Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.mft
File:                     96BA82DF5206559FC2C8963DB292E32E9CD37E27.mft (raw, json)
Hash identifier:          VNz0XAwMnEoDVfL4NzDnB+fBUSe+r1cd38RO8YnQmRA=
Subject key identifier:   EE:61:0F:CB:27:AC:FB:4B:50:8B:C0:01:2E:C8:BC:94:ED:B6:24:6A
Authority key identifier: 96:BA:82:DF:52:06:55:9F:C2:C8:96:3D:B2:92:E3:2E:9C:D3:7E:27
Certificate issuer:       /CN=96BA82DF5206559FC2C8963DB292E32E9CD37E27
Certificate serial:       60A6C897A7B8472921B03C1677C842E7F1C775E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BA82DF5206559FC2C8963DB292E32E9CD37E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.mft
Manifest number:          5F
Signing time:             Fri 16 Aug 2024 04:55:12 +0000
Manifest this update:     Fri 16 Aug 2024 04:50:12 +0000
Manifest next update:     Sat 17 Aug 2024 04:58:12 +0000
Files and hashes:         1: 323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa (hash: aYPaaKlDnO9aSLTdyKqJ+dc/CoQq3OKw9rkHVMOS1JY=)
                          2: 96BA82DF5206559FC2C8963DB292E32E9CD37E27.crl (hash: wK3hMG4VY2Y56TF18CAxckorDDBAxnPeD1nznO6hz2U=)
                          3: 34352e3232342e3138352e302f32342d3234203d3e20323637303836.roa (hash: oPdF/alk3CMHlK4kgMRs+r4+63NC7Lzgr4z7As9tRcc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a6:c8:97:a7:b8:47:29:21:b0:3c:16:77:c8:42:e7:f1:c7:75:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96BA82DF5206559FC2C8963DB292E32E9CD37E27
        Validity
            Not Before: Aug 16 04:50:12 2024 GMT
            Not After : Aug 17 04:58:12 2024 GMT
        Subject: CN=EE610FCB27ACFB4B508BC0012EC8BC94EDB6246A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:66:1a:6a:2c:df:c1:ef:01:3a:60:36:4b:
                    49:a3:f3:6b:a0:06:6d:51:c4:b8:bf:f1:c5:38:54:
                    05:88:a5:55:06:0c:e0:52:08:f1:b9:60:c3:ec:09:
                    15:9a:5e:9e:a9:f8:8e:2b:07:47:1f:87:84:77:bd:
                    6f:b1:9d:a8:d2:f2:84:e6:46:39:c2:21:32:74:fb:
                    bb:78:c8:27:33:de:18:b4:3d:2c:79:d2:bd:d5:4f:
                    1a:d9:fe:5d:bc:2c:43:b1:24:ff:11:c5:56:a5:59:
                    fc:cd:b2:51:b5:32:fc:38:cc:fe:16:dc:0c:63:b6:
                    1c:92:3f:1b:1d:49:ac:7c:73:eb:b1:41:4b:88:57:
                    7d:73:36:17:62:7f:87:ae:52:2c:51:07:89:7f:54:
                    75:02:01:93:5b:b3:56:66:a1:95:38:c4:f9:fc:7f:
                    29:aa:94:59:29:67:f8:ed:22:f6:a3:69:67:a3:38:
                    02:7c:44:e4:89:89:ef:8b:ce:4e:6e:1a:7e:81:31:
                    01:0c:44:bc:3d:a4:56:30:cb:ec:c9:d4:cf:33:ec:
                    9e:9f:6c:30:b2:09:61:80:59:c0:cc:8c:8c:41:f8:
                    97:d0:5f:79:48:a2:b3:00:f4:23:3e:1d:16:9d:18:
                    44:ec:87:0f:36:41:6f:d3:f6:b0:2b:62:56:69:f0:
                    1b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:0F:CB:27:AC:FB:4B:50:8B:C0:01:2E:C8:BC:94:ED:B6:24:6A
            X509v3 Authority Key Identifier:
                keyid:96:BA:82:DF:52:06:55:9F:C2:C8:96:3D:B2:92:E3:2E:9C:D3:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BA82DF5206559FC2C8963DB292E32E9CD37E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/96BA82DF5206559FC2C8963DB292E32E9CD37E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:69:60:49:ea:44:70:e4:41:1c:3d:5c:ed:af:77:d2:21:
         df:aa:91:24:4e:17:10:47:da:44:4d:a0:93:03:d1:0b:82:5c:
         4f:c8:5b:a9:cb:1c:d4:46:42:74:cc:56:11:d7:2c:01:94:3c:
         ef:bc:0b:5b:32:33:4b:c9:24:e7:51:3a:e7:77:5b:df:81:72:
         99:72:73:e3:f2:f2:e6:09:23:20:12:f0:4e:e0:61:ed:b2:a1:
         bb:99:a4:eb:1f:2d:74:15:7b:2e:6a:f8:86:52:c2:ed:c2:0a:
         25:74:ee:29:4b:46:35:82:2f:c5:98:c3:96:f7:42:69:88:d4:
         d3:fa:8c:3c:dd:64:d2:c0:d1:6b:35:9c:19:19:c0:b6:ae:05:
         56:e8:8a:24:3f:a1:2e:b6:e0:91:7a:f9:17:17:a0:11:45:9f:
         7a:e1:1d:66:73:44:af:b0:91:af:9a:c2:1a:a2:d0:20:68:93:
         b5:ca:90:90:72:a9:85:60:4b:26:fe:70:bb:d1:20:d3:2f:17:
         65:ee:35:00:ac:81:c3:2f:78:a1:35:2a:fc:77:fb:ff:2e:c2:
         fa:c1:a1:c1:43:22:b2:69:6b:63:a4:86:fa:a1:c3:2e:d5:3d:
         1d:b9:cb:4a:c0:ac:db:d2:5b:46:22:71:3c:31:9e:5f:63:fc:
         0a:1d:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----