Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.mft
File:                     F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.mft (raw, json)
Hash identifier:          kNCvR1j5Bn1xyivnxmpOO/15Sm3+hvVpQh3rb8hvanc=
Subject key identifier:   F8:A6:8B:58:65:13:B0:D5:2D:7F:3E:93:74:3F:55:91:34:24:8B:54
Authority key identifier: F2:CD:5F:ED:74:1C:A6:B9:50:C2:51:A9:88:CD:CE:78:F9:6E:DB:AB
Certificate issuer:       /CN=F2CD5FED741CA6B950C251A988CDCE78F96EDBAB
Certificate serial:       5A42E0A477C0485A2703F692D57E5C956D176D71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.mft
Manifest number:          52
Signing time:             Mon 24 Jun 2024 20:26:26 +0000
Manifest this update:     Mon 24 Jun 2024 20:21:26 +0000
Manifest next update:     Tue 25 Jun 2024 21:50:26 +0000
Files and hashes:         1: 3137372e3132342e31362e302f32322d3234203d3e20323632333132.roa (hash: zKc3v8N6fBjCkJk2vqc4iuWPBgbVzszhKju1gUResg4=)
                          2: F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.crl (hash: MgnCqnNO9QA8tXpGIwLDxxfaCY5hR8WwAZ9Pd6/GoJk=)
                          3: 323830343a333730303a3a2f33322d3338203d3e20323632333132.roa (hash: Z3Ga/+4VSpfdaZojElgKXEBQ71gMr0SmSDZ+iVXeSC8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:42:e0:a4:77:c0:48:5a:27:03:f6:92:d5:7e:5c:95:6d:17:6d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CD5FED741CA6B950C251A988CDCE78F96EDBAB
        Validity
            Not Before: Jun 24 20:21:26 2024 GMT
            Not After : Jun 25 21:50:26 2024 GMT
        Subject: CN=F8A68B586513B0D52D7F3E93743F559134248B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:51:3b:8c:d5:c2:92:27:3c:f7:49:43:4f:
                    9e:01:14:61:87:f7:13:5e:a8:a6:16:57:26:c5:5c:
                    e9:19:4d:7b:79:e5:e6:04:5f:37:27:fe:d5:e5:ae:
                    3f:c4:89:94:e4:cd:3f:8e:60:0c:cd:11:e9:32:a9:
                    92:c5:5d:f4:eb:70:7a:0c:12:6e:fc:ee:ca:c2:46:
                    98:2c:79:c8:10:2d:fd:76:57:c1:5d:6b:99:dc:81:
                    99:08:83:7c:b4:67:96:3c:e5:b6:c7:0e:d8:39:29:
                    97:71:0a:2d:ee:ec:71:8b:c0:cc:5a:3a:6b:ab:4f:
                    aa:26:54:3d:c4:f6:90:52:d4:aa:83:6a:b3:6c:f0:
                    e8:e2:2d:5d:11:55:b3:8f:bb:39:03:30:5e:0f:37:
                    3a:17:96:7e:1b:71:f5:b8:28:b8:96:c7:87:0d:b2:
                    c4:98:dc:29:16:c9:36:e1:33:06:df:f6:ef:d9:8f:
                    39:d4:16:ea:e2:52:2c:d6:03:d6:e4:3c:f3:c0:36:
                    d8:2c:80:e4:17:37:7a:44:51:56:bc:d3:f2:75:a1:
                    55:e9:9d:d7:14:12:3b:0f:c9:a0:ce:fc:53:b1:06:
                    22:5b:ce:76:f8:8e:f4:95:c7:96:c8:1a:82:2e:12:
                    fb:26:18:57:4a:61:8e:36:ef:d4:fb:d2:63:3a:30:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A6:8B:58:65:13:B0:D5:2D:7F:3E:93:74:3F:55:91:34:24:8B:54
            X509v3 Authority Key Identifier:
                keyid:F2:CD:5F:ED:74:1C:A6:B9:50:C2:51:A9:88:CD:CE:78:F9:6E:DB:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:d6:b0:3d:1f:a6:8d:7d:90:13:cf:a4:86:46:d8:b4:cb:
         33:92:e6:20:77:17:b3:be:2e:6e:cb:56:ba:78:33:f9:00:61:
         c5:fd:8a:f8:ad:85:4b:5b:8d:1e:c2:36:df:45:e4:1c:a3:40:
         17:d3:7a:9c:86:d4:1f:1b:f2:da:ab:3c:21:d4:96:6f:4e:2c:
         4a:cc:5c:6d:64:17:a4:3c:f1:b5:e0:17:de:c9:18:26:b8:8d:
         da:d4:56:8f:bc:e0:b2:0c:32:b9:4b:da:0b:55:7b:6c:28:67:
         4c:ff:fe:b9:5a:73:b4:35:aa:4b:03:04:29:bb:e3:d9:6d:9d:
         3e:5a:68:b7:53:ea:0a:04:f2:bb:8d:ea:83:02:15:1b:95:ee:
         9f:7d:1c:b4:1d:1a:2b:5d:ab:17:27:5f:49:7d:b5:40:e2:19:
         13:fe:98:6a:2f:5e:ad:da:61:d8:ef:2e:a4:03:21:ce:fc:c7:
         3a:c8:b3:2a:0a:a0:d3:3e:cc:1d:a7:be:81:3c:17:be:6a:d2:
         af:b6:92:93:20:ed:61:30:b4:17:7a:f4:81:1c:7d:4a:c1:96:
         70:12:06:43:bc:a3:f0:47:b5:5e:27:e0:1a:5e:31:6d:fd:25:
         4b:99:a2:c9:65:ab:97:83:61:ed:57:1a:89:f2:2b:bd:44:4c:
         34:45:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----