Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.mft
File:                     B509D727BCD6E24457885EF3F37267029BA029F1.mft (raw, json)
Hash identifier:          UhX5StRSuyYrSqQ1IYcxtCzUXpPXdKQtWPvNkYmhu/o=
Subject key identifier:   BB:F7:2B:0D:57:C2:81:08:9A:87:07:B7:17:3B:26:7F:89:93:85:2A
Authority key identifier: B5:09:D7:27:BC:D6:E2:44:57:88:5E:F3:F3:72:67:02:9B:A0:29:F1
Certificate issuer:       /CN=B509D727BCD6E24457885EF3F37267029BA029F1
Certificate serial:       30CBDD9FC479E53D26B5BE5BC0B9EC381E83768B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B509D727BCD6E24457885EF3F37267029BA029F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.mft
Manifest number:          2F
Signing time:             Sat 20 Jan 2024 12:07:09 +0000
Manifest this update:     Sat 20 Jan 2024 12:02:09 +0000
Manifest next update:     Sun 21 Jan 2024 14:53:09 +0000
Files and hashes:         1: 3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (hash: MQMPfrGfr4YhOYlUxRm98UWY9hBNGBWwEZfAFn4nA6c=)
                          2: B509D727BCD6E24457885EF3F37267029BA029F1.crl (hash: dYoqRwx3KJyqIhSdkLWO56IAprINklJXL8iQHGpnDW4=)
                          3: 323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (hash: aQalFrtoqgMbvxDa3OFnD3ubenN9gw4SqBNjrAiJDEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cb:dd:9f:c4:79:e5:3d:26:b5:be:5b:c0:b9:ec:38:1e:83:76:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B509D727BCD6E24457885EF3F37267029BA029F1
        Validity
            Not Before: Jan 20 12:02:09 2024 GMT
            Not After : Jan 21 14:53:09 2024 GMT
        Subject: CN=BBF72B0D57C281089A8707B7173B267F8993852A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:b3:37:50:9b:b2:71:56:c1:e8:8e:f7:c3:
                    89:aa:51:40:f1:59:df:60:df:82:31:bf:e5:2e:5d:
                    eb:c5:ff:b2:d6:dc:58:2a:1a:f6:ff:75:d3:27:df:
                    8e:76:8a:99:9a:bb:66:0d:ee:9e:40:da:5b:c4:cd:
                    40:4f:6b:f5:2a:cd:f7:41:e7:3a:fa:bf:ee:69:58:
                    b4:9c:5e:ca:8a:38:d1:f0:3e:5a:74:95:cf:86:0e:
                    55:e0:c2:0c:ab:47:33:c5:b6:07:f3:49:55:61:71:
                    74:b0:f3:ad:1a:05:37:c6:0a:d6:74:5a:c1:88:30:
                    d7:51:67:cd:cc:ec:4e:e4:c6:5e:27:5c:59:ed:e5:
                    87:8b:0b:72:15:7f:9b:72:91:f8:13:c6:aa:a4:7d:
                    3c:1b:8c:59:e2:8d:87:61:58:76:42:82:c1:07:8b:
                    72:de:24:c2:9a:00:1e:64:dc:38:e0:df:e7:df:f4:
                    81:49:34:b0:85:db:85:75:2a:0a:03:8c:0d:af:75:
                    69:13:ba:56:e0:cf:91:63:08:1b:c5:eb:da:e5:61:
                    88:9c:44:f4:3d:67:ee:56:e8:b0:35:bc:54:f6:5f:
                    80:b9:53:3b:e9:ea:1f:a8:d7:eb:8d:81:df:a8:10:
                    ad:79:69:34:ff:81:36:3e:fe:30:53:8f:19:1e:3f:
                    d4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F7:2B:0D:57:C2:81:08:9A:87:07:B7:17:3B:26:7F:89:93:85:2A
            X509v3 Authority Key Identifier:
                keyid:B5:09:D7:27:BC:D6:E2:44:57:88:5E:F3:F3:72:67:02:9B:A0:29:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B509D727BCD6E24457885EF3F37267029BA029F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/B509D727BCD6E24457885EF3F37267029BA029F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:45:b3:a0:78:bf:6e:77:7c:41:2c:33:af:9e:1c:bc:49:
         34:c1:5d:0a:c7:90:d1:2e:f6:58:04:29:e7:c2:31:7f:c7:4f:
         b5:6c:55:26:96:9a:6c:b3:a8:e6:c3:0a:e6:ba:be:a2:97:87:
         c3:0f:cd:38:8d:9c:d7:5c:5a:a7:07:72:4d:e6:6a:34:5f:96:
         4b:42:3a:a9:7c:83:0b:17:9d:86:ee:02:c0:95:f0:98:21:39:
         c5:27:39:4a:02:8a:cc:61:2d:d2:66:30:e5:f2:d8:62:c3:e8:
         77:46:79:97:7b:5e:10:48:b1:6d:e9:c2:69:ce:48:79:ed:8c:
         aa:80:72:42:58:1e:3e:97:38:26:42:94:54:a5:92:d1:ae:dd:
         72:86:f5:42:7f:bc:22:47:08:72:20:d2:0a:5a:5e:14:3f:6a:
         ff:66:0e:19:66:fb:1e:21:07:6f:26:40:34:3b:28:35:f7:fa:
         cf:d8:88:57:a9:83:36:00:8e:b2:c0:69:76:79:a8:c7:89:fb:
         5b:bf:e6:31:8a:b6:23:79:38:f1:d3:05:74:7b:9b:e1:32:c8:
         56:95:7b:52:50:fe:81:5d:69:16:e4:dd:06:ea:15:0e:8b:1b:
         a8:e4:63:cb:5e:8a:61:f9:49:e4:0a:a9:e5:17:6d:b0:4f:f2:
         5f:68:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----