Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.mft
File:                     CF178172195A182C594FB724DD7B684E9210DA90.mft (raw, json)
Hash identifier:          yiKHpkriX5zOIKqEW3VttusJX8RDDQun8EzWdFTeM48=
Subject key identifier:   BA:7B:A4:2B:19:49:96:6C:77:80:77:F7:A7:05:FD:0A:46:48:E9:41
Authority key identifier: CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90
Certificate issuer:       /CN=CF178172195A182C594FB724DD7B684E9210DA90
Certificate serial:       35B6E80AED61180F5564BD983C47E4EFAABC9561
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.mft
Manifest number:          E4
Signing time:             Mon 15 Apr 2024 08:49:20 +0000
Manifest this update:     Mon 15 Apr 2024 08:44:20 +0000
Manifest next update:     Tue 16 Apr 2024 09:17:20 +0000
Files and hashes:         1: 34352e372e3139362e302f32322d3232203d3e20323636363038.roa (hash: fNrLuH86mp31mArgpkDaBdbLiNEMWDSqR42YiH300dU=)
                          2: CF178172195A182C594FB724DD7B684E9210DA90.crl (hash: t/jYaSdt7jzr4JGFXRBzQ/x+u0BliFHNmPACnysIvZs=)
                          3: 323830343a336539383a3a2f33332d3333203d3e20323636363038.roa (hash: Bs5jazGwyRabZp79GKatqr9RkYWPi4/Eo7atHrjTG1E=)
                          4: 323830343a336539383a383030303a3a2f33332d3333203d3e20323636363038.roa (hash: iktBZWtR0boMCD4D4d84Uthw8tz9ymibKmnmuBPhC7A=)
                          5: 323830343a336539383a3a2f33322d3332203d3e20323636363038.roa (hash: O6RwJNlgG1/ST7BSQ18fwgD90Pq6c3Ot1Nr+Qfa5ZMk=)
                          6: 34352e372e3139382e302f32332d3233203d3e20323636363038.roa (hash: 830iVfETO/8N316wqB7NAQbsJmdxvXHU+mXj+gZ/gDA=)
                          7: 34352e372e3139362e302f32332d3233203d3e20323636363038.roa (hash: YU+6XG57PUMHRxdmZxZsspIympIrGUG/gtQeQJQJHWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b6:e8:0a:ed:61:18:0f:55:64:bd:98:3c:47:e4:ef:aa:bc:95:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF178172195A182C594FB724DD7B684E9210DA90
        Validity
            Not Before: Apr 15 08:44:20 2024 GMT
            Not After : Apr 16 09:17:20 2024 GMT
        Subject: CN=BA7BA42B1949966C778077F7A705FD0A4648E941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:ac:72:db:f7:b6:a0:49:d6:3a:a8:16:62:
                    01:7a:d9:96:2a:29:f1:03:e2:93:49:77:51:f9:26:
                    ec:ff:1f:ed:30:8c:5c:e2:1b:af:b1:8f:ed:56:88:
                    d5:34:e3:9d:a4:8f:2f:01:8a:7d:5e:46:91:6c:42:
                    f1:9a:19:79:3a:7b:05:b2:64:17:4a:80:3a:a8:a2:
                    c9:fe:5a:fd:c2:7a:7f:b2:af:b8:02:bb:35:49:95:
                    eb:f5:15:21:aa:cd:7f:88:6b:4d:dc:2c:6b:8e:22:
                    40:d8:29:bb:1a:11:82:7a:75:1d:8c:9a:bb:1c:7d:
                    ef:60:f3:a2:34:de:d4:e5:29:96:b9:60:d6:b4:da:
                    ad:7f:3d:fb:d9:9d:87:f5:b5:8f:a7:66:d5:8a:35:
                    9f:d9:f2:99:78:5b:3d:18:8d:d3:6d:8a:dd:19:79:
                    1d:53:18:3e:88:3c:cf:14:64:71:7f:9b:89:ba:df:
                    32:04:dd:ec:dc:7a:0c:34:e3:08:68:d6:1f:dc:5f:
                    40:ba:04:c9:ce:5b:dc:96:33:6a:7a:e1:95:4e:95:
                    a3:90:64:6d:8a:78:61:0f:b3:84:61:11:c6:81:b5:
                    8c:43:b3:9e:f5:dd:0b:50:ef:a5:4c:03:f8:58:fd:
                    aa:4f:b0:34:6f:1b:b0:7a:18:48:7a:44:ad:7c:9d:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7B:A4:2B:19:49:96:6C:77:80:77:F7:A7:05:FD:0A:46:48:E9:41
            X509v3 Authority Key Identifier:
                keyid:CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:44:7f:45:0d:db:71:7b:30:c8:b8:40:0c:ba:5c:10:5f:
         f5:e9:5f:cd:11:46:28:4e:5b:b8:b2:13:ca:52:ef:0a:a1:17:
         74:7a:f2:c2:10:3f:43:96:43:ef:aa:e8:8d:cd:76:e1:1e:f1:
         9d:80:82:19:d1:69:4e:55:2c:0f:91:2c:27:a4:84:4d:b8:90:
         72:20:17:71:47:e2:3d:3f:2c:fe:c3:2c:6d:8a:3c:59:e2:ba:
         2f:c8:a5:01:94:e6:83:5b:91:67:2b:f5:2b:7f:12:42:c7:7b:
         33:4b:48:96:b4:33:0f:23:fa:6f:68:91:53:83:13:53:24:96:
         1e:ce:19:75:cc:b5:70:e6:85:6e:1a:af:33:67:41:39:18:11:
         5a:41:fe:54:d4:b5:67:31:6f:7e:e1:b6:72:3e:a1:66:df:91:
         02:84:56:61:4a:e0:38:49:86:04:68:c0:cc:c9:b0:79:1d:ed:
         79:e9:a7:9f:9c:c4:26:e2:11:79:ef:62:22:c0:f4:47:ef:ae:
         fe:5d:5a:d9:27:ca:65:67:16:e6:76:21:da:1e:f7:98:76:57:
         f3:c1:66:b5:a9:88:7f:a3:c3:73:5c:2b:10:9f:45:b1:fa:d4:
         76:35:98:ba:42:ad:57:f1:66:33:0b:b8:23:a3:d4:07:7e:8a:
         28:30:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----