Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/544474A0AC2CA347765707840286F4603FCC2936.mft
File:                     544474A0AC2CA347765707840286F4603FCC2936.mft (raw, json)
Hash identifier:          ATuqF6n7H/087DL0clL9thzCuG9PV1Ah5zzD7HfQjdI=
Subject key identifier:   67:96:50:82:0C:D2:B7:DF:70:92:4D:B4:8B:3C:D8:DC:87:C7:E0:A2
Authority key identifier: 54:44:74:A0:AC:2C:A3:47:76:57:07:84:02:86:F4:60:3F:CC:29:36
Certificate issuer:       /CN=544474A0AC2CA347765707840286F4603FCC2936
Certificate serial:       4806FBC4C2F22AEF7A70B9E1F92C69A68DC5B9C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/544474A0AC2CA347765707840286F4603FCC2936.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/544474A0AC2CA347765707840286F4603FCC2936.mft
Manifest number:          2F
Signing time:             Tue 27 Aug 2024 07:42:25 +0000
Manifest this update:     Tue 27 Aug 2024 07:37:25 +0000
Manifest next update:     Wed 28 Aug 2024 10:19:25 +0000
Files and hashes:         1: 323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (hash: ufdFCWBwziiAz3GVYgWvkG/udqTL2MzWzCYAmg17Hxc=)
                          2: 3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa (hash: MOltj3d30SkmF0r7Zju+R/WSNbeopcXiUkiNlQcM9D0=)
                          3: 544474A0AC2CA347765707840286F4603FCC2936.crl (hash: NYamblfpZ9N/oJxkXrx6IqNxmvvaW51g8Sveer8w25o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:06:fb:c4:c2:f2:2a:ef:7a:70:b9:e1:f9:2c:69:a6:8d:c5:b9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544474A0AC2CA347765707840286F4603FCC2936
        Validity
            Not Before: Aug 27 07:37:25 2024 GMT
            Not After : Aug 28 10:19:25 2024 GMT
        Subject: CN=679650820CD2B7DF70924DB48B3CD8DC87C7E0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:59:a5:ee:ab:4d:be:6f:39:da:bf:7a:e0:
                    ca:0a:6f:a8:1b:05:92:14:3e:4d:27:ae:f0:24:f0:
                    fd:a1:c3:fa:43:64:6f:f1:1c:51:39:f3:d5:bb:5f:
                    c2:65:a8:68:cb:fb:62:7d:fb:3a:3c:dc:4c:f7:ed:
                    b4:e4:92:48:a4:20:b7:c4:1d:5c:6b:73:11:b1:a2:
                    e7:a7:4a:6b:b5:2a:9b:44:25:8c:5f:f2:b6:15:db:
                    50:25:fd:1f:91:49:90:4b:26:52:ac:8e:33:fe:08:
                    57:c9:53:1e:d3:35:73:f3:a7:05:7e:52:54:10:a7:
                    9c:a7:71:d9:8c:8e:ef:9b:db:4b:c8:c6:5e:10:3f:
                    2f:1a:58:c7:07:c1:24:39:74:04:5d:ef:ca:17:2a:
                    f4:44:b3:c0:85:5c:44:80:f5:ef:ad:d9:6b:dc:e2:
                    24:16:56:1b:47:40:60:bf:3a:65:4e:03:ff:8b:be:
                    51:66:16:94:b0:5c:29:76:79:21:12:f2:7d:27:7f:
                    4f:07:ef:f6:27:b2:2a:b2:91:fa:ca:8d:3c:cc:d4:
                    60:96:e6:cd:2d:d0:5d:bf:b9:6f:e5:cf:49:30:67:
                    52:00:f8:0d:e9:e3:35:df:35:41:57:8e:b8:7f:3b:
                    b2:84:ba:4d:3e:51:67:5b:68:0a:d3:d0:da:e2:38:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:96:50:82:0C:D2:B7:DF:70:92:4D:B4:8B:3C:D8:DC:87:C7:E0:A2
            X509v3 Authority Key Identifier:
                keyid:54:44:74:A0:AC:2C:A3:47:76:57:07:84:02:86:F4:60:3F:CC:29:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/544474A0AC2CA347765707840286F4603FCC2936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/544474A0AC2CA347765707840286F4603FCC2936.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/544474A0AC2CA347765707840286F4603FCC2936.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f7:85:c2:e8:89:78:9a:5f:80:99:41:1e:bb:c6:be:3f:24:
         11:04:cf:15:e4:c4:92:d0:11:8d:39:76:0e:43:15:81:d8:4c:
         14:63:ca:82:d1:23:3f:bd:13:35:fe:3c:99:0a:9f:19:46:b8:
         5a:79:4c:b8:28:1f:20:cc:dd:d0:b9:f0:f8:f1:17:c2:7e:56:
         76:fa:9d:53:1b:ba:ea:85:4b:6b:27:23:0c:6c:e0:fa:59:b6:
         92:05:02:8f:a9:7a:95:ef:46:0f:3b:c2:cc:d7:7a:93:42:bd:
         b1:20:95:4f:80:6d:bb:07:f6:07:cf:4c:d2:11:67:66:5d:3c:
         99:5e:1a:74:ed:67:12:70:d7:96:b9:a1:9a:15:d8:85:12:e7:
         5d:b3:b2:b3:6b:ee:4d:fb:d0:48:3c:a7:3f:f8:53:d2:54:f8:
         60:ac:7a:1b:69:d6:fb:16:29:99:13:f7:ed:50:88:47:cd:50:
         be:6e:77:1e:5b:13:f7:f8:33:0c:e7:64:a9:09:0c:e6:39:1f:
         6e:80:c1:2c:28:eb:84:8a:8e:07:9e:62:fd:18:2a:06:f7:39:
         06:94:47:c7:15:4c:4c:59:21:3e:33:60:01:45:71:ab:5d:08:
         43:2a:8b:c5:fe:4e:7c:67:a0:f0:30:03:a4:44:df:cc:f3:c5:
         a0:f5:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----