Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/22B70459584D64C53F12ECAD393AF1413376F21C.mft
File:                     22B70459584D64C53F12ECAD393AF1413376F21C.mft (raw, json)
Hash identifier:          S6mTkdIMhzM+hZKVB05BUNamxdhQjcqUjqD5eflG9UY=
Subject key identifier:   C0:BC:74:0E:35:48:37:D4:2A:68:93:CA:58:08:7D:41:BC:99:F7:C4
Authority key identifier: 22:B7:04:59:58:4D:64:C5:3F:12:EC:AD:39:3A:F1:41:33:76:F2:1C
Certificate issuer:       /CN=22B70459584D64C53F12ECAD393AF1413376F21C
Certificate serial:       03BA8A9C92F850DEA82A23C031402876F3FC4355
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B70459584D64C53F12ECAD393AF1413376F21C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/22B70459584D64C53F12ECAD393AF1413376F21C.mft
Manifest number:          98
Signing time:             Wed 13 Nov 2024 01:13:49 +0000
Manifest this update:     Wed 13 Nov 2024 01:08:49 +0000
Manifest next update:     Thu 14 Nov 2024 04:49:49 +0000
Files and hashes:         1: 22B70459584D64C53F12ECAD393AF1413376F21C.crl (hash: c/hEwsBi/8RgRs7RRC4SmiOOrdRc0ShMVXHt7RNJcHk=)
                          2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: p8KU9c8HXD/SdZqwhOJuE4y06WtlYsGeYeec/jQBtCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ba:8a:9c:92:f8:50:de:a8:2a:23:c0:31:40:28:76:f3:fc:43:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22B70459584D64C53F12ECAD393AF1413376F21C
        Validity
            Not Before: Nov 13 01:08:49 2024 GMT
            Not After : Nov 14 04:49:49 2024 GMT
        Subject: CN=C0BC740E354837D42A6893CA58087D41BC99F7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:d9:a9:89:32:bf:be:94:6b:a6:96:c8:1b:
                    4d:66:92:1d:c9:76:01:d4:1e:a9:25:43:cd:60:4a:
                    ac:d4:56:d1:7c:f8:80:36:6b:43:19:3e:8b:55:f5:
                    a5:28:b1:a4:c9:84:eb:3e:4a:99:77:f7:6b:b1:eb:
                    32:cc:88:51:e3:29:33:64:43:d4:c3:6e:1b:ce:fb:
                    d1:52:89:37:61:1f:46:d8:67:23:05:32:7d:28:e2:
                    b7:61:b0:bf:90:39:1e:94:bf:1d:bf:82:ee:8a:15:
                    97:33:63:55:55:2f:f3:15:ce:81:db:e2:c9:8d:56:
                    2f:e8:f7:03:57:24:ef:f6:de:50:4b:1d:07:22:8e:
                    0f:f8:fb:3d:45:1b:3b:b7:13:8f:ea:d0:49:43:d4:
                    25:eb:3c:bf:3a:d7:69:a2:e0:92:ec:82:85:c5:c7:
                    49:42:9f:63:20:33:f4:d5:19:4a:9a:7b:09:40:b2:
                    ec:11:5c:a1:53:37:71:33:4f:25:d9:b0:3b:f5:ab:
                    b7:86:c5:d9:5f:94:a0:63:62:24:b1:00:be:85:98:
                    c7:b4:68:b4:a6:17:01:60:b2:42:51:9d:d7:67:cb:
                    34:8b:90:6c:e9:81:5e:ed:4e:b9:1a:91:b8:8c:b5:
                    c4:bc:cb:da:9c:2c:91:9f:f9:d0:45:61:6c:96:6f:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:74:0E:35:48:37:D4:2A:68:93:CA:58:08:7D:41:BC:99:F7:C4
            X509v3 Authority Key Identifier:
                keyid:22:B7:04:59:58:4D:64:C5:3F:12:EC:AD:39:3A:F1:41:33:76:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/22B70459584D64C53F12ECAD393AF1413376F21C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B70459584D64C53F12ECAD393AF1413376F21C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/22B70459584D64C53F12ECAD393AF1413376F21C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:89:85:e5:1a:81:e1:fc:83:1c:0d:a0:ba:67:35:d6:b3:78:
         51:6b:05:aa:1d:d7:ae:d8:bb:f1:ed:66:85:59:1c:e6:f4:8a:
         52:3d:a5:70:0a:94:14:a3:ff:61:b6:2f:28:2e:dc:57:3f:01:
         1a:d1:2b:6b:a7:a5:08:8a:6f:f1:ec:99:ac:bf:e2:bc:10:89:
         fe:f4:03:da:53:42:63:ad:b7:ee:7e:90:d9:ba:43:14:6a:ca:
         f0:98:bc:0a:ff:b9:90:97:7f:40:f4:51:ce:0c:a6:f5:4d:29:
         81:25:ea:a9:94:d8:85:56:8f:00:02:fc:2e:85:c6:5d:81:ad:
         df:60:83:2e:a1:e6:54:bd:f7:bf:fe:09:29:1e:62:3c:bb:52:
         ce:a1:20:75:c5:4e:c6:53:53:cb:a2:12:82:4b:e6:25:a5:a1:
         3b:f1:96:b8:ef:cb:20:e8:df:87:61:5c:7d:65:6c:50:74:49:
         b5:1e:ee:f3:09:06:5a:85:e1:48:ec:b8:f0:36:8c:6b:30:5c:
         58:32:0e:e8:e8:52:1f:d4:99:78:2a:36:f6:77:cd:cf:89:4d:
         31:65:39:0f:7c:c9:5d:3d:19:bd:bc:ee:d0:7d:c5:92:be:60:
         23:8e:0f:01:2b:a4:a9:99:7d:5b:47:96:1a:f6:3f:39:e4:95:
         23:e3:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----