Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.mft
File:                     41E59B548B916216367A1DBCA5AD17479C65F6DA.mft (raw, json)
Hash identifier:          8m7J992PkVICXYpQ6wv1YCCaTHLOmkKcU6C7Pw9yh/w=
Subject key identifier:   35:7D:5D:D5:A7:AD:2E:9A:9B:C2:A5:15:41:10:24:7D:4C:74:D7:0F
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       643B73AFA9EE8E2DDD18FB29EA073E1B60F643FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.mft
Manifest number:          0544
Signing time:             Mon 15 Apr 2024 01:00:01 +0000
Manifest this update:     Mon 15 Apr 2024 00:55:01 +0000
Manifest next update:     Tue 16 Apr 2024 01:00:01 +0000
Files and hashes:         1: 3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa (hash: YnMSGeRxkqmpYqW3Wja1Wqj8+t7Tw7n/RDN1QRoFQAc=)
                          2: 323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa (hash: a3kJIlZtk7UjB7rBV9UQWiC3ELgfanO29JcjrCkZink=)
                          3: 41E59B548B916216367A1DBCA5AD17479C65F6DA.crl (hash: 4lLuz6+rSojIPGvYJfXo0u1kNubrQfI8uhZ4+ZL2P/E=)
                          4: 323830343a323566303a3a2f33332d3333203d3e20323634333131.roa (hash: vsLYXZQJNepZqU+EZoPnjBEHpwi2kphJOaZIhBwVLIQ=)
                          5: 3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa (hash: q9tHMckrIQmXX8G5gBZf+a0cjXNgcvpP9YplvHIO8nI=)
                          6: 3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa (hash: wWVesQekCNpGLM3PamXZN+94Zw0QxC3zicyDO+jnZ3A=)
                          7: 323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa (hash: xUtECz5ooRK2Y/xu3TVH6FBza4lk9UFt8vYSJwMirH0=)
                          8: 3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa (hash: 32rpyjlrvA3tqJvbXugG9WxzvPPpR9238xakI7sT2YU=)
                          9: 323830343a323566303a3a2f33322d3332203d3e20323634333131.roa (hash: lq/ENztPsEHhPjnChnqystFsfD7rSl6xC/6+Iy6BgTY=)
                          10: 323830343a323566303a3a2f33342d3334203d3e20323634333131.roa (hash: asW6Q1YJUTcQtLbpR7gKpuvOi+soK/NR3s8COBkfEaE=)
                          11: 323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa (hash: f/Wnx2ORtznhHY8LVdveouQLTOt02H/VDaNNyqnvAvg=)
                          12: 3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa (hash: gdS4hI7U2/V3wRgAi3TudXseIr5V22VYCM+KlF0ry5Y=)
                          13: 3133382e3132322e3130312e302f32342d3234203d3e20323634333131.roa (hash: ZwFJcN5lz6Imc1MpUX3c/8RMSPqax380ct9RH1XYmcU=)
                          14: 323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa (hash: foSqAcvPvMGk5hDrjjC1tapPPol/eQelRj26hR6z5Xg=)
                          15: 3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa (hash: yvmaj8rbWGRFrNTcUKTA+bp3T7PvgJQp6Ol+AFA0w6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3b:73:af:a9:ee:8e:2d:dd:18:fb:29:ea:07:3e:1b:60:f6:43:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Apr 15 00:55:01 2024 GMT
            Not After : Apr 16 01:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:17:e8:08:f7:49:f6:2f:cf:1b:a6:a9:47:
                    de:bb:48:ea:36:c7:66:1f:b4:77:cd:ef:82:4d:ac:
                    0e:43:25:98:5f:ea:7f:f9:af:c3:72:59:f7:75:89:
                    12:c1:e3:a3:74:13:a1:fc:4f:8e:ea:cd:f0:5a:5f:
                    ad:6a:44:57:e5:8e:9f:3f:f9:3d:6b:f8:72:e5:c6:
                    2a:46:52:15:1f:34:ec:40:e8:23:f0:00:7b:d3:1d:
                    06:03:b0:7a:4e:af:ca:8d:55:1f:38:f1:85:b9:02:
                    1e:29:e7:67:29:2b:f6:0c:4f:e3:98:ec:cf:4b:7c:
                    68:f6:68:12:1a:bf:ef:44:1a:4f:9b:01:89:18:ce:
                    39:0d:c9:34:1a:50:d2:70:5a:aa:86:55:e9:27:aa:
                    fd:e2:8f:12:36:42:32:e8:d7:7c:ec:68:c0:b3:26:
                    47:2a:1f:e7:77:26:f1:e5:10:2b:ea:0f:1e:b4:19:
                    c1:90:b6:2a:bc:6a:df:d8:b4:fc:49:2c:43:a0:c4:
                    b1:92:01:37:8f:25:7e:cb:e0:ce:3c:d5:49:dd:7c:
                    6f:04:de:73:90:02:42:7a:14:09:f7:fe:9a:03:53:
                    f4:25:d3:9a:35:0d:61:cc:df:99:68:e5:74:56:53:
                    33:0b:60:28:9c:ac:9c:b3:ac:ec:2d:ae:1e:ef:42:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7D:5D:D5:A7:AD:2E:9A:9B:C2:A5:15:41:10:24:7D:4C:74:D7:0F
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:5a:8d:a7:85:67:3c:c9:d4:cc:76:66:28:23:bb:0c:ef:
         c8:15:ae:44:29:dc:e9:d1:7d:2f:12:e1:8a:0d:71:2d:00:1b:
         77:91:6f:2a:5f:4c:b1:ff:c8:db:20:27:c0:07:b0:bc:2d:bc:
         d0:ec:cb:9d:2a:e5:80:57:1e:9a:0d:0a:17:10:a9:3d:e5:ca:
         3c:e4:10:c8:81:79:b2:f2:a9:e5:36:e7:c0:dc:e7:89:be:61:
         11:f8:3e:9c:51:72:9c:52:dc:b2:c8:04:61:41:43:7f:5f:f6:
         90:27:c5:4f:1b:9d:07:b2:7f:d2:62:5f:c4:3a:fb:a5:8e:4b:
         95:87:78:fb:a8:08:34:25:e1:12:a7:47:68:85:29:1c:64:6e:
         79:bb:62:2d:71:7a:c7:a0:0d:62:9c:43:1d:d2:d6:42:5d:46:
         91:ed:db:2c:79:51:cd:7d:de:2f:cb:81:fd:c1:96:d1:9d:d0:
         b1:c7:a0:cf:47:d3:3b:d9:84:d7:1d:4f:7a:57:37:1c:a8:69:
         29:4c:74:79:e8:26:c5:44:c4:3e:05:a9:a9:61:06:eb:16:0d:
         00:4c:a3:fc:6b:5d:00:8e:c4:49:e5:1f:5e:a2:0a:39:ca:8e:
         54:c4:15:04:2b:df:8e:70:ac:8a:ae:cb:2a:50:75:81:4e:5c:
         65:08:ad:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----