Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.mft
File:                     96AFED63B689A791A3CAECEF2B7206AF3008AD7D.mft (raw, json)
Hash identifier:          9VCi9c2dDcOK9V/WyJgEqitdRPA2iajU3WgvTp81CnA=
Subject key identifier:   E6:D8:7C:18:7D:F4:79:D9:40:F0:FB:E6:0A:2D:AC:21:8C:1B:40:0D
Authority key identifier: 96:AF:ED:63:B6:89:A7:91:A3:CA:EC:EF:2B:72:06:AF:30:08:AD:7D
Certificate issuer:       /CN=96AFED63B689A791A3CAECEF2B7206AF3008AD7D
Certificate serial:       671394DEFB959BD276ECAFCABAD09DD385BF92FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.mft
Manifest number:          010A
Signing time:             Fri 18 Oct 2024 08:13:11 +0000
Manifest this update:     Fri 18 Oct 2024 08:08:11 +0000
Manifest next update:     Sat 19 Oct 2024 09:13:11 +0000
Files and hashes:         1: 96AFED63B689A791A3CAECEF2B7206AF3008AD7D.crl (hash: r9/K/KE984Xb7yW6ygqadezhjT3rGhlCngLjL8Vlz8c=)
                          2: 34352e3137372e3130302e302f32322d3234203d3e203133373836.roa (hash: iksbyG0MhuvImG7x9XyeTJxD9yvVdFVEJoRd/NJLbNQ=)
                          3: 323830343a356439303a3a2f33322d3438203d3e203133373836.roa (hash: aKFjS0aubq7RUE1kirHdMG03vvv65Cvhted93rSrqeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:13:94:de:fb:95:9b:d2:76:ec:af:ca:ba:d0:9d:d3:85:bf:92:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96AFED63B689A791A3CAECEF2B7206AF3008AD7D
        Validity
            Not Before: Oct 18 08:08:11 2024 GMT
            Not After : Oct 19 09:13:11 2024 GMT
        Subject: CN=E6D87C187DF479D940F0FBE60A2DAC218C1B400D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:e3:03:12:fa:d5:16:b7:58:b8:2b:b1:6d:
                    0f:ee:01:9b:dc:d2:d1:e6:df:21:8f:72:24:bc:61:
                    d3:9a:e2:55:71:75:38:7d:91:93:43:52:51:bd:90:
                    78:a5:70:9e:56:f0:be:ab:24:1f:9d:8e:78:8a:80:
                    6c:d0:6f:b3:5e:b7:a3:42:49:a4:b8:3e:5b:25:72:
                    49:d5:34:18:56:24:7f:4f:ed:bd:ae:52:4a:a6:cf:
                    ff:dc:e8:c9:1f:51:e8:dc:08:b7:7f:cf:8b:08:3f:
                    af:7b:20:43:78:10:e7:12:ba:35:6a:18:cf:ca:4f:
                    eb:e2:a5:c1:16:0a:02:95:b4:00:92:41:94:e6:b5:
                    f0:c0:57:ef:42:c9:d2:24:5f:54:e2:46:ce:ff:38:
                    ef:0a:cf:ec:58:67:ae:55:f2:e7:13:ba:76:c0:60:
                    51:7d:56:c9:ad:9e:dc:a6:d2:89:c6:e0:cb:a0:d1:
                    e7:b3:84:12:e9:26:5a:e9:09:72:3b:bd:78:4e:df:
                    c4:73:b4:63:b1:04:6c:3c:40:47:c1:b3:bb:9d:e3:
                    71:1f:e3:6e:3e:f5:75:a9:ad:6f:23:a1:17:55:42:
                    41:73:7c:09:d5:5b:64:07:5b:a2:22:c7:c4:28:2c:
                    50:5d:f3:8d:67:fe:f8:6a:98:89:bb:bc:bd:bc:26:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D8:7C:18:7D:F4:79:D9:40:F0:FB:E6:0A:2D:AC:21:8C:1B:40:0D
            X509v3 Authority Key Identifier:
                keyid:96:AF:ED:63:B6:89:A7:91:A3:CA:EC:EF:2B:72:06:AF:30:08:AD:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:95:fb:4c:1c:9b:63:30:f2:36:81:08:32:ba:79:01:9f:91:
         07:63:4f:d6:c1:c0:13:07:6a:94:f7:f4:e8:f1:15:26:28:36:
         c9:ee:de:ce:64:0b:dc:68:2f:f2:bf:60:58:d6:ef:e1:f0:88:
         2d:88:ba:f0:d9:10:38:fd:bf:81:90:26:da:fa:99:d1:fa:0a:
         2b:41:d6:3f:8f:e4:4a:e9:04:d6:9a:4f:d0:97:64:33:dc:c4:
         cb:98:df:64:4d:89:15:47:28:0c:91:3f:fe:07:7b:60:78:e1:
         09:3f:2e:0b:6f:81:3a:34:d0:d0:c5:de:be:cf:25:a7:29:41:
         91:42:2b:53:cd:9c:a5:91:7f:9b:72:55:44:95:3c:f3:3e:c5:
         d3:27:0f:ad:f9:9c:b3:8f:41:cf:8f:5d:a1:6d:ed:2a:7a:2c:
         96:fc:fd:87:93:50:6d:0c:16:7e:1a:c6:77:9e:a1:2c:f6:2b:
         a8:97:52:58:d0:0a:3b:b0:52:07:e3:e3:03:6a:93:08:f6:bc:
         9b:a8:7c:70:6a:eb:47:fd:cd:b1:19:ec:d6:8d:a2:b2:9f:2b:
         54:61:8b:1f:2a:87:0c:2b:15:e0:4a:39:6d:d3:ec:47:26:49:
         62:dc:6d:0e:75:ff:2c:44:74:9f:92:a4:a9:57:f5:d3:12:3e:
         09:1d:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----