Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.mft
File:                     3508ABC74EC71F9482F4469C06D817E172192BCC.mft (raw, json)
Hash identifier:          pYQlz2XdrhqVRxmeOCxYXjhofyy1X7cOz2WjZS9hcpc=
Subject key identifier:   51:FD:8E:FE:E6:F8:98:74:D0:1A:40:64:14:51:FB:3F:43:EE:75:C8
Authority key identifier: 35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC
Certificate issuer:       /CN=3508ABC74EC71F9482F4469C06D817E172192BCC
Certificate serial:       47000CAAE98A8FAB01434E71184F80825731224E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.mft
Manifest number:          01BB
Signing time:             Mon 15 Apr 2024 09:25:24 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:24 +0000
Manifest next update:     Tue 16 Apr 2024 10:50:24 +0000
Files and hashes:         1: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: cSCstxpvnGA3M/kMFKX5QN26rmSOvFg0xHRmMQ2qFak=)
                          2: 323830343a383630343a313030303a3a2f33362d3336203d3e20323732363134.roa (hash: DLfU6pzXS0lZG/ibdS+rBTF2n5O4+0ccR34NHq3CKc0=)
                          3: 323830343a383630343a323030303a3a2f33362d3336203d3e20323732363134.roa (hash: lQztL9iDqSJk8YnZE6oCMahdapuFuTL/lVxEXpuEcUY=)
                          4: 3508ABC74EC71F9482F4469C06D817E172192BCC.crl (hash: JQ/lr1420gdsjRAuJXdOw5Hl29Gwq1zhivl53dwTyU0=)
                          5: 323830343a383630343a3a2f33362d3336203d3e20323732363134.roa (hash: XR4BknCMCjOKtNQfaMvcp/D8fTlvVltmWQ/mx9Tfn+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:00:0c:aa:e9:8a:8f:ab:01:43:4e:71:18:4f:80:82:57:31:22:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3508ABC74EC71F9482F4469C06D817E172192BCC
        Validity
            Not Before: Apr 15 09:20:24 2024 GMT
            Not After : Apr 16 10:50:24 2024 GMT
        Subject: CN=51FD8EFEE6F89874D01A40641451FB3F43EE75C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:b9:96:b4:48:ab:85:36:57:50:b7:57:69:
                    a4:10:e0:a9:8c:c3:2e:98:07:6e:ca:e0:9f:cb:be:
                    a9:22:06:ef:1c:94:9c:f2:0a:f1:28:ae:fb:e3:33:
                    5a:51:30:62:39:7c:01:b9:50:9b:35:45:f4:13:2f:
                    63:f7:4e:81:b7:f2:6a:2a:c8:b5:27:e1:96:0c:46:
                    12:4a:b1:51:bf:cd:51:76:59:6e:46:4b:1b:27:12:
                    31:94:83:d1:87:28:c2:88:ac:7b:bc:6d:83:ad:d4:
                    81:7b:31:a4:b6:65:1c:b2:bc:8f:53:1d:49:e8:54:
                    00:6e:f8:2f:eb:ef:52:e7:67:07:83:eb:c1:95:1a:
                    29:18:7e:23:15:3d:bc:65:5f:f6:a7:f7:4b:6b:71:
                    9b:01:ff:25:4d:a9:5f:06:4c:7a:b4:78:4b:e1:84:
                    35:0b:47:31:4c:36:17:8f:98:87:d5:5d:78:7a:1c:
                    cd:ef:c4:a0:bc:6e:6a:8b:2e:0f:f8:38:92:17:fe:
                    1c:8c:62:f7:5d:88:b0:40:fb:54:5b:5a:b5:ed:cf:
                    fd:d1:80:f6:dd:81:f5:08:94:55:3e:97:9e:33:43:
                    63:55:bf:c4:41:0a:38:d6:5d:f7:4a:6f:a5:21:d4:
                    84:c6:f3:70:82:88:45:d1:ff:c4:a5:be:f5:80:b2:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FD:8E:FE:E6:F8:98:74:D0:1A:40:64:14:51:FB:3F:43:EE:75:C8
            X509v3 Authority Key Identifier:
                keyid:35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:6c:7d:78:fb:c5:70:5f:aa:75:3c:c9:59:89:ba:ef:f1:
         ed:06:30:03:c0:5b:58:3d:f2:b1:d3:95:0c:2b:ef:c3:da:82:
         94:04:73:b9:07:c6:47:e7:f3:56:ca:95:a8:48:8c:40:dd:40:
         49:c9:63:29:77:b0:5b:a7:4e:6d:67:3e:d7:51:61:48:2b:ba:
         1d:58:85:45:86:29:59:e4:07:94:d1:84:3b:e0:ef:3a:07:ac:
         4a:67:4c:03:bf:fc:94:28:93:31:ad:1f:68:0f:57:60:bc:c5:
         42:f2:a2:15:78:15:68:df:ed:7b:0b:ab:9a:9a:e4:d2:ac:8d:
         02:d8:3d:15:9f:77:f1:39:1c:d7:68:fd:75:7a:9b:39:75:08:
         b4:77:f3:2c:b0:1b:b6:02:cf:18:ad:5b:69:cd:c9:b1:b2:be:
         89:86:9f:01:eb:95:84:d6:b8:3c:a5:07:ef:a2:e3:da:eb:06:
         60:0d:57:1e:c4:86:eb:6c:6c:e6:79:b6:59:b8:ca:29:95:50:
         1d:d9:91:04:00:33:67:77:7d:a9:04:be:85:48:bc:b8:7d:e6:
         1b:1e:f7:e8:02:fe:71:3c:66:56:ca:6b:7b:c2:e9:b8:a9:d8:
         c2:e1:07:db:64:fd:84:9e:84:b1:d4:28:c2:e6:20:e4:f2:9c:
         b3:51:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----