Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft
File:                     DDF05B9E6D023218FFA149930FC0EB8E62772690.mft (raw, json)
Hash identifier:          djyLgZa0PEyc2KcyLGtRsEKf/QNSsRL/Nl3EGp+D6nE=
Subject key identifier:   1B:62:6C:22:99:E7:83:DF:0E:DA:11:29:66:B0:C2:8C:6C:FB:BF:17
Authority key identifier: DD:F0:5B:9E:6D:02:32:18:FF:A1:49:93:0F:C0:EB:8E:62:77:26:90
Certificate issuer:       /CN=DDF05B9E6D023218FFA149930FC0EB8E62772690
Certificate serial:       790ED09C0A1F575971A07983C6E3C913A733D715
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft
Manifest number:          3F
Signing time:             Mon 29 Jan 2024 20:37:41 +0000
Manifest this update:     Mon 29 Jan 2024 20:32:41 +0000
Manifest next update:     Tue 30 Jan 2024 23:02:41 +0000
Files and hashes:         1: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: zg1A82tMuaPrNdO25RI7wsohb+idq9lALMj6YZ1Fj3M=)
                          2: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: 8PvLykYFGWNetz/G7y//H7hbVdNKRVVCsO4F3lma7Ik=)
                          3: DDF05B9E6D023218FFA149930FC0EB8E62772690.crl (hash: 6Qb3lRaqVHuTgWAxvl6jTwf56Ddma35ggshOr+6WimM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0e:d0:9c:0a:1f:57:59:71:a0:79:83:c6:e3:c9:13:a7:33:d7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF05B9E6D023218FFA149930FC0EB8E62772690
        Validity
            Not Before: Jan 29 20:32:41 2024 GMT
            Not After : Jan 30 23:02:41 2024 GMT
        Subject: CN=1B626C2299E783DF0EDA112966B0C28C6CFBBF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:dd:21:e4:cb:be:c4:25:dc:c7:89:39:6c:
                    e9:15:76:85:8a:23:23:8b:42:bd:94:98:0c:6f:df:
                    10:e3:b0:77:cd:4d:dd:e3:e7:1e:47:09:16:22:0a:
                    0d:13:c2:0c:8c:cb:c2:48:dd:ae:7f:0b:a9:db:c2:
                    e6:f7:eb:0d:2a:0e:78:a1:e0:c1:9e:41:5a:f8:49:
                    bd:e0:25:79:f0:d8:04:d6:1a:72:1f:84:67:b5:9f:
                    53:c4:92:05:51:94:e5:71:06:78:4a:43:8e:fa:2c:
                    d5:ba:5d:2c:96:b6:2c:ae:cc:4e:a3:89:30:73:18:
                    ec:18:57:18:28:c7:f9:1d:53:85:8a:f6:0e:3c:36:
                    e1:36:d9:1b:cb:e7:ea:63:ab:e4:b1:12:3b:f4:02:
                    15:40:4f:d5:5a:67:b3:44:89:28:23:1d:0a:1e:56:
                    39:83:b5:71:0f:57:81:ae:26:cf:05:ff:63:f8:3c:
                    0e:e9:9b:9e:8a:2b:54:4f:48:8a:db:18:66:8b:e9:
                    30:fc:db:5b:c3:93:96:73:c3:35:3b:58:ff:a0:2d:
                    b9:8c:b6:d9:7f:af:79:ad:14:4f:fe:4b:b1:10:c8:
                    34:3a:81:5d:2e:00:a8:9d:ca:b6:f5:02:54:eb:eb:
                    4f:e2:6e:a2:59:92:d6:4b:39:59:d7:59:4e:cd:e5:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:62:6C:22:99:E7:83:DF:0E:DA:11:29:66:B0:C2:8C:6C:FB:BF:17
            X509v3 Authority Key Identifier:
                keyid:DD:F0:5B:9E:6D:02:32:18:FF:A1:49:93:0F:C0:EB:8E:62:77:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:25:7a:84:e0:ff:fb:89:59:0c:3c:7d:4b:98:4e:86:d5:
         2c:fe:84:0b:46:8f:fd:3b:ee:04:87:2b:16:28:48:b0:f7:44:
         c1:2c:59:a9:4a:97:b3:19:b0:38:89:14:43:f3:d1:c6:dc:48:
         95:0d:a5:88:b4:3d:e8:10:9d:44:fb:f5:5f:3a:c2:8b:3c:f3:
         d2:36:22:24:8f:a9:a8:e8:19:79:45:b3:86:35:5b:d3:6b:15:
         05:c4:b3:1a:69:20:31:de:c6:d1:97:a1:e1:70:29:a7:81:bb:
         96:60:ff:45:d1:58:87:a8:b5:7a:fe:5b:36:38:44:dc:15:23:
         4d:8c:86:18:7e:11:a7:02:8c:2c:f9:c6:58:09:0d:19:aa:72:
         87:ac:44:76:cb:fb:ea:7d:79:b4:b8:8b:e8:64:04:c4:d5:20:
         e3:30:a4:f8:62:27:94:0d:13:62:c2:f1:ff:91:7b:fb:e8:5e:
         23:a3:4f:f9:23:dc:02:8c:a4:99:f8:b4:f5:02:20:85:e0:0c:
         82:91:b2:94:9c:98:8a:37:2b:be:a7:9b:fb:40:76:e4:4a:21:
         4e:47:e7:b8:37:da:7f:b5:dc:68:07:7e:f6:26:ee:58:0a:f7:
         d4:f8:81:d8:8a:00:2c:13:ab:ff:68:ca:d6:84:10:3a:c6:8b:
         77:00:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----