Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.mft
File:                     29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.mft (raw, json)
Hash identifier:          AYIf1kf3u4aT+eIetweSlOPwB4j7dAaCAhbzjrGFsog=
Subject key identifier:   1A:81:8F:84:43:62:06:BF:60:B5:E9:5A:F3:B3:EE:B4:D4:F0:E0:4B
Authority key identifier: 29:01:6D:1E:81:8D:31:5F:CD:2D:AE:EA:DF:BC:58:9E:D5:EA:9B:95
Certificate issuer:       /CN=29016D1E818D315FCD2DAEEADFBC589ED5EA9B95
Certificate serial:       5D52D1FE05C6CE19C2C6FE488F5B4A6D3B8A6742
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.mft
Manifest number:          98
Signing time:             Thu 25 Jul 2024 16:08:59 +0000
Manifest this update:     Thu 25 Jul 2024 16:03:59 +0000
Manifest next update:     Fri 26 Jul 2024 16:55:59 +0000
Files and hashes:         1: 3138372e31372e34382e302f32302d3234203d3e20323632383031.roa (hash: tU6cPgcxlgfHkCOgK84BB129B4/aKVOgWODCg9A3UFA=)
                          2: 29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.crl (hash: YYnPC0Q06NT9OChJknPUMLgbbOCz/dMO1VCoNMQ/qdQ=)
                          3: 3138362e3235302e342e302f32322d3234203d3e20323632383031.roa (hash: N0HAP6sWa/T5cweQavPP65IdxMTsao/p76/eT8wdyBg=)
                          4: 3138362e3235302e302e302f32322d3234203d3e20323632383031.roa (hash: NSNl5ke7OwFoxSuUrP3iReH8aNZZykZs0g6JM62lRqI=)
                          5: 323830343a3234343a3a2f33322d3332203d3e20323632383031.roa (hash: HTAorwYr7EA0PvPLwXKhwxsNvBNUkK2d30+6k6oUppg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:52:d1:fe:05:c6:ce:19:c2:c6:fe:48:8f:5b:4a:6d:3b:8a:67:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29016D1E818D315FCD2DAEEADFBC589ED5EA9B95
        Validity
            Not Before: Jul 25 16:03:59 2024 GMT
            Not After : Jul 26 16:55:59 2024 GMT
        Subject: CN=1A818F84436206BF60B5E95AF3B3EEB4D4F0E04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:50:66:01:de:fc:df:8e:37:5f:47:6d:ae:
                    09:6e:ef:a9:0c:25:d9:7a:88:8b:29:aa:4e:8c:27:
                    9e:ab:2d:9b:40:cf:69:2e:9a:24:1b:b9:4a:da:e3:
                    ee:a7:2a:df:fe:c6:3d:b3:a6:d7:1f:e7:e4:2a:5d:
                    7d:dd:03:a2:33:75:80:a2:e4:21:7f:88:de:55:9d:
                    da:62:33:1c:9c:d9:f9:f4:df:01:80:d7:fd:cf:7f:
                    4a:65:96:49:97:f1:ce:06:36:d8:35:33:3d:d2:77:
                    b0:54:70:dc:9d:17:6c:6f:1f:92:79:28:1c:c9:b5:
                    aa:ea:1b:24:0a:76:ab:5c:72:86:10:f4:92:d8:02:
                    e9:40:8a:6d:ed:07:9c:2e:02:41:b7:81:15:ec:21:
                    00:41:90:56:dc:d5:1d:d7:1a:14:ce:c0:a8:55:11:
                    b7:61:8c:a1:6d:f0:a9:61:dd:e5:e0:b2:a5:c0:e6:
                    55:be:37:a2:38:4d:8b:76:3f:f7:b6:10:f1:9c:9e:
                    06:24:c7:3c:b9:69:fe:c3:b6:16:2c:5a:1d:1a:2c:
                    31:ed:a9:78:fb:72:79:03:b3:b3:7e:fa:de:c5:a7:
                    3e:bf:fe:8e:c6:1c:0d:a2:b1:4b:20:e4:1e:f7:e3:
                    06:80:cb:c9:7e:14:34:e1:f4:d5:2c:fc:e8:7f:fa:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:8F:84:43:62:06:BF:60:B5:E9:5A:F3:B3:EE:B4:D4:F0:E0:4B
            X509v3 Authority Key Identifier:
                keyid:29:01:6D:1E:81:8D:31:5F:CD:2D:AE:EA:DF:BC:58:9E:D5:EA:9B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:99:0d:97:aa:68:ac:a4:9c:3c:92:df:7a:f4:23:84:3f:3e:
         fe:dd:3c:78:af:7b:37:e0:8c:e6:cb:fb:5f:f8:74:2f:19:e9:
         70:c1:28:60:4f:5d:ce:0d:3f:f6:ad:84:ea:bc:c1:0d:19:bb:
         63:b2:5b:ef:6e:24:e1:02:c0:c3:64:af:e1:5b:09:a5:40:dd:
         7e:4b:f5:ea:e7:e4:97:e3:09:c5:0c:d2:d1:c1:ba:2d:51:7e:
         31:a8:88:74:46:e6:4e:6b:b7:19:e1:11:5d:55:9f:6f:e0:00:
         28:14:21:38:16:46:28:e3:94:d1:cc:9f:08:f4:1f:16:15:c9:
         7d:84:65:71:fc:31:70:12:6e:cb:3a:19:c4:a8:16:06:c5:3c:
         5e:b0:5c:88:a2:55:1a:8c:5a:7e:28:f6:aa:ef:bc:40:75:2e:
         67:5c:7e:e5:7d:35:b7:0d:4e:35:04:b9:18:86:f1:3b:d7:cc:
         c7:e7:71:22:4a:95:8e:bc:e2:42:7c:aa:3c:7a:63:c9:6b:94:
         c7:01:02:cc:0d:5d:4b:a1:73:8e:8e:9e:b5:90:97:c0:4c:5b:
         6d:ca:b1:c5:40:0b:97:46:b8:3c:72:8a:31:5c:b5:9c:6f:2d:
         cc:fd:75:65:9d:21:5e:2e:32:52:6e:a3:ce:be:db:c3:54:a3:
         f3:5d:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----