Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.mft
File:                     2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.mft (raw, json)
Hash identifier:          rLNptPClEfC83qy/skG31Tzlu1DtqjLUzJFFwFxw9tU=
Subject key identifier:   98:A0:99:A7:52:16:2C:3C:AB:4A:BD:B0:82:BC:10:AE:73:A0:BE:BF
Authority key identifier: 2E:8C:F6:93:E5:DE:3D:EE:3B:A9:71:BC:3B:79:04:D9:99:F1:27:B5
Certificate issuer:       /CN=2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5
Certificate serial:       18CEDA92FB893B56577E951D9855C21296F6BBC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.mft
Manifest number:          37
Signing time:             Wed 27 Nov 2024 20:39:10 +0000
Manifest this update:     Wed 27 Nov 2024 20:34:10 +0000
Manifest next update:     Fri 29 Nov 2024 00:08:10 +0000
Files and hashes:         1: 323830343a326566633a3a2f33322d3438203d3e20323634383634.roa (hash: cbaQJ3hW3zfItnci8IpTOOKH6i+HEgEaayJxZznvEIM=)
                          2: 2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.crl (hash: m/VHjPGjo79gjAWjxJnaGc9iXi6hnQq+hmPc+f9rR1Q=)
                          3: 3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa (hash: wtJC11cXDqrJShit6Da+RWdTXa/uBWC5M2FjJQTUYE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ce:da:92:fb:89:3b:56:57:7e:95:1d:98:55:c2:12:96:f6:bb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5
        Validity
            Not Before: Nov 27 20:34:10 2024 GMT
            Not After : Nov 29 00:08:10 2024 GMT
        Subject: CN=98A099A752162C3CAB4ABDB082BC10AE73A0BEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:6b:2c:dc:b5:00:30:31:e0:b0:08:61:57:
                    05:3a:6e:be:55:30:27:b8:b9:83:8c:17:ca:8b:a7:
                    67:20:8c:d7:7f:28:c1:22:5e:21:5e:e6:70:a3:89:
                    3d:2f:8c:e2:8b:56:c0:d4:35:03:76:88:9c:3f:12:
                    41:5d:67:80:76:ab:76:24:40:cf:57:82:83:9e:b7:
                    c2:a9:7b:47:90:81:db:a8:d5:33:b0:37:c9:4a:77:
                    12:48:6c:7c:19:29:f6:d8:f3:32:35:8f:89:3c:1b:
                    3a:31:f4:d4:81:80:4c:bf:e4:b2:eb:19:7c:32:9c:
                    63:d3:c9:91:d7:ad:10:57:33:28:c0:d3:16:d6:65:
                    9e:1a:92:32:cd:86:08:2f:33:e9:7d:68:e1:85:ec:
                    a5:a6:e5:d1:4c:00:ad:10:d2:37:cb:dc:84:f5:fa:
                    47:61:92:8b:c1:1a:7b:55:a7:e7:0d:fa:db:23:cd:
                    c5:e2:9d:c3:11:fa:20:8d:56:cc:a8:5d:ee:e7:f7:
                    f4:88:4e:72:f5:d6:ef:6c:5f:a5:a4:4d:11:91:e5:
                    9b:4a:c2:c8:99:0f:a1:95:02:26:e8:b8:52:75:7b:
                    54:4c:56:37:65:d7:fb:85:8f:06:c3:77:d9:79:ab:
                    bb:89:36:cf:d0:aa:10:29:aa:34:b2:49:8a:6a:77:
                    87:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:99:A7:52:16:2C:3C:AB:4A:BD:B0:82:BC:10:AE:73:A0:BE:BF
            X509v3 Authority Key Identifier:
                keyid:2E:8C:F6:93:E5:DE:3D:EE:3B:A9:71:BC:3B:79:04:D9:99:F1:27:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/2E8CF693E5DE3DEE3BA971BC3B7904D999F127B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:88:1d:90:25:67:2b:bb:cc:d9:9f:3f:2c:c0:ba:db:7a:
         88:db:9f:06:fa:c7:d4:8b:d8:47:2f:4c:03:50:30:fb:f6:68:
         33:c2:9a:f4:89:7d:e9:bd:a7:28:bd:66:b9:84:fb:cc:b8:4c:
         8d:39:a2:39:40:1e:3d:e9:1b:c8:ff:c9:f6:e8:84:bb:cf:32:
         35:42:b7:4d:a5:f2:a1:dd:cc:df:6d:b9:a7:02:79:fd:ec:88:
         0a:38:7e:d1:c7:16:e7:9b:59:b9:81:76:be:5b:45:66:ab:cd:
         8b:4b:4f:65:04:e8:01:67:87:f7:0f:56:60:2b:6c:ba:3d:f7:
         da:ad:c6:e4:61:87:14:be:37:3b:ba:2a:f6:36:5f:68:c9:ea:
         b1:31:ea:b3:c5:ab:39:6d:53:da:f9:0c:bf:c4:d3:7e:df:23:
         aa:b5:40:a8:c1:32:34:bc:30:d9:a7:be:d1:9a:a8:ab:90:11:
         c9:d0:fd:42:cf:c4:6b:d0:4e:44:cd:45:ef:14:6f:2a:6a:cd:
         8b:86:b5:6d:e4:6a:39:69:12:ce:89:43:43:2b:e1:f1:a6:55:
         2b:6e:19:ec:76:e9:94:ce:d8:17:d3:74:78:c1:d1:8f:db:bb:
         ef:f7:ae:2f:79:00:9f:ef:f7:41:4d:61:c2:47:dd:0e:be:eb:
         c8:0b:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----