Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/08D6FBA1949F65B102112BD5A3D89E753338AB9D.mft
File:                     08D6FBA1949F65B102112BD5A3D89E753338AB9D.mft (raw, json)
Hash identifier:          +EVMSaGVOUCp3Zh0bIbyAC353VapJsAxAYCCbYkfSLA=
Subject key identifier:   DD:17:B9:C0:5E:9C:A9:EF:2D:4B:D4:85:61:91:D7:69:C6:1B:8A:20
Authority key identifier: 08:D6:FB:A1:94:9F:65:B1:02:11:2B:D5:A3:D8:9E:75:33:38:AB:9D
Certificate issuer:       /CN=08D6FBA1949F65B102112BD5A3D89E753338AB9D
Certificate serial:       587F0E5C393CFBAFFBA33F985043808F8DA90216
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D6FBA1949F65B102112BD5A3D89E753338AB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/08D6FBA1949F65B102112BD5A3D89E753338AB9D.mft
Manifest number:          2B
Signing time:             Fri 17 May 2024 17:53:24 +0000
Manifest this update:     Fri 17 May 2024 17:48:24 +0000
Manifest next update:     Sat 18 May 2024 18:39:24 +0000
Files and hashes:         1: 34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa (hash: KzfaxZQ2x1h/rCMAsjt0cnD4JBy/Bf7EIqGIXR6Nffg=)
                          2: 323830343a363566633a3a2f33322d3634203d3e20323639353236.roa (hash: KG7zcrAttFEWOrd4zsvm/VHKFOhRd9NY+OvuUv6a9Y4=)
                          3: 08D6FBA1949F65B102112BD5A3D89E753338AB9D.crl (hash: iiHAHvc6F+ZthNtiKEYW1QGtMmRFXkuLhei9DBa/R7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:0e:5c:39:3c:fb:af:fb:a3:3f:98:50:43:80:8f:8d:a9:02:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D6FBA1949F65B102112BD5A3D89E753338AB9D
        Validity
            Not Before: May 17 17:48:24 2024 GMT
            Not After : May 18 18:39:24 2024 GMT
        Subject: CN=DD17B9C05E9CA9EF2D4BD4856191D769C61B8A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:8a:da:10:8f:2d:60:f2:fe:2f:86:8c:f3:
                    d2:5b:14:36:6e:43:50:07:ae:cd:e6:74:24:4e:38:
                    6b:6c:5f:ba:73:86:31:e1:33:46:cc:66:7c:d8:5d:
                    be:36:78:02:19:61:09:06:ab:97:64:0e:99:a8:38:
                    e1:47:1f:a1:4a:5b:4d:ac:b0:f7:d2:2c:ba:92:a9:
                    34:d3:d0:01:65:b4:f5:93:7c:33:f3:43:1f:ed:6d:
                    20:52:27:35:80:22:76:0f:fa:70:08:f8:0f:aa:98:
                    66:f2:99:da:13:72:c7:17:1a:51:c4:4f:aa:b5:94:
                    66:e6:f7:7e:a6:86:47:2f:00:27:ed:71:a5:a2:28:
                    15:4a:51:55:a1:27:5d:ab:4d:26:78:d6:60:b0:36:
                    b9:cb:b8:18:2c:03:5c:4d:b1:d7:d2:d4:bd:23:ea:
                    37:bc:b5:4e:34:af:3f:4a:68:99:43:90:5a:8a:ff:
                    dc:16:23:52:94:e4:33:09:03:3b:9d:a5:34:e0:46:
                    87:1f:62:d5:3b:c6:8f:0d:00:ad:0a:94:07:74:10:
                    06:33:44:eb:d7:bc:22:62:5e:f5:c3:72:6c:e2:58:
                    53:b4:73:27:d3:a8:76:45:31:46:da:26:2c:b4:e3:
                    8f:17:55:ed:86:8b:77:10:1f:f6:99:90:39:a9:0f:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:17:B9:C0:5E:9C:A9:EF:2D:4B:D4:85:61:91:D7:69:C6:1B:8A:20
            X509v3 Authority Key Identifier:
                keyid:08:D6:FB:A1:94:9F:65:B1:02:11:2B:D5:A3:D8:9E:75:33:38:AB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/08D6FBA1949F65B102112BD5A3D89E753338AB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D6FBA1949F65B102112BD5A3D89E753338AB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/08D6FBA1949F65B102112BD5A3D89E753338AB9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:63:53:5f:0d:d1:7a:dc:c4:20:04:0d:f6:35:99:8b:4a:4f:
         97:fa:8d:2c:b2:67:a4:39:12:d9:06:87:78:40:86:bc:10:bf:
         78:10:ab:af:a0:f4:52:03:42:68:cb:44:46:8f:54:22:56:05:
         86:e3:ef:52:b6:66:ad:a1:89:5a:7d:8a:3c:13:11:b5:6f:68:
         97:76:e8:d1:bb:fb:20:4f:7a:c0:f0:a1:7d:ed:54:0e:4c:ae:
         0c:fc:99:a8:54:6a:ba:a7:b0:f5:ba:20:a7:5a:e1:36:fc:72:
         8a:f3:e5:a7:28:9e:fa:2d:3e:f7:f5:f5:a2:1b:c4:c4:64:0f:
         a1:04:00:ce:e2:a0:d9:74:56:d8:9e:06:27:a1:3d:ab:25:5b:
         ed:30:a0:ef:a3:f6:3f:01:a9:eb:ec:5b:8a:99:a4:82:9b:31:
         1b:69:64:26:ea:9e:ff:3c:39:bd:72:42:a0:ce:5e:68:3c:8e:
         36:b6:89:b8:95:a5:c4:53:c3:11:0e:47:cf:c6:d8:1e:08:81:
         ef:19:bc:6c:1d:4c:0a:20:52:81:69:92:f1:8c:db:26:26:e4:
         0f:3c:b5:0d:91:0c:f9:93:5a:10:87:6e:ac:41:97:3a:42:b4:
         3a:65:6f:05:12:90:f3:34:54:09:cc:48:a2:3a:f6:87:ad:c7:
         99:81:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----