Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/299948EC3B7F9F10DE5FFB0EA730B45215486163.mft
File:                     299948EC3B7F9F10DE5FFB0EA730B45215486163.mft (raw, json)
Hash identifier:          7UlMLnwQ6rHC9LMU78muNBKurPljZsttVyAswFEVlCU=
Subject key identifier:   FD:0B:70:6E:DF:1C:41:A1:AA:05:D4:F4:A0:5D:01:3A:D1:3B:80:B9
Authority key identifier: 29:99:48:EC:3B:7F:9F:10:DE:5F:FB:0E:A7:30:B4:52:15:48:61:63
Certificate issuer:       /CN=299948EC3B7F9F10DE5FFB0EA730B45215486163
Certificate serial:       318A6F06B57EDFB9512B439AD8784EE4487AA3C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/299948EC3B7F9F10DE5FFB0EA730B45215486163.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/299948EC3B7F9F10DE5FFB0EA730B45215486163.mft
Manifest number:          52
Signing time:             Tue 25 Jun 2024 03:38:00 +0000
Manifest this update:     Tue 25 Jun 2024 03:33:00 +0000
Manifest next update:     Wed 26 Jun 2024 07:00:00 +0000
Files and hashes:         1: 299948EC3B7F9F10DE5FFB0EA730B45215486163.crl (hash: ZBPIron2/kCW23+UOjh1/KM4Dw3f4gm99AEIoDbAK4o=)
                          2: 3136382e302e3135382e302f32332d3233203d3e20323635323536.roa (hash: jmPGhnnWNylFYwmT/+fsb67JZx8lm8eC1PP79ui74Ts=)
                          3: 323830343a326430303a3a2f33322d3332203d3e20323635323536.roa (hash: xB02aGfURT/4TtG+ZP1SLHeSUZ5VmmtKtaZEGQD6nS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:6f:06:b5:7e:df:b9:51:2b:43:9a:d8:78:4e:e4:48:7a:a3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=299948EC3B7F9F10DE5FFB0EA730B45215486163
        Validity
            Not Before: Jun 25 03:33:00 2024 GMT
            Not After : Jun 26 07:00:00 2024 GMT
        Subject: CN=FD0B706EDF1C41A1AA05D4F4A05D013AD13B80B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:f2:d7:bc:f6:24:66:ad:d9:98:2a:c6:b5:
                    b3:4d:e8:98:64:28:e8:42:e0:c1:0a:82:be:90:df:
                    ba:49:33:be:e3:d0:25:d4:df:7d:74:04:ed:f5:88:
                    06:b7:39:4a:38:61:58:ec:e0:d8:eb:1c:bd:7c:45:
                    8d:b6:94:23:bc:a0:8b:97:01:72:73:02:f0:b1:51:
                    93:ee:c8:32:a5:35:b1:f7:f5:4c:53:1f:72:d8:a5:
                    c6:ca:7a:42:9f:a9:43:ab:47:2b:df:53:27:1e:41:
                    54:77:0a:28:3c:0c:86:23:35:1f:d2:14:3f:fb:31:
                    f6:24:36:f5:c3:b0:fc:09:6a:a9:5c:f5:1a:5f:d4:
                    fc:d0:c6:ad:5a:f8:37:3a:78:28:b1:68:77:74:20:
                    13:b7:41:87:84:db:71:1b:22:5c:96:3d:06:f0:34:
                    2b:9b:e2:c4:ad:1f:61:53:99:e0:a8:78:5e:09:c1:
                    47:3c:76:bf:fd:2d:1b:30:ae:56:a0:eb:f7:a7:59:
                    3c:8a:84:80:97:c4:be:12:6c:ae:5e:11:13:15:70:
                    91:fc:9f:a3:e7:25:a6:e3:10:25:fc:75:25:8b:d8:
                    41:98:77:ca:f5:e7:dd:82:57:c1:41:e7:97:ca:f5:
                    51:4b:28:a9:ba:a4:ec:e9:16:69:8b:0f:7e:e7:56:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0B:70:6E:DF:1C:41:A1:AA:05:D4:F4:A0:5D:01:3A:D1:3B:80:B9
            X509v3 Authority Key Identifier:
                keyid:29:99:48:EC:3B:7F:9F:10:DE:5F:FB:0E:A7:30:B4:52:15:48:61:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/299948EC3B7F9F10DE5FFB0EA730B45215486163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/299948EC3B7F9F10DE5FFB0EA730B45215486163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/299948EC3B7F9F10DE5FFB0EA730B45215486163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:07:90:28:f0:f3:71:ef:3a:55:f9:68:5e:89:b7:0e:64:d6:
         43:c3:cd:c0:f5:ad:b9:64:59:db:07:7a:44:4f:7f:94:12:71:
         f7:f9:8d:ce:1c:97:0b:3b:d4:1a:1c:3f:ed:7c:4b:a7:ea:10:
         10:5c:7b:92:c9:03:a1:82:ce:b5:28:ed:c8:1e:07:51:c5:63:
         4b:e2:74:58:85:e9:6b:42:78:6c:6b:a8:54:cf:41:74:74:7a:
         eb:74:b5:fa:7d:b4:6c:7b:d1:14:3f:fd:34:8b:46:87:9c:1e:
         61:6b:11:b9:b9:19:3b:4c:e2:63:27:47:e5:97:13:17:68:d5:
         ca:e3:ef:5d:4a:70:80:16:f1:21:23:b0:25:32:0a:1a:fe:74:
         2b:27:27:40:8b:23:a5:03:ec:31:14:24:8b:76:8a:c1:c7:da:
         a6:95:f7:cd:7b:df:d6:c0:a2:a8:7f:f4:37:dc:d2:70:7f:f9:
         00:26:fa:49:81:17:a8:41:2d:48:b3:ca:bd:c8:d9:5e:45:df:
         2c:93:c0:f9:30:cf:4e:be:bb:fc:11:5e:be:fc:2b:65:a9:d5:
         67:5d:c2:d1:7d:41:1c:59:c5:b9:31:83:34:47:4e:f4:5d:28:
         1f:b2:22:8f:25:88:b4:71:e2:a8:23:70:95:9f:b3:10:8d:5c:
         d4:fc:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----