Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.mft
File:                     2F71AB5CAACB982B46823A90DA691E884C937F54.mft (raw, json)
Hash identifier:          VtxTVT96M2gbgrCGH1WXd41XWHOK/bLrar9zdPBFacw=
Subject key identifier:   8E:36:B3:63:BB:E8:D9:CC:46:49:C6:FA:71:EA:6B:34:D0:A5:77:C3
Authority key identifier: 2F:71:AB:5C:AA:CB:98:2B:46:82:3A:90:DA:69:1E:88:4C:93:7F:54
Certificate issuer:       /CN=2F71AB5CAACB982B46823A90DA691E884C937F54
Certificate serial:       0BD7BDC29D9B5C44EDA0F143A9976FF2968C9779
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F71AB5CAACB982B46823A90DA691E884C937F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.mft
Manifest number:          70
Signing time:             Tue 04 Jul 2023 06:42:38 +0000
Manifest this update:     Tue 04 Jul 2023 06:37:38 +0000
Manifest next update:     Wed 05 Jul 2023 06:54:38 +0000
Files and hashes:         1: 34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa (hash: GRLBIhLolTNoztQoXDErN85cNijcEvH8WJGv06miv6g=)
                          2: 2F71AB5CAACB982B46823A90DA691E884C937F54.crl (hash: VNJTKDY81ABQjCaVD/aYz5IxtS3pQcn86kWvLGq5Qzo=)
                          3: 323830343a353139633a3a2f33322d313238203d3e20323638343635.roa (hash: nTu9P9vSeHBD72p3YfmwOSTDZi1ZP7PqXzO6CP84JX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d7:bd:c2:9d:9b:5c:44:ed:a0:f1:43:a9:97:6f:f2:96:8c:97:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F71AB5CAACB982B46823A90DA691E884C937F54
        Validity
            Not Before: Jul  4 06:37:38 2023 GMT
            Not After : Jul  5 06:54:38 2023 GMT
        Subject: CN=8E36B363BBE8D9CC4649C6FA71EA6B34D0A577C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:c8:d6:d8:e0:ff:7a:bf:a1:26:54:84:ab:
                    11:b6:72:c6:ff:8e:f4:3e:2c:c1:f2:4f:1a:5f:8b:
                    1b:bf:79:18:bc:a1:9d:16:b0:c2:33:bf:a3:cf:8f:
                    87:07:b0:c0:cc:a5:9a:4e:64:c3:09:f7:19:61:cf:
                    7c:0e:4d:bc:e4:f5:64:d8:94:ff:35:a3:a9:95:02:
                    a7:8f:34:db:21:18:2a:00:bd:8c:70:5f:76:ab:3b:
                    2d:39:f6:ff:4c:51:5c:f3:ec:71:82:7e:b5:5f:d7:
                    52:1e:6d:f8:50:88:4f:29:2a:3f:38:53:24:8d:7b:
                    dc:49:d9:af:5b:29:56:0e:bc:71:78:49:fd:93:78:
                    5b:5a:b2:98:b6:53:c6:28:46:dd:34:98:e5:4c:16:
                    ea:32:c6:cb:91:25:46:5f:2a:3e:56:6e:8f:7c:5b:
                    4b:b4:db:cc:da:5f:e3:6d:e3:08:1a:9d:b3:36:fc:
                    06:ef:75:e9:72:38:5e:ed:ff:87:e4:c4:12:fb:f3:
                    71:c8:d6:69:39:93:90:59:e5:2b:a4:3f:14:bf:ca:
                    83:70:10:d3:cb:f5:a8:27:d6:2c:87:53:09:af:c5:
                    9b:41:5c:cb:6e:fb:c7:16:22:63:69:ad:db:00:fe:
                    fb:f1:54:fa:90:1b:d9:0b:b5:11:4e:d3:a7:76:2c:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:36:B3:63:BB:E8:D9:CC:46:49:C6:FA:71:EA:6B:34:D0:A5:77:C3
            X509v3 Authority Key Identifier:
                keyid:2F:71:AB:5C:AA:CB:98:2B:46:82:3A:90:DA:69:1E:88:4C:93:7F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F71AB5CAACB982B46823A90DA691E884C937F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:74:29:0a:d0:cb:c3:98:48:81:1c:ba:96:f5:db:7f:49:d3:
         87:d9:d7:0b:00:20:b7:a6:a2:70:8b:5d:01:7b:52:58:a3:c2:
         8c:27:f1:9a:58:21:e1:20:bc:3f:0b:3c:20:2b:b3:05:f1:9b:
         71:2f:74:c5:9c:e6:4c:05:73:47:0b:0f:0f:df:df:f1:5b:94:
         49:7a:8b:a8:91:ce:94:32:96:09:3e:5a:0a:d7:79:97:d7:e0:
         48:6b:a7:da:8a:35:e1:b1:b1:82:70:58:f3:1d:40:42:3c:f6:
         a2:a3:a5:95:c0:bf:4d:77:b7:32:84:14:2a:e7:af:97:a6:ce:
         d3:f4:26:5f:70:80:b4:48:6b:27:f7:a8:e7:ca:1f:b4:9d:e0:
         b0:6a:19:22:ba:5a:00:d4:0b:a3:b4:48:a3:70:c0:31:f4:26:
         aa:47:09:f8:45:d6:f6:be:02:3a:e6:27:3f:7f:82:ce:8e:a4:
         a1:d3:0a:34:5a:69:76:3f:4d:6e:a5:64:85:16:ef:cf:af:28:
         96:88:57:9e:f7:aa:dd:b8:f4:2d:b0:07:f2:1f:06:cb:70:06:
         d1:d2:2b:11:71:4c:a5:93:c2:5a:22:2f:6f:e8:df:3e:d8:a7:
         67:94:18:42:8e:f7:aa:e2:e2:a7:fe:27:cf:6b:c9:2b:de:43:
         78:cc:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----