Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.mft
File:                     DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.mft (raw, json)
Hash identifier:          TBbyuITBtz7pCV8NnWL/hNX8tSEqABr5bZ3DLEKVlTI=
Subject key identifier:   3D:01:30:53:89:CE:CF:03:90:69:28:FC:A3:28:72:AC:DC:3F:C0:7B
Authority key identifier: DE:FA:EE:EC:3A:F4:A8:5A:F4:5F:80:A9:72:D2:45:2B:90:7D:5D:F5
Certificate issuer:       /CN=DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5
Certificate serial:       38B02306635A3FD33A5EECDD79B5F4CAB039ED6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.mft
Manifest number:          8C
Signing time:             Tue 09 Jul 2024 09:41:26 +0000
Manifest this update:     Tue 09 Jul 2024 09:36:26 +0000
Manifest next update:     Wed 10 Jul 2024 10:40:26 +0000
Files and hashes:         1: 34352e342e34302e302f32322d3234203d3e20323636303534.roa (hash: pPCYULZE4jF6hIU6paLp73tvEW2NUI9bJpse/euvoog=)
                          2: 323830343a333964383a3a2f33322d3438203d3e20323636303534.roa (hash: Rqxp9DHVx5keMkV7KM6lcu2fsSh/oUwnGghFaZCCfIg=)
                          3: DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.crl (hash: FtOCAPc/nMMzsTkdpCf5h9m/Fd+59oIhrKmn1WiRrWg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b0:23:06:63:5a:3f:d3:3a:5e:ec:dd:79:b5:f4:ca:b0:39:ed:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5
        Validity
            Not Before: Jul  9 09:36:26 2024 GMT
            Not After : Jul 10 10:40:26 2024 GMT
        Subject: CN=3D01305389CECF03906928FCA32872ACDC3FC07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:53:23:08:b9:c8:ed:4e:92:04:b5:a1:8e:da:
                    3b:c2:19:9c:d2:13:ad:a9:43:17:13:87:e7:94:7a:
                    ac:b6:86:18:51:f8:f7:cf:2b:c4:3f:35:2a:dc:b3:
                    a3:bf:7b:c4:78:3f:0f:01:89:50:08:ac:f3:ed:25:
                    4c:6d:ec:7c:2a:3b:5f:a4:e8:a8:48:d8:b1:2f:a0:
                    01:95:06:94:e3:63:f5:56:6c:69:ea:30:2f:8d:c3:
                    23:a1:29:52:a4:81:e5:09:96:50:d8:e5:7c:80:a5:
                    de:5e:58:95:b0:86:d1:47:15:b8:66:47:8c:28:26:
                    cc:ff:a1:05:a5:2e:f7:6f:64:8b:76:bf:d3:e2:02:
                    b1:be:e9:87:7f:88:84:a6:39:69:71:59:96:36:fe:
                    78:29:df:46:86:5e:d8:48:33:eb:93:0d:38:b6:7f:
                    30:99:8e:28:4b:a5:46:3f:6e:b0:4b:3b:f1:0c:58:
                    b2:f5:bc:45:44:f6:e1:4b:ae:81:1b:f9:3e:c0:49:
                    1b:2b:a3:33:f7:86:c1:da:37:2c:7c:41:37:1c:68:
                    c3:ba:59:17:19:8a:b5:42:e7:1a:ce:2a:3b:93:74:
                    ad:8f:88:f2:af:1d:65:85:23:6d:b2:64:30:84:7d:
                    a2:16:39:0d:e5:3e:41:f2:8e:fb:fa:f3:15:ec:7b:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:01:30:53:89:CE:CF:03:90:69:28:FC:A3:28:72:AC:DC:3F:C0:7B
            X509v3 Authority Key Identifier:
                keyid:DE:FA:EE:EC:3A:F4:A8:5A:F4:5F:80:A9:72:D2:45:2B:90:7D:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a8:99:47:af:4f:97:5a:5f:4d:b3:2f:4b:87:cd:92:8e:7e:
         40:60:e9:d5:a0:f6:ee:ee:e7:bb:30:b9:9f:29:bd:b7:e8:bc:
         7b:a9:62:0d:9b:b1:b2:17:6d:00:d7:7b:5f:18:d7:94:36:5f:
         61:eb:dd:a0:d7:f9:8c:56:33:1a:eb:68:af:18:c8:77:4a:96:
         93:76:ce:ad:95:11:07:77:41:dc:35:52:0b:fd:d1:50:09:f3:
         f0:bb:da:8c:28:15:22:78:f4:20:ea:8f:17:8f:02:dd:13:52:
         01:fb:54:9a:7b:df:f8:33:48:06:68:4e:a3:20:b1:48:6c:45:
         9a:de:8d:84:7c:29:0c:f7:d0:a8:25:68:dd:7b:85:c9:1a:12:
         1d:f6:8f:24:96:7e:8e:4d:bd:f3:97:22:9e:ce:43:63:76:b3:
         0d:00:3a:ea:48:c8:12:41:f3:70:52:ab:7a:80:42:e4:ec:41:
         52:01:ce:58:b2:9a:cf:f5:d9:4b:21:90:40:af:4b:42:f5:26:
         6d:9a:8a:16:20:45:14:86:97:ce:e2:25:2f:66:25:86:5e:9c:
         c7:65:6d:ff:42:f6:73:b0:23:78:da:2c:19:c8:a6:33:cc:dc:
         69:4f:e5:b0:6c:f5:ac:6e:9a:b2:e1:3b:6e:66:f0:f0:18:78:
         c0:62:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----