Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.mft
File:                     421315A955B12A05BBC6E72A2627E4B0F90C83D7.mft (raw, json)
Hash identifier:          Ll7oSJfhLR59o8+yW2a6Gc94Zf3VvY3lmjzMF9VM3vA=
Subject key identifier:   00:D6:BA:1F:C1:B3:9F:05:D9:08:E1:03:1C:1D:26:9D:98:6B:BB:A7
Authority key identifier: 42:13:15:A9:55:B1:2A:05:BB:C6:E7:2A:26:27:E4:B0:F9:0C:83:D7
Certificate issuer:       /CN=421315A955B12A05BBC6E72A2627E4B0F90C83D7
Certificate serial:       75F2241BEBCF428979DE9B2611AF0B0CEBC0C543
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.mft
Manifest number:          0104
Signing time:             Tue 15 Oct 2024 04:12:22 +0000
Manifest this update:     Tue 15 Oct 2024 04:07:22 +0000
Manifest next update:     Wed 16 Oct 2024 06:06:22 +0000
Files and hashes:         1: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: Ah8uMVwUxwHifxcMu285zLzmeQS32zC6aKpNZe5g5YQ=)
                          2: 421315A955B12A05BBC6E72A2627E4B0F90C83D7.crl (hash: wvbCJeGmzzWHbBskP6mDOfZ2ctiENpshLfI3MfTm7qE=)
                          3: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: avPJCJ2eJYDZnJUM1FwSvYDRlcj6uNu7KcFoYwdJ+Gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f2:24:1b:eb:cf:42:89:79:de:9b:26:11:af:0b:0c:eb:c0:c5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421315A955B12A05BBC6E72A2627E4B0F90C83D7
        Validity
            Not Before: Oct 15 04:07:22 2024 GMT
            Not After : Oct 16 06:06:22 2024 GMT
        Subject: CN=00D6BA1FC1B39F05D908E1031C1D269D986BBBA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:1d:ef:a7:3c:04:53:c8:cb:f0:b6:1e:a5:
                    6f:34:d6:21:0d:6d:e4:2f:ae:13:a6:3f:e5:99:69:
                    9e:19:de:cd:5b:22:0d:1c:c2:8d:5c:99:45:55:8b:
                    b5:ab:d0:ac:7b:63:9c:7f:b6:c7:7f:f3:a4:d7:cc:
                    97:58:b8:54:f3:83:c7:51:36:68:ba:e6:cf:90:9d:
                    e1:c8:a1:db:e7:cd:3c:0f:e3:6e:3e:42:14:02:00:
                    33:c9:41:27:7e:31:42:0f:1a:76:9f:88:e9:65:91:
                    79:0d:d1:2f:d6:75:78:38:60:56:b1:06:db:da:b7:
                    6f:e8:63:39:ff:c0:09:ce:05:81:35:3c:b2:17:87:
                    32:ba:ed:f1:b2:84:dd:07:50:d2:e0:24:5d:5a:51:
                    19:40:e1:c2:c4:88:ce:ff:84:51:3c:6f:33:53:c1:
                    72:4d:d7:21:75:b8:9e:17:dd:02:1c:85:f8:ff:49:
                    64:3b:c4:2a:f7:31:22:2b:56:03:22:28:3f:b4:5e:
                    65:9a:e0:ac:ed:14:ea:99:11:c0:9d:16:a2:fa:15:
                    21:a8:4d:70:fe:66:ad:23:c4:d7:dd:25:08:77:73:
                    94:34:59:37:5c:ac:65:13:be:c8:83:bf:49:80:09:
                    0a:80:1a:7f:53:56:a9:c9:96:59:72:ea:88:33:7d:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D6:BA:1F:C1:B3:9F:05:D9:08:E1:03:1C:1D:26:9D:98:6B:BB:A7
            X509v3 Authority Key Identifier:
                keyid:42:13:15:A9:55:B1:2A:05:BB:C6:E7:2A:26:27:E4:B0:F9:0C:83:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d6:7c:0a:d5:bf:7e:cc:49:4f:1f:3b:0f:a1:fa:39:57:96:
         1d:06:ef:64:d8:5a:87:81:65:d3:50:d6:6e:99:11:80:ab:b1:
         81:8e:ae:e8:9d:d7:99:fc:76:ef:a0:fe:3d:05:e5:1e:ae:cb:
         dc:59:7a:81:df:44:63:3d:58:f5:7b:4a:eb:a8:67:cc:49:48:
         58:39:ba:76:7a:ee:f2:26:61:b1:99:4b:88:eb:34:b4:03:91:
         dd:c7:75:e8:54:b6:02:a9:73:ab:14:37:5f:bd:91:5e:b5:34:
         f0:88:aa:e7:99:e6:c2:71:a6:26:4c:90:ee:23:15:f7:1f:aa:
         f5:6c:1b:58:19:bc:88:16:4d:cf:fa:fd:1e:15:fd:ad:ef:f4:
         5f:1a:77:04:b0:0f:c2:af:95:8e:47:e7:c7:90:0c:01:6d:d6:
         ea:f9:6b:56:71:9d:52:4f:a7:bf:3c:e7:56:ee:52:2d:8d:bd:
         f5:6f:15:cf:af:a2:33:c6:45:7f:b4:38:34:ba:65:94:45:ec:
         07:bd:03:58:87:7b:e8:a2:2c:b4:58:ce:37:d7:d3:83:16:49:
         7c:07:2b:1d:0d:40:f8:0a:1e:ed:ac:18:34:c7:96:e4:49:54:
         ef:b6:c7:34:40:db:9f:dc:92:6e:af:a0:18:14:f6:22:b2:86:
         e2:42:2c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----