Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/508BE4765FF07F810603397F670DFABC89D1CBCA.mft
File:                     508BE4765FF07F810603397F670DFABC89D1CBCA.mft (raw, json)
Hash identifier:          VO3WyryPIwQ6pQuA+v2/SSIVb9yPVf9j2myRbJIgGb4=
Subject key identifier:   9B:F7:B8:9D:AF:01:F0:F6:4F:FA:6A:66:23:15:0B:FF:F4:8E:00:C1
Authority key identifier: 50:8B:E4:76:5F:F0:7F:81:06:03:39:7F:67:0D:FA:BC:89:D1:CB:CA
Certificate issuer:       /CN=508BE4765FF07F810603397F670DFABC89D1CBCA
Certificate serial:       34C10E537B53EFA085BA0D4AAAD41B12A4273089
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/508BE4765FF07F810603397F670DFABC89D1CBCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/508BE4765FF07F810603397F670DFABC89D1CBCA.mft
Manifest number:          0223
Signing time:             Mon 15 Apr 2024 09:47:00 +0000
Manifest this update:     Mon 15 Apr 2024 09:42:00 +0000
Manifest next update:     Tue 16 Apr 2024 12:21:00 +0000
Files and hashes:         1: 508BE4765FF07F810603397F670DFABC89D1CBCA.crl (hash: v7pExTxDgyNwuXG/tyNmPFzM2DCbeV+PTQa6KsMXqIw=)
                          2: 323830343a343838303a3a2f33322d3438203d3e20323637313235.roa (hash: ale+jr5HWi7NnQ97bMnPmRS6a7WUAzsmMyjPP0tL+Do=)
                          3: 34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa (hash: pn7ZPyb0Nap6IbqPfinusBGtA/0kFgI5Q8ILJCI60N4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c1:0e:53:7b:53:ef:a0:85:ba:0d:4a:aa:d4:1b:12:a4:27:30:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=508BE4765FF07F810603397F670DFABC89D1CBCA
        Validity
            Not Before: Apr 15 09:42:00 2024 GMT
            Not After : Apr 16 12:21:00 2024 GMT
        Subject: CN=9BF7B89DAF01F0F64FFA6A6623150BFFF48E00C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:51:79:e9:57:23:f3:33:da:b5:a1:53:42:
                    ab:16:04:b6:c0:c5:ad:7a:ce:35:d4:12:ed:66:ac:
                    8b:08:b3:e0:81:f4:a9:e6:ba:c2:12:bf:08:06:35:
                    c5:c1:6b:84:cf:4c:a7:05:74:7d:cd:5c:c5:9c:3e:
                    a0:86:93:87:53:c4:05:23:37:30:64:8a:98:f1:74:
                    06:96:0f:d7:85:aa:06:7d:d5:e3:6e:ea:6b:d5:0b:
                    de:a2:67:e2:ef:c3:71:e1:73:53:53:f0:ac:02:57:
                    78:13:dd:91:a0:e7:7f:28:71:70:b0:c7:0e:9f:9e:
                    36:ea:df:b3:09:96:1a:bd:4c:c1:d0:9e:86:0b:4e:
                    80:47:9f:c2:8e:70:09:e2:2e:c7:12:a3:c1:8c:cc:
                    7e:d4:62:22:02:bd:e1:0c:62:be:a6:c5:40:07:50:
                    6c:9a:6c:a7:7b:c0:26:62:30:df:eb:6f:5e:fe:a0:
                    0f:42:d8:4c:e3:bb:78:55:d6:29:5d:64:d3:75:bb:
                    54:65:63:79:ab:0e:91:72:32:ba:35:6a:13:e7:f2:
                    72:0c:ea:dc:7c:bc:24:90:18:ef:c2:8f:ae:58:31:
                    86:99:e5:04:de:9e:c3:d5:fc:37:be:73:77:59:38:
                    13:96:a7:8a:e9:f3:5f:8c:4b:b8:2b:7f:1e:4c:fb:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F7:B8:9D:AF:01:F0:F6:4F:FA:6A:66:23:15:0B:FF:F4:8E:00:C1
            X509v3 Authority Key Identifier:
                keyid:50:8B:E4:76:5F:F0:7F:81:06:03:39:7F:67:0D:FA:BC:89:D1:CB:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/508BE4765FF07F810603397F670DFABC89D1CBCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/508BE4765FF07F810603397F670DFABC89D1CBCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/508BE4765FF07F810603397F670DFABC89D1CBCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5b:58:75:35:ad:3a:db:bc:c9:3e:ca:39:47:c4:8f:e5:5e:
         1c:67:72:74:13:3d:bb:49:47:ec:fb:ba:ae:e6:da:20:33:5c:
         66:e0:8b:3f:ea:82:4a:33:d4:ac:5d:f3:fe:c2:e0:b6:70:6c:
         2e:f2:ae:e9:e4:42:e8:81:ad:9a:28:55:fb:4b:90:73:80:5c:
         16:c3:5f:32:03:9c:ef:4c:20:f3:be:ba:c4:af:18:df:f3:3a:
         2b:1c:cc:2b:be:2c:b3:40:da:5a:7f:27:3f:51:e3:bb:6d:03:
         79:c4:60:99:ee:cf:cf:61:43:c2:f6:67:d9:7e:61:0a:18:d4:
         a3:5f:29:22:cd:33:af:71:80:40:e1:65:42:12:7f:4a:86:12:
         2c:2e:c1:d5:dc:bb:91:a3:60:2f:32:03:6d:12:c1:46:ec:7c:
         4d:16:00:df:be:17:96:0e:96:75:97:4a:b2:83:bd:3d:1d:43:
         62:9c:73:d4:33:73:36:bf:c9:fb:44:59:c9:84:ef:13:7a:48:
         93:82:3c:b6:fd:8b:5e:92:87:c5:0e:00:3e:b4:50:41:cb:e5:
         7b:15:50:fb:97:66:e6:50:98:a1:eb:22:61:7c:47:d5:be:e1:
         42:1c:69:9f:ce:7a:7b:69:3f:2f:42:3f:fd:3a:5c:22:72:80:
         5c:ba:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----