Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/4BBA4D0433A71E06CE295EF6EF2A1411860BDA93.mft
File:                     4BBA4D0433A71E06CE295EF6EF2A1411860BDA93.mft (raw, json)
Hash identifier:          i1gyju1jgDU2OKstdDNrLwNCN997B8LXxXI433R6FKc=
Subject key identifier:   DF:45:EE:6F:E8:24:0D:D1:12:E7:21:11:CE:3F:C5:C3:A2:CC:D0:7D
Authority key identifier: 4B:BA:4D:04:33:A7:1E:06:CE:29:5E:F6:EF:2A:14:11:86:0B:DA:93
Certificate issuer:       /CN=4BBA4D0433A71E06CE295EF6EF2A1411860BDA93
Certificate serial:       156CF66620BE69C1701EF327F58FEAF5D1EA1133
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BBA4D0433A71E06CE295EF6EF2A1411860BDA93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/4BBA4D0433A71E06CE295EF6EF2A1411860BDA93.mft
Manifest number:          17
Signing time:             Wed 18 Sep 2024 10:35:34 +0000
Manifest this update:     Wed 18 Sep 2024 10:30:34 +0000
Manifest next update:     Thu 19 Sep 2024 11:23:34 +0000
Files and hashes:         1: 323830343a373734633a3a2f33322d313238203d3e20323731313639.roa (hash: xRKBfyQZhur9yZ30YbNVGoLmBVlrT9tO5TtPDegGnDo=)
                          2: 4BBA4D0433A71E06CE295EF6EF2A1411860BDA93.crl (hash: iIdrXufZ4zVmnUuQXLOiozWYG5pLY4fja881Ks7VIgo=)
                          3: 3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa (hash: rS2QH4+VryzRRfRCQjD4eCq+G3xQ7d0IjUlEGr3ALoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:f6:66:20:be:69:c1:70:1e:f3:27:f5:8f:ea:f5:d1:ea:11:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BBA4D0433A71E06CE295EF6EF2A1411860BDA93
        Validity
            Not Before: Sep 18 10:30:34 2024 GMT
            Not After : Sep 19 11:23:34 2024 GMT
        Subject: CN=DF45EE6FE8240DD112E72111CE3FC5C3A2CCD07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:92:b1:77:d0:cc:81:22:f9:b1:ee:f2:c7:
                    de:06:20:05:6a:ef:51:04:e8:41:1e:bb:76:a4:14:
                    5b:9c:a0:93:a7:33:a8:fd:bc:82:dd:95:d1:90:53:
                    75:1d:69:a4:b7:39:0c:b1:66:fb:05:26:b6:6e:fe:
                    11:3f:31:fd:77:ee:85:c4:6b:81:b0:ec:c5:4d:7a:
                    d3:72:90:ac:bf:61:1d:bf:31:0e:79:43:e2:bc:76:
                    89:19:33:dd:77:a1:cd:c7:c7:4b:53:8b:ad:92:19:
                    32:a2:7f:56:88:f2:10:fa:22:c2:8d:4c:bc:62:b0:
                    e6:7d:14:ce:8d:e5:c9:f3:b3:1d:ba:4a:34:a7:f1:
                    74:05:d7:52:5b:9c:ce:e4:c4:57:30:db:dc:16:48:
                    eb:a5:b6:24:b0:c2:a5:4b:70:2a:e0:23:a6:fd:85:
                    ba:57:47:a8:9a:bf:ce:84:c1:4b:9a:d3:c1:70:93:
                    90:fe:5b:ca:b2:54:5d:5f:a5:75:0b:5d:47:b9:04:
                    d6:4e:a6:fa:6f:63:83:27:54:f6:98:eb:29:11:44:
                    f3:ac:cc:f0:4c:3c:f2:c6:25:46:a8:82:6e:73:2a:
                    27:ee:bf:e7:97:de:1a:44:a8:a5:0e:a5:bd:55:04:
                    1d:85:39:7a:d4:49:67:98:d8:d2:11:27:43:c4:38:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:45:EE:6F:E8:24:0D:D1:12:E7:21:11:CE:3F:C5:C3:A2:CC:D0:7D
            X509v3 Authority Key Identifier:
                keyid:4B:BA:4D:04:33:A7:1E:06:CE:29:5E:F6:EF:2A:14:11:86:0B:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/4BBA4D0433A71E06CE295EF6EF2A1411860BDA93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BBA4D0433A71E06CE295EF6EF2A1411860BDA93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/4BBA4D0433A71E06CE295EF6EF2A1411860BDA93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:53:c2:8f:33:b1:1a:3d:41:34:98:28:6c:91:ce:3b:9c:
         c8:2a:89:ae:ba:2b:69:7e:37:0a:5e:4b:18:19:0d:e5:a7:ea:
         2f:6a:12:73:51:d6:fd:6b:d3:22:19:db:b5:26:86:49:1c:37:
         77:e3:a5:20:b9:e6:39:29:74:f7:0a:39:94:23:05:90:e5:15:
         77:53:de:9e:ad:a9:b3:23:ec:95:ee:fd:8a:b1:c5:a4:0b:80:
         f5:8a:18:4c:1b:2d:1f:69:25:45:98:b6:ff:be:87:6c:af:d5:
         cd:da:f6:67:ff:44:ce:da:f1:42:4d:82:00:5a:42:11:5f:13:
         d2:29:85:e6:2e:50:a0:2b:f5:68:d8:22:ce:df:27:36:72:57:
         c8:7b:66:e9:e2:fd:c6:53:4b:27:50:b3:6c:fb:e9:2c:5c:7a:
         71:1b:4f:fd:ff:81:7e:2e:99:eb:c4:8a:c4:58:af:d7:9b:62:
         05:86:65:9b:30:f8:b1:91:e3:fb:9e:51:2c:47:ae:54:58:e2:
         a1:66:25:7c:0d:be:62:07:1d:ca:55:c7:09:31:dd:b1:13:0d:
         d8:a0:4e:52:07:e9:3a:6c:55:c6:e5:a5:15:c6:c8:d7:81:f8:
         cb:f4:64:32:db:00:d5:be:cb:fe:7e:85:14:ef:13:ec:f0:a7:
         63:46:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----