Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.mft
File:                     B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.mft (raw, json)
Hash identifier:          CifYsUlPr5fQGTkWfb1LgjkCiwow7vmrt4aUipHXJdA=
Subject key identifier:   DA:FB:F0:A3:A4:68:14:54:E4:9E:CF:3D:31:18:29:2C:17:31:4C:D1
Authority key identifier: B9:4E:D0:ED:F9:8C:0A:5C:FD:8F:E4:10:85:89:24:05:A1:FB:2D:0B
Certificate issuer:       /CN=B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B
Certificate serial:       7BC511AD6142F83C9F51145024DB2FA043DE2D5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.mft
Manifest number:          86
Signing time:             Wed 06 Nov 2024 08:34:18 +0000
Manifest this update:     Wed 06 Nov 2024 08:29:18 +0000
Manifest next update:     Thu 07 Nov 2024 12:33:18 +0000
Files and hashes:         1: 3138362e3234392e38302e302f32302d3234203d3e20323633303234.roa (hash: 6yyuhm3WxOhAQAWMAOvjgfvTTRC3AAHFuJv+up7HUQ0=)
                          2: 323830343a6132303a3a2f33322d3438203d3e20323633303234.roa (hash: WG2gep5sN9cNxJPlrOgtgcGRL6wY/rJAKVJC3HvODNY=)
                          3: B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.crl (hash: U4YjbLhVpqZGf0HvHpZI1Igx9VfnH8KgTRWtnTYbrZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c5:11:ad:61:42:f8:3c:9f:51:14:50:24:db:2f:a0:43:de:2d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B
        Validity
            Not Before: Nov  6 08:29:18 2024 GMT
            Not After : Nov  7 12:33:18 2024 GMT
        Subject: CN=DAFBF0A3A4681454E49ECF3D3118292C17314CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:80:da:99:a2:0f:95:cb:51:c5:4c:21:d8:
                    62:ff:24:86:42:ce:11:01:02:53:d9:73:11:8b:50:
                    fe:2c:1c:64:5a:14:a0:5c:33:41:e2:47:80:37:7b:
                    e0:a6:03:16:13:ef:11:10:f5:51:8f:0d:0c:65:3e:
                    f9:fe:5e:31:fa:aa:29:b9:95:9a:4c:42:7e:85:07:
                    dc:89:ae:73:6c:15:a1:29:73:da:4b:a0:f9:a2:88:
                    e6:b0:8e:e1:5b:8f:4a:e4:3c:43:2e:8a:ea:6c:c0:
                    5f:a9:e4:e9:e2:7e:aa:17:dd:31:c4:bd:7d:85:0d:
                    ef:ef:3e:10:79:a5:1d:0f:8e:ea:92:31:15:07:7f:
                    2f:84:7f:65:a8:b5:57:ec:e1:75:54:49:e3:e9:03:
                    58:bd:64:6b:35:aa:1e:d9:af:dd:fc:bf:e2:5e:9c:
                    9b:10:1f:a9:d5:28:fc:b2:80:08:72:7f:bb:ea:ed:
                    aa:d8:7a:19:33:60:0f:85:0a:34:b0:c2:f4:7b:03:
                    ef:0a:a5:64:20:2d:81:c5:d3:72:b3:5d:1f:c0:3f:
                    ec:2e:b8:88:dc:53:34:1a:df:59:4a:ff:93:84:9b:
                    fc:d1:91:d6:69:f1:64:b8:06:50:cf:b7:0f:ed:be:
                    d5:f1:50:3b:90:0f:67:1c:df:b5:2f:37:67:e2:f6:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:F0:A3:A4:68:14:54:E4:9E:CF:3D:31:18:29:2C:17:31:4C:D1
            X509v3 Authority Key Identifier:
                keyid:B9:4E:D0:ED:F9:8C:0A:5C:FD:8F:E4:10:85:89:24:05:A1:FB:2D:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9c:8b:c6:b9:a4:fc:73:7a:4a:a3:38:b0:c2:de:e5:cb:80:
         a5:27:ef:ab:19:91:ee:58:74:dc:b0:8f:fa:2e:16:aa:48:5d:
         2a:a3:03:37:92:ea:da:1b:bb:59:f9:1d:a2:bc:48:ed:10:0e:
         d9:d5:f7:fb:75:5c:b1:06:27:8c:ab:4a:99:e7:e3:e5:b7:4e:
         a1:53:83:b1:49:dd:6a:4d:76:89:c0:72:06:68:da:30:1a:3d:
         1e:79:4a:f8:30:33:60:03:46:6a:81:46:87:cc:41:92:b6:ab:
         64:04:36:1f:4a:06:bb:45:3f:50:95:0d:e1:70:07:9f:b0:e8:
         28:d0:24:22:ea:c0:a1:4b:6e:0e:6e:7c:65:99:31:2b:70:a1:
         dd:25:2d:10:20:29:49:89:e8:93:76:e8:80:f5:9f:80:78:c0:
         3b:ba:ee:49:2b:7e:7e:5c:f4:43:e7:a6:2d:17:d3:9a:fb:21:
         31:e3:ac:b1:fb:07:e2:76:ea:b0:68:a3:1c:93:6d:0f:6e:ab:
         8a:f6:b9:ae:bf:c9:5c:33:a0:01:21:7f:e5:c7:18:b9:9b:57:
         80:17:40:37:c1:8b:e2:3a:63:f4:59:74:0c:dd:28:9e:0a:a6:
         5c:b4:34:ab:c6:fb:b2:1b:85:d6:ce:ea:75:c0:d0:97:13:e6:
         6f:9d:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----