Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.mft
File:                     4BFC875BB620AF91362E3BE00B276B5E37F4DD35.mft (raw, json)
Hash identifier:          /EWXqjfCNdbRMXhr20pLu/cFobkDjHj9kJ2QD15Hn40=
Subject key identifier:   67:8F:72:6E:1B:8F:06:BF:C0:7B:90:70:E6:C9:D1:D2:E0:93:01:5E
Authority key identifier: 4B:FC:87:5B:B6:20:AF:91:36:2E:3B:E0:0B:27:6B:5E:37:F4:DD:35
Certificate issuer:       /CN=4BFC875BB620AF91362E3BE00B276B5E37F4DD35
Certificate serial:       014828994C445D323BD9049FCA12287417D9AA50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.mft
Manifest number:          99
Signing time:             Sun 28 Jul 2024 23:08:29 +0000
Manifest this update:     Sun 28 Jul 2024 23:03:29 +0000
Manifest next update:     Mon 29 Jul 2024 23:36:29 +0000
Files and hashes:         1: 34352e362e3136302e302f32342d3234203d3e20323636313936.roa (hash: KXsinszxTyLML1vEmSYRIwO1bfKrylu1XXWL4V8SrCQ=)
                          2: 34352e362e3136312e302f32342d3234203d3e20323636313936.roa (hash: W5vEgrFttpJuf6rJOSQMUusHbMxerFvTiP5F/5ltk1M=)
                          3: 4BFC875BB620AF91362E3BE00B276B5E37F4DD35.crl (hash: JtRaVIKojpKsuFyd+ajIo4udzNSMlTVPNMg/6JyE/8I=)
                          4: 34352e362e3136322e302f32342d3234203d3e20323636313936.roa (hash: JFi4K4MIMmwgRIm2pJR3ZttcsJBYj4Tk4BjnyIB54n4=)
                          5: 323830343a336333343a3a2f33322d3332203d3e20323636313936.roa (hash: fODmWoBDxsqksYVZdWmeGvzeVxFyVG+TMGv3fMiqqUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:28:99:4c:44:5d:32:3b:d9:04:9f:ca:12:28:74:17:d9:aa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFC875BB620AF91362E3BE00B276B5E37F4DD35
        Validity
            Not Before: Jul 28 23:03:29 2024 GMT
            Not After : Jul 29 23:36:29 2024 GMT
        Subject: CN=678F726E1B8F06BFC07B9070E6C9D1D2E093015E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:33:00:b8:2a:1d:f4:03:e7:0e:8f:26:09:
                    be:c8:e2:22:ae:fa:5d:e8:9d:90:5d:ad:bd:15:0f:
                    5d:4b:2d:2f:63:5e:bf:09:e1:cb:6f:85:f5:b6:e7:
                    26:38:6d:d9:3d:50:3a:95:1f:0b:8b:fe:8e:4f:8a:
                    8a:54:79:61:01:6a:8b:cb:01:86:ba:22:d6:bb:f5:
                    0d:da:89:d3:b7:37:ac:2a:99:6b:c5:fb:2e:af:df:
                    7c:dc:8e:2a:cb:1a:9b:ed:1e:81:15:1e:9c:f2:5f:
                    99:c2:c4:2b:40:82:74:06:71:b5:50:ed:a6:21:4a:
                    6d:91:17:b1:a7:d5:3f:b5:49:b1:0a:84:26:5e:fa:
                    91:48:ee:7b:1e:5f:03:eb:0d:52:f8:93:95:da:b1:
                    20:1d:c2:3c:0a:f9:64:d3:33:1d:9d:f4:c6:cc:91:
                    82:8e:e1:7e:34:0c:d5:39:7d:ea:35:02:7b:c5:c1:
                    b7:bb:5a:d7:c5:ac:38:65:d2:81:62:0a:2e:41:43:
                    a1:59:1c:af:a0:d6:c3:28:dd:54:3e:e7:6b:b6:73:
                    e5:3f:0b:22:65:b1:55:a7:9c:39:1d:21:2c:53:15:
                    7e:07:8d:14:25:2b:d0:a3:ba:6b:25:7f:2a:21:f8:
                    8c:13:9a:a0:be:d7:02:48:b0:ec:92:4c:50:a9:a9:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8F:72:6E:1B:8F:06:BF:C0:7B:90:70:E6:C9:D1:D2:E0:93:01:5E
            X509v3 Authority Key Identifier:
                keyid:4B:FC:87:5B:B6:20:AF:91:36:2E:3B:E0:0B:27:6B:5E:37:F4:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:3f:68:39:42:ed:fc:24:c7:25:e0:e6:25:1a:60:15:79:
         5b:78:75:7d:f9:25:1a:33:b8:1a:55:27:32:aa:a5:77:c1:5a:
         82:da:09:15:c9:29:14:ef:41:3d:31:54:de:1b:af:d6:27:aa:
         b4:e7:75:8a:23:da:a8:b3:61:77:d8:4c:1f:5a:9e:32:dc:10:
         86:4c:18:0c:1f:e7:72:b1:1e:b0:96:43:89:4d:a0:cb:4f:b4:
         93:e0:e2:9b:4a:30:6b:86:db:19:ba:97:23:c9:4e:bc:b1:b0:
         fc:56:95:0d:3c:b5:af:df:57:28:4a:0f:de:89:f5:79:65:8b:
         f0:e0:f7:7a:1b:cf:5e:50:86:47:a8:9c:97:a8:ec:0f:c3:2a:
         1a:6f:5b:e4:cd:74:65:4b:4f:dd:27:d0:af:e6:48:6b:39:b8:
         fa:a9:f4:e9:ed:53:d0:0b:ef:ff:3a:9e:f8:d8:c2:e4:2c:d5:
         81:bc:7b:8b:51:06:d2:df:4d:b7:32:f3:e9:39:44:45:69:7a:
         ef:a3:4a:3f:49:be:42:d5:ed:6d:b3:52:9b:62:bd:9a:1d:7c:
         9b:cc:5d:1f:e9:86:3f:6e:64:ac:fd:e5:b8:7b:c6:f2:ee:f1:
         7b:f9:57:8b:78:41:33:2a:aa:d9:7e:ee:6d:51:81:64:b0:83:
         e5:a6:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----