Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.mft
File:                     35948C139B708ABFE4A11AE018A8F5E25A09BA20.mft (raw, json)
Hash identifier:          J50S/2p5MNfWCulDgr5OGinfokCEXqPs64jNxA6saDU=
Subject key identifier:   36:70:56:F5:E2:F0:CF:6C:10:20:7D:25:B9:14:3D:24:62:B1:77:E8
Authority key identifier: 35:94:8C:13:9B:70:8A:BF:E4:A1:1A:E0:18:A8:F5:E2:5A:09:BA:20
Certificate issuer:       /CN=35948C139B708ABFE4A11AE018A8F5E25A09BA20
Certificate serial:       2C82AF8698B1257B313FADFAC6796D5DA2CFB870
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.mft
Manifest number:          8B
Signing time:             Sun 14 Apr 2024 19:54:06 +0000
Manifest this update:     Sun 14 Apr 2024 19:49:06 +0000
Manifest next update:     Mon 15 Apr 2024 20:48:06 +0000
Files and hashes:         1: 35948C139B708ABFE4A11AE018A8F5E25A09BA20.crl (hash: Vygyrr42RoLg6Tym5urXf+j5VvsoiMN6MrDH78Wc0Fo=)
                          2: 3137302e38322e3138302e302f32322d3234203d3e20323636343435.roa (hash: eGquSEpHPBkTq36GrR7f8MS9UO2Qd3Aes0/U/Qfq9Zo=)
                          3: 323830343a346466343a3a2f33322d3438203d3e20323638323330.roa (hash: 2Xy+x1RFSQBsyMLE//wTMFKbjEhGSt8NuD13G+A8Wnk=)
                          4: 34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa (hash: l3BB/P9V/YfO9zqkpStoHRAkbWYZAsuxBajbr/tIpeA=)
                          5: 323830343a333766303a3a2f33322d3438203d3e20323636343435.roa (hash: j92q8UEOxVc/JIpqiFcUXtqqE+bc9uCNOGMclqwEKGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:82:af:86:98:b1:25:7b:31:3f:ad:fa:c6:79:6d:5d:a2:cf:b8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35948C139B708ABFE4A11AE018A8F5E25A09BA20
        Validity
            Not Before: Apr 14 19:49:06 2024 GMT
            Not After : Apr 15 20:48:06 2024 GMT
        Subject: CN=367056F5E2F0CF6C10207D25B9143D2462B177E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:0a:30:1b:ae:5d:61:22:01:bf:3c:3c:b9:
                    24:25:3c:28:3f:89:43:71:15:51:62:cd:b9:0b:e0:
                    5d:3d:fb:a8:44:25:48:b8:fa:e1:ac:8a:5b:ad:81:
                    6a:fc:79:2a:32:6f:98:db:c9:65:4d:bb:1d:96:c5:
                    95:19:d2:15:16:fe:78:46:ce:4d:04:95:82:a4:94:
                    f4:6a:47:ce:e3:91:a3:f1:72:06:4a:2e:26:85:5c:
                    8d:e0:13:23:cb:a0:99:09:fb:ff:e0:2a:5b:bf:37:
                    c5:cf:c1:4b:fc:55:ad:f4:01:81:de:7a:cc:62:91:
                    01:25:56:69:55:80:ca:a0:4a:b1:77:a6:e7:3e:ff:
                    c4:7d:a0:1f:f8:ee:17:b3:ef:1a:a2:4b:48:a4:fd:
                    c3:83:8e:d4:ff:85:41:93:44:cd:39:67:c7:53:c8:
                    46:12:8d:08:bf:e6:54:29:e4:71:fd:3b:51:29:19:
                    77:9d:ed:d4:eb:66:5f:5d:da:31:8f:b4:09:e8:1a:
                    5a:43:df:b8:8b:7c:bc:21:2c:dd:d4:92:c9:df:01:
                    8f:92:5d:b4:b7:a9:63:ca:93:3e:2f:40:ae:6a:a0:
                    dc:35:25:8e:87:f7:f6:a7:d9:65:85:85:35:b9:e9:
                    46:b9:bd:83:7d:b7:3a:91:62:40:39:8f:c2:36:62:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:56:F5:E2:F0:CF:6C:10:20:7D:25:B9:14:3D:24:62:B1:77:E8
            X509v3 Authority Key Identifier:
                keyid:35:94:8C:13:9B:70:8A:BF:E4:A1:1A:E0:18:A8:F5:E2:5A:09:BA:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:93:21:69:dd:6b:0d:d7:53:dc:65:6f:bf:3d:93:3d:e4:1a:
         9b:c4:3f:fd:dc:ae:a4:c2:56:76:70:17:80:37:57:6a:c2:59:
         b5:eb:a8:e5:ed:c2:6e:69:f0:eb:fa:83:01:57:40:cf:ec:04:
         f7:3b:db:c2:d3:43:a6:a4:e1:c7:f9:20:ed:44:c8:67:0c:8e:
         74:99:1e:98:66:81:b8:e4:34:b6:a9:d6:8d:31:6f:57:cc:77:
         d0:eb:e0:45:c0:52:91:e5:a4:4e:de:f4:9a:6e:d0:85:25:68:
         74:ec:16:cc:cb:fb:d4:81:42:33:0c:62:13:82:93:25:af:b1:
         a8:aa:93:8e:94:3e:b3:cb:25:b1:32:85:79:d3:73:0d:dd:3e:
         cb:9a:95:8a:9f:28:b1:ea:27:f7:20:a7:97:34:c6:9b:4e:cf:
         39:54:97:81:c4:3a:a1:7a:b5:a3:29:3d:a8:bb:bf:69:89:54:
         ac:62:d3:1e:dc:c6:e9:f0:5c:b2:f2:0a:c7:04:03:57:60:9d:
         d0:55:ad:32:2f:0c:10:35:a2:5a:54:71:ec:18:fb:aa:6a:4f:
         c4:98:21:90:57:1e:26:57:6e:b4:e4:4f:52:5c:3d:ee:2d:03:
         41:66:b4:63:0c:24:27:65:26:87:83:d8:88:a8:9d:81:67:8f:
         fc:e0:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----