:21:62:27:ed:90:8f:81:f2:89:4f:3e:67:b8:1c:dd:bf:46:
         7c:82:7a:e2:11:da:eb:e1:25:e2:59:59:f3:14:24:16:9e:a3:
         56:f8:a2:16:8a:a4:ed:5f:24:b4:33:7f:59:89:87:75:69:f9:
         15:cb:b6:f1:54:dc:c4:5f:99:68:93:8a:96:ce:e5:8b:1a:23:
         e6:ef:85:ce:4e:d3:ad:88:33:09:02:65:4a:46:b8:75:1c:0d:
         b5:cb:bb:a9:74:4b:86:8f:92:54:67:2e:13:f9:43:12:b1:8d:
         5a:1a:86:f2:5d:b3:c8:ea:b8:33:82:12:4d:bc:78:40:2c:2c:
         db:11:4d:a4:13:68:e8:ef:0f:79:29:f5:c3:36:9d:5e:6f:5f:
         18:95:2e:3b:15:c9:e3:59:71:ad:df:84:d6:2f:32:44:0c:7f:
         82:c7:ba:47:61:73:22:bc:e4:43:48:dc:f9:62:de:fc:64:e8:
         0c:66:3f:e8:44:c1:0c:04:2e:39:96:d3:ef:74:c8:da:70:6e:
         e8:b5:7b:c3:39:d0:6d:e8:b3:f6:c7:17:20:2f:0c:28:e3:ec:
         19:a1:85:41:c5:b3:4d:f9:03:6f:6a:08:71:d3:50:43:17:bd:
         80:93:bd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----