Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/5A003371CC68E0AE639A96528D538339E91DC729.mft
File:                     5A003371CC68E0AE639A96528D538339E91DC729.mft (raw, json)
Hash identifier:          qtII87YnNfW++wlKg4YDkemHpV3Rbi26P8Hu/qNRLHE=
Subject key identifier:   BB:01:47:90:E0:C8:BD:D5:28:B7:15:A9:2E:FC:70:12:AB:30:D5:EA
Authority key identifier: 5A:00:33:71:CC:68:E0:AE:63:9A:96:52:8D:53:83:39:E9:1D:C7:29
Certificate issuer:       /CN=5A003371CC68E0AE639A96528D538339E91DC729
Certificate serial:       6B3267A3963FD90479EC6C79EDFD1BC30F89FF31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A003371CC68E0AE639A96528D538339E91DC729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/5A003371CC68E0AE639A96528D538339E91DC729.mft
Manifest number:          08
Signing time:             Fri 15 Nov 2024 05:27:53 +0000
Manifest this update:     Fri 15 Nov 2024 05:22:53 +0000
Manifest next update:     Sat 16 Nov 2024 06:09:53 +0000
Files and hashes:         1: 34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa (hash: ngbWyrU16+xJbiU/yS4n0m4rHhlznb+Emi++aPxlZDc=)
                          2: 323830343a353237303a3a2f33322d313238203d3e20323638353138.roa (hash: UmRd5oIwQ5djWISZcA0Q4/b5aLz685ig8K6dvSvzce4=)
                          3: 5A003371CC68E0AE639A96528D538339E91DC729.crl (hash: 2F3uTmAsgQlDxFzoBFgoehWMZ3qt8PndLr9G2SOI2Mg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:32:67:a3:96:3f:d9:04:79:ec:6c:79:ed:fd:1b:c3:0f:89:ff:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A003371CC68E0AE639A96528D538339E91DC729
        Validity
            Not Before: Nov 15 05:22:53 2024 GMT
            Not After : Nov 16 06:09:53 2024 GMT
        Subject: CN=BB014790E0C8BDD528B715A92EFC7012AB30D5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2d:4d:af:58:55:9d:c2:0b:5d:da:1c:61:37:
                    63:20:ab:2b:00:62:e4:9c:ac:a9:09:3d:55:f5:8c:
                    91:94:3a:51:f5:eb:e0:a8:74:bd:a3:39:be:0a:eb:
                    85:0b:fa:4d:ac:7d:b6:ed:77:d5:6e:50:ce:3c:87:
                    b8:b9:09:85:38:f1:e4:01:d4:e3:4c:9f:37:1a:83:
                    6f:c0:4f:af:86:1e:87:66:db:79:f6:34:8a:6c:2f:
                    60:65:2d:8e:50:44:c0:5f:04:96:dd:d1:f9:c4:14:
                    a3:5d:30:b5:26:e9:47:ed:44:b1:be:cd:a4:04:ab:
                    46:23:eb:06:46:d9:71:fd:98:aa:25:f8:6c:a7:21:
                    f4:4d:71:93:78:7b:b4:db:41:9d:39:76:bf:42:c5:
                    05:74:c5:c4:bf:0e:06:b5:95:70:37:cd:d9:78:72:
                    ab:66:57:0d:75:f3:46:dd:36:ba:ed:4d:14:14:2f:
                    45:ca:e5:7e:6e:24:bd:50:93:00:45:c7:4d:c4:7e:
                    f6:ac:c0:35:ac:d3:7c:68:f7:f7:55:b8:ae:56:49:
                    b9:92:14:51:d3:fa:91:f0:61:2e:24:8e:68:68:97:
                    bf:7c:66:69:51:6a:a0:cd:21:a2:f5:0d:73:de:fb:
                    44:19:80:16:4e:c3:f3:d0:46:3b:08:9c:b1:73:42:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:01:47:90:E0:C8:BD:D5:28:B7:15:A9:2E:FC:70:12:AB:30:D5:EA
            X509v3 Authority Key Identifier:
                keyid:5A:00:33:71:CC:68:E0:AE:63:9A:96:52:8D:53:83:39:E9:1D:C7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/5A003371CC68E0AE639A96528D538339E91DC729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A003371CC68E0AE639A96528D538339E91DC729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/5A003371CC68E0AE639A96528D538339E91DC729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:d0:f0:18:30:de:65:4d:19:cb:f9:9a:43:48:2b:65:86:fd:
         89:0d:bd:fa:ee:d0:fa:a2:42:87:69:48:b1:fc:ea:62:eb:9a:
         7d:d1:66:68:a0:49:2a:00:59:28:f5:02:fa:81:da:90:65:a3:
         4e:01:3f:1a:11:3f:b2:0d:3d:fc:63:15:2c:3b:6d:58:24:18:
         9f:2b:b3:0d:38:e9:ef:e3:1e:fc:45:11:01:7d:bd:54:e1:4f:
         e7:e7:c4:44:40:ca:30:da:d4:26:30:5e:85:62:cb:58:ee:c5:
         ef:2c:06:b6:8d:3b:60:86:54:82:59:23:38:54:8b:7c:81:18:
         67:83:0f:2a:05:1b:d0:6a:21:43:08:f0:32:15:dc:95:41:4f:
         c6:3d:e9:8d:41:43:4f:17:2f:d0:54:3b:ef:0f:a5:02:9a:16:
         87:41:1a:01:11:b9:8f:7a:96:ae:0e:c4:83:1b:e2:3b:ec:b1:
         f5:fe:25:c3:f9:db:63:5d:34:c8:34:a2:6f:08:7b:e4:9d:34:
         e4:57:c9:2a:1f:94:36:18:f1:23:67:23:2f:be:4e:b1:7e:65:
         1e:60:44:01:d9:de:63:70:e5:4f:40:c5:8a:ad:e9:29:3a:40:
         73:7c:75:99:52:8b:dd:04:87:f7:05:8b:c5:a4:0c:a6:5a:48:
         98:9b:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----