Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.mft
File:                     100BA0134C785D84A913EF65B85A8B4973D0B2C5.mft (raw, json)
Hash identifier:          1bK4haBUY8gM8qkPNITviQk7FW8AmlDBxQ0oa0pgWVY=
Subject key identifier:   E7:EC:CF:05:7F:24:8E:30:4C:E2:56:F2:E5:EB:BD:48:52:5F:79:C0
Authority key identifier: 10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5
Certificate issuer:       /CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
Certificate serial:       3BD79394A3EC4C5DD2702E5726E9663822D3E5ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.mft
Manifest number:          0217
Signing time:             Mon 15 Apr 2024 03:06:44 +0000
Manifest this update:     Mon 15 Apr 2024 03:01:44 +0000
Manifest next update:     Tue 16 Apr 2024 05:12:44 +0000
Files and hashes:         1: 100BA0134C785D84A913EF65B85A8B4973D0B2C5.crl (hash: e20mBg2bEAWk9khk9f4S0ryWokuOGqTjwuLz6BVBjU8=)
                          2: 34352e3138362e35322e302f32322d3332203d3e20323639343131.roa (hash: 2O6yz26RaDqo2+I8e31auTqexW6vBqh0s3yzfMllUQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d7:93:94:a3:ec:4c:5d:d2:70:2e:57:26:e9:66:38:22:d3:e5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
        Validity
            Not Before: Apr 15 03:01:44 2024 GMT
            Not After : Apr 16 05:12:44 2024 GMT
        Subject: CN=E7ECCF057F248E304CE256F2E5EBBD48525F79C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:26:59:6e:01:91:6b:a0:28:80:67:3b:ca:
                    9c:7f:27:e3:28:4c:63:53:e5:65:20:7d:3e:84:3a:
                    9b:5c:27:ce:5e:f1:fc:37:db:56:c0:8f:a9:21:9d:
                    83:1f:68:7a:a9:36:fe:f2:47:4b:25:81:ae:f9:ea:
                    95:e5:f9:86:73:f0:b0:0c:9d:b3:ef:3a:68:4e:a4:
                    5f:c1:a9:5f:99:5d:c2:ca:0c:53:f1:be:c5:69:e7:
                    34:0c:44:9a:d6:4f:b1:35:e3:c1:46:64:c2:56:c9:
                    2f:34:77:80:fd:75:03:a6:61:1d:8a:f8:da:56:fc:
                    95:d6:07:c4:20:80:ca:83:8c:a0:90:66:09:f2:77:
                    f3:52:6a:82:85:5d:14:bf:89:f4:b3:f9:61:b8:e4:
                    86:ff:80:57:e9:42:d5:4d:7f:5d:59:81:67:6d:ba:
                    ff:71:ae:1d:ea:db:53:8e:69:48:2a:b0:ef:c2:3f:
                    08:f1:f0:68:43:6d:59:6f:0a:03:e4:87:a4:9e:08:
                    df:86:7c:ec:30:5d:4c:2e:5f:a4:46:c2:fe:4b:82:
                    62:22:b9:29:9c:c7:d7:66:86:ac:2e:62:c6:09:96:
                    e0:15:b3:71:4a:32:97:86:98:b5:f2:37:d6:21:af:
                    19:e1:c0:6f:39:44:5d:ff:ba:ea:00:ad:05:50:5c:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EC:CF:05:7F:24:8E:30:4C:E2:56:F2:E5:EB:BD:48:52:5F:79:C0
            X509v3 Authority Key Identifier:
                keyid:10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:94:15:b6:73:c1:4b:53:3f:f1:14:7a:e0:ee:19:4d:23:
         68:dc:09:d8:fa:82:4b:1b:61:6c:c2:f7:6a:7c:9c:3e:56:77:
         ae:5d:d9:e2:8f:f5:eb:e0:09:0e:1d:6c:b9:b9:a0:43:a5:9d:
         94:3c:4d:cd:cb:c2:27:89:21:54:9c:80:bd:98:2b:67:76:a5:
         69:6d:df:97:d7:29:fb:8f:4b:c4:cb:ca:ba:50:85:95:d6:35:
         26:9e:83:e1:74:eb:f7:95:a1:f2:78:0c:42:0c:fe:3c:c3:5a:
         72:32:10:00:d2:6c:ca:43:9b:33:0b:6c:c8:b3:23:2b:c5:33:
         5b:1f:f6:2e:21:c4:85:be:cf:f8:87:b3:92:6a:e4:cb:95:b9:
         9b:87:5c:e5:70:70:9a:84:b5:c3:3d:00:11:92:56:44:41:e1:
         91:f6:a7:f5:8a:c3:e9:0a:1d:d4:b4:92:28:03:28:59:2f:84:
         a1:67:8e:85:9a:de:4a:85:a7:9a:72:2b:b6:38:bf:74:e7:fe:
         22:da:15:1b:d7:cc:c5:02:55:e6:45:9b:e1:e2:2c:b2:02:98:
         9d:84:99:a4:25:97:58:0c:38:20:6c:43:7b:0a:b1:b3:1e:1f:
         32:b8:14:49:3c:b4:31:8e:0c:51:0c:f2:25:4a:4d:f8:ff:f2:
         3c:70:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----