Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.mft
File:                     23299A1007FF062D7310CF8541CCC9DCD192C59A.mft (raw, json)
Hash identifier:          MwKp/FEQz2a65AFSMWKMg/tevzkaP+Yzi8vM2Js2m7c=
Subject key identifier:   74:76:29:B9:2F:E9:26:F0:A2:24:3B:8D:21:5D:20:36:9C:06:5A:4D
Authority key identifier: 23:29:9A:10:07:FF:06:2D:73:10:CF:85:41:CC:C9:DC:D1:92:C5:9A
Certificate issuer:       /CN=23299A1007FF062D7310CF8541CCC9DCD192C59A
Certificate serial:       2F916979D791239EEAD0BC85DE4B884D2979D976
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.mft
Manifest number:          0243
Signing time:             Mon 15 Apr 2024 04:38:12 +0000
Manifest this update:     Mon 15 Apr 2024 04:33:12 +0000
Manifest next update:     Tue 16 Apr 2024 06:21:12 +0000
Files and hashes:         1: 34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa (hash: oAlV8XD7UqcyBj+aXGGujPagvE7owmXupxs/oq2y5Sw=)
                          2: 23299A1007FF062D7310CF8541CCC9DCD192C59A.crl (hash: 4uN8/9Gi9QmDXUSnu0oKKf1uFS3fqNzsi1ZuunPGwDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:91:69:79:d7:91:23:9e:ea:d0:bc:85:de:4b:88:4d:29:79:d9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23299A1007FF062D7310CF8541CCC9DCD192C59A
        Validity
            Not Before: Apr 15 04:33:12 2024 GMT
            Not After : Apr 16 06:21:12 2024 GMT
        Subject: CN=747629B92FE926F0A2243B8D215D20369C065A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:b0:36:2a:68:4e:f4:a7:1d:e2:4a:d6:d8:
                    9f:45:09:57:6f:6c:67:ad:ac:f0:a1:8a:46:35:19:
                    6a:b3:65:b3:9a:bd:58:0a:a2:8b:09:fe:2c:f6:68:
                    75:74:d3:ef:63:db:fd:03:51:82:9e:b0:06:2b:4f:
                    5d:fb:b7:cd:5d:63:c2:95:df:37:ed:65:5b:09:d4:
                    bf:4f:65:25:cf:de:68:d8:02:6e:2e:ef:aa:ef:ba:
                    6b:28:06:50:7f:5f:a2:f6:28:0e:07:f7:ac:0b:68:
                    6f:af:4a:15:74:1a:dd:f9:2a:30:13:e2:f8:a0:ba:
                    d9:5e:04:12:2c:cf:01:54:78:77:22:b5:d1:84:d3:
                    f2:ed:7d:40:a5:cf:f8:12:df:65:46:64:e2:38:f0:
                    d7:27:b7:7c:4d:dc:94:7b:73:35:33:89:15:77:ad:
                    c7:18:66:38:89:2e:7d:fe:cf:1f:3e:bc:a8:9e:73:
                    f3:38:6f:6c:6c:ca:06:70:c5:db:57:a0:1f:17:5a:
                    2c:86:d8:4a:0a:e5:cf:45:e3:20:9b:07:3d:de:3e:
                    03:5b:22:e4:ff:75:72:43:e9:a1:05:28:8c:7e:19:
                    dc:8a:4d:18:1f:fb:21:ed:a7:fd:67:f1:b3:67:95:
                    8e:e5:9a:82:27:fe:07:e7:77:ae:f6:ff:de:99:32:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:76:29:B9:2F:E9:26:F0:A2:24:3B:8D:21:5D:20:36:9C:06:5A:4D
            X509v3 Authority Key Identifier:
                keyid:23:29:9A:10:07:FF:06:2D:73:10:CF:85:41:CC:C9:DC:D1:92:C5:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/23299A1007FF062D7310CF8541CCC9DCD192C59A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:2d:c5:0c:20:1c:16:5c:c2:b8:03:f2:b0:80:39:1a:0b:
         83:4f:1f:8d:43:84:a7:c1:86:1b:95:a2:c0:29:ad:56:5c:e6:
         f8:98:b7:2a:05:09:a3:89:c3:ed:51:cc:1c:8d:13:41:a2:a5:
         9c:87:fb:69:85:4a:c3:1b:ca:0a:fd:8a:13:94:be:4a:68:39:
         e7:9e:87:6d:02:69:7f:70:94:76:07:95:ce:5e:0b:aa:7b:4f:
         02:14:3b:21:fe:74:14:de:89:68:d1:bb:b2:e9:77:a6:4f:0f:
         9f:d2:1d:dc:85:c6:7a:b6:23:90:97:b0:d4:98:5e:67:cd:85:
         9b:59:d6:86:77:5a:91:88:92:2a:b2:f2:6c:92:9f:44:54:ab:
         34:b3:e7:8e:70:54:72:3d:03:89:db:d8:33:a9:a8:01:20:59:
         ae:b2:b0:5e:09:b3:e6:44:2b:85:e1:ed:3d:b0:80:91:96:b2:
         9e:29:7b:76:23:28:ca:c2:40:48:ad:b5:e4:c5:16:10:0a:dd:
         a0:75:a2:b5:b7:f9:51:8e:2c:6a:eb:93:71:6e:0e:e5:dc:f0:
         61:83:a5:1f:a9:cd:6c:d7:aa:94:33:39:6c:dd:f2:32:78:d1:
         6f:4d:24:cc:0c:10:b8:f9:0d:bd:3d:48:55:32:09:14:fe:cf:
         da:a1:78:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----