Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.mft
File:                     4822C662B7C0A75DA15B5827C862E2CADD4371D1.mft (raw, json)
Hash identifier:          22J0Oi47YVbD9UjB8CZ277b9jVwJaoNEJ2j+3DOx7uw=
Subject key identifier:   26:7E:82:FE:0C:25:BE:F9:FC:0E:07:E2:CE:41:1E:56:FC:17:CD:89
Authority key identifier: 48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1
Certificate issuer:       /CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
Certificate serial:       7B2C050BDACE93BB8D6A25F88AEF5C17250CA5F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.mft
Manifest number:          040E
Signing time:             Mon 15 Apr 2024 07:36:45 +0000
Manifest this update:     Mon 15 Apr 2024 07:31:45 +0000
Manifest next update:     Tue 16 Apr 2024 08:00:45 +0000
Files and hashes:         1: 34352e3233312e31362e302f32342d3234203d3e20323637313931.roa (hash: MMp0bs7kfjDyhv+3pyY+0Uja8/LcPJUZLQu0pqM/J7o=)
                          2: 323830343a343939343a3a2f33362d3336203d3e20323637313931.roa (hash: VhleXhusWputx/aE1GWGs0e4JOu2tpJWejaBGnHAM8g=)
                          3: 4822C662B7C0A75DA15B5827C862E2CADD4371D1.crl (hash: WubacRh308GcYXlTrDpofeCCFfVvBVSNYHlJA4aK2IE=)
                          4: 34352e3233312e31382e302f32342d3234203d3e20323637313931.roa (hash: J/bdy+SxBy5URxhmD1JXmNpYSUdAdeXfPsbINuf4xg0=)
                          5: 34352e3233312e31372e302f32342d3234203d3e20323637313931.roa (hash: Tyy1WoVmcLlnU+ykqRN0x3GmvSs2QTmj1amFqr0tuFs=)
                          6: 34352e3233312e31392e302f32342d3234203d3e20323637313931.roa (hash: VUF0sbQS5nGBvP0ymNZavAOgiAynRRD50GJKJ2gxmHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2c:05:0b:da:ce:93:bb:8d:6a:25:f8:8a:ef:5c:17:25:0c:a5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4822C662B7C0A75DA15B5827C862E2CADD4371D1
        Validity
            Not Before: Apr 15 07:31:45 2024 GMT
            Not After : Apr 16 08:00:45 2024 GMT
        Subject: CN=267E82FE0C25BEF9FC0E07E2CE411E56FC17CD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4d:9b:8e:66:10:b9:cd:52:6b:0e:b2:79:68:
                    f2:ec:2f:e3:63:ae:c5:62:e3:8c:95:1a:59:11:9e:
                    12:db:23:35:53:db:d3:51:8d:3b:ef:23:eb:52:ca:
                    02:7b:30:0d:00:06:09:61:2e:12:e8:0a:c7:5c:85:
                    e2:ec:b8:73:5c:3e:72:c9:9c:85:31:a8:d9:f6:18:
                    fc:63:ec:1d:97:43:c4:24:75:57:88:2f:9b:5a:95:
                    81:39:40:3f:bd:26:67:e2:b0:29:b0:49:50:6a:95:
                    29:5d:aa:5d:05:46:71:82:23:85:e7:4d:6c:dc:17:
                    48:29:0e:4a:64:9c:05:1f:d2:a7:88:fd:db:3f:c9:
                    28:a2:2d:ce:f8:a0:59:30:2b:69:09:b0:00:15:d3:
                    9e:f9:66:33:9c:cc:f3:b4:4b:e3:2b:51:fd:b0:6b:
                    23:b8:a8:06:b0:9b:cb:1e:25:3a:69:17:d9:c9:63:
                    54:ab:0c:56:7c:cc:11:2d:65:01:89:98:55:40:56:
                    53:85:70:56:3a:0d:19:3b:50:03:a9:f2:7e:f3:dd:
                    e1:c0:00:e1:7c:da:9c:70:5a:04:e2:c8:e0:92:68:
                    a7:a7:03:c9:ca:bd:31:65:2e:fd:bc:d1:e4:fd:ab:
                    a0:d0:a7:b0:67:71:0a:d7:61:b8:6e:94:9b:3c:83:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:82:FE:0C:25:BE:F9:FC:0E:07:E2:CE:41:1E:56:FC:17:CD:89
            X509v3 Authority Key Identifier:
                keyid:48:22:C6:62:B7:C0:A7:5D:A1:5B:58:27:C8:62:E2:CA:DD:43:71:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/4822C662B7C0A75DA15B5827C862E2CADD4371D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:f7:c7:b8:5f:d1:86:6b:dc:7f:ef:11:ed:ff:f4:75:06:
         9a:29:9a:a7:d4:f7:fc:78:20:d2:a0:96:f3:ff:67:fe:6d:53:
         d5:27:a2:e6:5b:c6:b0:7d:be:8f:ac:f9:61:ef:15:7a:2e:01:
         7a:1c:e0:19:ee:38:df:1c:d0:89:fb:5a:a3:df:f9:a7:36:46:
         d2:ee:d3:50:cd:9b:71:c7:46:6f:ff:0e:25:2a:58:07:2e:14:
         1b:2d:ce:b9:61:32:54:2a:81:56:bc:5f:50:4e:6a:89:1c:6e:
         a3:d6:e6:ed:0d:a5:d8:42:71:f3:b1:b6:f2:08:6f:01:a5:70:
         ce:6e:56:7c:71:a4:98:f5:24:05:d7:93:61:2d:1b:0a:21:ff:
         78:2b:8f:bf:46:c8:f8:8d:ca:ba:75:4b:f3:00:40:e6:9f:f4:
         1b:20:78:b5:fc:0d:9c:ac:9c:04:21:7a:c0:dc:72:23:96:ee:
         cc:e8:b3:27:93:4a:d5:01:51:4d:21:d1:f9:87:18:a3:67:a3:
         b7:e0:f2:01:59:86:e5:ee:7b:21:fd:8e:70:7a:ef:3e:90:b7:
         94:1d:57:83:80:50:bc:a3:fb:d5:a7:04:0f:2b:82:59:36:c6:
         4c:38:7b:99:9a:d0:0d:88:27:dd:0e:bd:7e:83:98:27:de:b9:
         78:b8:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----