Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/26E4DBF7EA004FC1585051F89749136C28953EC1.mft
File:                     26E4DBF7EA004FC1585051F89749136C28953EC1.mft (raw, json)
Hash identifier:          nDFJ/DMxPfbVS1ItZb1s4jBc7JbkXFy0ItvyVMGuxZQ=
Subject key identifier:   EA:BD:96:00:05:B3:DD:4C:13:8B:18:2D:90:15:3D:46:E4:D3:B2:A4
Authority key identifier: 26:E4:DB:F7:EA:00:4F:C1:58:50:51:F8:97:49:13:6C:28:95:3E:C1
Certificate issuer:       /CN=26E4DBF7EA004FC1585051F89749136C28953EC1
Certificate serial:       0C6C84ED33C16BDE81679C46F73922C315A06C26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E4DBF7EA004FC1585051F89749136C28953EC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/26E4DBF7EA004FC1585051F89749136C28953EC1.mft
Manifest number:          22
Signing time:             Wed 29 May 2024 07:03:47 +0000
Manifest this update:     Wed 29 May 2024 06:58:47 +0000
Manifest next update:     Thu 30 May 2024 08:24:47 +0000
Files and hashes:         1: 323830343a313062343a3a2f33322d3438203d3e20323633363435.roa (hash: cZvtWlbxgC6MB9idaAFT1QRaD+cl2evyJBECU5ztIqU=)
                          2: 26E4DBF7EA004FC1585051F89749136C28953EC1.crl (hash: N0XFGH9ZugkE482/qQoxP/8WpJCNvK2jXxpolehhpnY=)
                          3: 3137392e3132372e3234382e302f32312d3234203d3e20323633363435.roa (hash: SQG/4oZX+Y+M4gOnoTUp7PPBPlg3w0nO/7NQP4zuOl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6c:84:ed:33:c1:6b:de:81:67:9c:46:f7:39:22:c3:15:a0:6c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E4DBF7EA004FC1585051F89749136C28953EC1
        Validity
            Not Before: May 29 06:58:47 2024 GMT
            Not After : May 30 08:24:47 2024 GMT
        Subject: CN=EABD960005B3DD4C138B182D90153D46E4D3B2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:15:b2:9d:d0:a5:32:16:22:6c:6b:a5:4c:
                    90:79:68:6a:1b:76:50:ec:b0:c6:dc:ca:e3:d7:5b:
                    3b:76:87:3a:fd:af:98:1d:b9:e3:60:14:b4:53:6c:
                    c3:db:05:0a:63:01:51:96:24:df:2d:75:6c:4b:70:
                    d7:58:df:29:75:eb:21:62:0c:4d:99:e3:7f:d3:91:
                    12:09:33:2d:a2:7b:82:7b:21:31:10:02:f4:e0:43:
                    1f:ac:13:34:73:ca:b3:d1:49:21:67:3c:ac:e9:7b:
                    08:22:47:a8:47:a5:02:8a:7d:67:cf:fd:1a:08:2f:
                    28:35:23:db:ba:96:5b:fa:89:50:d8:f1:24:32:55:
                    de:b3:93:1d:e1:0a:88:f4:08:a8:72:94:22:a7:6a:
                    83:7a:c8:02:64:77:39:b2:5e:a2:13:c6:d2:29:16:
                    b3:fd:b1:9a:c7:c4:01:b5:32:70:c3:ff:9e:55:72:
                    bc:8a:10:92:73:25:fb:14:81:77:31:28:75:a2:fa:
                    f1:08:e5:6c:bc:e8:d9:d4:51:5e:df:91:b5:be:d7:
                    3d:e1:41:c7:26:5f:ab:f4:2f:80:3d:23:c8:9a:f3:
                    49:43:f5:12:3a:c3:1a:f0:54:3d:7a:8a:dd:75:74:
                    30:d0:92:12:30:5d:e9:7f:98:e7:4c:24:a9:2b:48:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BD:96:00:05:B3:DD:4C:13:8B:18:2D:90:15:3D:46:E4:D3:B2:A4
            X509v3 Authority Key Identifier:
                keyid:26:E4:DB:F7:EA:00:4F:C1:58:50:51:F8:97:49:13:6C:28:95:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/26E4DBF7EA004FC1585051F89749136C28953EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E4DBF7EA004FC1585051F89749136C28953EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/26E4DBF7EA004FC1585051F89749136C28953EC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:10:f6:36:bf:e5:29:b0:e1:26:04:fa:32:05:3a:a6:4f:
         8e:b8:bd:3a:a7:79:d5:61:53:4f:68:18:9c:ee:f0:c6:d4:cd:
         d1:c9:59:76:07:31:7e:9d:5c:d7:c4:4b:ce:f5:a0:6d:69:6c:
         cf:b0:d0:f1:72:da:db:bf:9a:9c:37:ce:08:78:78:3c:a9:7d:
         36:c7:98:e3:24:f7:5c:d9:43:f2:14:35:04:62:83:8a:5a:40:
         cb:0c:33:12:76:ad:28:b3:7c:58:da:0e:fa:d8:62:26:a2:8b:
         7b:4e:c9:8d:98:7a:f5:db:70:a5:35:6e:c6:4b:7b:c7:26:f1:
         96:bf:38:85:82:15:96:3e:d1:e0:55:78:20:73:45:aa:81:9b:
         81:18:3a:03:c3:6f:f1:17:13:7c:40:06:ad:eb:78:c7:53:86:
         f8:77:29:3b:cf:5c:00:1f:88:81:f7:22:30:9c:64:7b:42:08:
         37:67:b4:08:1b:0c:03:14:04:6e:e1:f0:f3:b0:f4:78:3e:42:
         fd:5b:d3:b8:97:8b:57:43:d5:58:f4:ff:29:51:1d:cd:a4:bb:
         8c:5a:58:a5:d6:80:b0:3c:58:69:41:3e:5e:08:2e:aa:c8:bd:
         c6:92:bb:be:bb:66:4c:11:22:38:2c:d7:49:bb:44:e8:92:40:
         60:cf:b0:bd
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUDGyE7TPBa96BZ5xG9zkiwxWgbCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZFNERCRjdFQTAwNEZDMTU4NTA1MUY4OTc0OTEzNkMy
ODk1M0VDMTAeFw0yNDA1MjkwNjU4NDdaFw0yNDA1MzAwODI0NDdaMDMxMTAvBgNV
BAMTKEVBQkQ5NjAwMDVCM0RENEMxMzhCMTgyRDkwMTUzRDQ2RTREM0IyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5hWyndClMhYibGulTJB5aGob
dlDssMbcyuPXWzt2hzr9r5gdueNgFLRTbMPbBQpjAVGWJN8tdWxLcNdY3yl16yFi
DE2Z43/TkRIJMy2ie4J7ITEQAvTgQx+sEzRzyrPRSSFnPKzpewgiR6hHpQKKfWfP
/RoILyg1I9u6llv6iVDY8SQyVd6zkx3hCoj0CKhylCKnaoN6yAJkdzmyXqITxtIp
FrP9sZrHxAG1MnDD/55VcryKEJJzJfsUgXcxKHWi+vEI5Wy86NnUUV7fkbW+1z3h
QccmX6v0L4A9I8ia80lD9RI6wxrwVD16it11dDDQkhIwXel/mOdMJKkrSAATAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU6r2WAAWz3UwTixgtkBU9RuTTsqQwHwYDVR0j
BBgwFoAUJuTb9+oAT8FYUFH4l0kTbCiVPsEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jczdNTHNLTlZyTXNmR2hCQWVlRHVOSm1WRzZnWWkxVDU4aVd5Q1V6RFpY
LzAvMjZFNERCRjdFQTAwNEZDMTU4NTA1MUY4OTc0OTEzNkMyODk1M0VDMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNkU0REJGN0VBMDA0RkMxNTg1
MDUxRjg5NzQ5MTM2QzI4OTUzRUMxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Nz
N01Mc0tOVnJNc2ZHaEJBZWVEdU5KbVZHNmdZaTFUNThpV3lDVXpEWlgvMC8yNkU0
REJGN0VBMDA0RkMxNTg1MDUxRjg5NzQ5MTM2QzI4OTUzRUMxLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
pr0Q9ja/5Smw4SYE+jIFOqZPjri9Oqd51WFTT2gYnO7wxtTN0clZdgcxfp1c18RL
zvWgbWlsz7DQ8XLa27+anDfOCHh4PKl9NseY4yT3XNlD8hQ1BGKDilpAywwzEnat
KLN8WNoO+thiJqKLe07JjZh69dtwpTVuxkt7xybxlr84hYIVlj7R4FV4IHNFqoGb
gRg6A8Nv8RcTfEAGret4x1OG+HcpO89cAB+IgfciMJxke0IIN2e0CBsMAxQEbuHw
87D0eD5C/VvTuJeLV0PVWPT/KVEdzaS7jFpYpdaAsDxYaUE+Xgguqsi9xpK7vrtm
TBEiOCzXSbtE6JJAYM+wvQ==
-----END CERTIFICATE-----