Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.mft
File:                     60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.mft (raw, json)
Hash identifier:          rG64TTQ8SXM/POdbCHdpMsE1r384XR5GrutXTO6yTw0=
Subject key identifier:   85:FA:1D:FB:A2:D6:C1:7A:E8:A9:4B:44:BB:E0:B0:8E:B7:4E:4F:CA
Authority key identifier: 60:BB:75:6D:09:DF:DF:9D:3E:BB:8F:BC:11:62:CF:32:3F:C1:BC:3C
Certificate issuer:       /CN=60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C
Certificate serial:       7D3CEB19ED627F8E1760CF7CA44E7CC64DE8B8DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.mft
Manifest number:          25
Signing time:             Sun 17 Nov 2024 20:06:15 +0000
Manifest this update:     Sun 17 Nov 2024 20:01:15 +0000
Manifest next update:     Mon 18 Nov 2024 21:12:15 +0000
Files and hashes:         1: 3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (hash: SLfMmxcu8p5JxwoLefBS8EhpO21sdPAA3UCy/J1FNIw=)
                          2: 60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.crl (hash: 6JiKgCX7HbE/BOe+9wqta96TVH8NFmo7PxHclztqNAw=)
                          3: 323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (hash: KMIIA02QLgwlyJ7DUo4fvpT6LwViCWt8IOxt5OlQJd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3c:eb:19:ed:62:7f:8e:17:60:cf:7c:a4:4e:7c:c6:4d:e8:b8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C
        Validity
            Not Before: Nov 17 20:01:15 2024 GMT
            Not After : Nov 18 21:12:15 2024 GMT
        Subject: CN=85FA1DFBA2D6C17AE8A94B44BBE0B08EB74E4FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:77:c1:a2:0c:04:09:4f:4e:60:b9:8e:21:
                    60:9a:39:27:b0:2e:18:ba:4b:47:4e:11:93:0a:d2:
                    76:26:71:b8:02:34:93:f8:8b:67:53:74:67:cb:13:
                    95:fb:da:e4:b4:df:ab:47:3a:a3:b6:5f:be:bf:1b:
                    85:6a:03:84:e5:9e:34:53:a6:f8:43:ce:1c:4c:cf:
                    e1:7d:09:d1:25:54:1d:4b:e6:71:43:40:b2:0a:af:
                    0d:04:58:1f:4f:48:09:b8:d4:d0:a8:a9:7a:0d:78:
                    21:7d:70:8d:85:e9:f5:15:e5:2b:92:4d:66:ee:df:
                    98:e6:b3:ef:7a:3a:89:ed:ce:f9:22:a8:c0:fd:94:
                    55:b0:96:ee:a2:37:7a:1e:48:4e:05:73:e9:65:39:
                    78:0f:1c:d5:06:b4:be:5c:9a:bd:61:f9:6e:cf:3b:
                    89:c4:4d:a6:c0:d7:bd:cc:fa:7a:4d:45:ce:39:85:
                    b5:03:00:4a:c1:90:7e:1a:c9:b7:35:8c:92:b0:ba:
                    de:0d:36:2e:ed:55:6e:2a:39:c2:88:2f:5d:d0:5b:
                    8f:4c:7e:cb:d6:1c:8b:b7:0f:a8:58:86:fa:5d:7b:
                    5d:54:81:e7:88:8f:ce:67:03:35:03:e1:29:a9:74:
                    83:96:e2:d7:83:99:93:e9:87:f3:37:73:9f:c8:fe:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FA:1D:FB:A2:D6:C1:7A:E8:A9:4B:44:BB:E0:B0:8E:B7:4E:4F:CA
            X509v3 Authority Key Identifier:
                keyid:60:BB:75:6D:09:DF:DF:9D:3E:BB:8F:BC:11:62:CF:32:3F:C1:BC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/60BB756D09DFDF9D3EBB8FBC1162CF323FC1BC3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:0c:ff:c9:05:cb:85:34:c0:58:4c:d9:ed:31:54:34:30:
         ca:a9:8f:2f:dd:02:aa:c0:63:83:7e:39:21:54:6c:c3:69:67:
         e7:0a:75:e9:f5:c0:57:1b:73:11:b3:bd:c6:e8:36:f1:ca:8a:
         14:5d:2c:cf:18:cc:88:62:4c:9e:d7:e6:7b:c7:80:aa:ff:35:
         29:61:60:6e:32:9a:d4:6e:a6:a3:c9:51:a5:42:99:bc:c2:92:
         9b:ea:0b:5f:92:49:29:8a:c9:72:fd:14:cc:dc:9f:30:a5:16:
         c8:93:d6:87:1c:ba:f4:35:d0:f7:82:f0:7b:1e:2e:d2:80:c1:
         80:53:58:3b:6d:05:4d:60:2e:3c:e7:06:3c:f0:1b:01:56:a5:
         1d:df:39:c6:43:26:e3:6d:92:d1:63:17:0a:9c:32:20:31:52:
         1d:86:34:f9:83:c7:a9:0e:96:00:fd:87:04:c5:27:a9:cd:36:
         4a:8a:48:0d:78:eb:8c:5b:40:2c:71:5b:db:e6:b4:94:eb:2c:
         41:3f:b2:82:83:e6:3d:fa:ed:dd:27:d2:4a:f1:24:a5:e8:0a:
         29:9f:52:49:dc:77:06:fc:60:34:26:2e:b5:51:b8:a8:e7:f4:
         d5:ab:bd:05:d3:10:96:90:66:8b:f7:5a:6c:51:7f:62:a3:69:
         c5:36:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----