Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.mft
File:                     94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.mft (raw, json)
Hash identifier:          tjuk7q3YmLo4TUA/+FyrqGlB3WufCF9Ze7DdY20cDGY=
Subject key identifier:   F2:35:5E:E7:65:47:18:B4:E9:1A:09:25:4D:CA:95:00:8A:B9:56:4B
Authority key identifier: 94:B1:D1:B5:4C:EC:AE:73:40:AB:B7:A5:70:84:FC:B3:6E:AD:C9:AE
Certificate issuer:       /CN=94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE
Certificate serial:       582AC1043CB316C24237B54FF4A71F742E83C4EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.mft
Manifest number:          73
Signing time:             Tue 09 Jul 2024 16:53:41 +0000
Manifest this update:     Tue 09 Jul 2024 16:48:41 +0000
Manifest next update:     Wed 10 Jul 2024 18:20:41 +0000
Files and hashes:         1: 323830343a313138343a3a2f33322d3438203d3e203631383935.roa (hash: 47I0jaR6kLYWnB/1NhFW/TXSL1Xd86lO4DKf5eqsurU=)
                          2: 94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.crl (hash: DiA7OAtXfDCr9TaP+4mPu3BhOcKrWu6kITadSDG3fPk=)
                          3: 3137372e39312e31362e302f32302d3234203d3e203631383935.roa (hash: lN9UHiVXDiPPw4/hLHttuKzaqhEDFm3BzIu930UcEw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2a:c1:04:3c:b3:16:c2:42:37:b5:4f:f4:a7:1f:74:2e:83:c4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE
        Validity
            Not Before: Jul  9 16:48:41 2024 GMT
            Not After : Jul 10 18:20:41 2024 GMT
        Subject: CN=F2355EE7654718B4E91A09254DCA95008AB9564B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:cd:51:7c:14:15:3c:a4:0f:5e:21:a7:a2:
                    07:42:02:1e:0e:57:0c:fb:39:44:c7:e7:16:80:ef:
                    39:20:c8:82:5c:89:ee:b9:8b:28:e9:bb:eb:27:b4:
                    0a:a6:7d:c9:6b:0f:75:c8:43:e2:6f:3f:31:fc:05:
                    ac:9a:0b:16:2f:e4:f8:e0:8a:91:b5:9d:48:d6:a1:
                    a2:01:f3:22:68:24:84:1a:b3:e5:62:c1:69:9a:93:
                    44:81:48:47:13:3b:37:fe:42:35:22:fd:da:c0:74:
                    b6:85:b4:13:4f:9a:ff:46:c7:15:61:18:40:1e:1d:
                    8d:fa:f2:4f:40:52:b2:39:81:42:e5:45:e5:a4:aa:
                    13:36:75:bf:e2:09:02:06:a0:6c:71:41:52:92:c9:
                    a9:f4:ee:a9:7c:37:8c:8d:f8:bc:7e:c2:21:94:f8:
                    57:f1:62:22:fa:e8:41:17:fb:07:da:01:29:93:43:
                    ba:59:c1:b6:a4:a7:f4:ab:a9:1e:ca:91:1b:2b:bc:
                    4b:90:31:82:5f:2f:92:9b:ad:49:8a:62:97:49:6b:
                    b5:d9:91:56:b9:5c:77:3a:ac:21:fd:33:61:d4:30:
                    fa:3f:d7:05:76:2b:4a:b6:4a:bc:4c:f2:57:dd:56:
                    9e:cf:4e:57:8a:ad:7a:a7:12:81:76:01:61:7b:90:
                    fb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:5E:E7:65:47:18:B4:E9:1A:09:25:4D:CA:95:00:8A:B9:56:4B
            X509v3 Authority Key Identifier:
                keyid:94:B1:D1:B5:4C:EC:AE:73:40:AB:B7:A5:70:84:FC:B3:6E:AD:C9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:ff:7c:27:53:6f:d4:9b:e0:2e:01:42:c8:fa:59:30:5e:
         94:c2:e2:11:9c:39:87:8c:1e:0d:49:f0:25:88:41:17:71:a4:
         13:fe:e6:91:ed:37:18:12:3f:0c:01:b6:2d:2d:4e:eb:f0:30:
         9a:42:ef:e4:11:e7:e5:68:ef:1d:d8:55:df:0f:c1:0b:db:bf:
         a0:5f:58:33:c6:3c:7b:e3:1e:a5:89:be:a6:01:df:37:1c:22:
         95:ce:ee:83:02:ec:0a:6a:27:35:0d:c1:13:ea:f9:1b:0e:6e:
         66:83:be:41:cc:73:29:f5:b2:29:e5:7a:02:79:09:65:80:88:
         a5:37:d9:ae:f2:d8:f1:a4:da:74:c2:61:9e:83:b9:9d:20:67:
         e4:31:c5:24:c2:bf:4b:00:75:00:f6:c9:21:71:ac:54:9a:3f:
         a3:27:de:b6:25:ca:de:32:5a:d8:57:90:03:79:ba:4b:59:e6:
         66:41:f2:0f:41:6f:fb:c4:ac:a6:07:5d:a5:ae:c7:e7:0f:75:
         e0:57:20:c3:7a:95:a0:38:75:f4:95:9e:3c:18:04:27:8b:b5:
         83:d2:d4:e9:52:01:78:11:33:4f:07:32:26:f2:a3:a7:06:56:
         4a:f7:ca:83:a3:42:84:98:04:23:5b:a3:91:89:a4:fc:b4:fa:
         19:b7:9c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----