Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.mft
File:                     8D7F98E3C24BD49979D9F15D3DF945D2CC327065.mft (raw, json)
Hash identifier:          Oa0O0aCMOkw2/3Qdyx4T4UDUgnJGI28CcZ9VJ4J2j/o=
Subject key identifier:   8A:D8:23:C7:BC:8C:89:63:B6:E5:95:DC:AD:6E:7D:B2:76:83:AB:7E
Authority key identifier: 8D:7F:98:E3:C2:4B:D4:99:79:D9:F1:5D:3D:F9:45:D2:CC:32:70:65
Certificate issuer:       /CN=8D7F98E3C24BD49979D9F15D3DF945D2CC327065
Certificate serial:       4CE12AF26E011A3F06934FE837514BD08DF1839F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.mft
Manifest number:          34
Signing time:             Tue 01 Oct 2024 15:51:27 +0000
Manifest this update:     Tue 01 Oct 2024 15:46:27 +0000
Manifest next update:     Wed 02 Oct 2024 18:10:27 +0000
Files and hashes:         1: 3139302e38392e3232382e302f32322d3234203d3e20323730343132.roa (hash: 6GcD/rgvOnGlhKS5KifSGlGzPlg9F645ATk+Qgqq7pE=)
                          2: 8D7F98E3C24BD49979D9F15D3DF945D2CC327065.crl (hash: LD3ftjyuk9G+ObDK9DZF3CpJzp5cOmL9aA/Ieeo/eXY=)
                          3: 323830343a366239633a3a2f33322d3438203d3e20323730343132.roa (hash: HNqODa4jPsaFCf2iYIwHEWgD+RrGBJ09mVTwl4puKew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e1:2a:f2:6e:01:1a:3f:06:93:4f:e8:37:51:4b:d0:8d:f1:83:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D7F98E3C24BD49979D9F15D3DF945D2CC327065
        Validity
            Not Before: Oct  1 15:46:27 2024 GMT
            Not After : Oct  2 18:10:27 2024 GMT
        Subject: CN=8AD823C7BC8C8963B6E595DCAD6E7DB27683AB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:8a:66:c5:1a:85:90:27:85:cd:01:9e:f8:
                    bd:bb:8b:3e:2b:8a:93:ea:40:6e:7e:14:f3:3f:fe:
                    37:d2:a9:6c:e8:d1:62:b8:fa:44:7c:78:80:e1:cd:
                    5f:71:62:58:83:dd:8d:95:2b:04:6f:2d:56:56:0f:
                    2a:2d:22:06:94:23:5b:6a:8d:5e:63:51:7e:62:8b:
                    ea:23:bf:11:22:b5:e2:2d:d7:48:10:78:09:37:35:
                    08:ff:fb:6d:3a:42:46:c1:1d:48:1d:14:d2:b4:3d:
                    2a:68:1c:a5:a2:35:11:99:a1:c2:c8:24:52:71:d8:
                    7d:36:f8:25:6f:05:d1:d9:75:11:21:2b:3e:55:7d:
                    22:f4:55:05:42:10:b9:a3:8d:90:4b:50:48:0a:1a:
                    84:0a:d4:fa:12:07:6f:b4:d8:f9:29:f6:c7:06:dc:
                    ac:73:fb:fb:9b:bd:95:be:b5:59:85:03:f1:26:cf:
                    1e:85:00:24:fa:eb:ca:a2:3e:bf:67:b5:8c:4e:c0:
                    58:de:d8:6f:78:0d:c9:4d:9d:f8:cd:52:a8:e9:a7:
                    73:49:ed:4a:07:6d:f5:67:66:b0:13:d9:39:5f:33:
                    cb:ff:91:73:07:49:b1:b1:1d:d8:ce:01:65:f2:a5:
                    96:61:13:22:fc:f7:b7:04:d7:09:f5:75:39:f2:20:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D8:23:C7:BC:8C:89:63:B6:E5:95:DC:AD:6E:7D:B2:76:83:AB:7E
            X509v3 Authority Key Identifier:
                keyid:8D:7F:98:E3:C2:4B:D4:99:79:D9:F1:5D:3D:F9:45:D2:CC:32:70:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4f:2b:21:2a:3c:d2:8f:18:83:9a:39:0a:29:84:21:5e:41:
         d6:09:7a:3f:7e:44:7a:38:0a:4c:67:3a:22:c4:47:cd:3b:e8:
         71:ca:d9:2f:90:75:ec:67:c0:7f:c6:77:10:e3:09:c5:f5:af:
         a4:38:b8:32:48:85:cb:ab:c3:1a:33:02:f8:86:2e:8e:c4:e7:
         34:e6:fa:5f:08:44:bc:77:60:6e:75:4e:69:2d:ec:53:37:51:
         e1:ea:ac:df:e0:11:7b:81:2e:0f:a8:f1:18:4f:a8:c2:55:f8:
         5c:9c:89:b9:06:25:96:b9:77:b6:cb:07:e1:a4:38:ab:01:7e:
         1e:f3:19:8e:37:36:65:fe:f3:c1:92:fb:0a:fa:18:69:98:64:
         74:e4:39:91:a1:d2:cf:35:67:b4:91:d3:24:3e:3c:42:3b:c3:
         d0:c1:2f:91:2e:6f:03:96:52:10:27:c2:ed:1b:97:a6:0a:8b:
         05:a9:0b:49:cd:3f:ab:78:d0:86:1e:f7:fa:18:ae:68:c7:24:
         77:2a:8e:c0:a8:d8:83:4d:ab:5b:dc:dc:80:96:48:10:32:00:
         14:91:46:37:97:12:69:ca:92:73:c8:0a:bc:f2:b9:b6:c0:43:
         31:51:d1:6d:25:2f:8f:41:7d:21:0c:52:b2:19:dc:4e:fa:bc:
         24:54:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----