Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.mft
File:                     323408F4A08085567D2BEEC5D6976D62865EE349.mft (raw, json)
Hash identifier:          s2hC6TJ7xGUDcx5c3pbirk6Y+cpoLL74zMy8rfX88wI=
Subject key identifier:   1D:2F:24:75:A8:54:77:05:87:2B:20:EA:6A:42:B9:0D:B5:42:71:D8
Authority key identifier: 32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49
Certificate issuer:       /CN=323408F4A08085567D2BEEC5D6976D62865EE349
Certificate serial:       77D701DD972BEC92C81E2ABAF895944FBFB60BBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.mft
Manifest number:          01ED
Signing time:             Sun 14 Apr 2024 22:41:07 +0000
Manifest this update:     Sun 14 Apr 2024 22:36:07 +0000
Manifest next update:     Tue 16 Apr 2024 02:20:07 +0000
Files and hashes:         1: 323830343a333764383a3a2f33322d3337203d3e20323636343339.roa (hash: wqNLd2aIY6YsOYMFKv+ZA8P0iRFnT9uuEkHC92dkWcA=)
                          2: 3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa (hash: I+318JZ61krGf/cQv2+7ngmbHWzP5/XoySkJsA7XKyg=)
                          3: 323408F4A08085567D2BEEC5D6976D62865EE349.crl (hash: RHl8Gw+ocseqO4HPV5QDfLKpPD2sQVV6Hxe7Z6W/mZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d7:01:dd:97:2b:ec:92:c8:1e:2a:ba:f8:95:94:4f:bf:b6:0b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323408F4A08085567D2BEEC5D6976D62865EE349
        Validity
            Not Before: Apr 14 22:36:07 2024 GMT
            Not After : Apr 16 02:20:07 2024 GMT
        Subject: CN=1D2F2475A8547705872B20EA6A42B90DB54271D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:ab:91:a5:99:ca:2d:1e:81:c9:02:87:8e:
                    c9:aa:f4:47:fa:6c:45:ef:fc:17:ff:a7:74:9d:47:
                    29:84:83:88:38:d4:b4:7f:22:14:37:21:e2:41:69:
                    b8:22:5d:45:82:fc:28:55:1d:68:d6:7a:24:bb:30:
                    41:97:5b:1a:74:6c:2e:75:18:e1:24:3f:a8:eb:9d:
                    2d:ea:af:5a:55:01:9d:95:50:89:ea:38:f6:38:cc:
                    0b:f6:08:e5:eb:cf:ac:2f:59:97:89:fe:fc:19:8a:
                    79:74:de:2a:65:1e:c2:d1:29:f1:f5:9e:ce:97:b9:
                    89:7b:91:f1:6d:06:ab:61:a0:cd:75:5c:c6:c9:dc:
                    89:c2:e5:1a:99:67:42:e7:d8:25:01:ac:f2:a3:1e:
                    e3:2f:f8:01:ea:51:f9:f3:d2:7b:0e:45:91:23:17:
                    78:f3:78:ab:5f:52:2c:b4:ee:4f:ed:95:e7:5a:c0:
                    8e:f4:1b:1a:1c:3c:58:5a:53:ed:fb:4f:de:a6:ab:
                    6c:28:db:15:8b:c9:b7:5e:10:1f:c0:ac:97:e0:b4:
                    ae:09:f9:f8:cc:e1:a9:f0:56:f2:22:04:e4:a1:a4:
                    52:b7:13:c0:8c:ce:c0:4e:78:cd:d7:0a:1d:bb:fb:
                    dc:e3:78:18:78:14:e0:60:57:ea:65:89:19:4d:08:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:24:75:A8:54:77:05:87:2B:20:EA:6A:42:B9:0D:B5:42:71:D8
            X509v3 Authority Key Identifier:
                keyid:32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:66:57:42:40:c9:57:fa:67:6a:e5:19:b6:bf:f8:55:b1:41:
         79:2c:d7:4e:71:63:ef:93:b7:0b:71:a7:92:22:aa:35:00:38:
         14:52:0e:2a:f9:ee:89:cf:2b:96:5c:ca:1b:b3:0c:03:a2:ec:
         af:0a:ef:5a:0d:28:78:ff:4e:e8:7f:66:d8:2b:a2:f7:20:1b:
         d7:b5:cc:42:3f:84:14:2b:f0:dd:b6:5d:39:f8:b2:91:91:aa:
         3a:23:7b:47:da:c8:10:b5:ad:22:15:09:66:c6:9e:4a:a8:5a:
         5a:68:25:d5:64:1c:4d:4e:c6:81:e2:9c:3e:ba:28:9e:21:df:
         11:1c:42:f0:2e:4f:29:16:07:57:1f:2f:5c:ec:67:37:6c:84:
         11:fd:79:c3:62:ec:f1:18:65:c4:97:03:dc:07:02:9a:93:92:
         96:7d:62:74:75:ec:09:d8:2a:2b:f4:af:0a:a9:4b:f9:ea:1d:
         43:80:07:d4:cc:9b:ab:f1:d5:5d:d1:d2:2b:5f:47:89:a6:44:
         01:64:cb:ff:32:70:25:d1:f7:6e:6b:d0:29:49:dd:37:f1:fa:
         ef:ae:39:af:dc:7f:3c:28:62:11:cb:db:60:d2:bb:37:bb:88:
         68:d6:4e:d8:b5:77:89:71:fa:1b:5c:74:97:f8:69:28:8e:ab:
         83:e1:7e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----