Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft
File:                     30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft (raw, json)
Hash identifier:          NFWBG7pLgc/kr84jZ4T1zQ9WsgB2dlW+o93JwKsu6xM=
Subject key identifier:   FE:B7:7A:D6:8F:4B:20:77:D6:F1:79:F9:9C:7C:58:E4:1A:E2:7C:41
Authority key identifier: 30:BB:88:BC:1F:4F:C8:5B:1F:7A:2E:DB:16:61:7D:87:C2:AB:67:13
Certificate issuer:       /CN=30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713
Certificate serial:       319808788D3C9C52D9BC8F24946A27FFF59DC34F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft
Manifest number:          95
Signing time:             Wed 17 Jan 2024 21:30:31 +0000
Manifest this update:     Wed 17 Jan 2024 21:25:31 +0000
Manifest next update:     Fri 19 Jan 2024 00:28:31 +0000
Files and hashes:         1: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: oMIfY7KdesdOgaGqi+jwJCs3n3yQA791v/op8ZLfh24=)
                          2: 30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.crl (hash: 7wy89mo195LsUb+pUMc4rMZdQAOpWiu8i0Daec9C6yU=)
                          3: 323830343a356161633a3a2f33322d3332203d3e20323638373838.roa (hash: CfvlxLLxde3TUfbT/l+f5JjYZmH8QcKPgeD5wLR45V4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:98:08:78:8d:3c:9c:52:d9:bc:8f:24:94:6a:27:ff:f5:9d:c3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713
        Validity
            Not Before: Jan 17 21:25:31 2024 GMT
            Not After : Jan 19 00:28:31 2024 GMT
        Subject: CN=FEB77AD68F4B2077D6F179F99C7C58E41AE27C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:9c:fb:13:07:3b:07:cb:17:af:ba:a4:c9:
                    27:6c:14:61:e8:44:57:68:4a:33:1b:df:11:f2:b1:
                    80:c4:4b:e6:24:4c:6c:82:b6:35:73:50:36:37:b6:
                    a8:9e:01:fc:d0:a0:79:d4:61:ed:98:25:8c:64:10:
                    b3:0c:6a:1c:80:1b:46:77:3d:3d:e6:e6:6a:37:5b:
                    d7:e8:37:b4:65:ab:57:e8:fd:82:4f:c3:85:42:e3:
                    c7:d3:ca:e8:ab:04:0a:36:b6:e5:5c:1c:da:1c:1c:
                    af:4e:7a:9e:e3:61:70:1f:9d:55:f6:35:54:fe:66:
                    85:19:80:03:bf:26:ff:00:c3:02:af:9c:67:08:e2:
                    3b:5d:90:47:c0:53:31:da:8a:a1:90:5b:95:a1:97:
                    9e:2a:9a:f2:57:49:bf:07:2e:3c:3b:ad:7e:c7:26:
                    f9:4a:c6:f0:36:ed:69:e6:a0:d8:cc:29:4b:be:55:
                    13:f8:97:55:73:99:24:ee:b9:06:22:d7:10:b9:fa:
                    5d:76:51:3f:ff:c3:ce:eb:a2:f4:24:b6:aa:24:9a:
                    2d:b3:f8:cf:fd:5c:ae:63:d3:6c:cf:a4:9d:81:b9:
                    2b:ab:4c:83:f3:57:28:a1:69:6f:c2:b2:cb:16:75:
                    00:c0:b3:4a:95:14:98:b1:ce:ed:6d:ac:42:50:38:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B7:7A:D6:8F:4B:20:77:D6:F1:79:F9:9C:7C:58:E4:1A:E2:7C:41
            X509v3 Authority Key Identifier:
                keyid:30:BB:88:BC:1F:4F:C8:5B:1F:7A:2E:DB:16:61:7D:87:C2:AB:67:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3b:95:3b:ee:97:06:d9:4b:b7:0f:c4:c7:11:cd:d2:6b:29:
         35:54:b0:4b:5a:cc:02:64:a7:0d:8a:d9:01:f2:2e:a6:68:42:
         af:0d:f7:5a:5f:80:be:f9:36:8a:3d:4f:f2:22:cc:04:39:96:
         0b:0d:ff:bc:f2:26:31:14:0b:75:75:ba:04:95:dc:40:3c:38:
         9c:ac:51:56:33:9e:2e:62:3d:2e:6a:28:9a:af:82:88:35:53:
         3e:aa:86:d8:34:7a:10:59:af:9c:0a:3c:a9:11:4b:08:70:df:
         10:9e:d6:e8:ea:af:2c:2f:e2:22:1c:2e:f7:dd:43:aa:24:02:
         f6:4e:eb:81:22:90:f2:46:1d:51:c5:47:1f:62:a7:e7:d7:9c:
         f4:6d:9d:ab:d9:a1:29:86:e6:4f:9d:ce:02:9e:77:b3:8b:fc:
         4d:74:02:f1:de:f0:86:32:cb:8b:0c:ba:7f:fe:16:bf:2c:55:
         b6:62:dd:0d:22:ef:c9:b9:b5:75:16:4e:34:9e:15:73:b4:3d:
         38:a3:8f:21:b2:c8:58:a9:83:dc:1f:82:aa:9d:0f:45:8c:da:
         9f:29:f4:13:4e:d6:0f:c1:83:95:36:cc:74:9f:3f:8c:50:08:
         0b:46:34:c2:33:15:b0:46:a0:42:6d:d5:13:b2:30:45:a1:26:
         c3:74:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----