Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/24389FBFAD47987825171CB046C103C7BBF77E5E.mft
File:                     24389FBFAD47987825171CB046C103C7BBF77E5E.mft (raw, json)
Hash identifier:          u7TbVfJS8LbN7vN7VqhiyZ5CjTARHiHL9os0TsPl03w=
Subject key identifier:   20:45:2F:A6:35:D0:B2:7D:90:BE:44:DB:51:F9:39:C2:4D:53:34:FB
Authority key identifier: 24:38:9F:BF:AD:47:98:78:25:17:1C:B0:46:C1:03:C7:BB:F7:7E:5E
Certificate issuer:       /CN=24389FBFAD47987825171CB046C103C7BBF77E5E
Certificate serial:       459890E4170B3AC1C7A15BA5CDBDD46B17D1635E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24389FBFAD47987825171CB046C103C7BBF77E5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/24389FBFAD47987825171CB046C103C7BBF77E5E.mft
Manifest number:          67
Signing time:             Wed 19 Jun 2024 14:44:33 +0000
Manifest this update:     Wed 19 Jun 2024 14:39:33 +0000
Manifest next update:     Thu 20 Jun 2024 15:05:33 +0000
Files and hashes:         1: 323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (hash: WmU7MdARFBAQtujB/fHVcsxW/vWd7oY+SwYRBaB5nhM=)
                          2: 24389FBFAD47987825171CB046C103C7BBF77E5E.crl (hash: TLPfjqWKT3VHAPHY+6T1uBi6oR4g/7j9DTlhQ3GivEo=)
                          3: 3134332e302e3133362e302f32322d3233203d3e20323634303131.roa (hash: IfgIxvg//FkJW5iATJDCdvVge3Vjlp5WUQfiSl6bK1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:98:90:e4:17:0b:3a:c1:c7:a1:5b:a5:cd:bd:d4:6b:17:d1:63:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24389FBFAD47987825171CB046C103C7BBF77E5E
        Validity
            Not Before: Jun 19 14:39:33 2024 GMT
            Not After : Jun 20 15:05:33 2024 GMT
        Subject: CN=20452FA635D0B27D90BE44DB51F939C24D5334FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:cc:a8:0a:99:34:b0:02:bd:89:83:04:f9:
                    6a:4c:d9:b1:64:d4:b4:c2:98:c0:77:ee:a7:76:8f:
                    dd:37:14:f3:83:6a:18:eb:32:c9:b8:a7:fd:bd:65:
                    ad:61:67:e8:50:a4:8e:af:53:9b:10:22:00:89:ab:
                    83:58:ab:d4:33:28:6c:5a:a4:16:b3:12:f5:31:03:
                    26:4f:72:1f:23:ca:0f:38:ed:26:9c:5f:b4:25:c3:
                    fd:fe:51:27:38:96:cd:ec:c1:06:3a:05:b8:41:87:
                    eb:b8:1e:33:66:b3:b5:58:b0:fb:7e:37:95:5a:1b:
                    c0:4a:62:6d:f2:47:63:5d:93:47:64:d4:70:ff:dd:
                    47:6b:de:2c:f7:39:3b:83:96:c4:ff:23:6b:19:57:
                    2c:a8:cc:47:23:ef:2e:9e:8d:a2:e7:fd:1e:ac:6f:
                    a7:9c:6f:0b:34:c7:5b:34:81:c5:0b:60:50:8d:99:
                    73:35:39:59:3c:84:79:31:49:70:39:15:01:38:ba:
                    d6:8f:04:ac:d6:fc:53:0b:f3:06:50:07:bc:c4:2f:
                    d2:c6:86:99:f7:19:12:a0:ec:5b:48:bb:6d:86:e9:
                    40:cc:52:f6:a5:dd:52:29:3c:85:2f:0e:51:b6:3b:
                    c3:f1:98:04:44:ce:8e:44:89:f8:ad:65:fe:5f:06:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:45:2F:A6:35:D0:B2:7D:90:BE:44:DB:51:F9:39:C2:4D:53:34:FB
            X509v3 Authority Key Identifier:
                keyid:24:38:9F:BF:AD:47:98:78:25:17:1C:B0:46:C1:03:C7:BB:F7:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/24389FBFAD47987825171CB046C103C7BBF77E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24389FBFAD47987825171CB046C103C7BBF77E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/24389FBFAD47987825171CB046C103C7BBF77E5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:90:a8:26:96:20:15:4f:0d:65:68:ba:33:9a:08:ef:67:88:
         d9:b4:a4:85:03:d8:d0:9e:cb:79:25:6e:eb:eb:ab:ca:64:95:
         a1:52:b0:8b:15:58:e9:0d:d0:06:18:dd:80:b8:e2:4e:2f:17:
         a3:34:0f:c3:e9:11:a8:e7:af:7c:ae:90:bd:22:85:bf:fc:65:
         d1:c3:3e:ac:67:13:ca:f6:de:d6:ec:75:80:86:0a:59:d1:8d:
         63:c3:22:df:5f:a8:78:fd:be:ec:ee:fd:82:3b:9a:08:a5:ef:
         c6:87:14:ef:f7:34:63:e1:56:65:5a:90:3a:fd:40:41:42:88:
         89:52:9a:09:13:4a:57:85:ee:c1:af:1e:ef:57:c3:16:a6:6b:
         e6:65:62:de:04:82:9c:9f:57:09:b5:40:66:d6:12:11:c1:24:
         16:ac:ed:eb:46:5a:03:e4:57:8b:26:89:ff:15:62:9d:21:48:
         93:c5:94:9a:68:33:8d:c8:dd:12:74:b8:a5:b8:65:41:09:fe:
         3c:4f:31:94:fe:60:d6:f8:89:78:c3:39:8d:0a:c9:ac:93:f8:
         d3:f1:3b:5f:9c:dd:4f:24:8e:25:d0:e2:69:97:d4:08:80:26:
         c5:c5:71:50:76:19:b4:b6:07:82:c7:87:45:c8:4e:ef:c3:9a:
         de:58:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----