Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.mft
File:                     CDAE8BA612485E3850DDE34806E11BB871C0D667.mft (raw, json)
Hash identifier:          UFm0B5e1sJYWNe1EWO2wLKVuPcgoyc/E/JA2sMZZzKc=
Subject key identifier:   57:F6:80:78:E0:A7:FC:EE:85:75:2D:7B:36:8A:2E:D0:1D:39:7A:C6
Authority key identifier: CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67
Certificate issuer:       /CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
Certificate serial:       08D4BE0DD4E3254EF53A7A4DD9DEC5C1E456D18E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.mft
Manifest number:          0383
Signing time:             Mon 15 Apr 2024 05:37:59 +0000
Manifest this update:     Mon 15 Apr 2024 05:32:59 +0000
Manifest next update:     Tue 16 Apr 2024 07:47:59 +0000
Files and hashes:         1: 323830343a323935383a3a2f33322d3336203d3e20323634303130.roa (hash: kNqDciozhI+luHFWxXR6drOpfNQtzmHr1+oo5BV2fRc=)
                          2: 3134332e302e3139362e302f32322d3234203d3e20323634303130.roa (hash: OH2sI0ojXll3BceJiCrGzRdl/+lFk5XwON3kJtxV8js=)
                          3: CDAE8BA612485E3850DDE34806E11BB871C0D667.crl (hash: vTP+o0Rjdm90r2t30CAwjC+zqxsmK7g2IS7pSAbzxeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d4:be:0d:d4:e3:25:4e:f5:3a:7a:4d:d9:de:c5:c1:e4:56:d1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
        Validity
            Not Before: Apr 15 05:32:59 2024 GMT
            Not After : Apr 16 07:47:59 2024 GMT
        Subject: CN=57F68078E0A7FCEE85752D7B368A2ED01D397AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:f8:a7:b1:42:ae:59:04:36:2b:ee:c2:a8:
                    22:7b:5f:76:57:f5:01:99:46:8e:c6:e8:da:3e:4f:
                    19:98:e9:e6:78:05:60:38:48:c2:0d:c8:c9:09:33:
                    86:08:a6:8b:74:a7:49:b6:e5:35:dc:36:d4:ec:5d:
                    c5:b7:0b:b7:a9:4e:3a:35:77:1e:fc:b9:ec:9a:c4:
                    78:c1:3b:11:ab:eb:0e:66:c5:e0:ba:5a:ba:82:1e:
                    67:e4:17:cf:0b:0c:dd:59:8f:45:f8:1d:54:b8:c1:
                    be:22:ca:63:6a:5c:20:8d:20:b5:60:02:24:00:8e:
                    25:60:45:0f:e3:64:e5:8c:24:58:a0:53:e0:4f:87:
                    84:d2:69:30:b3:8d:4d:02:ea:a6:e4:0f:44:af:81:
                    81:b7:0d:c9:a3:68:5f:b2:0c:67:ca:21:45:d7:36:
                    47:91:0c:23:7a:ca:38:ab:70:59:fe:94:13:e2:45:
                    dd:47:52:8d:96:a9:98:6d:5e:f4:b8:c8:d5:1a:73:
                    1e:2b:fb:8b:a6:b9:32:25:e5:ca:f9:08:fd:a9:38:
                    63:5b:76:92:1c:95:f7:6d:9d:74:d5:51:69:55:fb:
                    17:50:0a:fc:92:5b:27:27:a0:81:cf:db:95:6c:cb:
                    a9:29:d8:cc:50:ce:51:a3:19:fa:ab:20:e3:d0:4f:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F6:80:78:E0:A7:FC:EE:85:75:2D:7B:36:8A:2E:D0:1D:39:7A:C6
            X509v3 Authority Key Identifier:
                keyid:CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:91:df:04:5d:a5:2a:ec:ff:c2:80:94:33:3e:b4:93:d9:
         9e:f6:14:bb:50:40:7c:a1:fd:a8:0e:a0:04:d8:3d:6a:2b:0e:
         16:ed:82:fa:bb:b1:1a:3f:e6:09:8f:34:e4:90:61:3e:9c:66:
         20:90:84:40:b8:5b:d6:4a:45:ba:1d:bf:96:35:68:bd:8e:fa:
         dc:45:68:24:df:8a:ce:11:e2:10:66:32:82:74:e5:63:8c:fd:
         58:ef:12:de:4c:b9:86:b7:6a:4e:2e:b2:de:0a:c3:82:d6:33:
         6a:6c:bd:7e:0a:77:44:3d:a7:35:63:18:b3:11:3a:d0:68:bc:
         9a:62:21:bf:05:e7:3c:2d:cc:e8:2f:a8:87:82:b1:f5:26:1a:
         ae:0d:58:d9:52:eb:eb:79:a1:63:03:71:e8:79:32:d0:77:33:
         9a:0c:fb:e6:c4:23:51:d5:11:b0:34:b8:f8:d0:9a:e1:88:76:
         91:c0:3b:bc:83:1c:fc:8b:cf:0b:8e:02:73:5d:6e:40:38:56:
         99:68:82:5d:15:95:33:23:65:62:ad:0f:14:27:98:fa:23:bd:
         02:0a:a6:b4:6a:0e:0e:a0:60:66:f7:e9:5c:0b:2d:ef:5a:f6:
         22:13:22:86:eb:6a:bd:bb:2b:32:b4:a4:e5:d5:31:17:3b:8a:
         87:81:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----