Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.mft
File:                     A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.mft (raw, json)
Hash identifier:          f9FWLIbh8CRrTa1lB+5ypI8ZbFu+qWH6oySQ1uvoFkM=
Subject key identifier:   E6:B7:C9:E2:0B:61:62:F2:AE:8E:94:09:BE:67:03:88:7B:0C:61:A1
Authority key identifier: A3:EF:70:86:C3:F6:DD:56:AC:E7:C8:59:6F:89:BC:53:DA:07:5E:A5
Certificate issuer:       /CN=A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5
Certificate serial:       690DC07D1E4AAF5ACCCDD381C29F1E94FC4EE8F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.mft
Manifest number:          0108
Signing time:             Mon 15 Apr 2024 10:30:37 +0000
Manifest this update:     Mon 15 Apr 2024 10:25:37 +0000
Manifest next update:     Tue 16 Apr 2024 11:39:37 +0000
Files and hashes:         1: 323830343a376138343a3a2f33322d3336203d3e20323731333736.roa (hash: lfVa6mvVnaydIKkWdtcV3wbosjOjIffyNIlVAKYpG/M=)
                          2: 3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa (hash: I4sHe8UwY1as0wvw7+V8zcHBxg3c37rBZ2Ol5h+YQy8=)
                          3: A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.crl (hash: IJJnmm+9l6Au3kMO246qBrrICttLO7BrDJlnb1qPb20=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0d:c0:7d:1e:4a:af:5a:cc:cd:d3:81:c2:9f:1e:94:fc:4e:e8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5
        Validity
            Not Before: Apr 15 10:25:37 2024 GMT
            Not After : Apr 16 11:39:37 2024 GMT
        Subject: CN=E6B7C9E20B6162F2AE8E9409BE6703887B0C61A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:9f:ac:09:3f:5d:a5:ed:0d:a0:45:ed:9b:
                    84:47:56:f9:1e:f9:b5:3e:bb:5d:ee:f4:50:69:92:
                    45:cf:2c:06:88:49:93:3c:09:1c:10:34:47:7a:60:
                    84:40:0e:85:64:a3:f3:cf:a5:2b:df:e8:bc:41:3a:
                    f7:a3:37:bd:0c:64:00:29:87:51:a5:ce:ce:bf:d4:
                    13:94:b9:49:ec:3c:a6:64:f6:60:85:d0:7a:61:27:
                    cf:58:64:34:c8:cd:82:96:ce:55:f8:d1:f0:30:10:
                    ee:75:02:76:83:c2:d6:4f:47:4d:c0:db:af:4e:dc:
                    99:a5:23:ee:4e:34:47:13:95:96:d9:41:68:a2:79:
                    37:68:6d:d1:c7:5a:7f:03:33:2b:ad:b8:ce:3f:41:
                    5f:cf:18:df:6f:4e:69:b0:5c:3b:09:3a:fc:6b:d0:
                    fe:85:07:d5:a6:8d:80:c9:ed:06:04:c8:b0:73:51:
                    bb:65:31:72:24:f0:ab:75:c4:dc:95:e5:de:91:67:
                    83:a7:33:51:ec:08:5a:b1:0a:af:e8:ac:eb:81:91:
                    9f:a0:c0:db:71:51:a5:90:3c:96:bc:68:ab:94:7b:
                    9b:14:59:4d:8f:6a:fe:e7:9e:86:db:7f:a4:cd:75:
                    a2:19:ff:05:7b:3a:e9:26:bc:7a:a2:88:76:19:3f:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:C9:E2:0B:61:62:F2:AE:8E:94:09:BE:67:03:88:7B:0C:61:A1
            X509v3 Authority Key Identifier:
                keyid:A3:EF:70:86:C3:F6:DD:56:AC:E7:C8:59:6F:89:BC:53:DA:07:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:35:eb:cb:83:cd:1d:2a:00:a8:d0:ef:ea:4e:b0:dd:84:79:
         c1:7d:1b:55:2d:7c:00:bf:a0:68:f6:e5:fc:e5:b8:85:ba:25:
         58:7c:f1:8b:c3:3f:f0:fb:43:a3:3d:80:fa:a8:52:1e:ea:ba:
         8d:24:bb:c2:2d:e6:a6:58:06:da:89:3e:e5:f6:ec:34:ec:48:
         89:31:95:42:af:67:9c:d4:cf:ab:91:e4:02:bd:02:67:5c:91:
         ea:07:45:a8:9d:51:87:b6:ec:f2:99:2f:42:85:6e:54:6b:f4:
         5c:99:9a:b3:82:51:87:03:df:43:c4:db:46:10:5a:3c:f1:8d:
         74:8a:35:ca:02:5e:85:aa:3b:98:48:54:5d:8f:c8:fd:9a:41:
         b5:a4:6a:3f:2b:65:08:82:42:aa:b7:ac:09:03:80:02:47:cb:
         e0:fd:29:50:66:c7:50:3b:49:53:2f:6d:9a:21:8c:32:a1:42:
         c2:96:d0:5d:c5:ff:98:e0:ce:12:54:9b:47:a7:97:25:95:8d:
         8b:2e:cf:5e:bd:79:10:b4:13:84:21:8e:81:3e:27:8a:c6:d6:
         f4:f1:80:15:26:a0:a6:dc:57:93:7f:30:2f:9b:34:16:8e:ea:
         6b:28:73:91:04:a9:09:95:20:10:af:5d:ae:d0:c1:ae:ab:3a:
         7e:16:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----