Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/1/ABA0B8480FD420510211618AAAE0122F942AC662.mft
File:                     ABA0B8480FD420510211618AAAE0122F942AC662.mft (raw, json)
Hash identifier:          M/dzlnYBlmHieHNm+pF3v7wfJvRmGJsd6O1NRL0i61o=
Subject key identifier:   15:63:12:21:46:BE:8A:F2:33:E7:D2:99:49:6A:04:69:BA:EA:A8:77
Authority key identifier: AB:A0:B8:48:0F:D4:20:51:02:11:61:8A:AA:E0:12:2F:94:2A:C6:62
Certificate issuer:       /CN=ABA0B8480FD420510211618AAAE0122F942AC662
Certificate serial:       14D3536327386E4DE327C4230F90D8C58D46C4A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABA0B8480FD420510211618AAAE0122F942AC662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/1/ABA0B8480FD420510211618AAAE0122F942AC662.mft
Manifest number:          021D
Signing time:             Mon 15 Apr 2024 12:03:00 +0000
Manifest this update:     Mon 15 Apr 2024 11:58:00 +0000
Manifest next update:     Tue 16 Apr 2024 14:40:00 +0000
Files and hashes:         1: 3139322e3134302e35322e302f32322d3332203d3e20323636323033.roa (hash: GqarWC7IWeIMcXSuw1P9KXsiy1fnz/OwDDaYxUmnDk0=)
                          2: ABA0B8480FD420510211618AAAE0122F942AC662.crl (hash: L82RflAHYmD9LQi+nWZjjJlMfEguoCpZ1IRL1f0yOMc=)
                          3: 323830343a336335303a3a2f33322d313238203d3e20323636323033.roa (hash: ibQfs8/RI16BRhKRojHSq1V5OKG+xEGZpbbqFh1TiL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d3:53:63:27:38:6e:4d:e3:27:c4:23:0f:90:d8:c5:8d:46:c4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA0B8480FD420510211618AAAE0122F942AC662
        Validity
            Not Before: Apr 15 11:58:00 2024 GMT
            Not After : Apr 16 14:40:00 2024 GMT
        Subject: CN=1563122146BE8AF233E7D299496A0469BAEAA877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:c5:c1:af:5c:cc:8f:67:af:1f:6f:2c:b7:
                    e9:f0:5f:59:4c:2b:db:f4:e8:74:e8:d6:57:67:b4:
                    55:ca:0b:27:d3:c7:e1:70:b4:76:b4:b6:40:17:3e:
                    cf:47:71:b0:44:5f:f4:a8:9d:85:36:bb:e5:e3:cf:
                    0c:a8:99:4f:45:32:d1:e2:f0:04:b7:07:27:f9:ba:
                    04:ca:3e:73:48:c0:7d:f5:9d:ca:b7:88:f5:fb:93:
                    08:8f:4d:d5:6d:10:31:a2:b6:8b:01:47:19:6f:d0:
                    df:2a:6d:3d:a4:86:91:c2:61:4b:b7:dd:2f:51:cc:
                    9d:86:85:bf:65:cb:1a:6c:9c:65:86:f1:dc:6c:5b:
                    d2:a6:90:54:ad:30:56:88:4c:d7:d8:0c:50:d8:93:
                    f2:81:f6:c6:4a:70:89:c0:46:7c:12:b3:4a:21:f6:
                    78:7e:a0:b7:ad:e6:c7:06:23:e0:96:a7:65:38:5d:
                    52:ba:97:5a:54:f5:90:45:89:ab:7e:07:3b:0a:ff:
                    36:bd:04:5d:05:b9:7a:b0:91:fe:c3:fe:3c:96:79:
                    57:b8:62:0d:de:9f:6a:46:20:31:90:51:b6:27:ca:
                    cf:06:65:3d:11:54:32:b8:30:64:6d:d8:c4:19:2c:
                    39:72:a8:23:61:43:7a:41:3f:f0:3b:03:05:13:8a:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:63:12:21:46:BE:8A:F2:33:E7:D2:99:49:6A:04:69:BA:EA:A8:77
            X509v3 Authority Key Identifier:
                keyid:AB:A0:B8:48:0F:D4:20:51:02:11:61:8A:AA:E0:12:2F:94:2A:C6:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/1/ABA0B8480FD420510211618AAAE0122F942AC662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABA0B8480FD420510211618AAAE0122F942AC662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/1/ABA0B8480FD420510211618AAAE0122F942AC662.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:12:42:9f:f1:d2:1d:ea:da:55:60:8b:ed:e1:db:42:9c:92:
         2f:2c:d4:a9:66:d7:de:c3:d7:79:05:ab:d9:81:73:38:1e:10:
         3d:c3:5b:cd:83:f8:45:44:e7:c0:36:44:3c:c3:bc:09:62:77:
         b9:0d:3a:97:5e:a9:90:32:bc:53:f7:5a:64:6b:b2:cc:9b:a8:
         98:72:3d:64:0f:b1:46:7b:44:6c:44:eb:01:86:37:7e:f9:01:
         46:5e:b2:75:fc:ed:e1:63:83:97:9c:45:95:7c:29:d3:9d:fa:
         d3:fb:f8:07:82:ef:be:a8:f5:cc:99:1c:04:c8:90:e2:72:a5:
         bd:41:68:23:9f:0e:cb:e8:df:ed:4f:a7:11:82:be:e1:e8:f6:
         5f:23:8d:9c:26:ba:33:fa:98:b4:6d:36:90:e1:c5:cc:2f:23:
         68:d7:15:4e:0a:ae:f0:a7:f6:20:6f:2b:94:31:64:24:82:4d:
         6c:03:21:ba:b4:ac:32:90:f5:9a:12:fd:d1:ee:f6:be:ce:8b:
         18:fe:dd:7a:08:a1:6d:12:42:04:e6:a5:d3:fd:40:c7:0c:7a:
         4e:11:35:b4:09:71:a0:7b:d1:1a:c1:7c:4b:30:ee:cc:dd:bf:
         b1:e6:7c:2e:48:bd:fb:92:a0:e2:5f:f2:e9:94:d5:be:7a:0e:
         c4:05:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----