Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/C072BBDD808650F694B037F47680DC8B2825E6C4.mft
File:                     C072BBDD808650F694B037F47680DC8B2825E6C4.mft (raw, json)
Hash identifier:          1uX1IsonlG/HS8bEbOtFDJeisCn2mRtrr4jHJOZr2dQ=
Subject key identifier:   8E:F4:B0:D6:F2:15:44:05:37:4E:44:3A:43:0B:7B:43:AE:72:AB:A9
Authority key identifier: C0:72:BB:DD:80:86:50:F6:94:B0:37:F4:76:80:DC:8B:28:25:E6:C4
Certificate issuer:       /CN=C072BBDD808650F694B037F47680DC8B2825E6C4
Certificate serial:       4C586AB1EE3B7D681CB82ADEED03AAE42771C135
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C072BBDD808650F694B037F47680DC8B2825E6C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/C072BBDD808650F694B037F47680DC8B2825E6C4.mft
Manifest number:          94
Signing time:             Sat 05 Oct 2024 21:59:40 +0000
Manifest this update:     Sat 05 Oct 2024 21:54:40 +0000
Manifest next update:     Mon 07 Oct 2024 00:46:40 +0000
Files and hashes:         1: 3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa (hash: RwmjwAaL9j5sCpbfWy8/gzWHbLAvgUqkEeZosVsDRkI=)
                          2: C072BBDD808650F694B037F47680DC8B2825E6C4.crl (hash: fxe0BpeeVt+i5A8O42yM9r9qARg6lzrJP5p1N65POFk=)
                          3: 323830343a326263343a3a2f33322d313238203d3e20323635313734.roa (hash: uKUN8N52fWi7pWwyoES0cz/GlViUksNciaL/qGc51Lo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:58:6a:b1:ee:3b:7d:68:1c:b8:2a:de:ed:03:aa:e4:27:71:c1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C072BBDD808650F694B037F47680DC8B2825E6C4
        Validity
            Not Before: Oct  5 21:54:40 2024 GMT
            Not After : Oct  7 00:46:40 2024 GMT
        Subject: CN=8EF4B0D6F2154405374E443A430B7B43AE72ABA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:0b:3f:f7:cf:d4:19:cd:9f:e2:10:0b:51:
                    79:61:6f:0c:d4:22:c1:41:08:dd:27:5c:a8:6f:3e:
                    91:bf:76:1f:2c:9b:41:c2:1f:d5:38:40:69:2d:46:
                    33:78:0c:97:d1:25:62:87:b6:c5:51:64:de:65:c6:
                    d4:d5:1e:9b:d2:29:64:11:c4:c1:9e:76:8c:5c:cf:
                    21:0b:bb:7c:b0:2c:7e:14:27:7c:cf:8a:97:93:50:
                    e5:54:9c:1e:ce:f5:6b:06:13:a7:b1:43:d5:31:3c:
                    f7:f5:42:01:69:82:33:37:7c:c3:6d:2a:37:32:f6:
                    df:6e:55:b3:f6:8f:88:dc:a3:e1:03:5b:94:e7:cc:
                    7a:1c:95:a4:48:cc:e8:cf:a8:ca:a2:f4:8b:24:71:
                    70:dc:40:fd:18:0d:8f:32:4f:ce:e3:69:30:88:9e:
                    ce:03:ad:c0:5c:97:e7:06:11:6a:3a:82:23:ab:c3:
                    44:db:d9:e4:2f:21:29:b1:98:6d:3d:ed:54:eb:f6:
                    ba:a5:c3:1d:50:71:ef:6b:9e:e3:32:74:80:59:38:
                    4d:79:8d:f4:08:a6:82:ab:ed:86:1d:9b:8b:86:92:
                    81:22:74:a6:e2:2a:69:65:df:f4:69:c7:2a:f9:b2:
                    a4:0b:fd:e0:14:c6:8c:59:52:55:e3:dd:e4:21:e4:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F4:B0:D6:F2:15:44:05:37:4E:44:3A:43:0B:7B:43:AE:72:AB:A9
            X509v3 Authority Key Identifier:
                keyid:C0:72:BB:DD:80:86:50:F6:94:B0:37:F4:76:80:DC:8B:28:25:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/C072BBDD808650F694B037F47680DC8B2825E6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C072BBDD808650F694B037F47680DC8B2825E6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/C072BBDD808650F694B037F47680DC8B2825E6C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:16:db:1f:b0:c5:fd:78:c0:34:bc:83:4c:80:a8:6b:70:4c:
         50:2a:a0:56:8f:a6:6b:b1:39:52:2d:b2:e5:7a:6e:ba:e7:5e:
         c2:79:8c:5c:72:ee:7b:26:30:3a:c8:8a:c6:43:a7:0d:19:59:
         6d:9a:82:c5:db:dc:8a:26:39:2f:bc:4e:0c:a8:aa:0b:24:94:
         0b:aa:0e:e3:00:4e:08:ce:e7:ee:ae:f9:e6:69:86:f3:b3:fc:
         81:29:ae:91:61:47:c6:e8:91:4c:f3:2f:5b:e1:37:f0:b8:2a:
         3d:4b:c7:7b:e0:00:59:e8:6e:3c:12:b7:ad:38:12:4f:51:5b:
         62:f3:ee:e7:83:59:77:c2:fb:2b:c0:27:b3:d4:e7:1f:f4:6b:
         7a:62:6a:03:21:2e:eb:2b:2e:e3:d8:c4:91:3b:9a:62:3b:20:
         7e:af:9b:74:42:05:71:67:8b:0a:1a:ae:2e:33:c8:b6:3f:15:
         ad:e8:9d:2d:58:b4:6d:ed:21:83:08:59:8b:b9:60:27:06:39:
         fb:ce:35:b0:e9:e3:fa:0b:16:6c:ff:e0:99:df:f4:7a:df:b7:
         22:44:2f:af:f3:92:61:30:ec:3a:d7:f4:b9:83:a8:7f:e9:68:
         db:39:af:e7:4a:66:e9:71:00:03:ec:01:8b:76:47:66:44:e5:
         95:50:9a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----