Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/0028F21D33AF48DDC93ED1A2CAC62F155798C15D.mft
File:                     0028F21D33AF48DDC93ED1A2CAC62F155798C15D.mft (raw, json)
Hash identifier:          oMebJg3RkuzVQboaZgxLw+wepd9R6xSKUsl+VKfYtY0=
Subject key identifier:   75:1E:A2:D2:03:8E:BB:98:EE:B0:71:C9:E2:35:04:47:D5:7F:DF:C1
Authority key identifier: 00:28:F2:1D:33:AF:48:DD:C9:3E:D1:A2:CA:C6:2F:15:57:98:C1:5D
Certificate issuer:       /CN=0028F21D33AF48DDC93ED1A2CAC62F155798C15D
Certificate serial:       6118DBAF17728D05D4F7DE8BB029F0E7DC5A643F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0028F21D33AF48DDC93ED1A2CAC62F155798C15D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/0028F21D33AF48DDC93ED1A2CAC62F155798C15D.mft
Manifest number:          A1
Signing time:             Wed 23 Oct 2024 23:05:08 +0000
Manifest this update:     Wed 23 Oct 2024 23:00:08 +0000
Manifest next update:     Fri 25 Oct 2024 01:44:08 +0000
Files and hashes:         1: 0028F21D33AF48DDC93ED1A2CAC62F155798C15D.crl (hash: pHdjwuqCnfFlxMRIY1QarXb2X8HHCl6V+07hjrfc3PI=)
                          2: 323830343a366535303a3a2f33322d3333203d3e20323730353838.roa (hash: 2QU65Dk2+twLk/sYfmm62KbKJKHs8KVnvMFUgXfwWmU=)
                          3: 3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa (hash: +gcKSUlVrpuy6arZuLAYxCJL+HjlWR5dQWBWeX+cc1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:18:db:af:17:72:8d:05:d4:f7:de:8b:b0:29:f0:e7:dc:5a:64:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0028F21D33AF48DDC93ED1A2CAC62F155798C15D
        Validity
            Not Before: Oct 23 23:00:08 2024 GMT
            Not After : Oct 25 01:44:08 2024 GMT
        Subject: CN=751EA2D2038EBB98EEB071C9E2350447D57FDFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:e7:32:ed:07:fe:02:6d:cb:de:23:e8:df:
                    b8:36:b2:18:04:85:d1:25:b3:2a:78:6a:43:2b:e8:
                    a9:48:5d:c0:39:0a:58:10:ed:98:12:b8:fe:5c:2d:
                    29:ab:a7:25:d2:d3:40:b5:04:f8:c5:19:49:65:12:
                    9e:d3:83:dd:f2:ef:10:78:68:c1:83:3c:4c:0f:77:
                    8b:dd:86:49:59:b3:4f:54:fb:b3:23:fe:9d:41:d7:
                    d2:a1:ea:56:57:47:a2:01:d4:d9:34:f2:94:be:81:
                    f1:f0:63:54:99:54:0e:db:2d:71:76:7e:f4:66:12:
                    64:90:2d:a1:f6:bc:ab:b8:c8:cd:77:f9:88:f1:34:
                    14:e4:a5:76:72:ae:08:23:3c:d8:70:36:d1:1d:d2:
                    33:94:88:14:5d:f3:fa:51:25:1f:a4:3d:8f:4d:19:
                    c2:9f:fa:dd:26:46:82:7b:50:8a:6b:34:d6:7d:74:
                    24:d9:d5:95:b9:4a:69:3c:62:d4:ca:3d:d0:95:71:
                    27:11:f8:5c:e1:51:d6:5f:a2:03:4a:1d:b5:2b:c7:
                    f1:fb:b4:48:c5:7b:36:37:42:5c:9c:6c:95:25:9a:
                    68:80:7e:18:25:ae:5b:d4:18:b2:54:36:3e:80:80:
                    e5:b3:8d:5a:bc:7a:a1:dc:ef:66:04:72:2d:5e:5f:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1E:A2:D2:03:8E:BB:98:EE:B0:71:C9:E2:35:04:47:D5:7F:DF:C1
            X509v3 Authority Key Identifier:
                keyid:00:28:F2:1D:33:AF:48:DD:C9:3E:D1:A2:CA:C6:2F:15:57:98:C1:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/0028F21D33AF48DDC93ED1A2CAC62F155798C15D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0028F21D33AF48DDC93ED1A2CAC62F155798C15D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/0028F21D33AF48DDC93ED1A2CAC62F155798C15D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:e8:a4:51:b3:31:d6:45:6a:11:bc:4e:1c:88:bb:0f:29:
         45:3a:36:87:3f:62:ee:c3:67:a2:96:3d:31:31:6c:c4:0e:f3:
         b6:61:5e:61:13:ec:3c:75:43:b3:c2:6a:8f:3d:12:00:b5:00:
         15:44:e2:a4:9a:60:57:0b:bc:10:e0:90:b6:c4:14:84:93:cd:
         2c:b1:b7:82:1c:c6:0f:62:e9:dc:7e:c2:64:41:7c:cb:c6:fa:
         3b:97:23:49:d6:15:d3:ae:31:5c:8a:cc:3c:c9:58:df:98:da:
         b8:5b:2f:f0:4a:59:bb:96:1d:64:83:41:71:b2:47:0d:f8:30:
         0f:82:7e:b6:80:23:37:3d:87:c0:6c:7c:dc:33:9e:60:7a:a3:
         5d:28:30:c7:69:40:91:19:41:42:87:12:bd:ec:ef:b0:25:79:
         53:97:1c:20:01:93:eb:01:ae:ca:17:bd:33:e8:d7:97:39:d0:
         0a:e8:3a:ab:67:20:c5:f3:e2:22:08:f7:6d:64:9f:49:7b:35:
         3c:1a:73:f8:ff:be:bd:b6:68:ec:90:ef:bd:cf:8e:f8:52:40:
         21:69:0c:e1:72:71:76:5d:79:76:d6:d6:2f:a5:f5:ee:33:37:
         c9:53:e3:c8:7c:10:88:38:d8:b1:87:3e:ec:65:4e:f2:82:bb:
         7e:ff:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----