Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/970474B9CE8B496D78F2C3EE0924C68FCD29262D.mft
File:                     970474B9CE8B496D78F2C3EE0924C68FCD29262D.mft (raw, json)
Hash identifier:          IY27JfkG4UYedk0UphmscyRQeZ+LInnJhFwPHCzZdS0=
Subject key identifier:   C4:EA:1B:8B:05:3E:F4:83:D3:92:20:84:03:12:4E:67:D2:01:83:35
Authority key identifier: 97:04:74:B9:CE:8B:49:6D:78:F2:C3:EE:09:24:C6:8F:CD:29:26:2D
Certificate issuer:       /CN=970474B9CE8B496D78F2C3EE0924C68FCD29262D
Certificate serial:       76A1BC0A17CE7EE3C4370C4FEEDD556A1E524D2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970474B9CE8B496D78F2C3EE0924C68FCD29262D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/970474B9CE8B496D78F2C3EE0924C68FCD29262D.mft
Manifest number:          E2
Signing time:             Mon 29 Jul 2024 13:00:01 +0000
Manifest this update:     Mon 29 Jul 2024 12:55:01 +0000
Manifest next update:     Tue 30 Jul 2024 14:27:01 +0000
Files and hashes:         1: 3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa (hash: BnE1GUeIWWOo1A+rGMpsHQS+tUdDY6fl/QVf7/iLK1k=)
                          2: 323830343a6166343a3a2f33322d313238203d3e203532393330.roa (hash: cfWEGCl1VvEwyJE05HzfcCeByD2fMQV9wk4oYcbi1zo=)
                          3: 970474B9CE8B496D78F2C3EE0924C68FCD29262D.crl (hash: MxKTxDTjCyYjc1C9kzEwjbyfHW29IGD3chlkgpGTcMA=)
                          4: 3137372e3138352e34382e302f32302d3234203d3e203532393330.roa (hash: JG49He6tR/xbEFjripJfBalnB5WWSs11mHifk/W0/is=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a1:bc:0a:17:ce:7e:e3:c4:37:0c:4f:ee:dd:55:6a:1e:52:4d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970474B9CE8B496D78F2C3EE0924C68FCD29262D
        Validity
            Not Before: Jul 29 12:55:01 2024 GMT
            Not After : Jul 30 14:27:01 2024 GMT
        Subject: CN=C4EA1B8B053EF483D392208403124E67D2018335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b0:88:ae:5b:17:7a:c2:b4:a7:13:11:4e:97:
                    d4:40:ff:29:b2:f3:1b:46:71:ab:6e:76:56:a4:b6:
                    fc:1f:c1:e4:05:22:65:26:e5:0c:ac:8b:e9:b5:f7:
                    b0:06:67:71:ee:97:59:6d:53:e3:ff:b0:0c:66:cd:
                    cc:29:d4:3b:3e:b4:fa:22:5b:4b:65:41:ff:1f:88:
                    15:52:ec:d3:9e:e1:1b:d2:6a:74:a4:fd:49:ca:61:
                    28:66:28:95:f7:3b:38:60:a4:4c:66:36:3b:6d:9d:
                    a5:fa:f6:ca:7c:33:6f:49:0e:69:7c:95:5a:79:03:
                    64:35:1d:62:44:2d:9d:82:83:6d:13:db:dc:21:a0:
                    d6:cd:18:36:77:61:32:0c:bf:c8:fb:fa:b0:69:fc:
                    fa:99:8b:d3:f1:1e:a9:fb:30:d0:21:d4:8e:35:3f:
                    03:65:ac:26:5a:41:6b:78:c1:ae:4f:21:2f:4d:60:
                    45:5b:30:ed:78:90:e0:1f:0b:ee:94:92:2c:e1:4a:
                    a6:bf:a4:f0:2a:1f:b4:d0:4a:df:36:db:e3:42:41:
                    48:c5:58:97:3d:f6:3e:68:77:81:d1:f8:53:95:2a:
                    01:59:9d:bf:f6:10:af:6d:a3:7a:3a:de:02:27:44:
                    02:5d:d1:97:61:09:0e:6a:15:3c:7a:a1:93:4d:7a:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:1B:8B:05:3E:F4:83:D3:92:20:84:03:12:4E:67:D2:01:83:35
            X509v3 Authority Key Identifier:
                keyid:97:04:74:B9:CE:8B:49:6D:78:F2:C3:EE:09:24:C6:8F:CD:29:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/970474B9CE8B496D78F2C3EE0924C68FCD29262D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970474B9CE8B496D78F2C3EE0924C68FCD29262D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/970474B9CE8B496D78F2C3EE0924C68FCD29262D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:84:b1:3e:dd:33:81:3c:95:3f:09:90:67:79:b2:6b:63:90:
         30:c6:36:7c:26:be:5a:d5:66:04:95:76:ec:9b:d8:8f:06:2e:
         b5:49:01:5a:19:d1:b7:53:7a:45:54:74:7c:28:53:c0:80:a9:
         b6:c8:c5:38:38:cf:6f:d8:29:b0:1a:a3:3b:a5:19:e5:f3:4d:
         ad:a3:05:c0:82:48:69:98:2e:f2:4c:66:2b:15:b1:f0:3a:fb:
         95:d2:df:64:80:4d:87:8c:1c:25:b9:77:89:4f:7c:0c:85:34:
         b5:7a:92:7a:84:dd:5a:62:29:70:77:41:14:6d:b3:68:70:80:
         ba:3a:72:38:9b:df:84:f1:63:33:11:7b:ff:6b:60:5f:69:9a:
         bc:0e:22:0d:18:94:e1:75:fe:d2:89:0f:27:44:26:48:6b:23:
         de:11:27:03:7f:53:53:dd:77:a3:bc:4d:99:ff:39:02:da:5c:
         36:af:cd:ae:dd:30:68:8f:6a:9b:42:70:8b:90:d2:db:c9:a1:
         6e:e5:62:15:45:e4:4d:e6:3b:60:7d:fe:37:c1:1e:1b:76:f1:
         a0:40:6f:6a:8b:ad:e9:56:b9:64:44:8f:45:2e:1f:3a:a8:b2:
         c9:49:63:05:34:03:0e:38:ac:21:3f:49:c2:d6:d6:8e:90:f1:
         14:3c:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----