Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/C1701C1617832DD377398CFB3509D60E26D87228.mft
File:                     C1701C1617832DD377398CFB3509D60E26D87228.mft (raw, json)
Hash identifier:          LYmvUllH5049VBOwCdkZpsSE1JJ+K4y53xDPUCIvGAs=
Subject key identifier:   2F:9B:27:56:2C:49:63:FC:32:F8:C7:3A:69:59:89:38:A0:15:6C:E7
Authority key identifier: C1:70:1C:16:17:83:2D:D3:77:39:8C:FB:35:09:D6:0E:26:D8:72:28
Certificate issuer:       /CN=C1701C1617832DD377398CFB3509D60E26D87228
Certificate serial:       2AE3AE4D54F7DC84E4F24EC584DAABED25F7162F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1701C1617832DD377398CFB3509D60E26D87228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/C1701C1617832DD377398CFB3509D60E26D87228.mft
Manifest number:          74
Signing time:             Wed 14 Feb 2024 14:50:28 +0000
Manifest this update:     Wed 14 Feb 2024 14:45:28 +0000
Manifest next update:     Thu 15 Feb 2024 14:58:28 +0000
Files and hashes:         1: 3137372e33382e3230382e302f32312d3332203d3e20323632343131.roa (hash: sDv1u2fzJSSpuQj1cWUiYOp5lRcwvyiUbGGREJ6//cw=)
                          2: C1701C1617832DD377398CFB3509D60E26D87228.crl (hash: PiG7IvW9tmLSoZZE6enVzNhJ4FdQKnrsRIVgGki+dbs=)
                          3: 323830343a3737383a3a2f33322d313238203d3e20323632343131.roa (hash: 4EFLoM8C8CtWm/1TIELn8RL3l7u3zjH4TqxxIAawG5U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e3:ae:4d:54:f7:dc:84:e4:f2:4e:c5:84:da:ab:ed:25:f7:16:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1701C1617832DD377398CFB3509D60E26D87228
        Validity
            Not Before: Feb 14 14:45:28 2024 GMT
            Not After : Feb 15 14:58:28 2024 GMT
        Subject: CN=2F9B27562C4963FC32F8C73A69598938A0156CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:61:bb:b1:75:89:ca:bb:24:2b:61:f1:10:
                    c2:5c:56:4a:9c:b2:83:c5:f7:48:b3:1c:d2:61:bf:
                    ae:5b:16:d6:f6:97:d8:2f:12:e2:cd:9d:6d:fd:9f:
                    b4:34:37:8a:78:62:e3:1c:c1:46:a6:75:f0:47:0c:
                    26:e7:1a:bd:e0:69:3a:80:fb:e7:83:f2:b4:a2:db:
                    14:ee:22:d9:3b:db:ea:53:54:eb:d2:b9:e8:0c:62:
                    66:2d:99:77:6c:8a:be:ba:59:5b:59:dc:36:21:08:
                    65:23:b4:62:96:63:cb:96:5a:5c:a8:b5:7f:c5:91:
                    6d:4e:18:55:7c:86:6d:c2:c1:ce:b6:e1:7e:d4:9b:
                    86:2f:ad:aa:02:e7:9f:0b:20:5b:95:1b:d5:48:e4:
                    ab:71:f7:e1:0e:54:74:54:e0:cd:58:03:e2:07:fc:
                    4b:38:59:30:8a:20:ae:6d:2b:e7:19:f4:37:04:d8:
                    cb:9e:31:d9:c0:49:11:29:4a:cb:27:ac:0a:b8:64:
                    3b:d7:99:9e:76:e5:c6:87:cc:e3:45:3e:33:53:d5:
                    97:9d:14:8d:bc:53:c2:a2:d6:ee:a9:fd:02:ad:96:
                    40:f7:a3:ab:a9:a3:7a:d8:fb:0d:61:aa:04:3a:0e:
                    ea:c0:85:6b:dd:75:82:77:cd:17:48:f5:65:84:28:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9B:27:56:2C:49:63:FC:32:F8:C7:3A:69:59:89:38:A0:15:6C:E7
            X509v3 Authority Key Identifier:
                keyid:C1:70:1C:16:17:83:2D:D3:77:39:8C:FB:35:09:D6:0E:26:D8:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/C1701C1617832DD377398CFB3509D60E26D87228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1701C1617832DD377398CFB3509D60E26D87228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/C1701C1617832DD377398CFB3509D60E26D87228.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:f2:64:ec:fd:df:6f:43:38:9f:b1:1c:c3:eb:26:e6:d5:
         48:c4:41:c1:79:c4:7e:bf:9f:4b:70:5c:29:48:b2:0a:99:36:
         2f:cc:01:f0:a4:51:d0:42:f4:31:c6:ec:ca:11:85:18:6b:c9:
         9f:50:b2:9f:4a:36:ef:d6:2a:58:5f:77:f9:32:ca:e7:eb:94:
         19:b0:e1:c3:4f:9e:a1:25:c3:0a:0c:91:2a:f2:00:f8:66:fe:
         d1:02:ea:5c:55:3b:d6:23:8e:81:41:9e:87:51:00:74:75:7f:
         f9:57:df:3b:34:55:39:92:a1:d0:32:de:ef:43:3a:e7:6f:fd:
         ae:6c:3a:76:73:4d:75:41:1d:33:66:de:ed:23:3f:5e:b3:d2:
         b9:54:97:03:03:db:dd:50:7e:13:62:71:81:ae:ab:86:b4:13:
         0f:21:e7:84:13:bd:46:47:2c:b0:35:0d:56:8d:6f:57:3d:3b:
         a1:3a:61:b4:dd:51:b4:91:82:60:40:be:ea:4c:61:8b:24:b2:
         cb:66:f6:9b:fe:ae:6a:0d:fa:32:4f:11:6c:28:06:98:3f:15:
         19:3d:1d:98:b2:9d:e9:58:7a:40:fa:8a:0a:6c:50:6d:3d:c0:
         55:74:cf:73:41:34:e7:da:48:48:0e:6f:fa:1c:55:2e:ca:1e:
         58:09:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----