Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.mft
File:                     08E27FA181C10E30D23F9259B9BC195FB3FBABD2.mft (raw, json)
Hash identifier:          aScYUT1yO/75hXGGAF36CEqKB96Wmdy/q54Ltu+xgI8=
Subject key identifier:   37:21:FF:E1:22:8D:12:F4:AE:8A:C2:E4:54:7F:AA:9D:62:C2:9C:03
Authority key identifier: 08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2
Certificate issuer:       /CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
Certificate serial:       42B85B5EE56A455004056FF8DA5157D7F8EF749E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.mft
Manifest number:          BF
Signing time:             Fri 23 Aug 2024 05:04:27 +0000
Manifest this update:     Fri 23 Aug 2024 04:59:27 +0000
Manifest next update:     Sat 24 Aug 2024 07:40:27 +0000
Files and hashes:         1: 3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa (hash: mb8LoBHJXodfNNQO6uj6rW/t3XvsMU4aormVBGJ4UTw=)
                          2: 323830343a326364343a3a2f33322d3438203d3e20323635323436.roa (hash: tP8G7C/yXY7Bgi+d3kYpBX5TCu+NmJYbAOzoaQPSch0=)
                          3: 08E27FA181C10E30D23F9259B9BC195FB3FBABD2.crl (hash: F1RTAqeHxKM+2L50Wte8/kcjMtTl340RR85BD+teKsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b8:5b:5e:e5:6a:45:50:04:05:6f:f8:da:51:57:d7:f8:ef:74:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
        Validity
            Not Before: Aug 23 04:59:27 2024 GMT
            Not After : Aug 24 07:40:27 2024 GMT
        Subject: CN=3721FFE1228D12F4AE8AC2E4547FAA9D62C29C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:3f:fc:71:f1:73:ab:d7:4e:64:56:a0:10:
                    1f:87:9f:55:58:49:65:f9:34:45:61:f0:ed:d5:4a:
                    4e:15:e1:15:6b:ee:13:ba:8c:9a:bd:be:23:7e:22:
                    03:c9:ac:0b:bd:c3:c6:83:bc:54:2d:59:d2:aa:76:
                    f5:82:61:b0:20:1d:76:eb:d1:f1:03:c5:18:c5:8f:
                    f5:f8:16:f6:29:14:97:17:f0:96:6d:2f:49:1a:ee:
                    2c:f2:d5:80:b2:fa:cd:4e:b0:74:cf:16:c9:9e:bd:
                    67:30:b4:25:7b:50:43:1e:2f:6f:d7:f9:5d:5f:9f:
                    59:9e:3b:b5:0e:99:91:a9:16:24:bb:fb:22:b0:a5:
                    26:12:fd:3b:ac:e5:d7:81:70:72:53:2c:1e:6e:1f:
                    74:f3:21:80:2c:f5:3b:c3:f2:60:92:45:ca:73:27:
                    24:42:7d:74:ae:54:52:30:74:d0:8a:6e:03:88:2b:
                    d1:50:fa:57:70:f5:2f:c4:2f:53:30:62:86:7a:e5:
                    c2:8f:f1:15:89:e6:9d:59:dd:ed:86:ce:fa:2c:a6:
                    40:3f:89:78:4b:d3:57:05:73:65:b8:2d:c3:37:99:
                    b2:17:35:09:50:be:f7:89:4c:4a:26:fd:46:b2:a8:
                    10:39:77:24:e1:2a:65:71:63:38:ea:bb:c6:35:2b:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:21:FF:E1:22:8D:12:F4:AE:8A:C2:E4:54:7F:AA:9D:62:C2:9C:03
            X509v3 Authority Key Identifier:
                keyid:08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:f1:6e:6b:65:dc:08:7d:5e:00:5f:a0:9e:11:fd:d4:42:
         c6:31:20:1d:d2:f5:01:54:b9:ab:22:1c:f3:e0:ce:03:64:02:
         41:5e:b5:d4:e0:e9:93:16:5f:bb:49:9c:2b:67:d6:67:26:fe:
         84:a9:d7:66:1e:92:c2:38:4c:83:d0:2d:35:54:b8:0e:ce:fd:
         fe:8b:01:ac:94:b1:af:13:da:f4:db:91:6a:de:44:c4:2b:16:
         8d:ce:a9:fc:c5:e1:21:35:38:b6:40:97:85:25:5c:ee:5a:17:
         37:92:71:c7:c0:c3:7c:3e:51:99:40:b6:05:a5:28:9c:af:57:
         9f:24:90:4a:c9:41:f1:9b:2f:ea:70:83:19:37:c2:17:82:4b:
         9c:26:c8:7b:06:87:fe:fd:5f:3d:d0:9d:fa:0e:72:ee:be:4e:
         9e:08:e1:84:4c:1c:04:61:72:69:13:18:93:c7:89:40:5a:1b:
         ae:9b:0a:e5:f8:f5:d1:5b:e6:da:5e:a0:19:36:c7:3f:e9:87:
         42:35:ec:5d:c1:9b:0f:c8:b7:74:fc:ca:fe:09:7f:38:74:76:
         26:95:fd:9a:3c:24:aa:27:8a:79:ba:64:e7:f7:ae:e1:c6:f8:
         f1:23:5a:69:c0:a4:86:09:b0:f7:85:70:f6:2a:3a:ca:7b:39:
         35:24:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----