Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/93647FDAC05FD53C3F277DC1785972085B8274E3.mft
File:                     93647FDAC05FD53C3F277DC1785972085B8274E3.mft (raw, json)
Hash identifier:          UGMA8VvPE/PRzlq/lDuT04z/5ea09e6X8XgR3cvJjvY=
Subject key identifier:   B5:70:52:75:EF:09:AE:95:A0:7C:A8:19:94:12:F3:BD:1B:DD:74:F8
Authority key identifier: 93:64:7F:DA:C0:5F:D5:3C:3F:27:7D:C1:78:59:72:08:5B:82:74:E3
Certificate issuer:       /CN=93647FDAC05FD53C3F277DC1785972085B8274E3
Certificate serial:       4911CE33186A2F1EC11BD2BD8D2550CB3BBAFE98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93647FDAC05FD53C3F277DC1785972085B8274E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/93647FDAC05FD53C3F277DC1785972085B8274E3.mft
Manifest number:          2A
Signing time:             Sat 23 Nov 2024 07:06:11 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:11 +0000
Manifest next update:     Sun 24 Nov 2024 07:54:11 +0000
Files and hashes:         1: 323830343a353461303a3a2f33322d313238203d3e203237363838.roa (hash: eDrfptMAatK2FypXYzCSBPprnDoY6GlKxbkAtx8e6So=)
                          2: 3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa (hash: 5vlgjPJjNjr3pFe0k5Lxp76CDM8M6UjZY2Rt6pYSR9g=)
                          3: 93647FDAC05FD53C3F277DC1785972085B8274E3.crl (hash: NQtwfmewHqjW/V28BWOseJoWNZYTd1ZuN4PJJ/MmmD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:11:ce:33:18:6a:2f:1e:c1:1b:d2:bd:8d:25:50:cb:3b:ba:fe:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93647FDAC05FD53C3F277DC1785972085B8274E3
        Validity
            Not Before: Nov 23 07:01:11 2024 GMT
            Not After : Nov 24 07:54:11 2024 GMT
        Subject: CN=B5705275EF09AE95A07CA8199412F3BD1BDD74F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:dc:b9:c5:08:5d:4a:83:93:4d:8c:3f:89:
                    dc:a0:6c:13:2b:4f:05:df:03:68:cd:d7:9a:24:06:
                    73:f2:77:7a:ba:a1:e7:e1:1f:4f:a1:41:47:9d:51:
                    b4:f7:12:33:ab:b8:92:b1:27:be:d9:72:9f:84:3a:
                    6e:60:06:44:fd:ab:74:af:2b:6a:63:47:42:0b:45:
                    e6:e7:70:67:33:48:cc:9c:ec:95:6a:e2:a2:48:46:
                    57:e0:ee:45:70:ef:03:e2:ed:21:4b:56:bd:58:c7:
                    2e:aa:c6:6f:a2:26:61:82:c9:6d:05:7e:6b:ec:6e:
                    3e:85:81:21:73:66:53:05:84:90:d7:d6:4a:a8:70:
                    ec:cb:7a:fd:fd:99:e9:0a:c1:c5:bb:16:96:86:d8:
                    4e:28:b3:74:a2:50:0b:fe:50:23:b8:9e:e2:53:4a:
                    d9:a7:7b:5f:c0:f9:a0:fa:22:60:f0:76:32:ce:4c:
                    c7:f5:78:03:a8:0d:4b:9b:f5:48:1b:b4:d7:dc:7c:
                    71:b7:f5:4d:80:31:e9:c7:70:68:41:bc:cb:c4:a3:
                    b4:14:34:61:42:75:76:dd:8d:42:da:0a:ed:aa:33:
                    98:4f:79:49:c7:c1:4b:4c:c0:6e:0f:b6:24:66:ff:
                    ff:64:f9:54:5a:36:fd:1a:99:30:56:e2:48:30:6a:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:52:75:EF:09:AE:95:A0:7C:A8:19:94:12:F3:BD:1B:DD:74:F8
            X509v3 Authority Key Identifier:
                keyid:93:64:7F:DA:C0:5F:D5:3C:3F:27:7D:C1:78:59:72:08:5B:82:74:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/93647FDAC05FD53C3F277DC1785972085B8274E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93647FDAC05FD53C3F277DC1785972085B8274E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/93647FDAC05FD53C3F277DC1785972085B8274E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:50:7b:1f:e8:3b:b3:b9:6c:f0:e3:44:56:ee:24:83:66:
         b6:bc:19:26:8b:aa:dc:a5:c9:08:b1:f0:e0:9b:aa:27:24:67:
         fd:84:96:7f:89:5a:00:74:be:f7:b2:6e:15:f2:8c:1a:9e:1d:
         72:c4:02:d6:d7:86:ad:c3:41:2e:3e:6b:1b:ee:7e:b2:b2:f2:
         87:e5:48:59:e7:b7:84:2c:2f:87:63:e5:6c:7d:7f:b6:c7:34:
         6f:ce:ca:cb:a0:f4:cc:bc:9b:f4:81:1e:86:10:f6:a7:b0:39:
         62:dd:af:bf:0c:6a:74:fe:f2:f2:dc:d8:39:20:a6:5f:e3:22:
         22:75:84:20:10:6a:1d:e4:4c:c8:c8:31:33:db:92:0b:b1:cb:
         c1:76:b9:b1:bc:dd:52:00:65:38:39:6e:f9:14:0c:f0:ff:33:
         8b:81:06:17:56:e8:04:92:a6:e2:3e:7a:73:09:26:ba:28:09:
         0a:ff:ff:ec:4e:94:be:eb:fb:6e:70:19:26:08:82:a1:e9:61:
         44:bf:6c:81:61:77:4e:25:13:93:d6:0a:8f:70:93:dc:e2:78:
         85:50:68:0b:51:a0:07:7e:4c:98:bb:df:16:49:56:8b:d9:3d:
         65:d5:a4:81:94:53:27:32:66:82:6d:68:32:69:06:47:2b:60:
         44:fc:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----