Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/8717B00AD18E837D6651B13EF7CEF0D8949B3748.mft
File:                     8717B00AD18E837D6651B13EF7CEF0D8949B3748.mft (raw, json)
Hash identifier:          VD6ZbQvxEirGOg+FNFhGTOcGKHpqzu38XcwQVvWGGOo=
Subject key identifier:   B4:3B:69:0E:AD:B3:56:26:79:2C:50:50:B0:6D:6C:8B:1E:B8:7B:F3
Authority key identifier: 87:17:B0:0A:D1:8E:83:7D:66:51:B1:3E:F7:CE:F0:D8:94:9B:37:48
Certificate issuer:       /CN=8717B00AD18E837D6651B13EF7CEF0D8949B3748
Certificate serial:       1E74536ECF57D55CF71D08F41E3626D7BE11B267
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8717B00AD18E837D6651B13EF7CEF0D8949B3748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/8717B00AD18E837D6651B13EF7CEF0D8949B3748.mft
Manifest number:          7C
Signing time:             Fri 15 Nov 2024 21:20:32 +0000
Manifest this update:     Fri 15 Nov 2024 21:15:32 +0000
Manifest next update:     Sat 16 Nov 2024 23:16:32 +0000
Files and hashes:         1: 3136382e3139372e3136302e302f32322d3332203d3e20323635343933.roa (hash: 6TxJTaAr+/ZOJrOxZmm7dnBNljPhWRNFXAYQMHMCZBQ=)
                          2: 323830343a333466633a3a2f33322d313238203d3e20323635343933.roa (hash: ugHhkZv0MWMELOyGGZl3C34yz9SnWPHtRvjh2+Pri28=)
                          3: 8717B00AD18E837D6651B13EF7CEF0D8949B3748.crl (hash: 72jieMYFZFqVdxyOyxEQZhMOmUyTuHvr1k851sv6EbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:74:53:6e:cf:57:d5:5c:f7:1d:08:f4:1e:36:26:d7:be:11:b2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8717B00AD18E837D6651B13EF7CEF0D8949B3748
        Validity
            Not Before: Nov 15 21:15:32 2024 GMT
            Not After : Nov 16 23:16:32 2024 GMT
        Subject: CN=B43B690EADB35626792C5050B06D6C8B1EB87BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:86:5a:e6:40:d1:da:56:62:b2:b9:a0:ba:
                    98:1f:47:04:df:f9:ea:c7:f7:11:bd:3d:4e:ea:8c:
                    5e:ea:45:aa:47:14:2d:87:85:e0:4f:7c:33:b2:a0:
                    de:29:fc:79:0b:4d:11:0f:13:34:7e:a0:24:84:21:
                    97:09:7d:9d:fe:be:a9:9a:0d:c1:10:33:08:e1:96:
                    cd:d8:3b:a1:88:f5:52:34:cf:44:d4:e7:01:68:52:
                    b0:f4:2b:0d:53:88:3e:39:e8:14:65:29:5b:5d:51:
                    b0:84:e9:59:d5:94:5e:af:42:52:32:6d:f4:35:57:
                    6d:94:a6:3a:da:cc:c9:0c:1a:1a:5e:1c:05:f7:c5:
                    3a:21:01:45:d5:1a:5d:50:63:c9:ae:af:2e:7d:b3:
                    1e:e6:f4:8a:62:1a:c1:24:11:3c:de:48:43:a1:a4:
                    b6:d3:be:bf:91:1c:18:c3:ef:8c:89:2c:15:9b:4a:
                    f4:a3:1a:df:86:52:cc:c6:6a:19:05:0d:ff:52:f2:
                    44:64:5d:5b:f6:60:45:38:b2:16:1a:b2:df:59:a7:
                    89:af:7c:e8:e8:82:70:20:db:f5:2b:1a:a4:f2:32:
                    28:99:64:28:3c:1b:4c:70:48:42:1c:5d:81:01:8c:
                    1f:d1:fd:33:64:b4:43:cf:2a:13:77:2d:c0:16:53:
                    7d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3B:69:0E:AD:B3:56:26:79:2C:50:50:B0:6D:6C:8B:1E:B8:7B:F3
            X509v3 Authority Key Identifier:
                keyid:87:17:B0:0A:D1:8E:83:7D:66:51:B1:3E:F7:CE:F0:D8:94:9B:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/8717B00AD18E837D6651B13EF7CEF0D8949B3748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8717B00AD18E837D6651B13EF7CEF0D8949B3748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/8717B00AD18E837D6651B13EF7CEF0D8949B3748.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:92:60:3e:cd:01:0a:0c:3e:7f:8e:9a:e8:6b:4c:d7:e2:
         d2:95:ad:ea:0b:42:7c:af:32:ef:11:f2:bd:42:34:ac:d2:a4:
         d6:d2:64:ac:1f:73:30:91:bc:3e:bd:e3:f9:c5:0f:75:b5:2a:
         a8:cc:df:5f:47:ee:08:99:50:ac:80:1a:25:05:7f:29:fa:7e:
         1f:8f:6f:08:76:73:3e:d7:93:70:79:8b:9e:11:aa:43:22:cf:
         7d:50:3e:28:3d:10:c2:73:7e:1e:40:90:fc:f7:6f:bb:b3:d9:
         b7:32:46:a2:72:9e:6c:9b:af:01:4f:a6:4f:2a:23:bf:2a:fd:
         0d:8a:96:b6:fe:fb:2c:d6:2e:55:04:93:17:6f:e2:ce:fe:85:
         1c:af:82:f3:52:3f:5b:a1:06:7b:77:80:80:c0:cf:92:c0:0b:
         a8:39:04:e1:eb:7b:0b:3e:37:4f:c7:9a:80:f3:49:d4:b4:e5:
         52:43:15:54:3f:b2:06:b7:c8:70:b5:33:cf:f5:1e:6c:a5:af:
         70:5c:b3:40:14:d5:1c:7c:e1:8d:79:c4:3d:6d:e4:b6:60:dd:
         7a:62:06:e1:47:fd:c5:56:47:2a:e4:6b:86:b0:e3:b2:f0:36:
         4f:66:60:c0:33:f8:c3:6e:02:34:61:6f:a9:fc:fb:7e:4f:9f:
         8b:de:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----