Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.mft
File:                     AF919E5DD91249FEC8AC8474B557DF7E72490802.mft (raw, json)
Hash identifier:          21shpTV2haHOwvOvYmdtOo40XCw5z+CHMJ7RbqscAgg=
Subject key identifier:   41:6B:81:F9:BE:10:C7:1D:39:C8:C7:44:A5:AC:66:0D:48:3B:83:14
Authority key identifier: AF:91:9E:5D:D9:12:49:FE:C8:AC:84:74:B5:57:DF:7E:72:49:08:02
Certificate issuer:       /CN=AF919E5DD91249FEC8AC8474B557DF7E72490802
Certificate serial:       1C6F3284E6D06784BB141E38FD03C0ED22B3670A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.mft
Manifest number:          0737
Signing time:             Mon 15 Apr 2024 04:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 03:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:00:00 +0000
Files and hashes:         1: 34352e3137322e36342e302f32322d3234203d3e20323638373931.roa (hash: qR4sn6cILapKewytAOnsyGdIe+JjOQitTY+/a8LIBCU=)
                          2: 323830343a356162383a3a2f33322d3334203d3e20323638373931.roa (hash: LiVpmz9Qvh5WBuyX37UbJnbZVE+sOKDG0E7SHksuTq4=)
                          3: AF919E5DD91249FEC8AC8474B557DF7E72490802.crl (hash: aTn353uHlh7KTlkTn+v31W689ZwR8asumZ1wDacWUmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6f:32:84:e6:d0:67:84:bb:14:1e:38:fd:03:c0:ed:22:b3:67:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF919E5DD91249FEC8AC8474B557DF7E72490802
        Validity
            Not Before: Apr 15 03:55:00 2024 GMT
            Not After : Apr 22 04:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c7:02:70:93:ca:2b:8a:41:94:1c:0b:37:54:
                    ae:65:08:32:12:f5:e5:a7:79:92:5e:0d:0d:07:cc:
                    8c:ab:b2:92:21:1a:cc:70:3d:0b:d3:a0:b7:9b:f4:
                    c3:72:bb:06:74:ab:ee:16:35:b6:cc:5f:9e:1c:8a:
                    2a:e2:c7:87:7f:36:6a:fd:25:4c:c4:39:e1:f3:16:
                    79:7a:fd:72:68:3a:b6:7b:94:06:46:4a:77:16:30:
                    04:50:5c:75:a9:9b:c2:1f:bb:cd:e6:f3:76:9f:3b:
                    38:98:ea:91:6d:3c:20:92:4f:63:5f:1e:ac:12:e9:
                    fb:60:fd:1b:70:93:87:c6:a5:ea:bc:84:ac:fe:93:
                    96:9f:9a:11:8a:5e:a3:98:c5:15:47:b3:2b:3e:0b:
                    64:36:51:b1:cd:72:30:33:d1:37:6b:34:44:71:3c:
                    49:60:d1:ca:d8:13:25:98:83:1e:41:5f:5f:18:dc:
                    77:d4:01:62:41:b1:16:f7:e0:34:b8:30:ee:a5:ce:
                    51:5b:32:ff:be:82:90:92:46:75:d0:83:eb:5d:19:
                    ab:4e:f8:3e:65:e5:8d:0c:99:b3:72:6e:fc:33:80:
                    1b:4c:de:88:f9:2f:c3:ed:78:18:15:7f:12:1e:8c:
                    ba:bf:14:81:a4:3a:32:b3:74:e1:2e:e2:ec:74:1a:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6B:81:F9:BE:10:C7:1D:39:C8:C7:44:A5:AC:66:0D:48:3B:83:14
            X509v3 Authority Key Identifier:
                keyid:AF:91:9E:5D:D9:12:49:FE:C8:AC:84:74:B5:57:DF:7E:72:49:08:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:9c:26:2b:c2:be:01:98:42:65:7b:13:7c:5b:f7:a7:c4:
         fd:08:35:5c:fa:18:c6:09:dd:a8:de:20:48:36:6b:8b:26:ce:
         eb:8e:f9:23:73:31:80:78:41:3a:73:06:ab:17:53:33:6f:b6:
         5c:42:38:09:ac:95:19:16:28:19:f8:f2:3c:b2:0f:40:e3:f1:
         cc:55:e0:2e:78:5c:2d:82:9f:15:8b:01:f6:30:7d:c4:e9:91:
         13:15:3a:49:64:e3:c9:88:4c:23:47:c3:55:86:31:49:48:46:
         07:ce:f7:6c:aa:43:98:78:31:79:30:ab:4d:38:6e:41:96:d4:
         b5:50:7d:ec:f0:60:72:c4:12:90:4a:b4:69:a0:df:fa:bc:6f:
         7b:5a:91:f3:af:4b:a4:1f:d6:05:04:3e:1b:15:67:71:a2:c2:
         58:18:28:2c:07:2c:74:e4:e4:21:b7:4a:48:02:ee:b9:f7:d4:
         57:5b:30:f9:53:20:25:2b:15:89:b8:66:49:a7:2c:6f:5a:53:
         6b:2a:79:96:10:cd:4e:e8:bf:cc:0f:d6:9a:72:36:55:3f:83:
         8d:e3:ff:be:ac:8d:9c:da:1f:58:45:38:40:23:fe:df:e8:2a:
         02:c7:d8:aa:21:97:14:a8:4a:56:58:26:66:ed:2d:e9:79:4f:
         22:5e:d6:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----