Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.mft
File:                     39313F2AB6C925F73DAC9060D3007FA7884B584C.mft (raw, json)
Hash identifier:          9ILXkJKDF/9b1yn4mHhr4TMRt03Cynwikg40WLcKJCE=
Subject key identifier:   AA:A6:1E:66:21:79:84:E2:8A:05:DF:DC:7F:5E:2E:49:0C:E1:ED:65
Authority key identifier: 39:31:3F:2A:B6:C9:25:F7:3D:AC:90:60:D3:00:7F:A7:88:4B:58:4C
Certificate issuer:       /CN=39313F2AB6C925F73DAC9060D3007FA7884B584C
Certificate serial:       0C4DBD7B3B996D17029B4149CA2017B854824053
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.mft
Manifest number:          97
Signing time:             Tue 09 Jul 2024 12:21:33 +0000
Manifest this update:     Tue 09 Jul 2024 12:16:33 +0000
Manifest next update:     Wed 10 Jul 2024 14:59:33 +0000
Files and hashes:         1: 3133382e33362e32382e302f32322d3234203d3e203532383037.roa (hash: RVKwfxnh98YO0XWA+yovZseY2dNVMx9E/6mnUQ3JmOY=)
                          2: 3137372e35332e34302e302f32312d3234203d3e203532383037.roa (hash: AHzxBRy/cM3M17NqDBKNBwxcdAyr13s/SfAMSFlkKRg=)
                          3: 3137302e37392e32342e302f32322d3234203d3e203532383037.roa (hash: 2R82Fds+E6ILNQ/aKkgbSs0/zEPUwoH7GQv52J3X86s=)
                          4: 323830343a323139383a3a2f33322d3438203d3e203532383037.roa (hash: vLIG15x9Oq45ycQs/Axm6HaLp+7Mn6qUJ6rM/kG/YYk=)
                          5: 3136372e3235302e31322e302f32322d3234203d3e203532383037.roa (hash: xRzAwYMOng57tEWPY/in72+beRDSjeWpRekTw20ZB2k=)
                          6: 39313F2AB6C925F73DAC9060D3007FA7884B584C.crl (hash: cYisFhEP58ljnID606Oj+yjXEtMIYt173JuJK9bxD5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4d:bd:7b:3b:99:6d:17:02:9b:41:49:ca:20:17:b8:54:82:40:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39313F2AB6C925F73DAC9060D3007FA7884B584C
        Validity
            Not Before: Jul  9 12:16:33 2024 GMT
            Not After : Jul 10 14:59:33 2024 GMT
        Subject: CN=AAA61E66217984E28A05DFDC7F5E2E490CE1ED65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:7f:3e:ee:fe:eb:0f:8f:b5:23:c1:d0:37:
                    f9:49:75:11:3b:f7:83:1e:58:b5:d9:31:df:7a:f5:
                    19:4d:ea:4c:7e:b2:4e:b0:67:f0:87:94:63:35:4b:
                    fa:06:08:9a:52:fc:94:2f:79:96:79:f0:b2:b7:4f:
                    01:dd:c8:ce:eb:1e:77:6b:0b:17:71:87:2c:a3:58:
                    88:22:47:c7:7c:84:6e:12:b8:cf:7e:71:54:e3:cf:
                    f5:0c:48:25:0b:df:51:e0:2f:41:62:19:b1:b4:2e:
                    79:1c:70:b8:39:e1:6d:65:cc:41:44:66:6e:fa:e8:
                    cf:1f:86:79:fa:b7:24:2a:b5:32:62:70:02:84:36:
                    e3:9d:f3:f4:c8:46:76:8e:98:8b:b1:d9:87:76:0f:
                    64:98:35:4c:54:09:30:95:45:30:b6:c6:03:45:79:
                    b0:ce:0e:85:6f:4f:4e:8c:be:88:24:cd:a3:06:d4:
                    a2:46:02:d2:2a:7a:2b:6a:a5:73:6d:cb:bf:c6:b3:
                    ea:44:92:ee:0a:ea:dc:c0:75:cf:52:15:44:e9:7d:
                    fc:3f:df:a3:42:17:7d:31:d9:78:39:b1:3b:35:d6:
                    5f:83:19:ab:60:4b:83:d5:8b:08:d3:2a:d1:62:1c:
                    c8:aa:e4:6c:7d:73:68:42:49:f0:87:5c:a5:34:02:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:1E:66:21:79:84:E2:8A:05:DF:DC:7F:5E:2E:49:0C:E1:ED:65
            X509v3 Authority Key Identifier:
                keyid:39:31:3F:2A:B6:C9:25:F7:3D:AC:90:60:D3:00:7F:A7:88:4B:58:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:6c:d5:b6:5d:f5:f2:8e:4d:b5:5a:ff:06:26:8b:98:84:f0:
         c7:9c:71:02:f1:fa:23:ba:f0:63:f3:5e:50:90:2d:96:f8:69:
         6a:64:7d:a9:95:c1:2b:8a:f6:23:56:2f:d7:96:cb:1a:b3:5a:
         fe:59:d0:ad:dd:7a:02:9a:63:44:51:ac:1a:a3:e0:dd:98:e6:
         69:ef:00:17:b2:cf:dc:94:7c:a5:cc:0a:8a:a8:23:2c:e7:f1:
         07:66:c6:c0:57:54:2b:c2:11:7f:f1:b3:bc:6d:92:65:05:45:
         74:1b:ed:22:80:0e:a9:ca:f3:ef:34:1f:b6:2e:26:35:ed:38:
         c7:74:7d:9a:80:7c:52:fb:ae:b6:fd:2b:cb:22:75:9d:68:e5:
         ce:cb:1b:6f:5c:7a:04:a2:9f:eb:09:6d:38:56:bb:fd:f3:cc:
         01:fb:f3:11:86:43:1f:d9:0c:23:d1:3a:81:b3:c0:08:9f:68:
         3a:a6:e9:69:6f:e1:f5:7d:f7:e5:d6:1d:3b:aa:b2:73:e1:8d:
         dd:11:72:79:80:2a:2f:c0:76:86:bd:5d:89:4c:f7:10:80:28:
         96:0f:fe:5c:42:4e:6b:a7:ad:36:b0:2a:24:3b:cc:85:c5:d2:
         38:5c:bc:c9:ab:89:95:26:47:24:46:f3:de:e5:77:c6:7a:ae:
         84:71:7e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----