Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/26417C98B87CD9F7F563B48DB881934EE58083F4.mft
File:                     26417C98B87CD9F7F563B48DB881934EE58083F4.mft (raw, json)
Hash identifier:          gznu/HWCdxQca+zonXzw9kbqzWeoYWLzSepFDO5ENg0=
Subject key identifier:   24:B7:6C:74:E2:42:06:2F:91:9C:DC:99:1D:64:11:40:70:84:FE:BF
Authority key identifier: 26:41:7C:98:B8:7C:D9:F7:F5:63:B4:8D:B8:81:93:4E:E5:80:83:F4
Certificate issuer:       /CN=26417C98B87CD9F7F563B48DB881934EE58083F4
Certificate serial:       2F0062B07B61AF767CE4B85112B96A8E6868D706
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26417C98B87CD9F7F563B48DB881934EE58083F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/26417C98B87CD9F7F563B48DB881934EE58083F4.mft
Manifest number:          58
Signing time:             Sun 14 Apr 2024 17:46:26 +0000
Manifest this update:     Sun 14 Apr 2024 17:41:26 +0000
Manifest next update:     Mon 15 Apr 2024 20:08:26 +0000
Files and hashes:         1: 34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa (hash: q6rISt0j/KjisP1kfsN4ZmPclA9n1c5Dhx5wwLm61kA=)
                          2: 323830343a346331303a3a2f33322d3336203d3e20323637333437.roa (hash: 3FbQyruZIOWosyKI1+WIPRL1IFkoTA6bulpFhyucV5E=)
                          3: 26417C98B87CD9F7F563B48DB881934EE58083F4.crl (hash: NBAJiRLtCY6egumKE5A2ylFcJbuUBBYso+h35rvj/e0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:00:62:b0:7b:61:af:76:7c:e4:b8:51:12:b9:6a:8e:68:68:d7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26417C98B87CD9F7F563B48DB881934EE58083F4
        Validity
            Not Before: Apr 14 17:41:26 2024 GMT
            Not After : Apr 15 20:08:26 2024 GMT
        Subject: CN=24B76C74E242062F919CDC991D6411407084FEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:41:82:13:f0:c3:aa:cb:a7:2e:d2:57:20:
                    df:06:a5:87:7f:7e:0e:08:1a:1d:be:aa:79:03:fb:
                    ff:35:f2:a0:e2:85:39:24:e3:25:6c:8b:36:1c:97:
                    1a:28:02:b8:c6:30:57:3d:39:56:a1:fa:fe:f7:22:
                    56:c3:3a:3c:a6:21:07:d5:ac:fa:23:5a:2e:b8:78:
                    88:f0:67:96:45:00:c7:e6:0f:cf:c2:e1:35:3b:d9:
                    29:6c:ff:1a:d2:b5:cd:ed:a8:97:9e:6b:12:e1:c4:
                    8a:92:d0:fc:29:c9:37:c2:26:17:d5:12:ec:09:9f:
                    e3:6b:ea:0d:3e:d1:86:59:6b:71:73:fb:7a:50:31:
                    e4:bf:8a:25:a3:81:59:45:52:6d:ce:37:16:39:f9:
                    7c:1d:44:c4:44:3b:ae:8b:ef:a0:b0:ac:d9:df:54:
                    5c:43:57:62:67:ca:37:13:14:94:a9:4f:e2:7f:54:
                    14:ee:b1:85:cf:d1:27:df:14:50:c7:0f:11:44:d1:
                    82:8a:50:2b:06:2c:f7:e4:c7:5d:00:93:38:39:7f:
                    c3:05:76:b8:8c:e7:4b:6a:b0:bc:15:98:62:88:e6:
                    5c:1b:45:aa:04:d3:13:8a:a1:b1:9f:45:6c:16:aa:
                    9f:0a:e1:0a:65:6b:5c:59:cc:06:28:dd:65:71:c8:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:6C:74:E2:42:06:2F:91:9C:DC:99:1D:64:11:40:70:84:FE:BF
            X509v3 Authority Key Identifier:
                keyid:26:41:7C:98:B8:7C:D9:F7:F5:63:B4:8D:B8:81:93:4E:E5:80:83:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/26417C98B87CD9F7F563B48DB881934EE58083F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26417C98B87CD9F7F563B48DB881934EE58083F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/26417C98B87CD9F7F563B48DB881934EE58083F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:40:f2:7d:e4:63:c7:2f:2e:52:ac:69:3d:8e:49:af:8a:ea:
         d3:b8:49:9c:a4:83:45:3e:74:d6:da:ab:9a:e0:2b:d9:24:19:
         8e:52:4c:77:6f:f5:04:e1:85:2d:1a:92:af:fc:04:97:1e:16:
         7e:9f:39:2d:3d:c1:3f:7e:47:3e:5c:69:c9:d1:52:4c:b3:11:
         70:38:25:39:90:1c:2c:97:5f:9a:25:1d:86:9d:d0:42:36:7f:
         b3:57:bc:6b:d6:d7:12:5d:d8:e5:e3:b8:e2:75:6e:9d:0d:38:
         25:f6:be:06:3a:78:c4:a9:f6:25:2a:9e:28:63:85:d9:5e:6c:
         4d:10:69:e7:43:a4:0f:26:41:7b:b6:c8:97:b2:74:19:fb:cd:
         0f:77:7a:0d:55:e1:b2:30:a0:a5:46:43:f0:23:cc:7b:22:6c:
         15:df:d5:49:af:31:6c:07:f8:b0:e9:a4:36:aa:22:3d:5f:2b:
         f5:a4:1f:54:fe:f9:94:5b:13:f1:a2:2f:a3:36:b1:00:7c:1d:
         73:7a:0b:c2:42:cb:75:5e:5f:7f:9d:4c:18:a5:af:fa:8d:b0:
         e5:a8:84:76:07:b3:79:0b:e5:b8:34:c6:ba:ee:6a:8e:83:05:
         a6:f0:5d:e7:c0:f6:98:40:a4:9a:05:98:fe:b7:99:82:40:7c:
         ae:f8:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----