Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/CE6FE20D5D5311E739CEA618F354893B551B86BE.mft
File:                     CE6FE20D5D5311E739CEA618F354893B551B86BE.mft (raw, json)
Hash identifier:          cEaUi4cjRZqC5CzquhmLgRlJ9FRT5qRf5KEvQCnHtYk=
Subject key identifier:   36:40:CF:FD:70:0D:EA:DC:C1:AA:A7:26:28:19:8D:A1:68:90:BD:AD
Authority key identifier: CE:6F:E2:0D:5D:53:11:E7:39:CE:A6:18:F3:54:89:3B:55:1B:86:BE
Certificate issuer:       /CN=CE6FE20D5D5311E739CEA618F354893B551B86BE
Certificate serial:       281406641820D29D271AF0AFD7009714FAB1F4EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6FE20D5D5311E739CEA618F354893B551B86BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/CE6FE20D5D5311E739CEA618F354893B551B86BE.mft
Manifest number:          CD
Signing time:             Tue 03 Sep 2024 17:17:05 +0000
Manifest this update:     Tue 03 Sep 2024 17:12:05 +0000
Manifest next update:     Wed 04 Sep 2024 18:36:05 +0000
Files and hashes:         1: 323830343a336462383a3a2f33322d3430203d3e20323636353439.roa (hash: hnpQxsO12T+CAAiW0E7U7lQqsxVI9GvIGNxWIPpvCVw=)
                          2: 3136302e3233382e3139322e302f32322d3234203d3e20323636353439.roa (hash: /oJ1yzuI1uciSZoqcC12+txvptNlG0AZy+GSZG47aV0=)
                          3: CE6FE20D5D5311E739CEA618F354893B551B86BE.crl (hash: 0/yG1GsqM9wUKMHCammhd2VHmqarZAxcDno0Xsw7bI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:14:06:64:18:20:d2:9d:27:1a:f0:af:d7:00:97:14:fa:b1:f4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6FE20D5D5311E739CEA618F354893B551B86BE
        Validity
            Not Before: Sep  3 17:12:05 2024 GMT
            Not After : Sep  4 18:36:05 2024 GMT
        Subject: CN=3640CFFD700DEADCC1AAA72628198DA16890BDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:13:9a:02:aa:a7:d0:b8:f4:de:f2:bb:57:
                    15:d3:ec:a5:73:02:f1:e2:7c:ca:fa:24:9f:9b:a6:
                    29:e2:b8:96:79:23:46:3f:94:9e:e5:5e:77:d7:3c:
                    0a:d8:62:0a:8e:20:67:25:54:ec:5d:7e:d9:ed:36:
                    2f:9e:33:ed:22:76:84:05:ab:62:19:6f:e5:be:a7:
                    7a:e1:d1:82:83:f0:ba:ed:53:76:10:d5:e6:a4:54:
                    29:67:9b:a2:26:42:b4:aa:ba:da:b0:1d:95:e0:20:
                    2f:f0:a4:da:f2:b7:a8:4c:d7:35:d0:85:3e:f8:67:
                    27:a8:67:e3:c2:2c:96:40:08:0b:de:2a:9e:f9:60:
                    ce:83:2d:67:a9:e7:4c:16:2d:9e:ca:e0:51:76:31:
                    fc:70:ef:56:b9:83:89:11:29:dd:d1:32:09:3d:7d:
                    2b:4f:d6:4d:59:7f:19:91:c7:7a:b1:77:1e:91:0a:
                    2f:7d:d2:39:68:f4:d3:ef:ca:8f:c3:29:e3:19:14:
                    c4:8e:b6:f1:11:f6:05:89:2b:9a:47:51:0e:77:4c:
                    c8:75:fc:e6:4b:85:2b:c2:f8:7a:23:55:86:ed:e2:
                    dc:d3:29:7d:78:3e:aa:14:cb:11:40:db:23:93:19:
                    e9:e8:1d:03:3c:51:df:df:eb:c6:87:22:34:aa:34:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:40:CF:FD:70:0D:EA:DC:C1:AA:A7:26:28:19:8D:A1:68:90:BD:AD
            X509v3 Authority Key Identifier:
                keyid:CE:6F:E2:0D:5D:53:11:E7:39:CE:A6:18:F3:54:89:3B:55:1B:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/CE6FE20D5D5311E739CEA618F354893B551B86BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6FE20D5D5311E739CEA618F354893B551B86BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/CE6FE20D5D5311E739CEA618F354893B551B86BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ff:a2:ed:e2:6a:27:74:7e:75:e9:40:e2:d7:02:fc:d8:b5:
         34:a0:7f:52:71:4d:25:7c:62:e3:67:0c:73:01:0e:d3:f2:a2:
         db:40:3b:c5:f7:fe:90:26:19:4b:53:fd:03:7e:e8:3e:a6:d9:
         fc:ab:20:a5:94:f0:e7:f2:40:21:65:3e:bf:0e:6e:3c:8c:23:
         7a:d9:7c:4d:2f:1c:b2:c5:e3:b6:f3:da:33:03:1b:02:1b:64:
         0c:9f:bd:5d:0e:9b:62:e5:33:82:18:c1:ac:57:b3:92:de:45:
         db:10:a5:07:aa:33:d9:38:2b:38:bf:26:d2:b7:a0:90:ec:e0:
         fb:50:46:84:17:81:c0:e0:92:38:b4:4f:0c:29:ad:63:1f:a5:
         ec:62:04:1b:b3:25:01:89:58:89:9c:b5:c7:8d:b9:66:dd:f3:
         8a:f4:26:27:89:9a:9c:17:d6:b6:51:1a:9b:97:0c:e2:1c:f4:
         1f:12:03:6a:b9:ac:5f:23:30:41:5a:e8:17:ec:bc:d7:e8:f0:
         92:68:eb:ff:83:c1:40:d9:4f:b5:34:eb:a7:ed:7a:62:0c:92:
         66:77:fe:b8:6b:1b:b1:d1:43:20:1b:14:76:98:73:98:5b:fc:
         84:76:04:10:b7:f9:7c:fc:f2:f2:fe:7e:90:bd:2e:19:af:1c:
         f3:9f:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----