Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.mft
File:                     0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.mft (raw, json)
Hash identifier:          x2ZG5JdE7IIVNUwxnAbaVk8h5SM7zpZ6pOq52vpBtHc=
Subject key identifier:   9B:22:AF:F8:CE:6C:16:FE:D1:FA:3C:EF:FE:6C:99:AA:FE:A3:01:F1
Authority key identifier: 0B:A4:7C:DB:7D:95:14:82:27:92:E9:29:6E:9D:EB:81:CD:FC:B0:CC
Certificate issuer:       /CN=0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC
Certificate serial:       14900C8B415A3D9452EC8C30629FDC8FBF6113D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.mft
Manifest number:          52
Signing time:             Thu 29 Aug 2024 16:41:03 +0000
Manifest this update:     Thu 29 Aug 2024 16:36:03 +0000
Manifest next update:     Fri 30 Aug 2024 19:49:03 +0000
Files and hashes:         1: 0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.crl (hash: ulOE5msGD8uEtoHIpKFapLi2pOW88bIfY+n4WemWDCc=)
                          2: 3139322e3134312e3138342e302f32322d3332203d3e20323637343733.roa (hash: R7pnsbDsLU+V4kewkWPHpenhqdAFzhFhjGbW2ccVfdE=)
                          3: 323830343a343230383a3a2f33322d313238203d3e20323637343733.roa (hash: 1IZbFZD2u91IRc/AJA80/hVAGymdxYJ8SVaectznW1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:90:0c:8b:41:5a:3d:94:52:ec:8c:30:62:9f:dc:8f:bf:61:13:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC
        Validity
            Not Before: Aug 29 16:36:03 2024 GMT
            Not After : Aug 30 19:49:03 2024 GMT
        Subject: CN=9B22AFF8CE6C16FED1FA3CEFFE6C99AAFEA301F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:28:6a:0a:38:7d:9a:92:2f:04:f7:14:dd:
                    4c:bb:72:3f:b0:31:78:26:c0:82:37:d9:a6:72:48:
                    20:04:2d:4a:66:26:6c:4c:a2:9c:4f:9a:b2:e5:d7:
                    19:31:ca:dd:92:7f:21:2c:39:30:2b:46:07:b1:42:
                    56:6b:a5:d5:b5:c1:7b:73:52:42:96:fa:82:54:03:
                    fc:91:9c:3d:b8:58:75:82:10:f7:33:91:88:67:0e:
                    b4:88:a8:2a:53:ce:9a:8c:a1:05:60:4e:75:06:0f:
                    b8:49:dd:c9:e8:be:10:f2:d3:77:fb:10:af:fd:54:
                    85:a2:2a:48:2d:d1:c9:bf:a6:fd:e1:c8:21:7d:1e:
                    2e:c1:f3:23:fa:45:4c:7e:dc:78:6e:a9:02:4b:ea:
                    40:a4:5b:54:0a:2d:d4:2b:88:3c:0e:7c:c4:34:3c:
                    fd:a0:20:74:97:7d:a4:eb:3b:1e:a0:27:c5:12:50:
                    33:54:05:06:4c:51:c6:ae:6a:a9:f1:a5:61:e1:61:
                    49:8f:de:f7:1d:1e:4c:12:0f:eb:c4:29:f9:d8:4b:
                    f6:7b:d5:4a:8e:c6:47:79:8a:7a:c9:f1:51:06:6d:
                    8a:b3:03:56:33:75:68:cc:ca:85:6b:44:d9:e7:cc:
                    b1:71:3e:4c:33:30:97:f2:2b:46:69:98:53:8a:79:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:22:AF:F8:CE:6C:16:FE:D1:FA:3C:EF:FE:6C:99:AA:FE:A3:01:F1
            X509v3 Authority Key Identifier:
                keyid:0B:A4:7C:DB:7D:95:14:82:27:92:E9:29:6E:9D:EB:81:CD:FC:B0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0BA47CDB7D9514822792E9296E9DEB81CDFCB0CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:94:88:d2:84:50:3a:0f:9c:19:95:ff:0a:48:a9:f1:b9:3d:
         ef:07:4c:4e:cc:1b:bc:3c:f1:42:cc:0e:9d:79:93:ff:73:da:
         4c:44:6f:d8:7d:f5:42:6b:d1:b7:d8:e0:86:80:6e:f0:00:b0:
         07:3e:5c:43:e3:57:14:b8:6c:2c:e7:e4:64:ad:dc:a7:16:7f:
         5b:b9:32:de:c1:5e:67:67:84:9e:50:81:b8:79:86:12:ca:db:
         b9:67:9a:ee:4f:32:2a:3e:cf:3f:0d:de:53:3e:41:8c:74:bd:
         19:a6:e3:0d:3f:5f:ca:0a:9b:10:ed:2c:ad:88:15:14:3b:fa:
         1b:5e:eb:43:2b:ab:50:56:60:fb:76:18:4b:a6:6f:19:76:6d:
         98:9c:51:df:2c:d1:2f:53:46:48:1b:71:77:56:f4:52:11:3b:
         1f:82:ed:13:66:d8:a0:7f:39:42:c8:76:8b:87:8e:31:33:25:
         5c:85:1d:86:99:e4:56:c7:8e:e1:de:f2:c7:d4:94:e5:f0:c3:
         fc:41:3d:d3:06:2b:55:be:5c:1c:d7:39:6e:b5:49:0d:e0:3d:
         f4:ee:13:03:cd:82:ba:f9:69:90:41:4f:7b:f9:7c:ed:9d:d2:
         c5:16:b4:6d:09:ee:ad:e3:e9:3b:b4:7a:dd:5c:38:8c:7c:15:
         3c:0f:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----