Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.mft
File:                     A7295431F9C859586A0B3D2EB4893FF4084176BD.mft (raw, json)
Hash identifier:          iLIC+95inCPF+ipZyTyND0GMJn4yalr/5lJcAgAfhGE=
Subject key identifier:   92:9E:7C:6F:C4:C0:9C:C1:73:0E:55:A9:41:9D:11:61:07:B6:A1:A0
Authority key identifier: A7:29:54:31:F9:C8:59:58:6A:0B:3D:2E:B4:89:3F:F4:08:41:76:BD
Certificate issuer:       /CN=A7295431F9C859586A0B3D2EB4893FF4084176BD
Certificate serial:       6D0CF93350D39F49FA1C34E6F2A067D01BCA9047
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.mft
Manifest number:          94
Signing time:             Mon 22 Jul 2024 08:21:09 +0000
Manifest this update:     Mon 22 Jul 2024 08:16:09 +0000
Manifest next update:     Tue 23 Jul 2024 10:50:09 +0000
Files and hashes:         1: 3230302e33392e3134302e302f32322d3332203d3e20323730373736.roa (hash: /0I0gB5sx3m3/a34AScwbDtZFdfiGknoi/G/eC9l5hc=)
                          2: A7295431F9C859586A0B3D2EB4893FF4084176BD.crl (hash: fs35I4pnYHPCC036ESqV8dZLPGp1MzD6mZh9DogGZ5Y=)
                          3: 323830343a373133633a3a2f33322d313238203d3e20323730373736.roa (hash: kNiyvBCmzJVYa44PQcljX9+cr1x+eyDDf2HZ06QvTDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0c:f9:33:50:d3:9f:49:fa:1c:34:e6:f2:a0:67:d0:1b:ca:90:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7295431F9C859586A0B3D2EB4893FF4084176BD
        Validity
            Not Before: Jul 22 08:16:09 2024 GMT
            Not After : Jul 23 10:50:09 2024 GMT
        Subject: CN=929E7C6FC4C09CC1730E55A9419D116107B6A1A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:4c:aa:6e:af:62:65:f1:28:18:44:48:1a:
                    7f:97:fd:67:3f:09:a6:4e:f7:4e:94:e7:b5:ab:9f:
                    3f:24:7b:21:05:d8:c6:94:ad:c3:bf:6e:64:b9:49:
                    d2:31:91:0f:b6:67:b9:8c:d4:c0:7a:d3:00:3a:1f:
                    67:2d:aa:d6:13:35:b5:aa:29:c4:46:9d:23:8f:37:
                    ac:be:47:60:d5:00:46:d7:d9:a5:38:46:96:4c:ad:
                    97:fd:e6:61:43:8d:72:09:57:a2:ae:2b:04:7d:ae:
                    aa:cb:51:7e:99:cc:95:e6:c3:57:e4:4d:25:a1:42:
                    e9:ce:94:58:c3:92:2d:cb:e3:3b:eb:85:42:3a:9d:
                    bb:73:b5:80:50:c2:92:ea:7c:61:f2:06:05:12:f7:
                    2d:44:6a:8d:65:96:73:4e:11:06:37:80:1d:97:fe:
                    e6:71:55:33:c7:b5:37:e5:ce:95:7c:ae:a9:66:e2:
                    7b:d7:bc:cc:6c:bb:a8:63:94:60:e0:42:21:0c:f0:
                    8c:44:d2:db:87:e9:99:77:5f:93:1e:e7:7a:68:9b:
                    1f:7b:e9:f8:6b:eb:42:23:ca:6e:d6:40:15:9e:d8:
                    b1:75:8e:01:97:9d:f8:e8:09:f0:d3:c0:27:7b:91:
                    26:3d:ff:ff:1d:3c:94:fe:78:85:d2:cd:32:cd:8f:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9E:7C:6F:C4:C0:9C:C1:73:0E:55:A9:41:9D:11:61:07:B6:A1:A0
            X509v3 Authority Key Identifier:
                keyid:A7:29:54:31:F9:C8:59:58:6A:0B:3D:2E:B4:89:3F:F4:08:41:76:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b0:d0:d1:e3:73:21:84:fb:ca:71:f0:3b:38:71:02:0d:2d:
         b2:db:0a:e4:39:e4:6f:fd:84:8b:a8:5c:16:14:d0:f0:39:79:
         ce:dd:db:80:b4:e8:a3:01:97:81:82:57:8e:3c:50:e6:43:0f:
         3b:9e:bb:a8:89:5a:a5:dc:f5:7b:e7:d2:55:96:1c:a7:b7:7c:
         c4:6c:d6:97:8e:9f:8b:f1:0d:e7:25:82:73:70:20:73:21:83:
         4d:3f:f8:e9:c4:36:d9:3c:27:29:b7:3e:53:e1:b5:c1:a9:34:
         ff:eb:3a:93:49:0d:89:90:a6:63:16:a7:ef:aa:14:e7:82:7d:
         d0:41:e8:bb:18:07:3c:1e:81:85:7a:7c:cd:67:68:7d:4a:99:
         ed:63:99:a3:0c:25:f1:a0:ff:88:18:9f:ad:22:69:ea:45:6e:
         84:6d:0b:0a:ec:50:46:c7:86:bd:53:ec:69:67:0d:3c:22:9b:
         67:33:41:c5:1b:58:80:4f:5f:eb:e2:27:74:aa:ed:6e:34:c4:
         ad:18:bb:21:29:02:2d:c3:54:c8:e8:cd:bf:a4:3b:1d:f8:b6:
         47:7a:fe:c6:bc:8e:91:e7:ff:96:ae:b6:7f:d3:d1:23:c5:5b:
         ee:da:a5:1c:89:b0:c2:0b:cb:6e:3c:e5:0c:72:58:86:71:b4:
         d9:38:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----