Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/0985D996290EF750BE43BA8A4981707CBFCF468D.mft
File:                     0985D996290EF750BE43BA8A4981707CBFCF468D.mft (raw, json)
Hash identifier:          tVF9kEQWZMQCZpRuYlzjjOLm9sZL21tRjov+MTR4dCI=
Subject key identifier:   AE:B7:F4:2E:EE:0B:55:94:FC:38:DD:61:2D:83:2E:C7:77:21:46:FD
Authority key identifier: 09:85:D9:96:29:0E:F7:50:BE:43:BA:8A:49:81:70:7C:BF:CF:46:8D
Certificate issuer:       /CN=0985D996290EF750BE43BA8A4981707CBFCF468D
Certificate serial:       5062D1780787A61DFA10ECF9591FE331C242420F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0985D996290EF750BE43BA8A4981707CBFCF468D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/0985D996290EF750BE43BA8A4981707CBFCF468D.mft
Manifest number:          2A
Signing time:             Thu 18 Jan 2024 12:29:27 +0000
Manifest this update:     Thu 18 Jan 2024 12:24:27 +0000
Manifest next update:     Fri 19 Jan 2024 13:36:27 +0000
Files and hashes:         1: 0985D996290EF750BE43BA8A4981707CBFCF468D.crl (hash: MCHSTzRG49qcu9EXz/byDFsLdNbVdeaPp4Zh8XWXwY0=)
                          2: 323830343a363865383a3a2f33322d313238203d3e20323639373234.roa (hash: s8iVOFW883tXDhSLJWb6BU6xh4VW8hrcii4iqIirIFw=)
                          3: 34352e3138392e3136302e302f32322d3332203d3e20323639373234.roa (hash: vTn04Nen/coocijIB/zHPSGsiHTbaFVHIIxNkJYar0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:62:d1:78:07:87:a6:1d:fa:10:ec:f9:59:1f:e3:31:c2:42:42:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985D996290EF750BE43BA8A4981707CBFCF468D
        Validity
            Not Before: Jan 18 12:24:27 2024 GMT
            Not After : Jan 19 13:36:27 2024 GMT
        Subject: CN=AEB7F42EEE0B5594FC38DD612D832EC7772146FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:d9:2d:e4:de:51:84:03:7f:97:dd:8c:d4:
                    10:ed:fc:fb:59:f7:be:c4:9e:71:16:99:26:f7:cd:
                    ac:98:d2:7e:d9:60:00:ed:fb:ba:d9:6b:69:4a:18:
                    14:c5:82:74:a5:2f:c2:09:b5:09:e9:7e:0a:67:46:
                    f2:b4:94:e8:63:f3:3e:0b:27:34:6f:ec:ae:d5:35:
                    13:be:bc:ea:1e:cf:af:0f:4c:02:a7:19:3f:d1:d2:
                    23:08:44:0f:61:a9:cd:c4:76:d1:2a:59:e4:e9:1d:
                    38:ce:75:23:ce:20:8d:bd:50:62:ac:dc:e5:b8:29:
                    c8:11:03:b9:bf:82:0e:65:96:ed:7b:4e:2f:ae:0f:
                    6f:43:af:7e:77:6d:2d:9b:b5:56:70:02:b5:62:ab:
                    4f:6e:6d:40:33:46:de:fb:46:fc:c0:93:e4:70:0b:
                    ed:30:16:ee:6e:fb:8d:ef:67:44:ef:de:f7:88:e7:
                    b3:5d:00:3f:ac:74:0f:f8:b5:70:3c:3e:10:43:13:
                    3f:c8:d5:ac:b3:d7:c1:98:2e:29:52:1d:38:3e:e2:
                    c8:e7:3c:9f:21:7c:ed:01:e2:5c:2b:b6:ab:73:54:
                    01:ff:96:90:d5:fc:ee:eb:8b:af:ad:e0:6d:52:9c:
                    92:a1:bd:78:46:dc:37:7f:16:25:93:e8:c5:f1:06:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:F4:2E:EE:0B:55:94:FC:38:DD:61:2D:83:2E:C7:77:21:46:FD
            X509v3 Authority Key Identifier:
                keyid:09:85:D9:96:29:0E:F7:50:BE:43:BA:8A:49:81:70:7C:BF:CF:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/0985D996290EF750BE43BA8A4981707CBFCF468D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0985D996290EF750BE43BA8A4981707CBFCF468D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/0985D996290EF750BE43BA8A4981707CBFCF468D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:59:ba:4b:77:f0:73:db:1f:7b:ae:d2:09:1f:fb:ce:20:65:
         5a:a3:6f:80:4f:d1:77:ee:19:ae:54:c6:7b:f2:39:6a:2c:52:
         b0:23:f5:dd:ad:79:ff:d8:b9:95:df:9a:92:da:33:6f:12:6f:
         88:52:79:37:e4:38:f6:c8:3e:01:17:16:de:67:44:10:8b:50:
         50:6a:c9:a5:eb:8e:31:53:56:39:15:38:f6:c2:5a:98:de:9d:
         f7:8a:80:e9:9f:55:d8:8d:ab:49:6d:b4:ad:d2:b6:27:46:cc:
         54:bd:ed:d7:49:e6:1b:a5:56:00:ba:63:1e:19:e6:0a:31:08:
         9a:71:d9:58:be:ec:49:a9:3b:59:f7:1e:a8:82:e2:be:c1:e6:
         e7:ce:29:e4:1f:78:bf:cd:97:0b:17:d4:71:02:2d:2e:9b:be:
         86:ba:b0:84:c7:a0:f5:30:3c:36:f1:bd:b8:35:dd:ab:90:e0:
         8b:6a:39:ef:a5:38:ad:f4:e9:5a:90:cf:b2:fa:d5:25:c8:0e:
         65:36:e6:53:9a:8b:a9:65:59:43:18:f9:75:bb:c2:e8:be:0d:
         00:63:aa:82:ab:8c:5e:86:27:f2:1e:8f:b5:aa:e2:c4:6a:c3:
         a2:e2:54:8f:73:da:06:07:7d:42:b5:c6:93:f2:a4:93:6a:81:
         1c:0f:23:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----