Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.mft
File:                     128E6FAF19CE8C823CD70DA58CEF1F1B54332142.mft (raw, json)
Hash identifier:          SVtI5RVbY0yJ7ZywQNiBq4vgoH5ff1sNjQXwlztz19E=
Subject key identifier:   D7:4B:15:5E:EA:8E:EE:9D:52:F8:D2:62:4D:7D:4C:A2:BA:19:BD:8E
Authority key identifier: 12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
Certificate issuer:       /CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
Certificate serial:       1168C420EFA22AC1CBDE99D8552C276F3618230F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.mft
Manifest number:          65
Signing time:             Mon 15 Apr 2024 01:29:13 +0000
Manifest this update:     Mon 15 Apr 2024 01:24:13 +0000
Manifest next update:     Tue 16 Apr 2024 04:52:13 +0000
Files and hashes:         1: 34352e3137342e31312e302f32342d3234203d3e20323638393338.roa (hash: Ax5mOOdB3+bwHuVf6TyikkRy64U/v+l20/kN/VCMvJo=)
                          2: 323830343a356365383a3a2f33322d3332203d3e20323638393338.roa (hash: mfQJ5MWNYiGieri2V4IDhHgKkFzDmLxDIzc9W3Ylte4=)
                          3: 34352e3137342e31302e302f32342d3234203d3e20323638393338.roa (hash: I2/xeCwqdZWdJ/Uly1+WAVidwXCJ+KauegDvtWqSwR4=)
                          4: 323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa (hash: rs0ayo3oLUvh4QXjt7282IzcWWsXiDfQ95vS9lxnK2E=)
                          5: 128E6FAF19CE8C823CD70DA58CEF1F1B54332142.crl (hash: QAaQrL7E9b2yZPhhMcMDSgwTEfYY3hWyTOa+X6pFN4Y=)
                          6: 34352e3137342e31302e302f32332d3233203d3e20323638393338.roa (hash: L3CDK+Hrfpk78hcFn70OFJVyGAfaoMHzvsqcSXh9S4g=)
                          7: 323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa (hash: v7rD+AEEt07DPvJ64Ta6ye084nm4K8rY6qsHlUyLwBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:68:c4:20:ef:a2:2a:c1:cb:de:99:d8:55:2c:27:6f:36:18:23:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
        Validity
            Not Before: Apr 15 01:24:13 2024 GMT
            Not After : Apr 16 04:52:13 2024 GMT
        Subject: CN=D74B155EEA8EEE9D52F8D2624D7D4CA2BA19BD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:9f:14:2b:f7:bb:d9:9a:2f:7f:90:a1:05:
                    5a:0c:3b:3e:bf:10:63:25:fc:bd:41:7e:68:bf:12:
                    06:69:92:c8:02:0a:13:04:2a:3c:d2:4a:f1:6b:bc:
                    fa:45:59:7e:45:f9:d3:b1:ce:e4:4a:c0:78:7e:00:
                    8b:1a:c1:90:f4:07:6b:a3:39:c5:d3:31:ef:cf:4e:
                    23:76:ba:51:03:63:ff:f7:c0:c6:0c:73:39:d3:7c:
                    47:58:6c:98:4d:dc:76:19:d0:88:f9:02:80:2c:64:
                    3b:4e:4a:ce:28:c7:90:e1:a2:20:e5:a3:23:13:e3:
                    da:04:fd:47:12:8a:56:20:af:80:12:7b:e8:68:37:
                    13:17:f8:a6:f1:91:f0:a1:5e:62:fa:99:d2:2c:e2:
                    56:39:9e:08:43:06:44:23:d3:8a:15:9f:36:48:53:
                    4d:d9:80:8f:72:7d:78:8a:53:98:b8:b2:5c:56:59:
                    8b:7b:93:b8:3e:bf:dd:fc:6a:b4:1d:ef:79:52:b0:
                    27:f6:20:81:9e:0b:4e:68:2e:e8:6d:e8:9e:64:4f:
                    34:5d:46:bc:98:0f:66:6e:6f:99:8b:d1:04:2f:82:
                    75:77:cf:11:d1:d3:8c:52:af:80:5a:78:ce:9b:b8:
                    53:0e:ad:0e:3a:aa:7e:a9:de:56:ab:91:52:41:a3:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4B:15:5E:EA:8E:EE:9D:52:F8:D2:62:4D:7D:4C:A2:BA:19:BD:8E
            X509v3 Authority Key Identifier:
                keyid:12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ab:34:9b:2a:71:7a:a5:7c:b2:43:f1:4b:3c:49:e9:f3:39:
         9d:9e:e9:eb:70:02:78:60:93:fb:2c:2b:6b:ef:eb:be:40:7c:
         3c:38:ed:06:1f:46:39:06:e0:61:1c:c5:f4:81:82:fc:83:6e:
         29:23:fc:5f:2e:37:9f:2d:e8:ab:5a:2d:a2:e4:09:5c:4c:8c:
         a8:fa:49:04:99:cb:03:27:d5:3d:49:43:47:e9:98:59:b2:5a:
         e0:c8:cd:ba:29:06:36:e0:d9:fa:34:a3:22:66:af:23:64:e5:
         e0:00:93:f4:28:94:27:99:9d:c6:60:7a:ca:55:de:37:f2:b3:
         d9:d5:de:21:7d:de:d8:ae:50:aa:79:d3:0d:fb:13:da:ad:ac:
         db:5d:dd:57:15:5f:15:5b:3f:8e:8f:b7:62:0a:cd:f9:79:1b:
         ea:8a:4f:e3:27:13:fd:0e:ab:7b:33:b5:cf:2b:7c:f1:01:6f:
         f1:da:98:32:be:c9:16:0c:95:4b:da:66:08:bc:8e:d3:26:e4:
         0d:e9:f5:7f:73:17:31:8a:07:2f:fc:5c:8a:24:c4:77:21:08:
         ab:c6:29:40:3c:ed:ab:7d:a0:84:d8:06:67:a7:df:e2:9a:32:
         9d:82:23:f5:53:88:1d:ca:4e:f8:93:a3:26:8c:15:43:c5:89:
         ce:f7:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----