Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/1/1CB0A0524806F85E223B2930D61FB468427DBFF7.mft
File:                     1CB0A0524806F85E223B2930D61FB468427DBFF7.mft (raw, json)
Hash identifier:          JSxs7OT+M4ixzGegid5w4/O68m9GUubwRXhTINmqeZU=
Subject key identifier:   8C:7B:7C:75:3E:0A:67:0B:F3:72:70:6E:C4:3D:2E:9A:36:07:3F:25
Authority key identifier: 1C:B0:A0:52:48:06:F8:5E:22:3B:29:30:D6:1F:B4:68:42:7D:BF:F7
Certificate issuer:       /CN=1CB0A0524806F85E223B2930D61FB468427DBFF7
Certificate serial:       66A21B316212DDD1A51C86BCB001A030F7853CF4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB0A0524806F85E223B2930D61FB468427DBFF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/1/1CB0A0524806F85E223B2930D61FB468427DBFF7.mft
Manifest number:          A4
Signing time:             Thu 08 Aug 2024 22:50:00 +0000
Manifest this update:     Thu 08 Aug 2024 22:45:00 +0000
Manifest next update:     Sat 10 Aug 2024 02:16:00 +0000
Files and hashes:         1: 1CB0A0524806F85E223B2930D61FB468427DBFF7.crl (hash: XJXkAdsSzpKxhO193cjXbZGnBLTu30ELNVi6nGzLu9I=)
                          2: 3137392e3130372e36342e302f32302d3234203d3e203532353433.roa (hash: w6pcHG3tnjwBpSxaGBczSwAJ/Oec60HUZYg6gugmmSs=)
                          3: 323830343a6531343a3a2f33322d3334203d3e203532353433.roa (hash: DU5pfbTLjJnZZAz1s9CfiMwcAaGOXlv1NKFU6YhCuVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a2:1b:31:62:12:dd:d1:a5:1c:86:bc:b0:01:a0:30:f7:85:3c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB0A0524806F85E223B2930D61FB468427DBFF7
        Validity
            Not Before: Aug  8 22:45:00 2024 GMT
            Not After : Aug 10 02:16:00 2024 GMT
        Subject: CN=8C7B7C753E0A670BF372706EC43D2E9A36073F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:78:cd:38:87:8c:9c:5a:fe:20:24:1b:89:
                    2f:02:73:98:0c:10:63:90:75:64:48:c6:0b:d9:7f:
                    52:0b:40:54:57:70:16:e8:a1:db:4f:2a:85:6f:44:
                    9f:92:bc:04:cc:60:01:1c:9e:8e:0c:ec:6a:29:4a:
                    fa:64:38:36:87:ec:a8:78:f7:6a:9d:51:ec:54:fc:
                    f4:e9:d7:c2:fe:9f:c7:34:d2:1a:53:d7:a3:c4:4f:
                    77:b1:f8:ab:c5:bc:8c:56:a4:fd:52:33:2d:2e:4a:
                    fb:a1:47:fa:40:83:1d:b2:fb:65:d4:f3:7e:8a:7c:
                    02:b9:96:04:c1:2a:99:13:93:3c:7b:00:70:98:e6:
                    50:40:60:f5:32:53:2a:fc:b1:b5:a6:70:49:9e:30:
                    0f:8d:64:b9:5d:04:11:4c:25:5e:16:81:a5:a8:b3:
                    a4:59:35:3d:c9:50:ee:eb:7f:bb:f5:5f:17:59:54:
                    d5:4f:fb:bf:a0:d6:f0:4f:50:38:d1:3a:59:66:4f:
                    3a:09:63:6d:2f:20:9e:cc:19:cb:e9:42:67:ec:55:
                    9a:eb:98:d5:4e:53:bd:16:a2:49:63:04:2a:e7:b9:
                    ea:ae:e5:ab:29:68:25:72:ec:97:7f:f5:8b:b6:a1:
                    9d:75:0a:99:70:20:82:77:71:e2:d7:dd:f8:19:f5:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7B:7C:75:3E:0A:67:0B:F3:72:70:6E:C4:3D:2E:9A:36:07:3F:25
            X509v3 Authority Key Identifier:
                keyid:1C:B0:A0:52:48:06:F8:5E:22:3B:29:30:D6:1F:B4:68:42:7D:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/1/1CB0A0524806F85E223B2930D61FB468427DBFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB0A0524806F85E223B2930D61FB468427DBFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/1/1CB0A0524806F85E223B2930D61FB468427DBFF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:e8:35:de:b8:c4:59:ce:71:20:81:13:82:8e:51:a6:11:
         bc:db:92:ba:c9:b7:ff:c2:b1:db:5b:a0:44:f1:08:37:cc:95:
         7f:e1:3b:3d:46:c8:5c:32:eb:d2:cd:86:9c:f2:e6:ed:7d:d9:
         00:1c:f4:e2:53:9c:13:c1:a7:83:73:f0:7b:a0:22:a2:f3:e9:
         26:61:b2:ff:e0:f9:93:e8:8b:58:ad:b9:f1:58:ae:d1:7b:1e:
         19:02:82:15:6c:b5:32:0d:0e:9e:42:dc:c9:cc:a6:33:33:48:
         e6:bc:c1:f9:4a:8a:37:c8:a5:cf:55:6f:ca:ee:2b:b5:e8:2d:
         a7:b4:3b:11:ab:2f:eb:51:3f:85:b6:04:3c:27:73:33:86:61:
         ad:e1:1a:1f:46:c4:07:2a:7b:e9:3f:29:10:d1:af:6f:3b:29:
         a6:fa:6f:64:4d:7c:75:8f:3c:d4:dc:70:5c:ba:e6:f6:4c:93:
         ff:9c:de:82:0f:6d:7d:3c:35:ae:b6:48:61:ff:fc:f2:d7:d3:
         77:11:7e:7d:f1:03:cb:cb:0c:31:83:77:0f:77:13:47:bc:70:
         2b:39:81:b9:b3:a7:28:36:70:4e:11:90:db:c5:25:38:c7:e4:
         f9:be:3b:b3:b9:75:6a:f4:97:08:98:7f:eb:16:e1:f9:b0:07:
         5c:57:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----