Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/C9AC44E82605C0D3C3383877074774E2849AC537.mft
File:                     C9AC44E82605C0D3C3383877074774E2849AC537.mft (raw, json)
Hash identifier:          nNR4zuMnRhemnBy7Du0adAN+p6T2sgghR5Xs9hwo9EM=
Subject key identifier:   26:A1:52:97:EB:83:C1:5F:45:61:6D:08:AA:60:CE:92:A5:7B:1E:5C
Authority key identifier: C9:AC:44:E8:26:05:C0:D3:C3:38:38:77:07:47:74:E2:84:9A:C5:37
Certificate issuer:       /CN=C9AC44E82605C0D3C3383877074774E2849AC537
Certificate serial:       3D72DABEBD0C9E4213D153CF03D1A1B3CB714BDD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AC44E82605C0D3C3383877074774E2849AC537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/C9AC44E82605C0D3C3383877074774E2849AC537.mft
Manifest number:          85
Signing time:             Tue 09 Jul 2024 11:31:31 +0000
Manifest this update:     Tue 09 Jul 2024 11:26:31 +0000
Manifest next update:     Wed 10 Jul 2024 12:47:31 +0000
Files and hashes:         1: 3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa (hash: XVN02nnMwG6MCCCZMhXmMYk0hkvAz9ZfpC6xhz50xYE=)
                          2: C9AC44E82605C0D3C3383877074774E2849AC537.crl (hash: plF/h5nhDbmStztrv93Y2UNyWy92q3Snepysw3zZx28=)
                          3: 323830343a333565383a3a2f33322d3332203d3e20323636333134.roa (hash: LaEJGKs9Xe87G/+elUL1HSZGqRC/KX1FXw3GR7vHZuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:72:da:be:bd:0c:9e:42:13:d1:53:cf:03:d1:a1:b3:cb:71:4b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AC44E82605C0D3C3383877074774E2849AC537
        Validity
            Not Before: Jul  9 11:26:31 2024 GMT
            Not After : Jul 10 12:47:31 2024 GMT
        Subject: CN=26A15297EB83C15F45616D08AA60CE92A57B1E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:f3:e7:9f:9c:b5:b3:81:d1:b4:a9:74:a0:
                    96:46:81:47:ac:51:e8:27:c7:4e:d9:ec:f0:8a:f7:
                    f4:4c:3f:ad:4e:bc:5f:e9:7e:a9:37:80:23:d9:58:
                    e1:5c:af:cd:5d:28:af:af:28:5f:1f:89:8b:00:6b:
                    6a:76:81:76:d7:f1:f9:7d:0c:04:aa:e7:b9:fd:67:
                    21:1a:54:65:9c:43:5c:a9:02:a6:34:6b:33:d6:c3:
                    ce:56:7b:e3:99:5c:0f:e1:ed:f6:24:c2:b5:d4:d6:
                    e3:e5:64:b1:29:da:c2:92:13:04:d6:74:99:8c:f2:
                    c5:fc:d1:7d:62:13:91:04:14:2e:ab:2c:0e:a0:44:
                    59:e4:6a:8c:47:a5:95:4b:27:3e:2c:88:86:99:65:
                    fe:40:0b:bf:3e:0d:69:a6:d2:d3:7f:ee:d6:b0:5f:
                    7f:0a:52:fd:10:d5:f7:83:10:04:bd:cc:bd:04:a9:
                    4c:2f:fd:25:b4:3f:30:71:96:3a:63:2d:3d:ec:2c:
                    a9:96:ba:c1:53:07:cc:61:aa:a6:1a:16:09:3c:c3:
                    cc:42:39:e0:05:08:ac:27:14:3a:43:47:29:ea:b3:
                    0b:e7:44:b5:63:13:74:7f:ad:e7:c1:3e:c2:32:7f:
                    e5:24:ca:03:b6:bb:f9:10:a9:40:0e:42:37:e9:c8:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A1:52:97:EB:83:C1:5F:45:61:6D:08:AA:60:CE:92:A5:7B:1E:5C
            X509v3 Authority Key Identifier:
                keyid:C9:AC:44:E8:26:05:C0:D3:C3:38:38:77:07:47:74:E2:84:9A:C5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/C9AC44E82605C0D3C3383877074774E2849AC537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AC44E82605C0D3C3383877074774E2849AC537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/C9AC44E82605C0D3C3383877074774E2849AC537.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ec:05:5b:ec:a7:1a:28:b4:64:71:f0:44:3c:e8:63:b7:8d:
         eb:90:1f:73:db:87:ad:a3:53:b6:ac:a7:2d:0c:29:d5:b8:a0:
         5c:d6:0f:6b:bc:89:d0:b8:b3:6f:ff:fc:aa:63:a8:e7:66:90:
         f4:a2:a9:3f:58:68:02:15:16:42:c3:0f:50:ba:ab:54:6b:45:
         f2:cd:7d:e7:aa:98:2d:e5:45:3c:b9:f2:10:6a:7e:73:c8:86:
         30:f0:b8:12:da:b5:e2:6f:cf:33:76:02:ad:5f:f0:13:1c:7c:
         a2:82:6a:a6:fd:24:91:1b:5e:b0:e0:f7:7c:9b:3f:11:3c:e5:
         db:e1:44:7f:99:26:44:d0:9f:34:d5:47:8e:7c:74:a8:78:76:
         3d:6f:5c:c3:f8:02:62:af:e4:a5:3e:0c:44:33:1b:bb:5d:07:
         d0:6e:1f:65:7b:00:1c:80:a4:98:e3:ab:ba:81:a7:52:3b:38:
         d2:1a:8b:ee:69:e9:31:e6:52:f8:0f:1f:6d:e4:3a:7c:de:81:
         5e:de:b7:68:cc:55:94:48:18:20:62:d4:81:46:c7:90:0d:88:
         4c:a6:17:7a:7c:cf:c1:ff:a6:63:f8:34:bd:1e:28:7f:a8:fb:
         a8:d9:ad:00:f0:8b:33:6d:ac:6c:d3:0c:ec:36:56:16:d7:1d:
         a9:5a:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----