Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9D6C625408DC20FFFD3792F96BA65AC94D746D52.mft
File:                     9D6C625408DC20FFFD3792F96BA65AC94D746D52.mft (raw, json)
Hash identifier:          uaIBM63aIvrD09ebHJf252Ru2Sh2miNu0WDanYpOcjM=
Subject key identifier:   89:D0:50:BC:64:A4:A3:CF:88:C4:F8:A8:D8:95:67:80:A1:48:57:6F
Authority key identifier: 9D:6C:62:54:08:DC:20:FF:FD:37:92:F9:6B:A6:5A:C9:4D:74:6D:52
Certificate issuer:       /CN=9D6C625408DC20FFFD3792F96BA65AC94D746D52
Certificate serial:       131DABF0F166C1FE6BBB85200DBCDD5ADB879A41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D6C625408DC20FFFD3792F96BA65AC94D746D52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9D6C625408DC20FFFD3792F96BA65AC94D746D52.mft
Manifest number:          17
Signing time:             Mon 18 Nov 2024 16:18:38 +0000
Manifest this update:     Mon 18 Nov 2024 16:13:38 +0000
Manifest next update:     Tue 19 Nov 2024 17:43:38 +0000
Files and hashes:         1: 9D6C625408DC20FFFD3792F96BA65AC94D746D52.crl (hash: /5i74DSUWzqdDEwqQIAj8GmE+NYb6CA+DyAN+ShhLTA=)
                          2: 34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa (hash: Gi7JM1wp3DSvnS/9LtviNwv50CcvtgDoP1szX7nhMLE=)
                          3: 323830343a373934633a3a2f33322d3332203d3e20323731323937.roa (hash: kHLl+0tdCOJmBH3WNInIPSOAzOi6HuLR9cso8jB/UEs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1d:ab:f0:f1:66:c1:fe:6b:bb:85:20:0d:bc:dd:5a:db:87:9a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D6C625408DC20FFFD3792F96BA65AC94D746D52
        Validity
            Not Before: Nov 18 16:13:38 2024 GMT
            Not After : Nov 19 17:43:38 2024 GMT
        Subject: CN=89D050BC64A4A3CF88C4F8A8D8956780A148576F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:20:8e:e6:76:ae:e5:eb:8a:44:f6:49:9d:
                    55:3a:98:d3:5f:a2:f7:fa:2b:64:1e:53:33:cb:7d:
                    cf:da:d6:73:97:6a:80:40:c2:aa:60:89:dd:7a:9e:
                    5c:c6:c7:2e:96:6e:4f:23:6f:52:a7:21:55:c4:1e:
                    47:5c:d2:1d:bd:62:9d:36:fe:e0:80:14:81:8a:5e:
                    ac:f7:92:a7:8e:15:ab:ac:40:b2:2b:af:98:3d:a5:
                    c8:5f:2c:62:e7:bb:c5:38:f3:8a:70:04:56:c0:30:
                    e3:15:67:ed:01:da:96:7f:ad:d3:94:cc:99:97:18:
                    19:27:39:23:0e:b4:ce:d0:96:40:a1:c3:86:a8:f0:
                    7b:18:88:2c:e4:ae:2b:2d:5b:06:ac:43:a6:80:a0:
                    64:b3:c8:81:06:ab:86:ab:e1:80:64:6c:7f:fb:b7:
                    a3:e3:7e:4f:c6:83:c1:ea:e2:c5:58:e4:9b:06:2e:
                    ef:18:a4:f1:29:76:9b:27:0d:82:e8:29:64:b0:37:
                    09:ec:f2:01:2a:fb:4d:ca:ec:7b:0d:1f:77:ec:6c:
                    af:a0:6e:92:58:f9:bf:1c:61:18:10:70:13:29:35:
                    d5:76:d5:26:57:b7:f5:8e:f7:ac:44:5e:68:7e:c5:
                    20:8e:80:9c:f9:89:c4:9f:f9:f6:3c:c2:3f:5b:7b:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D0:50:BC:64:A4:A3:CF:88:C4:F8:A8:D8:95:67:80:A1:48:57:6F
            X509v3 Authority Key Identifier:
                keyid:9D:6C:62:54:08:DC:20:FF:FD:37:92:F9:6B:A6:5A:C9:4D:74:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9D6C625408DC20FFFD3792F96BA65AC94D746D52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D6C625408DC20FFFD3792F96BA65AC94D746D52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9D6C625408DC20FFFD3792F96BA65AC94D746D52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:53:78:0a:5e:e6:d5:7e:61:fe:dc:d6:a8:a0:fc:20:d7:
         c3:08:bd:7b:c6:34:fc:a7:de:57:b5:f8:cd:1c:ad:bc:04:af:
         c8:20:3f:fc:ad:14:97:ee:ab:d3:2d:06:21:fd:95:15:f4:31:
         f8:70:65:ab:84:a5:9a:32:f7:a3:d5:08:44:df:56:f4:b0:d9:
         7d:cc:f0:f8:60:16:96:fa:39:c3:08:83:af:8f:de:37:1e:a1:
         07:45:9d:9a:f7:e2:04:cf:f4:7c:79:ad:a1:0e:22:fc:29:5c:
         45:bb:a9:27:60:d2:12:24:c9:07:dd:d1:30:5a:05:40:6e:bf:
         9f:c6:90:3d:7a:a6:b1:b9:c0:92:d7:56:aa:28:26:92:d0:92:
         44:e7:3b:93:03:56:af:e1:41:56:49:df:79:06:9e:d1:de:37:
         b5:65:23:29:3f:e6:4e:a8:f6:7c:7e:fe:ad:60:4d:ad:dd:10:
         a2:4a:91:7c:93:e0:0a:34:8f:d6:ab:ac:86:46:0a:0a:6d:fb:
         52:8b:03:e4:3c:34:83:9b:27:80:e4:af:ce:3e:99:97:05:04:
         48:fc:f8:16:d4:bf:d6:f6:4b:81:ec:0e:c4:f6:f5:95:8f:38:
         26:ec:fd:4c:4a:8f:ed:2c:3a:27:6d:5f:83:a1:4e:ae:4a:fa:
         4e:fe:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----