Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.mft
File:                     02EF807C172BDA9EBD65360B768B355F949CBE4C.mft (raw, json)
Hash identifier:          s8UBLU5xek4ITY2rNPaaBmj0NI2XNj7+tjpZm4hvUXA=
Subject key identifier:   01:3B:16:D5:B2:BB:E5:1F:10:51:16:1F:21:42:51:50:2A:EF:A6:1F
Authority key identifier: 02:EF:80:7C:17:2B:DA:9E:BD:65:36:0B:76:8B:35:5F:94:9C:BE:4C
Certificate issuer:       /CN=02EF807C172BDA9EBD65360B768B355F949CBE4C
Certificate serial:       3D18B7B8436ABFEE5380C88C2D3A6EDE41D38296
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.mft
Manifest number:          9E
Signing time:             Mon 29 Jul 2024 10:33:06 +0000
Manifest this update:     Mon 29 Jul 2024 10:28:06 +0000
Manifest next update:     Tue 30 Jul 2024 11:15:06 +0000
Files and hashes:         1: 02EF807C172BDA9EBD65360B768B355F949CBE4C.crl (hash: nmL/Tv0ng3jkzv178d7UcLfUJ+MPvYAfonPvHkMCa5Q=)
                          2: 323830343a353761383a3a2f33322d313238203d3e20323638303738.roa (hash: XCsKSMmfYb2V8wV8FtRNZt24aM9+yGKSq/n5NK0E+RA=)
                          3: 34352e3136382e3137362e302f32322d3332203d3e20323638303738.roa (hash: eDYRxwnbxKScazgMe68oKEtdVgzHdJR6tJRTPNZastc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:18:b7:b8:43:6a:bf:ee:53:80:c8:8c:2d:3a:6e:de:41:d3:82:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02EF807C172BDA9EBD65360B768B355F949CBE4C
        Validity
            Not Before: Jul 29 10:28:06 2024 GMT
            Not After : Jul 30 11:15:06 2024 GMT
        Subject: CN=013B16D5B2BBE51F1051161F214251502AEFA61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:57:ff:0c:e6:ce:1f:24:f4:7c:cc:05:97:b7:
                    09:2e:59:b7:72:74:0a:f7:70:da:a7:38:81:e9:8c:
                    9d:51:31:3c:bc:a4:2d:0c:61:8b:54:f7:60:1b:9a:
                    3b:60:20:66:bd:2b:67:5e:27:fc:49:e6:b6:ce:ba:
                    c2:51:21:11:3b:00:c4:e2:7e:08:57:9f:40:70:11:
                    7c:ab:ca:7f:53:c6:09:17:23:ea:55:6e:71:80:eb:
                    5e:6b:bd:80:0b:21:5c:5b:e4:2c:eb:8f:a3:2c:2c:
                    32:8f:ec:35:ee:59:07:85:71:1d:48:30:24:b3:d5:
                    31:a3:a3:45:1b:59:dd:5d:fc:3d:58:b4:95:61:eb:
                    38:ec:6f:ac:fb:1a:97:ad:ca:0a:03:0c:48:02:c1:
                    cf:55:49:bd:2e:a6:d1:dd:29:30:23:81:5e:47:02:
                    3e:36:e4:3f:a5:19:37:fe:6e:47:1c:45:08:d8:bf:
                    62:8d:d2:8f:49:bf:61:66:e0:02:13:14:03:5c:22:
                    11:5e:60:56:d1:84:64:df:b0:1d:b0:8e:42:94:5d:
                    46:2b:73:a6:89:bc:1c:7e:44:e8:7c:e7:24:8b:5f:
                    89:64:bb:33:82:24:a8:ec:a1:19:71:d0:76:d5:7b:
                    90:19:e5:2e:4f:23:5d:b5:73:9e:35:6c:87:c0:21:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3B:16:D5:B2:BB:E5:1F:10:51:16:1F:21:42:51:50:2A:EF:A6:1F
            X509v3 Authority Key Identifier:
                keyid:02:EF:80:7C:17:2B:DA:9E:BD:65:36:0B:76:8B:35:5F:94:9C:BE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:52:99:27:db:4b:14:4e:40:ce:33:e1:a5:e5:5c:35:6f:ae:
         64:63:37:ef:ab:f5:dd:d6:43:eb:ec:87:f6:7e:c4:94:9b:27:
         41:b3:7c:17:65:64:ad:12:2e:8d:5d:ac:2b:5f:f8:e4:22:07:
         bb:36:c1:cb:76:95:75:51:13:a5:cc:83:31:d3:0b:7d:d5:4f:
         33:3b:57:51:d7:23:04:8f:6e:1f:5e:46:f1:86:aa:21:2e:97:
         21:7e:02:e2:c0:99:ff:3a:a7:30:fd:33:99:33:00:32:e9:22:
         4e:70:1f:d9:87:d7:79:fe:b4:2f:b1:ec:7f:b0:6e:40:f0:45:
         1b:83:9a:17:b3:2e:3b:ce:6e:28:79:cb:80:b4:63:b1:5c:6b:
         8b:f6:4e:0e:cb:56:8b:3a:7b:99:77:ed:b6:b7:bf:03:c8:ab:
         26:c6:d2:93:e9:58:ce:6b:ee:00:f5:ec:02:e9:78:04:32:85:
         5a:2d:3b:68:fc:af:0f:f6:fa:13:45:6f:f0:e6:96:4a:07:d5:
         31:3c:27:50:20:f0:67:ff:02:b8:0b:64:0d:68:6f:53:9e:29:
         13:59:26:9f:45:7d:15:4b:66:41:9d:71:b4:d1:00:af:56:94:
         5a:89:84:99:51:80:95:b7:29:89:97:fd:d4:e3:ec:7d:30:9b:
         15:3c:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----