Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2.mft
File:                     085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2.mft (raw, json)
Hash identifier:          M45aEI2Kl2gywl8hT479FuYbUl4ucy/iZpazUlftivY=
Subject key identifier:   42:6F:F1:7F:5E:6E:7C:91:2F:6E:CE:F0:0F:00:77:91:31:46:60:7C
Authority key identifier: 08:5B:CC:A6:55:53:55:8D:F4:8B:DF:BC:1E:85:32:FC:DE:A0:AB:D2
Certificate issuer:       /CN=085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2
Certificate serial:       65D676460EC405353A6934BDAD37279592633E36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2.mft
Manifest number:          42
Signing time:             Sun 14 Jul 2024 22:41:19 +0000
Manifest this update:     Sun 14 Jul 2024 22:36:19 +0000
Manifest next update:     Mon 15 Jul 2024 23:33:19 +0000
Files and hashes:         1: 3137372e38372e3136382e302f32312d3332203d3e203532353833.roa (hash: 8c+EeM2aFno80eMBWMhPVdK+zzOoho5PBaeIjtxYRgY=)
                          2: 3139312e352e37322e302f32312d3332203d3e203532353833.roa (hash: y8+l+2XUa2LRowMfvUA+BbAfoNyB49ZrnkPdJuEdvZk=)
                          3: 085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2.crl (hash: 8S3L1cWwwMnkV/OuLcTKkoVwkka9tqYlNJ4onX/p5fs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d6:76:46:0e:c4:05:35:3a:69:34:bd:ad:37:27:95:92:63:3e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2
        Validity
            Not Before: Jul 14 22:36:19 2024 GMT
            Not After : Jul 15 23:33:19 2024 GMT
        Subject: CN=426FF17F5E6E7C912F6ECEF00F0077913146607C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:35:64:a1:77:79:c7:94:64:ae:4c:b8:94:
                    21:5b:c5:95:90:64:cb:b3:d5:e2:e3:b0:b0:d0:2b:
                    30:07:fb:b5:ee:34:4c:a9:89:23:da:7d:63:67:0e:
                    57:b1:43:ca:9b:c3:6c:a9:38:9f:79:81:2d:42:83:
                    17:c2:c2:18:ff:fb:d4:a4:d6:e6:c2:6c:61:b0:8a:
                    00:43:c0:7a:ae:36:8a:ec:8e:23:db:72:18:0f:86:
                    ce:40:59:fe:29:44:5e:a9:42:c8:73:9b:27:96:e4:
                    d8:8a:84:eb:18:34:6e:f6:be:b2:ab:99:50:ef:5d:
                    96:a7:f4:91:03:a3:5f:de:e9:77:e3:82:32:c3:ca:
                    3a:89:95:8d:20:45:2b:85:f3:8c:71:e6:bb:12:00:
                    96:95:0b:27:cd:84:bf:92:0a:42:03:ad:67:fb:95:
                    3a:89:04:8d:6c:b3:3b:53:cd:95:86:1b:81:df:2a:
                    91:6f:6a:56:5f:3c:64:60:ee:d5:b9:af:37:f7:2e:
                    a8:d7:75:c7:54:6b:3b:24:28:ec:8c:c7:29:cd:3d:
                    02:98:18:3a:15:8c:fb:79:a7:ca:9c:fc:dc:87:d2:
                    0d:9e:b8:da:21:c3:3e:4d:75:b8:e6:78:bb:30:8a:
                    36:d0:a0:8f:8d:b9:1a:73:fe:3a:63:1c:f6:0a:64:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6F:F1:7F:5E:6E:7C:91:2F:6E:CE:F0:0F:00:77:91:31:46:60:7C
            X509v3 Authority Key Identifier:
                keyid:08:5B:CC:A6:55:53:55:8D:F4:8B:DF:BC:1E:85:32:FC:DE:A0:AB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/085BCCA65553558DF48BDFBC1E8532FCDEA0ABD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:83:39:d6:4e:0f:b6:54:0a:f8:87:d2:a6:50:17:dd:75:
         92:11:7d:69:18:45:cc:16:c7:76:12:cf:2f:02:6d:d0:42:b5:
         42:94:ce:6e:d8:ff:45:87:67:7e:1a:b1:af:fc:0e:c3:c1:1b:
         66:53:b8:d2:95:7d:b0:7a:6a:00:fc:72:02:08:f2:3f:fc:01:
         fc:59:c8:5e:25:20:33:28:28:3c:8e:d0:a3:fa:58:f8:cb:e8:
         f4:d1:03:56:9f:d1:9e:61:28:23:f5:3a:bf:d7:06:29:5c:fb:
         fa:c7:63:83:ee:4f:ef:ac:53:d4:72:a8:21:13:d2:3c:56:fd:
         1c:88:0b:ce:b1:0c:66:2a:f9:1c:2e:5f:4b:b5:cf:11:93:d3:
         c4:cc:40:2a:54:40:7b:75:f4:34:12:35:6d:05:d6:91:7c:9f:
         27:07:6e:07:d0:36:81:a8:90:1b:3a:a0:0c:5c:75:0a:23:c6:
         81:8f:a7:c4:3e:6b:8b:4b:aa:db:1c:12:fe:70:73:1b:2c:b0:
         30:03:5a:94:6e:eb:03:d7:9f:15:b1:1e:10:68:15:67:3c:f0:
         38:76:2b:32:70:ae:06:6b:25:56:f1:07:40:b0:ff:7a:61:de:
         f7:1d:f4:d8:9d:bd:f6:e6:a8:fc:4c:02:0d:53:f9:b5:40:3c:
         c7:98:6a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----