Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.mft
File:                     B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.mft (raw, json)
Hash identifier:          B6QmniePRVQa0rS90ur5PZ4K3ns8m5VrgufNTKOsroM=
Subject key identifier:   86:A8:8B:C7:35:AE:25:4D:D2:16:E0:9A:F1:AE:FB:5D:34:A9:2A:2E
Authority key identifier: B1:DD:EB:2A:E1:75:70:AD:2A:FA:8F:64:6F:39:82:49:1A:E3:2A:38
Certificate issuer:       /CN=B1DDEB2AE17570AD2AFA8F646F3982491AE32A38
Certificate serial:       782DB19D2B761BCD58B84FF1B73289F4DB12615B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.mft
Manifest number:          0253
Signing time:             Mon 15 Apr 2024 07:10:01 +0000
Manifest this update:     Mon 15 Apr 2024 07:05:01 +0000
Manifest next update:     Tue 16 Apr 2024 09:43:01 +0000
Files and hashes:         1: 34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa (hash: QYd/rmSgO0jfbfQXTSPx7n6QBIfSv5PeTFaqN3rYoZw=)
                          2: B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.crl (hash: 5+bERAMJXzrDXESyOgXbbZHBKf9YNyfr4OGtBkCcs7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2d:b1:9d:2b:76:1b:cd:58:b8:4f:f1:b7:32:89:f4:db:12:61:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DDEB2AE17570AD2AFA8F646F3982491AE32A38
        Validity
            Not Before: Apr 15 07:05:01 2024 GMT
            Not After : Apr 16 09:43:01 2024 GMT
        Subject: CN=86A88BC735AE254DD216E09AF1AEFB5D34A92A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:ca:b1:ae:28:56:f7:41:9a:10:be:f8:73:
                    55:a0:10:d6:e6:9b:03:fc:08:a9:fb:c1:7b:33:cc:
                    de:e8:38:54:31:f3:d9:15:6e:22:36:79:b6:b7:20:
                    5b:da:54:43:83:7b:8b:99:11:2d:4e:b1:58:83:a8:
                    ab:6e:df:ce:5a:e6:a2:08:26:e1:93:b8:e1:30:26:
                    bc:52:cf:c4:14:fa:da:60:2a:e3:9f:5c:30:2b:ce:
                    be:a9:61:f4:c6:dc:57:b3:ba:b3:85:4c:0a:c9:70:
                    2f:af:96:9e:aa:62:bd:93:da:6b:54:e5:43:47:7e:
                    57:f0:4f:9a:cd:9e:cb:e5:3d:9d:d5:af:26:2c:14:
                    ec:de:1a:76:02:e2:04:59:c4:88:89:89:56:1a:b1:
                    29:eb:17:6a:ce:13:43:10:ae:0c:4f:e5:1c:1f:a7:
                    f0:ed:4d:b8:e1:fa:96:68:1e:b4:41:52:b5:c8:32:
                    85:fb:66:b8:c6:e6:50:39:ac:77:ee:42:86:c0:25:
                    3a:ad:94:d6:1c:2b:7b:04:b1:94:40:fb:75:07:5a:
                    fa:a5:e9:cd:7d:b1:bc:9f:fe:05:7e:3d:dd:2a:7c:
                    89:e9:04:66:cb:00:2d:ac:9a:1b:1a:0a:c0:13:84:
                    a3:75:b7:93:08:d4:c7:63:65:57:59:5c:5a:49:bb:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:8B:C7:35:AE:25:4D:D2:16:E0:9A:F1:AE:FB:5D:34:A9:2A:2E
            X509v3 Authority Key Identifier:
                keyid:B1:DD:EB:2A:E1:75:70:AD:2A:FA:8F:64:6F:39:82:49:1A:E3:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:88:e2:71:d5:29:11:c4:29:82:94:c9:9b:49:fe:d2:b4:
         48:3e:6c:93:63:c3:e3:56:32:08:b7:89:93:4f:4a:fe:ab:e2:
         da:19:de:41:a9:bc:f0:e8:73:05:d6:e5:dc:97:96:a5:73:c7:
         d8:d7:bd:8f:00:b3:2d:6b:8f:2a:9e:98:79:04:65:fd:cf:e9:
         99:0a:26:65:b8:eb:16:e9:97:7f:f9:b6:53:7f:35:f3:03:c2:
         d6:18:78:ef:ba:6e:1f:fc:62:45:5c:bf:6a:a9:a9:15:60:0c:
         f2:9f:2d:4b:03:12:6e:3b:2e:fa:8f:3d:63:ae:4a:a3:e8:78:
         de:a9:d3:7c:ef:08:04:44:ed:72:8e:00:1e:46:c2:5e:8d:08:
         28:43:6f:dc:8a:76:da:42:2d:4e:c3:31:60:e6:5b:72:62:63:
         97:6e:b3:b9:9f:22:ab:7a:fe:43:af:49:84:a4:88:95:26:0c:
         9e:9a:64:fc:7a:2c:bf:3f:17:9d:66:47:39:e6:4a:77:4c:78:
         34:bb:0c:ca:a4:f2:f4:25:a6:2a:e6:35:a0:20:cc:07:bc:4e:
         d2:49:fd:ad:24:16:e6:fd:a2:56:70:a0:0e:d0:53:20:48:a3:
         3f:69:9f:02:b8:37:6f:1c:f1:57:06:e6:8c:6f:17:3b:60:09:
         b8:e8:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----