Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/BAF2F00AF9A4B0421C581606DECAACE42785F24D.mft
File:                     BAF2F00AF9A4B0421C581606DECAACE42785F24D.mft (raw, json)
Hash identifier:          kDGKbcTb7XaS4EFW+E70W8p1kc0ln1ym4EE5ofSRIQI=
Subject key identifier:   71:F7:13:56:C9:09:EB:2E:DE:24:EC:5E:AA:0C:CC:A8:46:1B:F7:74
Authority key identifier: BA:F2:F0:0A:F9:A4:B0:42:1C:58:16:06:DE:CA:AC:E4:27:85:F2:4D
Certificate issuer:       /CN=BAF2F00AF9A4B0421C581606DECAACE42785F24D
Certificate serial:       48192A5D0FBA081F0E896102DF47EDF7B54EBA26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAF2F00AF9A4B0421C581606DECAACE42785F24D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/BAF2F00AF9A4B0421C581606DECAACE42785F24D.mft
Manifest number:          0A
Signing time:             Sun 14 Apr 2024 20:35:44 +0000
Manifest this update:     Sun 14 Apr 2024 20:30:44 +0000
Manifest next update:     Mon 15 Apr 2024 23:16:44 +0000
Files and hashes:         1: 34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa (hash: GcjT+1EuHvMamEBmjhO6tKUyXVSVxfd5RkfQfdOyaD4=)
                          2: BAF2F00AF9A4B0421C581606DECAACE42785F24D.crl (hash: t/uwq6FaG28vgd7T8GNYPCMPZnyEo5mKYP8Zf4egLbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:19:2a:5d:0f:ba:08:1f:0e:89:61:02:df:47:ed:f7:b5:4e:ba:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF2F00AF9A4B0421C581606DECAACE42785F24D
        Validity
            Not Before: Apr 14 20:30:44 2024 GMT
            Not After : Apr 15 23:16:44 2024 GMT
        Subject: CN=71F71356C909EB2EDE24EC5EAA0CCCA8461BF774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:01:05:49:f2:8a:b9:1c:4b:2f:cd:3f:93:
                    f1:16:82:83:6e:64:fb:99:98:82:88:ae:4c:a8:e9:
                    19:82:d5:96:49:0c:f0:a2:26:fc:bd:3e:4d:77:bb:
                    f4:b5:b1:53:db:32:27:85:93:a6:69:4a:7f:a7:17:
                    f7:fd:61:47:74:39:f3:b7:8c:93:60:3c:de:43:24:
                    1d:53:79:ad:d9:5c:19:f3:57:72:47:89:b5:05:e3:
                    7b:8c:39:e1:7a:1b:28:7a:46:39:b0:96:2b:ef:09:
                    f3:85:16:f4:62:bd:3e:96:c0:c0:ea:01:b4:30:1f:
                    e6:5a:2a:ec:d8:77:34:b6:97:7d:8d:27:d8:0d:4c:
                    6c:f1:4f:02:f5:d1:9e:43:fc:bb:77:ef:48:c8:ae:
                    30:9b:20:92:47:1e:c4:17:8e:64:b8:ad:aa:c4:7a:
                    a7:37:92:8d:43:6a:d7:3a:ec:85:1a:6a:7f:e4:5d:
                    a3:bf:5e:eb:0d:63:c3:5d:a9:9e:e9:93:c2:8d:2e:
                    b7:11:67:a5:2c:9a:92:f4:7d:c1:02:41:2f:3c:f3:
                    ac:f0:15:7e:41:9f:ac:da:11:47:f6:76:a1:e4:f7:
                    89:b9:74:c7:54:c6:44:6c:26:57:9d:8c:fe:d8:39:
                    c8:d4:d5:a7:c5:54:94:7c:e2:97:e2:73:92:77:75:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F7:13:56:C9:09:EB:2E:DE:24:EC:5E:AA:0C:CC:A8:46:1B:F7:74
            X509v3 Authority Key Identifier:
                keyid:BA:F2:F0:0A:F9:A4:B0:42:1C:58:16:06:DE:CA:AC:E4:27:85:F2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/BAF2F00AF9A4B0421C581606DECAACE42785F24D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAF2F00AF9A4B0421C581606DECAACE42785F24D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/BAF2F00AF9A4B0421C581606DECAACE42785F24D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:9e:fd:f7:96:2f:cf:26:51:85:0d:d3:1d:4b:67:81:bb:
         45:2e:a3:ec:d0:81:42:84:ad:d0:81:64:99:ac:de:4c:c5:15:
         b5:75:ad:e6:b6:34:a9:35:b1:67:e1:f9:9c:93:71:a6:3a:f8:
         3b:f7:b3:d2:7e:74:c0:42:33:bd:32:85:01:07:29:6a:48:6b:
         4c:5d:ea:8d:14:9d:27:75:c4:8c:c4:8c:2e:5b:e7:10:1c:43:
         a3:e5:df:29:22:3c:7c:6d:50:b3:19:5e:ba:a7:41:c5:d1:f2:
         19:5b:1d:e3:8f:c8:0e:ef:bc:c2:50:41:ee:4c:23:a2:85:9a:
         36:d8:0d:3f:98:b6:e6:fb:7e:18:36:b3:c5:6d:40:d7:30:65:
         31:3f:ba:c1:a2:e6:e6:67:72:ac:c5:3a:37:c2:46:e6:70:7a:
         5b:ec:44:c1:55:0b:e8:6c:88:fe:80:06:5b:91:28:0e:96:d8:
         48:a4:9a:99:07:89:3a:4d:48:ab:27:b6:4d:b1:69:d8:80:8a:
         52:3a:c6:44:f0:d5:f7:d2:77:33:20:b3:20:ff:54:ad:92:7f:
         2e:16:26:d8:41:50:f5:f2:d5:4b:16:29:32:dd:4c:d9:23:bb:
         44:22:b3:13:39:e3:b4:db:ac:70:ee:f6:97:6b:4f:ea:23:db:
         9e:a9:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----