Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.mft
File:                     9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.mft (raw, json)
Hash identifier:          uCkgm85LQ4xxKRBRxkgv9W/bm+P7b6Pop6vPOmmsfaI=
Subject key identifier:   51:51:C7:21:4F:EF:7C:E5:04:FC:06:68:91:1A:25:43:39:DD:3B:61
Authority key identifier: 9E:8F:BC:EF:C8:D1:CE:0E:FF:BD:BA:FC:7D:C4:59:2C:14:C6:D4:94
Certificate issuer:       /CN=9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494
Certificate serial:       346B133A05E87574B124FFA20C7AE0727F05F46C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.mft
Manifest number:          17
Signing time:             Tue 29 Oct 2024 18:45:40 +0000
Manifest this update:     Tue 29 Oct 2024 18:40:40 +0000
Manifest next update:     Wed 30 Oct 2024 19:31:40 +0000
Files and hashes:         1: 323830343a386532633a3a2f33322d3332203d3e20323733343038.roa (hash: 6q6zJ4tJPRgv6cvIMdhqKzUsWXwugW+xqTVWx4S1+Qc=)
                          2: 9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.crl (hash: w87CcKUww7rv0Sjxw4QRCYNXWwMhZ4sUlV+/thG1Rto=)
                          3: 323830343a386532633a3a2f33322d3332203d3e203230343733.roa (hash: Q82GbwRJsalHmkQlER4/lMMp9e10ZKNHvBTzX4tARfg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6b:13:3a:05:e8:75:74:b1:24:ff:a2:0c:7a:e0:72:7f:05:f4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494
        Validity
            Not Before: Oct 29 18:40:40 2024 GMT
            Not After : Oct 30 19:31:40 2024 GMT
        Subject: CN=5151C7214FEF7CE504FC0668911A254339DD3B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:b0:52:c7:f9:ce:e0:ff:76:ab:1b:2f:5e:
                    00:a5:0d:97:f4:a8:40:3b:a1:86:cb:21:6c:1c:e3:
                    57:6c:9b:91:01:3b:97:a1:7c:09:48:d9:ea:17:0a:
                    bd:98:42:84:91:8b:a2:76:35:5d:1d:19:f0:16:b3:
                    7a:01:bb:7a:e4:33:e6:ef:83:f8:42:64:8a:ca:71:
                    0b:89:a4:c8:48:52:1e:e8:15:62:85:29:af:ff:a7:
                    46:8e:1f:a8:75:73:e8:b3:5f:8b:7c:13:67:8d:8d:
                    00:a2:d8:7f:7a:e4:23:9b:22:72:7e:d0:b3:49:fb:
                    81:3a:ea:b2:87:bd:9e:6c:8a:de:73:69:21:ca:85:
                    1b:a2:f7:32:7c:0b:3f:69:03:0d:39:0e:45:98:52:
                    9a:c5:7d:8a:2c:5c:8d:87:10:15:58:29:a8:7c:07:
                    20:a1:4e:ca:da:4d:bb:bc:ad:54:f6:e4:f5:8a:ba:
                    a9:04:bf:03:75:8f:c2:e5:14:6e:da:bc:9d:51:49:
                    7b:6f:97:ed:62:8f:2d:3b:01:f6:89:d6:37:2f:e7:
                    53:97:a9:81:f5:cd:30:9d:6a:e5:ad:2a:dd:d0:8c:
                    f1:01:60:37:0b:26:8f:4b:f3:9c:ce:85:9a:b3:d7:
                    74:c8:9a:21:10:74:43:75:6d:86:a1:8b:7e:90:8f:
                    3b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:51:C7:21:4F:EF:7C:E5:04:FC:06:68:91:1A:25:43:39:DD:3B:61
            X509v3 Authority Key Identifier:
                keyid:9E:8F:BC:EF:C8:D1:CE:0E:FF:BD:BA:FC:7D:C4:59:2C:14:C6:D4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:35:ad:1a:06:c8:8f:65:ec:6c:52:6e:e2:bf:70:a4:14:c9:
         d9:50:62:27:0f:53:01:02:71:52:e0:e8:ef:d3:39:ff:66:6e:
         10:d7:ec:cf:46:7d:7d:10:e6:5c:38:b2:ef:6a:d8:0b:6c:be:
         58:32:1d:b5:33:e2:7a:6d:11:bc:6f:50:34:8c:f9:b7:19:57:
         9f:88:c9:60:d9:ae:42:1f:2b:8c:09:a5:8b:88:a7:de:5e:f8:
         3f:37:70:8b:a0:80:2f:b6:c4:15:22:00:34:c2:8b:5c:31:4f:
         d8:c0:61:ed:40:b1:33:a9:2e:d8:0f:c7:af:b0:3b:aa:64:39:
         18:87:a0:03:6b:9e:f4:01:b5:df:d7:37:36:03:ec:21:2c:6c:
         ad:3d:64:1a:78:63:07:96:d9:98:05:7e:cf:3e:c1:69:5d:34:
         c3:b3:28:04:ee:f2:54:c0:07:e0:d4:2a:c1:77:a2:25:27:cf:
         a1:fb:ba:a9:cc:91:5d:4b:2a:8c:40:93:83:6f:6c:cb:e7:32:
         49:72:79:7c:d7:48:4a:08:56:05:2e:14:3a:6c:c9:2c:c2:d5:
         ef:ec:32:21:6b:1a:27:17:ba:25:fa:90:90:99:10:72:94:90:
         b6:58:e1:8c:21:b3:e5:fa:89:67:4d:13:e6:2e:39:3b:7e:58:
         f9:3f:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----