Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.mft
File:                     0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.mft (raw, json)
Hash identifier:          RUySK49y/KmxOACYFQd5rpJZB39/6Xmq8XI1lDeq15M=
Subject key identifier:   65:C1:58:5E:9E:D2:64:72:E7:B7:F3:9B:2C:A4:55:5F:6A:AC:81:21
Authority key identifier: 0B:60:CA:91:C9:FD:E7:59:8D:B5:3A:0F:81:A2:54:B9:17:7E:AF:49
Certificate issuer:       /CN=0B60CA91C9FDE7598DB53A0F81A254B9177EAF49
Certificate serial:       70348697DE7677252734A0A06B394462CDE91EFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.mft
Manifest number:          03
Signing time:             Thu 22 Feb 2024 14:19:13 +0000
Manifest this update:     Thu 22 Feb 2024 14:14:13 +0000
Manifest next update:     Fri 23 Feb 2024 15:11:13 +0000
Files and hashes:         1: 3137372e3133312e3133362e302f32322d3234203d3e20323730373833.roa (hash: hvJYEDHIR+q3ndDUojxYZ8UTPXtM1TUKaKw6iU4x36o=)
                          2: 0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.crl (hash: iNIz7GhoWqlKMMLFSAaVApuxNRUe1kJG1q9i7+dJvRc=)
                          3: 323830343a373135383a3a2f33322d3334203d3e20323730373833.roa (hash: eU6dxgtzABspNk5XdFIUyiD53yKTGrT0FiLlKPmJURw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:34:86:97:de:76:77:25:27:34:a0:a0:6b:39:44:62:cd:e9:1e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B60CA91C9FDE7598DB53A0F81A254B9177EAF49
        Validity
            Not Before: Feb 22 14:14:13 2024 GMT
            Not After : Feb 23 15:11:13 2024 GMT
        Subject: CN=65C1585E9ED26472E7B7F39B2CA4555F6AAC8121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:dc:ca:1d:0a:fe:a1:54:11:e0:cf:d5:68:
                    d8:f3:97:63:87:59:ec:19:91:c9:ca:07:a6:cd:d7:
                    42:ba:bc:2b:19:91:c9:38:e3:1c:64:46:90:1d:82:
                    17:b6:ee:ca:40:78:4a:fe:76:f1:33:a3:33:d6:c6:
                    1a:be:fe:de:08:d4:35:22:c0:2a:30:7b:74:c0:52:
                    82:8c:ea:31:8c:90:c6:2d:ad:bf:8d:1c:8c:d4:01:
                    54:71:5e:f5:19:6c:f4:11:d5:37:b1:4d:ff:3a:72:
                    71:33:0d:f3:f7:d2:67:cb:01:82:2d:09:11:d7:aa:
                    db:37:b5:b5:39:b8:a8:78:2a:8d:c1:1c:9c:f4:4a:
                    53:06:a2:be:ce:76:68:3c:99:98:a7:d5:51:dd:90:
                    f1:d9:a5:90:96:e6:d8:86:0f:0b:11:36:35:59:83:
                    65:b3:c7:b3:6d:79:4a:db:9f:44:08:52:e8:4a:51:
                    90:52:c8:6b:c9:07:21:10:82:7f:0a:76:01:23:c8:
                    b9:25:33:fe:4b:6e:44:d4:b8:6b:6e:ac:6e:0f:1c:
                    93:52:54:78:76:d1:d7:25:42:32:a2:60:78:c7:65:
                    b3:43:cb:0e:97:7a:49:c1:21:69:01:b8:dd:8c:f0:
                    8e:f9:f9:9a:cc:8e:d3:6d:f6:5b:0a:7b:0d:3d:98:
                    93:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C1:58:5E:9E:D2:64:72:E7:B7:F3:9B:2C:A4:55:5F:6A:AC:81:21
            X509v3 Authority Key Identifier:
                keyid:0B:60:CA:91:C9:FD:E7:59:8D:B5:3A:0F:81:A2:54:B9:17:7E:AF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:30:c3:c8:a4:26:cc:f3:cc:20:ee:7d:22:df:41:47:bf:58:
         2c:44:38:b9:76:ee:21:d2:a1:c4:6c:71:73:9a:55:3e:90:23:
         0f:cd:e2:74:ff:63:63:b0:3e:19:ba:3e:fe:47:d6:18:9b:cd:
         61:bc:2f:99:61:6c:51:c3:42:5f:46:c4:94:dd:96:c8:44:a5:
         98:2d:bf:95:45:3d:ad:62:d7:e9:84:7c:5f:b8:a8:07:51:5a:
         cb:c7:73:5d:0d:8d:d9:8d:45:f6:c5:60:9a:ad:34:f6:67:f7:
         16:ea:c8:ab:ad:3f:00:ba:48:c7:ac:6e:a5:fe:fb:7c:79:24:
         8d:a4:62:e9:46:d5:0a:47:1e:1c:55:32:d1:84:cb:ff:de:6a:
         ee:72:6f:a9:c6:99:f5:4b:b7:30:ca:31:45:15:37:81:1e:c0:
         b3:3e:55:7b:68:8d:dd:36:92:d5:72:f4:21:39:ae:25:3b:39:
         21:f8:2e:f1:03:13:11:76:84:8a:a0:ab:af:33:ec:1e:a9:f5:
         ac:cf:eb:e1:c5:9a:68:ee:17:62:74:03:89:3d:da:5c:ad:3f:
         15:48:d5:13:6f:49:58:e1:2a:e5:93:51:32:19:dd:33:8e:58:
         6d:26:32:ec:76:8c:c8:91:bc:bf:83:a2:aa:1f:72:cd:d8:80:
         de:42:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----