Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C.mft
File:                     D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C.mft (raw, json)
Hash identifier:          /HVrcP3DiZsa19am4ysrpSqMD1xOlZc5ZMpyOp30zD8=
Subject key identifier:   8A:8A:23:BC:70:1F:1C:59:6C:82:53:52:87:CB:06:E3:11:F0:03:9E
Authority key identifier: D8:DF:B3:88:AC:54:93:BE:9C:92:17:5A:6C:F7:FF:85:56:D5:BA:0C
Certificate issuer:       /CN=D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C
Certificate serial:       53B6B7E19A6E419539E458F9B7E93907C71FD9F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C.mft
Manifest number:          07
Signing time:             Mon 25 Nov 2024 14:54:09 +0000
Manifest this update:     Mon 25 Nov 2024 14:49:09 +0000
Manifest next update:     Tue 26 Nov 2024 18:41:09 +0000
Files and hashes:         1: 34352e3136342e3130342e302f32322d3332203d3e20323638363330.roa (hash: /YGcMb72JBtuh8xPuT0kR8Co0nzNRKkObFDodg3AJUc=)
                          2: D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C.crl (hash: SbAuaGG58pM7B/3qAzTWSI2Ux4SM5TsbZFVL/LjPwlM=)
                          3: 323830343a353432303a3a2f33322d313238203d3e20323638363330.roa (hash: 6+eUMjX9VzcKUOEgvD7xk4sIt7RPkDcHo/+pJ3fd+I0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b6:b7:e1:9a:6e:41:95:39:e4:58:f9:b7:e9:39:07:c7:1f:d9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C
        Validity
            Not Before: Nov 25 14:49:09 2024 GMT
            Not After : Nov 26 18:41:09 2024 GMT
        Subject: CN=8A8A23BC701F1C596C82535287CB06E311F0039E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:ad:90:c9:2e:41:3d:e5:84:f6:b7:a4:fa:
                    99:2d:a7:79:84:7b:f5:6c:30:e5:d8:25:12:a6:85:
                    b4:8c:ac:a1:fe:06:d0:72:be:83:fb:4e:11:ce:30:
                    04:da:ea:3a:9e:1e:de:f5:32:5c:04:67:db:92:76:
                    4d:49:18:60:67:c2:9d:6e:b0:03:52:82:e0:a6:64:
                    f9:a3:63:e0:31:db:17:c1:de:fc:5a:a8:be:94:32:
                    11:de:7c:73:08:35:3d:2e:c9:f7:e8:ae:58:5f:3e:
                    62:e9:a1:f9:91:62:90:76:4f:4b:5e:c3:e9:cd:3e:
                    f9:1e:1a:32:9d:4f:99:c0:15:32:be:97:1d:81:24:
                    13:55:f2:7f:ca:98:7a:4c:03:30:ba:56:cf:2d:ea:
                    1c:21:98:43:cc:32:7d:2b:2a:d2:6c:bb:7c:c6:7d:
                    f0:ca:f5:dc:71:e8:bf:3a:4e:2f:08:3d:00:37:04:
                    9f:d4:49:60:f0:11:42:55:04:f7:f9:3c:03:e0:98:
                    d8:25:e6:59:70:57:0f:ce:ee:8e:31:ca:c5:b0:71:
                    89:ed:62:a7:2e:0f:e8:f8:bb:f5:f1:e5:71:56:1a:
                    20:9a:f4:6f:c0:a4:45:f0:7c:44:43:a6:43:3a:74:
                    43:12:da:d8:f3:f6:7d:db:bd:cb:5b:ef:90:2e:8d:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:23:BC:70:1F:1C:59:6C:82:53:52:87:CB:06:E3:11:F0:03:9E
            X509v3 Authority Key Identifier:
                keyid:D8:DF:B3:88:AC:54:93:BE:9C:92:17:5A:6C:F7:FF:85:56:D5:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/D8DFB388AC5493BE9C92175A6CF7FF8556D5BA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:06:8d:ce:9d:0f:96:b9:6f:63:d5:40:11:30:8e:a5:81:
         04:a3:73:ac:df:9f:cc:d2:63:31:e6:7a:94:02:72:c5:ab:ca:
         d2:94:87:ef:0f:6b:66:b8:b0:a5:53:6d:5e:23:0b:ec:1c:c7:
         ea:28:55:93:b9:3c:b8:8f:df:ea:d8:40:72:79:cf:99:56:a3:
         58:05:0d:10:9b:3d:6d:a9:c3:7f:29:f1:39:ef:4c:2e:a6:6e:
         c2:d4:c4:ac:2a:b4:fd:2d:67:e7:dc:fa:24:6a:ac:02:65:c9:
         c6:ad:92:42:0d:4c:73:95:be:5f:18:fd:f8:4c:58:cc:2e:c6:
         bf:58:89:37:2b:dc:d8:d2:24:d8:5e:93:bc:6a:d1:84:79:29:
         c2:d3:cf:4a:b3:56:e2:86:51:26:97:61:18:0c:c7:98:6c:f4:
         bd:e5:4c:5b:93:d3:b6:61:f5:96:af:7e:1d:3a:c8:72:7f:6b:
         64:d5:5f:fc:62:c0:4e:a5:dd:95:c7:85:39:a7:82:9c:69:0b:
         b9:da:86:4a:ce:31:39:e2:d1:43:91:3c:19:4e:c2:14:c5:01:
         25:26:31:76:b6:e5:4d:65:1e:a9:58:7c:b4:73:82:62:58:e3:
         19:83:40:6a:84:a4:44:b5:1f:7a:5e:16:81:42:d4:ea:0e:c1:
         48:78:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----