Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2963428E665498CFA92700EDEAD7F24E4FCD089C.mft
File:                     2963428E665498CFA92700EDEAD7F24E4FCD089C.mft (raw, json)
Hash identifier:          xOwQ88cICdU1gWIcZDjrz6MTQ+i4CS3iSB1gzmqppbg=
Subject key identifier:   B8:68:8B:4B:59:A5:0B:FD:6D:B4:EA:36:18:DF:4E:6E:C6:DC:D2:5F
Authority key identifier: 29:63:42:8E:66:54:98:CF:A9:27:00:ED:EA:D7:F2:4E:4F:CD:08:9C
Certificate issuer:       /CN=2963428E665498CFA92700EDEAD7F24E4FCD089C
Certificate serial:       45340C6EA69061D495AD2F0A57AEF7B529A61731
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2963428E665498CFA92700EDEAD7F24E4FCD089C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2963428E665498CFA92700EDEAD7F24E4FCD089C.mft
Manifest number:          48
Signing time:             Fri 26 Jul 2024 16:52:14 +0000
Manifest this update:     Fri 26 Jul 2024 16:47:14 +0000
Manifest next update:     Sat 27 Jul 2024 17:06:14 +0000
Files and hashes:         1: 34352e3136362e34382e302f32322d3332203d3e20323637393532.roa (hash: WX7EnmQwIvIXuOIh1m+Helad++veg3onLyyj6RGXAL0=)
                          2: 2963428E665498CFA92700EDEAD7F24E4FCD089C.crl (hash: yYfQNiKv9VjitvUVeH/Trov1GHoA3aqdg2SyXw5gSIo=)
                          3: 323830343a353562383a3a2f33322d313238203d3e20323637393532.roa (hash: mqbU+3wkTTizYmc4x7PBiXRmhAC/dT2WnbPQhVf5qTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:34:0c:6e:a6:90:61:d4:95:ad:2f:0a:57:ae:f7:b5:29:a6:17:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2963428E665498CFA92700EDEAD7F24E4FCD089C
        Validity
            Not Before: Jul 26 16:47:14 2024 GMT
            Not After : Jul 27 17:06:14 2024 GMT
        Subject: CN=B8688B4B59A50BFD6DB4EA3618DF4E6EC6DCD25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:47:2b:f8:71:24:c2:13:d9:56:4d:8f:c0:
                    c5:a0:35:e2:72:91:2c:43:a2:df:80:ea:64:6a:c1:
                    0b:08:47:a8:40:62:36:7c:3c:10:31:b1:8e:3f:cf:
                    2b:fb:ee:09:26:05:7f:97:c9:da:2d:ff:49:f4:44:
                    12:cb:5f:49:cb:f9:6e:80:70:75:a7:1a:e9:05:fc:
                    66:65:d3:be:ee:e1:41:fa:26:76:c2:65:15:07:a8:
                    e2:2b:84:99:ea:10:3f:12:2a:94:a7:56:45:61:4e:
                    6b:41:99:b7:95:fc:26:f6:67:42:e3:2f:91:d0:42:
                    8f:fd:00:89:c7:17:6d:0e:05:45:18:96:f6:dc:b6:
                    16:c0:3c:75:30:9f:3f:b0:ec:2e:1c:bf:7b:68:10:
                    e3:b6:15:97:d0:a5:2d:2f:df:34:0e:2e:0c:59:93:
                    52:95:a5:d5:d8:0d:74:88:8e:af:c5:2f:c3:8d:a1:
                    fa:91:eb:5b:db:b0:e7:99:09:86:80:9b:1c:2d:0e:
                    34:ab:67:12:11:51:68:15:72:d2:77:fd:16:b5:aa:
                    d5:8e:71:07:8c:13:8a:3c:54:34:d1:00:84:4e:56:
                    e0:ad:ef:03:b8:f8:68:d3:28:41:76:4c:0b:99:ad:
                    3a:61:27:2d:5d:4a:ad:7f:92:a1:7b:9a:92:de:5c:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:8B:4B:59:A5:0B:FD:6D:B4:EA:36:18:DF:4E:6E:C6:DC:D2:5F
            X509v3 Authority Key Identifier:
                keyid:29:63:42:8E:66:54:98:CF:A9:27:00:ED:EA:D7:F2:4E:4F:CD:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2963428E665498CFA92700EDEAD7F24E4FCD089C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2963428E665498CFA92700EDEAD7F24E4FCD089C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2963428E665498CFA92700EDEAD7F24E4FCD089C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:69:e8:fd:02:c1:4f:67:59:cb:25:44:90:15:b8:de:0f:
         e6:20:c7:ee:bc:5e:e5:25:6d:1a:5b:2f:d9:e1:02:21:1b:aa:
         bb:d9:3c:d0:05:df:2d:1d:cc:01:c3:d9:6f:89:27:e1:71:32:
         9d:77:0b:7a:ae:49:2d:31:1a:04:e7:04:9e:41:01:c3:82:9b:
         4f:80:d4:90:71:9f:da:01:2a:a6:1c:5f:13:26:e8:80:e0:96:
         d8:fc:11:97:da:82:1e:65:c3:7c:cf:5e:01:d3:be:c0:c6:2a:
         25:33:6a:a6:a2:6a:04:c0:57:bb:e3:ab:e9:76:60:4a:f0:16:
         d0:76:31:b1:0b:15:37:ad:82:e8:8e:2c:45:74:fa:df:c8:0b:
         e4:5d:d5:b2:91:33:c7:e1:48:72:d8:b3:41:1f:f5:1b:c3:8b:
         5c:7f:e2:d8:63:33:72:f5:ef:d9:3c:fc:3a:a7:7e:82:67:76:
         f2:67:18:b6:ae:e6:1a:c4:28:16:31:dc:84:17:68:7c:8d:da:
         ed:f6:8a:88:e2:1f:10:2d:7b:c4:fc:d5:0d:e3:f0:70:f2:81:
         0d:25:27:9d:ea:be:c7:cd:ce:4c:23:74:1e:42:5c:e5:55:6d:
         85:7f:4d:0b:ca:aa:e2:eb:73:1e:2d:58:7c:83:88:6c:ff:2a:
         b3:25:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----