Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/4BD815496A29ACD5D24059D50295D687057A0AAF.mft
File:                     4BD815496A29ACD5D24059D50295D687057A0AAF.mft (raw, json)
Hash identifier:          5/ui1ECPQHOoazzhpcq4cpIMJGvELTH0p31MiCELLqA=
Subject key identifier:   3D:8E:BD:78:6C:25:22:CE:00:6B:32:35:2C:67:79:A3:C8:1A:D8:8B
Authority key identifier: 4B:D8:15:49:6A:29:AC:D5:D2:40:59:D5:02:95:D6:87:05:7A:0A:AF
Certificate issuer:       /CN=4BD815496A29ACD5D24059D50295D687057A0AAF
Certificate serial:       0D68A019F09DC1C2C6A0D5DE25510F2C38765939
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD815496A29ACD5D24059D50295D687057A0AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/4BD815496A29ACD5D24059D50295D687057A0AAF.mft
Manifest number:          0335
Signing time:             Sun 14 Apr 2024 22:32:27 +0000
Manifest this update:     Sun 14 Apr 2024 22:27:27 +0000
Manifest next update:     Tue 16 Apr 2024 00:12:27 +0000
Files and hashes:         1: 3230312e34392e3134342e302f32312d3234203d3e203533313539.roa (hash: HSounvVQLLxJjC5KLZejrdVlTvUwJf9WsDIQBGgDUTM=)
                          2: 4BD815496A29ACD5D24059D50295D687057A0AAF.crl (hash: kzFpnaIvD/mt+fsxuctnTAUfNHGsjPgEPrEs8pRgiqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:68:a0:19:f0:9d:c1:c2:c6:a0:d5:de:25:51:0f:2c:38:76:59:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD815496A29ACD5D24059D50295D687057A0AAF
        Validity
            Not Before: Apr 14 22:27:27 2024 GMT
            Not After : Apr 16 00:12:27 2024 GMT
        Subject: CN=3D8EBD786C2522CE006B32352C6779A3C81AD88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:57:eb:01:60:f3:68:08:1b:3a:83:04:d5:
                    66:61:03:a7:39:b4:b4:5c:35:2d:4c:84:e9:4e:6e:
                    a4:2d:07:f0:66:59:46:51:e5:9c:70:91:02:ac:e7:
                    cd:aa:74:7f:89:81:d1:e7:1c:47:bf:3a:74:eb:fc:
                    93:ba:65:05:23:99:41:ee:be:e6:6e:0c:10:59:85:
                    55:ff:c1:37:07:73:5e:31:11:26:c5:e1:21:55:8c:
                    5f:b0:87:04:eb:b7:3c:0b:3b:1b:ec:13:0a:c6:19:
                    0c:02:7d:59:27:97:97:f7:80:da:71:89:4d:9e:13:
                    9d:97:ba:c4:95:a3:56:9d:16:c4:55:9f:e4:1e:61:
                    26:8f:44:1a:c4:10:d1:5a:02:8a:4e:e1:49:8e:9c:
                    f8:0d:43:07:17:5c:d9:bc:c7:ce:4f:98:7f:88:52:
                    25:0e:4f:b5:06:cf:ec:55:c0:84:8f:2b:31:a4:45:
                    e6:3d:55:08:d7:9a:41:97:0b:01:83:31:40:72:14:
                    50:1b:43:a2:ee:35:19:a6:28:40:f0:74:45:54:6a:
                    8c:bb:ba:2d:f2:17:78:c7:7d:9c:1b:9b:ca:29:45:
                    9e:92:14:27:7f:84:27:32:86:9f:61:20:b9:a2:eb:
                    a4:99:59:cb:3d:bb:6d:6b:d8:66:22:2f:24:45:e2:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8E:BD:78:6C:25:22:CE:00:6B:32:35:2C:67:79:A3:C8:1A:D8:8B
            X509v3 Authority Key Identifier:
                keyid:4B:D8:15:49:6A:29:AC:D5:D2:40:59:D5:02:95:D6:87:05:7A:0A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/4BD815496A29ACD5D24059D50295D687057A0AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD815496A29ACD5D24059D50295D687057A0AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/0/4BD815496A29ACD5D24059D50295D687057A0AAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:38:90:da:dd:41:83:09:c2:73:ce:8c:ef:22:8b:a1:72:68:
         93:5c:da:58:b1:66:84:d9:ed:35:8c:cc:1e:e9:7f:8a:a8:91:
         26:dc:ab:9d:42:1f:8f:b1:9f:82:cb:bf:f1:2f:3d:4f:7b:09:
         61:f4:69:67:9f:49:15:20:fa:22:d9:eb:fc:fb:cb:fb:37:f7:
         f6:7b:da:6b:4c:4c:8b:88:14:88:6e:49:b2:22:f0:4f:f9:43:
         d2:75:9f:69:e5:12:60:71:2b:1b:ee:ed:33:01:37:96:2c:dc:
         8e:ce:2b:00:c0:3c:2c:c1:00:b0:95:c2:7f:0d:e9:1f:1d:a0:
         ff:27:c2:f3:f1:aa:ac:51:c6:c8:91:15:7d:97:05:9f:58:b5:
         c7:24:b0:0e:99:10:d8:4c:5e:e7:7a:92:45:5b:e1:85:83:dc:
         d1:61:74:cb:8e:20:1d:20:5b:80:69:9e:b0:dc:3a:a4:ee:21:
         6e:d1:34:47:4d:f2:ee:a7:a1:79:fd:56:f8:29:54:ea:4a:97:
         45:53:3f:4e:bc:1b:a6:7a:d0:6a:0b:20:88:6f:cd:f0:82:1d:
         ac:8f:40:fc:4a:ec:d7:5a:30:3e:77:aa:f3:28:0b:5c:b5:d2:
         1c:78:9d:b6:8d:8d:49:f1:2a:07:b1:ec:20:97:4f:95:a7:da:
         09:91:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----