Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1107631FAB155A98AABEDD080C412F5515D96DEF.mft
File:                     1107631FAB155A98AABEDD080C412F5515D96DEF.mft (raw, json)
Hash identifier:          oDLfGjwEGXSZ6tJMy9TllureD1OdqTNjYfOYGV0T7yg=
Subject key identifier:   E0:4A:9F:39:E0:A3:17:FC:2A:83:F8:42:23:AB:DF:33:F2:00:88:F7
Authority key identifier: 11:07:63:1F:AB:15:5A:98:AA:BE:DD:08:0C:41:2F:55:15:D9:6D:EF
Certificate issuer:       /CN=1107631FAB155A98AABEDD080C412F5515D96DEF
Certificate serial:       070B2DB2C52ED0ED3EC7C7EB5A7AB5178101CA3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1107631FAB155A98AABEDD080C412F5515D96DEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1107631FAB155A98AABEDD080C412F5515D96DEF.mft
Manifest number:          34
Signing time:             Thu 21 Nov 2024 18:34:55 +0000
Manifest this update:     Thu 21 Nov 2024 18:29:55 +0000
Manifest next update:     Fri 22 Nov 2024 22:06:55 +0000
Files and hashes:         1: 1107631FAB155A98AABEDD080C412F5515D96DEF.crl (hash: WypsZl8JvbNacmwsixnEZLBwjlrcqIR8d+2mrG2AB1s=)
                          2: 34352e3136352e3230382e302f32322d3332203d3e20323638363932.roa (hash: yNIrcJ+JjX1wqykrA7mYTArA+R+OVluJK4H5ZqQnuqw=)
                          3: 323830343a353532343a3a2f33322d313238203d3e20323638363932.roa (hash: ZlItEYGNjP7K7bQp9xjZQUJkFaltzsK2snOus/c1tSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0b:2d:b2:c5:2e:d0:ed:3e:c7:c7:eb:5a:7a:b5:17:81:01:ca:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1107631FAB155A98AABEDD080C412F5515D96DEF
        Validity
            Not Before: Nov 21 18:29:55 2024 GMT
            Not After : Nov 22 22:06:55 2024 GMT
        Subject: CN=E04A9F39E0A317FC2A83F84223ABDF33F20088F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:0a:06:02:13:33:d8:86:62:f8:95:82:1c:
                    3f:8b:1c:1a:49:40:06:4e:08:87:59:d7:ae:61:df:
                    31:93:8f:39:20:c3:2d:e5:73:4a:48:f8:c9:51:3d:
                    26:cc:c1:83:51:6a:e9:9c:84:5b:9c:41:ad:e7:7c:
                    14:c3:da:04:e3:19:12:c7:76:ec:0c:03:ee:99:2f:
                    01:cc:cd:c6:90:59:b2:b1:64:ef:73:e9:26:4e:e3:
                    a1:89:a5:c4:af:1e:af:7f:85:11:ec:a5:d8:31:c1:
                    ef:85:de:f9:ad:26:ae:4b:16:8f:e2:67:f8:3c:1a:
                    e1:c4:c5:c0:51:37:fb:72:de:df:b8:ed:fb:ed:91:
                    dc:da:70:84:5b:3a:f1:5c:a3:8b:4d:ca:fa:34:e9:
                    46:72:1d:d8:d1:44:7b:fb:68:8d:ea:ab:91:ef:1a:
                    4e:99:05:a2:da:b1:4c:7e:e0:d1:7e:bf:73:db:bc:
                    d9:f5:d8:dc:0c:31:2f:76:05:e4:91:92:9a:7e:75:
                    09:cc:98:9d:10:18:d7:52:eb:b4:96:58:31:9a:e0:
                    bd:9a:12:b3:de:ab:6c:1a:91:07:f9:95:bf:c1:d8:
                    e6:f4:c6:1e:77:a8:85:aa:b5:0e:2c:23:27:77:e3:
                    fa:07:ba:c4:a1:20:c5:ce:f8:87:dd:d0:ad:55:ec:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4A:9F:39:E0:A3:17:FC:2A:83:F8:42:23:AB:DF:33:F2:00:88:F7
            X509v3 Authority Key Identifier:
                keyid:11:07:63:1F:AB:15:5A:98:AA:BE:DD:08:0C:41:2F:55:15:D9:6D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1107631FAB155A98AABEDD080C412F5515D96DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1107631FAB155A98AABEDD080C412F5515D96DEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1107631FAB155A98AABEDD080C412F5515D96DEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:54:35:0b:72:57:88:cc:8d:6a:9c:15:0e:e7:4c:39:c2:4c:
         6d:1b:be:bc:c4:4f:f4:ba:ff:2f:4f:9c:5b:9b:28:13:f1:94:
         39:e5:0d:ca:85:1d:8f:39:81:60:c0:9a:9f:6a:d5:32:7a:98:
         ea:c9:7b:a1:ce:29:7a:39:9c:9b:d5:cc:0a:8b:04:ea:ae:8f:
         2e:0f:36:52:fb:83:d8:04:9c:e9:09:99:ca:f5:dd:02:9f:81:
         0c:9e:d9:1e:84:ac:e1:51:db:f4:62:58:40:64:e1:fc:c1:5c:
         bc:19:88:d1:06:47:d9:32:3f:0a:e9:93:99:b3:9c:3a:98:f5:
         65:9b:3b:6d:d2:10:97:30:ed:db:31:2f:1a:03:87:96:f7:df:
         10:4a:dc:96:25:e8:02:9a:f4:ee:72:51:42:c4:f9:23:79:aa:
         1b:f0:0b:ac:11:b0:9c:50:ff:49:a6:63:bd:ca:5f:bd:55:dc:
         0e:6a:be:b2:ad:a1:2c:3c:ac:e6:a0:a3:d6:77:f6:13:bc:06:
         92:c4:b6:22:c7:64:a7:67:35:07:df:00:94:01:8a:36:0a:6e:
         99:43:12:12:bd:e9:06:ea:12:c4:27:b9:3a:ed:48:4d:d9:02:
         97:57:10:20:06:22:43:bf:24:8d:d9:da:bb:f4:a0:24:d0:e6:
         a0:52:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----