Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.mft
File:                     2554E829901F5A24F36854F269A43B52C5F8EB7B.mft (raw, json)
Hash identifier:          VwLlfZ8ymK0eoKxo+JZWxFU9CpcDCdM2CjAZ/zrLaw0=
Subject key identifier:   6C:D8:78:55:88:9F:8B:A9:EF:46:10:23:4D:B0:57:EF:B3:83:5C:96
Authority key identifier: 25:54:E8:29:90:1F:5A:24:F3:68:54:F2:69:A4:3B:52:C5:F8:EB:7B
Certificate issuer:       /CN=2554E829901F5A24F36854F269A43B52C5F8EB7B
Certificate serial:       380C8E13C0CCAA889825F1DBB64F8D30A6B93DC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.mft
Manifest number:          88
Signing time:             Tue 09 Jul 2024 10:36:30 +0000
Manifest this update:     Tue 09 Jul 2024 10:31:30 +0000
Manifest next update:     Wed 10 Jul 2024 11:25:30 +0000
Files and hashes:         1: 3137372e36362e3136342e302f32322d3234203d3e203532363535.roa (hash: Qfa/DW1gXllLLQwOk85oEOts/IkZ3NDgbhSs8O5irZw=)
                          2: 323830343a6330303a3a2f33322d3438203d3e203532363535.roa (hash: ONRtt0ggkjVgnbjRy/LD0/0D+w0Y0U7Fkp+5JXGL3lw=)
                          3: 2554E829901F5A24F36854F269A43B52C5F8EB7B.crl (hash: uTYKz/560IqiHcmT5q0HYaObsiWLSKKYrRMfUZFA4/c=)
                          4: 3133382e39342e3137362e302f32322d3234203d3e203532363535.roa (hash: 7l9IqpYBogQL5OAZizkVTf2dm/J9GatrJh5UYFOTziQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0c:8e:13:c0:cc:aa:88:98:25:f1:db:b6:4f:8d:30:a6:b9:3d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2554E829901F5A24F36854F269A43B52C5F8EB7B
        Validity
            Not Before: Jul  9 10:31:30 2024 GMT
            Not After : Jul 10 11:25:30 2024 GMT
        Subject: CN=6CD87855889F8BA9EF4610234DB057EFB3835C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:77:d2:2b:77:c1:da:92:0e:8e:9d:3e:71:
                    ac:1b:fe:0e:73:d7:7e:ee:02:a4:9e:f3:02:57:b2:
                    0d:60:f9:c6:04:1e:ff:fb:ce:e6:76:a0:66:f9:a3:
                    c2:15:bc:49:71:fb:61:94:ba:c3:e2:e0:01:73:35:
                    89:eb:71:44:09:ce:35:bc:05:ec:33:88:ad:66:c1:
                    a7:fd:31:4f:99:8d:ff:78:2c:8b:95:c3:29:d8:04:
                    a0:97:09:c8:d8:96:1f:88:26:9a:c9:e8:42:f2:8c:
                    d1:f2:10:86:be:59:9f:1b:0a:91:f5:82:88:5a:14:
                    ce:3f:42:65:1c:c5:64:48:36:b8:92:cb:3e:a0:24:
                    ce:ce:56:2f:83:b4:2c:73:74:75:43:2e:d1:7c:6b:
                    4c:b1:18:62:b3:bc:91:ac:e2:0b:a6:5c:f2:f9:fb:
                    4a:2e:d3:4e:4d:5a:da:95:a1:12:d9:2c:a2:7b:ee:
                    70:e8:62:53:46:84:db:7e:a6:77:ae:28:25:d6:12:
                    b3:d5:a8:5a:01:63:fa:92:38:2e:42:fd:9d:ec:d8:
                    32:ef:86:e2:1b:a4:ba:79:9c:8d:d8:0d:d5:7c:61:
                    19:3f:d3:91:6f:51:1f:59:6b:a8:5b:84:41:f3:6b:
                    8c:fa:9d:3d:3d:63:13:3a:ab:7a:94:d5:a4:17:05:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D8:78:55:88:9F:8B:A9:EF:46:10:23:4D:B0:57:EF:B3:83:5C:96
            X509v3 Authority Key Identifier:
                keyid:25:54:E8:29:90:1F:5A:24:F3:68:54:F2:69:A4:3B:52:C5:F8:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:d9:4d:e4:be:ef:55:5a:71:4a:61:38:d6:70:e6:d0:89:
         18:69:f1:10:c3:5f:67:90:5d:e2:ea:61:42:27:fa:6a:cd:d3:
         db:99:b8:5b:55:9c:fb:41:32:91:44:4e:99:2f:20:2f:1b:9d:
         c5:4b:16:83:f6:45:aa:da:1a:38:89:55:9b:7e:77:d2:78:59:
         c2:17:22:e8:8e:32:9b:a5:0b:f7:74:02:81:b0:8a:44:4f:d9:
         b7:9e:11:d8:c3:ee:2d:7a:c9:ed:03:9f:c3:7e:79:33:fb:1f:
         ea:b0:30:00:97:b3:c7:c0:87:5a:51:ab:cd:5a:20:61:9f:91:
         f8:dd:9e:29:bc:fb:14:a0:e3:44:1c:61:4a:93:24:02:72:1c:
         a1:16:c9:2c:e5:69:29:85:fb:81:86:74:94:0e:9e:c5:96:7c:
         2d:54:2b:f1:b7:e5:79:db:bb:ed:a4:a5:95:36:b7:23:0c:2d:
         82:1e:0d:e8:b6:36:d6:c1:85:fd:a6:21:8b:73:e9:24:a4:3a:
         3e:9b:9b:10:40:99:fb:7b:78:83:7b:db:64:71:3c:9e:5c:f1:
         c3:0d:e8:3a:b5:df:44:8e:50:01:ab:da:12:82:c9:f4:3a:af:
         94:48:bf:98:53:36:e6:2e:df:d8:ca:04:02:51:44:9a:fc:e5:
         5f:b4:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----