Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.mft
File:                     EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.mft (raw, json)
Hash identifier:          H6T+GgXnakp2weTq9hhgwh/DH+ntwVe5Kgfstv2AMKU=
Subject key identifier:   2D:28:48:49:69:B4:3B:B2:70:52:44:02:50:47:38:F4:98:E7:22:0D
Authority key identifier: EE:FF:3C:E5:B7:02:9F:1C:2C:06:B0:BA:1A:B6:0A:3E:BE:8A:9E:79
Certificate issuer:       /CN=EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79
Certificate serial:       63BF6FE72CF0AEE8B5555DD823BF0DE844116D26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.mft
Manifest number:          0D
Signing time:             Sun 21 Jul 2024 23:55:18 +0000
Manifest this update:     Sun 21 Jul 2024 23:50:18 +0000
Manifest next update:     Tue 23 Jul 2024 03:33:18 +0000
Files and hashes:         1: 323830343a393030303a3a2f33322d313238203d3e20323733353237.roa (hash: BGKRbwD1kZ4XbIbUCazO/4SeYowWJotNfRxRrLtIJ3c=)
                          2: EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.crl (hash: DC7mQlkCIozyByH1jpAm5L9fBwOpcKl6XR3DWgQaB3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:bf:6f:e7:2c:f0:ae:e8:b5:55:5d:d8:23:bf:0d:e8:44:11:6d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79
        Validity
            Not Before: Jul 21 23:50:18 2024 GMT
            Not After : Jul 23 03:33:18 2024 GMT
        Subject: CN=2D28484969B43BB270524402504738F498E7220D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:dd:3d:ef:15:f2:c2:52:92:30:a0:61:56:
                    f0:5d:ca:90:45:78:a3:6b:fa:46:79:0f:51:c0:1e:
                    d0:37:5f:f3:de:ae:c9:d4:e8:2f:f7:b0:2a:c3:25:
                    16:b7:e5:91:a4:da:08:bb:be:80:bd:fa:d0:2e:c7:
                    02:61:c8:c7:47:ca:3d:7e:15:68:66:15:33:a4:8f:
                    3a:cd:b1:68:92:7d:d4:13:46:db:40:bd:7d:64:5e:
                    01:0f:75:5d:e7:dd:24:5e:86:4a:b7:13:bd:31:2f:
                    f5:a7:33:19:53:98:e2:fc:7e:1a:e5:e0:b9:c0:df:
                    3b:83:2a:2c:57:f5:73:6d:5a:ba:16:ee:1a:89:8d:
                    46:52:7a:7e:bb:26:be:97:97:5f:ff:67:6a:fc:7b:
                    f2:7e:23:88:62:6a:b0:59:fe:ce:a2:aa:18:c6:5e:
                    c7:70:2d:d5:78:c8:b9:82:4c:01:6d:e5:f0:13:75:
                    91:03:c6:3c:3d:a0:ea:a9:98:b4:83:0c:b5:41:2c:
                    64:4f:7c:9a:d8:47:6b:c1:fe:89:3f:dd:2e:e0:d1:
                    8d:6e:71:22:69:69:47:88:ca:40:08:38:79:7d:6f:
                    bd:5d:51:2f:71:2a:70:f5:3f:3a:b0:b8:c3:a9:fe:
                    89:6b:f5:2e:31:17:80:50:2a:41:02:e1:86:da:7f:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:28:48:49:69:B4:3B:B2:70:52:44:02:50:47:38:F4:98:E7:22:0D
            X509v3 Authority Key Identifier:
                keyid:EE:FF:3C:E5:B7:02:9F:1C:2C:06:B0:BA:1A:B6:0A:3E:BE:8A:9E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/EEFF3CE5B7029F1C2C06B0BA1AB60A3EBE8A9E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:a6:44:ce:ad:55:9d:c1:08:2a:3d:d2:b5:bc:d0:38:ac:
         6d:2c:fc:36:41:28:0f:c9:1a:25:78:a8:f1:a5:b9:1e:c6:1d:
         fa:99:63:39:f3:25:ed:43:16:cd:1e:8d:ca:a5:3c:7f:5b:1e:
         ed:29:f1:91:a1:49:c0:2e:b6:d1:dd:1d:46:cd:29:bf:e3:07:
         f6:c0:78:cf:42:31:84:58:73:dc:e0:f9:49:b6:5a:09:09:46:
         da:16:49:60:86:2e:3c:a0:76:79:72:82:8c:25:80:e1:ce:3b:
         07:34:cb:9e:7a:5f:e2:19:0a:c1:c0:17:06:71:26:02:78:37:
         42:a0:ec:70:9d:cb:d0:cb:63:8c:0f:37:01:7c:76:67:8a:a5:
         25:c8:09:6f:cc:a8:0d:33:66:87:55:2c:58:1a:56:b3:01:eb:
         5c:61:c7:52:02:8b:c9:31:50:92:5b:24:9a:be:85:2d:00:e0:
         69:89:b5:8b:1d:06:13:be:0e:ec:78:05:9e:6c:84:1d:49:28:
         9a:cb:8a:35:18:cd:61:2a:b8:5d:dd:66:6e:f1:db:38:57:5d:
         a3:54:a6:90:7e:cc:b1:23:d2:83:42:77:97:b9:50:af:f6:5d:
         ec:10:d9:36:4e:04:1b:bb:05:c2:50:3a:14:71:24:96:11:fd:
         f8:c8:32:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----