Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.mft
File:                     68CE662D15AAF5135C77B867D79586761F235231.mft (raw, json)
Hash identifier:          x8bdgbG40SaQYSmQi0zksGVSRrF5+pHWfamFlsleLnQ=
Subject key identifier:   89:AF:E1:29:30:DF:B2:3D:EA:B0:67:98:7A:49:3A:5A:84:15:96:CE
Authority key identifier: 68:CE:66:2D:15:AA:F5:13:5C:77:B8:67:D7:95:86:76:1F:23:52:31
Certificate issuer:       /CN=68CE662D15AAF5135C77B867D79586761F235231
Certificate serial:       2DDFFC22F86AD9B713BC0474066D9171341F16C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68CE662D15AAF5135C77B867D79586761F235231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.mft
Manifest number:          03DC
Signing time:             Mon 15 Apr 2024 12:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 11:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 12:16:00 +0000
Files and hashes:         1: 323830343a313734633a3a2f33322d3430203d3e20323633313335.roa (hash: jVyVVwYwClNVU6iakMw5Nzoeajo/rHKvB4db9ocaKoQ=)
                          2: 3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa (hash: ZTNnnqiCeZuc3ZpH4yGehotFLWh3/L0DTrOyHy4cAxg=)
                          3: 68CE662D15AAF5135C77B867D79586761F235231.crl (hash: tq1vyanbrT6vITwpA0XJ0PoF+QSbliXlpbldmZ9+sYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:df:fc:22:f8:6a:d9:b7:13:bc:04:74:06:6d:91:71:34:1f:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CE662D15AAF5135C77B867D79586761F235231
        Validity
            Not Before: Apr 15 11:55:00 2024 GMT
            Not After : Apr 16 12:16:00 2024 GMT
        Subject: CN=89AFE12930DFB23DEAB067987A493A5A841596CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:4b:57:1d:f7:1a:1e:19:c1:29:26:71:19:
                    2f:ed:68:32:13:b3:d2:70:d2:74:89:16:f5:7d:ed:
                    5e:32:6d:b1:8b:21:99:9e:a8:ed:09:c9:28:12:a7:
                    9a:3b:b0:7f:67:06:2e:0e:6d:70:a3:a6:5d:ec:c6:
                    e2:02:cf:c6:28:4d:bb:e4:6f:cc:f6:88:db:aa:77:
                    8a:1e:17:21:57:f8:73:3a:5e:5b:39:48:e2:15:38:
                    60:b2:2b:af:7b:82:a9:ae:b3:cf:c3:4f:35:da:ab:
                    de:6a:ea:12:06:02:05:fb:46:13:5e:61:fb:f4:e6:
                    c8:15:70:b8:88:0e:15:3a:c2:d3:58:f4:14:f0:96:
                    4e:0b:58:b6:1a:f6:9d:0e:0a:cc:76:66:17:36:c8:
                    b7:c4:e7:b0:89:83:c5:3e:f2:a5:14:0d:51:f0:32:
                    3e:f3:a6:76:2f:3c:39:06:b5:0f:94:55:5b:75:f9:
                    8a:01:8e:6e:c2:58:23:ce:3b:36:f0:22:70:49:79:
                    78:d8:56:59:2e:8b:d9:2d:76:02:f4:9b:df:6f:cd:
                    c1:b5:cc:5d:4c:19:42:30:3a:f2:66:20:02:9b:7e:
                    1c:24:c9:c1:92:b6:d0:0d:5c:58:46:a0:d6:cc:7d:
                    da:eb:3d:cd:fa:f1:99:95:1d:36:d3:25:5a:aa:67:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AF:E1:29:30:DF:B2:3D:EA:B0:67:98:7A:49:3A:5A:84:15:96:CE
            X509v3 Authority Key Identifier:
                keyid:68:CE:66:2D:15:AA:F5:13:5C:77:B8:67:D7:95:86:76:1F:23:52:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68CE662D15AAF5135C77B867D79586761F235231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:27:47:4c:77:51:44:31:b1:d2:30:e4:d7:b2:de:32:f4:
         68:31:94:90:f4:e7:21:12:57:80:34:89:e7:92:a6:51:01:6f:
         ae:33:21:b6:c2:d7:a4:d7:8d:7a:ab:5a:93:44:b7:05:de:ef:
         2b:62:7b:5b:89:42:16:46:fe:e0:15:ec:b9:6f:7e:e6:86:ca:
         d8:19:c9:74:3d:34:c0:fa:c6:25:4b:1c:f3:98:1f:a9:58:88:
         08:1b:b4:a8:63:bf:0f:eb:a6:bd:93:2d:b3:47:ef:48:f3:3f:
         52:81:4f:dc:e6:f1:d0:c4:eb:57:29:50:2e:bb:c0:be:41:0f:
         fe:ce:0d:84:3a:8e:b9:35:c8:cd:8b:cf:ee:80:a8:f3:9d:47:
         f5:08:cd:90:ff:c2:eb:ea:fb:46:68:31:b6:b3:4d:73:2c:6e:
         e9:b6:4e:7f:71:94:2a:eb:2a:67:37:4e:49:e3:2e:9a:05:9c:
         44:d6:87:0e:93:39:8a:0c:4d:d4:a4:56:64:d1:cf:4f:be:01:
         42:65:27:5c:a5:e6:35:04:0f:85:97:a8:4a:81:cc:f5:69:96:
         5c:2a:f7:75:e9:e2:c0:18:b1:99:ed:73:dd:70:76:56:0c:f8:
         c3:8a:01:d2:38:a0:02:b5:1c:c7:51:a6:ac:b4:6c:32:3a:70:
         35:ee:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----