Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/754884E13EC034425C31426A931516BA6FE77FD7.mft
File:                     754884E13EC034425C31426A931516BA6FE77FD7.mft (raw, json)
Hash identifier:          Hiv3Og8Xl5WEHBqyY+GgEwpii9vFWc2aMAOdzDpH1Mg=
Subject key identifier:   58:CB:5A:CD:69:6F:CE:89:96:2F:FA:04:BD:14:53:B2:44:4E:2B:EB
Authority key identifier: 75:48:84:E1:3E:C0:34:42:5C:31:42:6A:93:15:16:BA:6F:E7:7F:D7
Certificate issuer:       /CN=754884E13EC034425C31426A931516BA6FE77FD7
Certificate serial:       0AB90272814E1082A6FF322D81BD22EBB1D2DCFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/754884E13EC034425C31426A931516BA6FE77FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/754884E13EC034425C31426A931516BA6FE77FD7.mft
Manifest number:          DA
Signing time:             Wed 30 Oct 2024 02:34:50 +0000
Manifest this update:     Wed 30 Oct 2024 02:29:50 +0000
Manifest next update:     Thu 31 Oct 2024 03:37:50 +0000
Files and hashes:         1: 3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa (hash: gbGUg3FHyuDFsyRKtNQielFMVbjSnVd3CoYMYYj4fcw=)
                          2: 754884E13EC034425C31426A931516BA6FE77FD7.crl (hash: qMkmMoM7CujUosMERYXELvnE9OPIDOIlhQfeiJFq0Cs=)
                          3: 323830343a373730343a3a2f33322d313238203d3e20323731313439.roa (hash: SozkM1UvsUFR1/0wJXY6uryH1OuW5PVHU5+Fk+Qzly8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b9:02:72:81:4e:10:82:a6:ff:32:2d:81:bd:22:eb:b1:d2:dc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754884E13EC034425C31426A931516BA6FE77FD7
        Validity
            Not Before: Oct 30 02:29:50 2024 GMT
            Not After : Oct 31 03:37:50 2024 GMT
        Subject: CN=58CB5ACD696FCE89962FFA04BD1453B2444E2BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:9f:10:b4:b7:16:3c:4f:d1:e8:6d:57:49:
                    83:61:9d:72:0f:f2:7d:43:07:e8:03:a5:6e:8d:63:
                    56:e9:84:cc:56:50:6f:40:7a:54:0b:34:64:be:43:
                    c8:7a:16:a8:1c:06:44:78:30:25:d6:59:92:8f:17:
                    d7:6b:64:3d:46:00:1d:3c:1c:16:62:1d:59:56:80:
                    b8:88:06:3c:4a:62:e6:1a:7c:1c:ee:a2:e0:93:35:
                    68:5a:19:4e:f3:a9:04:fe:3d:60:e3:e3:33:b1:a6:
                    a8:a4:a2:b2:17:22:10:ee:60:69:94:ea:d0:42:a0:
                    23:b1:c7:4a:19:94:73:5b:79:90:ec:fb:93:71:32:
                    00:37:84:8d:f2:09:9f:64:36:3e:2d:23:54:3e:15:
                    83:fd:ea:f4:73:e0:a6:43:a4:f7:6a:5b:98:b9:26:
                    82:a2:4c:74:ed:ce:28:8f:86:61:d1:dc:98:63:ff:
                    4f:1e:bb:cc:92:b8:60:fa:ad:b2:d8:6c:7a:4b:2c:
                    93:d4:5b:4b:8f:ca:9f:b5:8c:87:d3:0b:b8:1e:c1:
                    be:7b:bf:c7:9d:0f:b0:8d:59:7d:aa:2d:34:65:1d:
                    b9:c8:51:f9:5e:6f:e9:ae:99:dd:be:fb:e5:d3:0a:
                    84:b7:1b:48:7d:99:94:c3:9b:a0:65:12:b4:57:56:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CB:5A:CD:69:6F:CE:89:96:2F:FA:04:BD:14:53:B2:44:4E:2B:EB
            X509v3 Authority Key Identifier:
                keyid:75:48:84:E1:3E:C0:34:42:5C:31:42:6A:93:15:16:BA:6F:E7:7F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/754884E13EC034425C31426A931516BA6FE77FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/754884E13EC034425C31426A931516BA6FE77FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/754884E13EC034425C31426A931516BA6FE77FD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:67:82:d5:6d:76:1c:da:fb:e6:49:b0:72:e8:0d:c2:a1:ce:
         31:ff:b1:e2:01:1f:f2:5b:ce:d1:1c:e7:1a:55:0f:52:5e:97:
         d0:84:32:52:94:0e:01:a8:e4:85:f5:fe:97:a7:72:5d:38:82:
         61:ab:3a:6a:8f:66:43:7f:12:8a:dd:b0:84:55:93:23:2f:9e:
         21:3f:7e:3c:98:51:eb:46:1e:9f:67:e7:f0:72:ef:89:70:92:
         28:f0:40:aa:59:ae:de:b7:2c:19:47:f4:a9:92:21:e1:30:94:
         57:bf:bc:e0:3d:21:87:f2:7d:4c:ea:f0:2a:2e:05:6d:81:b4:
         ee:a3:5d:0e:05:18:e0:78:d3:36:ff:03:3b:fa:da:54:04:a6:
         8a:e9:f2:97:be:5f:c2:db:e9:30:67:76:29:85:84:75:c7:ff:
         50:d2:37:10:0f:32:7d:d7:c5:48:b5:d1:e0:ff:dd:aa:37:9c:
         6c:84:0c:bf:c1:22:51:89:59:28:32:f5:f7:bd:e2:c3:02:f6:
         7b:0a:15:58:3b:3a:5e:63:2d:f3:6a:43:33:55:a0:f6:13:99:
         ea:3e:47:50:4e:b5:10:d7:b7:07:b4:12:cc:4c:88:e4:47:26:
         c4:b9:8b:72:15:85:81:8a:01:a0:6a:0d:cd:51:7e:e0:3f:d0:
         f9:94:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----