Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.mft
File:                     20D0C50C62128FF4D2F9FF85B6A5784BF430123F.mft (raw, json)
Hash identifier:          4W1tgw94jg6Oe1nW6PvZp/NrToCtvPm3CKk6JiTNZb8=
Subject key identifier:   8A:1A:FC:47:84:C6:B6:59:FC:C3:F5:62:33:8D:8C:BA:FD:AC:C7:87
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Certificate issuer:       /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial:       1F8CD46268CE2FC18B7B2118B4B7010A7E46D6AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.mft
Manifest number:          4C
Signing time:             Mon 15 Apr 2024 11:19:58 +0000
Manifest this update:     Mon 15 Apr 2024 11:14:58 +0000
Manifest next update:     Tue 16 Apr 2024 15:10:58 +0000
Files and hashes:         1: 3137302e302e3234382e302f32332d3234203d3e20323632333031.roa (hash: twun+Dph2cGrUCwTUroBiZ5l4s0mvV7dd/zK5TLCppQ=)
                          2: 3137372e38372e3131322e302f32312d3234203d3e20323632333031.roa (hash: 5Cu6ClN4rbWb0bzKXWgtI+C1WdFdHQ8a/tZ8zCaoEUo=)
                          3: 20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl (hash: 6QswoGAi/zvM8NyIChfRAee+fmBtptZiNpgxqsMI9DQ=)
                          4: 3137302e302e3234382e302f32322d3232203d3e20323632333031.roa (hash: 5GryVxQ9eWke/uCbnymTxlmZ2B2iPG6ep75iXmUXajI=)
                          5: 3137302e302e3235302e302f32332d3234203d3e20323632333031.roa (hash: 3KSlJrCfbxnzMz+t6n69v7+Bv+RqWEfSq+P+vEuD0go=)
                          6: 323830343a313832343a3a2f33322d3438203d3e20323632333031.roa (hash: H2YVOBKTPnRXQzTE3yARWqQ1nkvtXA+jAO1YkIxI1S0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8c:d4:62:68:ce:2f:c1:8b:7b:21:18:b4:b7:01:0a:7e:46:d6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
        Validity
            Not Before: Apr 15 11:14:58 2024 GMT
            Not After : Apr 16 15:10:58 2024 GMT
        Subject: CN=8A1AFC4784C6B659FCC3F562338D8CBAFDACC787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:74:d5:74:ec:0d:a0:93:3e:1f:d4:a0:ba:
                    19:f5:81:b9:19:c5:28:48:08:a4:33:29:c0:00:85:
                    f4:9e:00:a2:51:d9:2b:97:85:d3:87:2a:da:74:c8:
                    a7:8a:11:67:f0:3d:d8:0c:99:ab:2e:1e:a8:95:8d:
                    58:3a:23:1d:4d:65:46:b5:4c:c5:03:dd:c7:a8:7b:
                    01:36:97:3e:cc:eb:80:a0:1e:f7:60:4b:48:7a:f0:
                    96:88:a3:3d:bc:30:82:c6:9a:a0:3d:c1:80:4c:e7:
                    77:7a:58:67:c4:b4:87:b3:8b:98:1e:3b:c2:d7:58:
                    04:72:8f:f9:ed:c2:0a:49:19:00:24:e2:60:73:9f:
                    fe:37:8d:68:ad:31:20:a7:94:ae:d3:67:68:4d:a6:
                    e6:34:79:9d:9d:19:79:60:32:df:25:60:e0:f8:29:
                    ea:48:53:66:3a:1d:5d:6e:6f:1a:d7:d0:8a:4a:00:
                    4e:60:27:59:78:3f:a2:08:ba:60:4e:2f:01:5a:47:
                    7a:ce:2d:6e:23:57:25:54:fb:6b:eb:0e:4f:b0:57:
                    09:53:39:59:78:48:f3:e9:30:ed:f0:e3:e0:90:0f:
                    eb:f8:0f:46:73:70:e5:ed:84:cf:a0:ca:0c:bf:cd:
                    37:0c:7a:f9:49:4f:5a:2b:bf:e3:7c:a2:4c:8b:23:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1A:FC:47:84:C6:B6:59:FC:C3:F5:62:33:8D:8C:BA:FD:AC:C7:87
            X509v3 Authority Key Identifier:
                keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:9e:4d:29:d2:00:0f:3e:17:48:be:15:2d:e3:0f:f6:a2:
         82:f0:df:45:09:ef:7d:6c:44:c6:b7:07:6c:a2:c3:fe:a2:46:
         b8:e2:b9:aa:ea:f1:00:24:d8:3c:a1:28:ef:84:e9:71:a9:83:
         de:06:5f:3d:bc:2e:59:23:1b:3d:74:6e:3e:77:ec:51:3f:ce:
         6a:20:5e:9b:95:55:8e:4b:d4:44:57:9a:3a:03:2e:ee:74:45:
         73:27:c2:f5:c6:67:97:d1:5f:3f:5a:0f:85:97:45:67:f4:4c:
         c4:cf:52:44:59:13:e9:1a:95:d4:9a:6e:1e:a1:d8:3d:3c:72:
         cc:19:85:9c:2e:0a:47:9c:56:15:d8:33:f4:ce:c5:26:eb:f0:
         d7:b8:07:4f:16:0a:94:6e:44:b7:52:79:83:6e:2f:c1:2d:3e:
         9f:06:69:b7:b7:36:11:4c:31:a1:9e:6d:a5:e9:3c:24:d8:f3:
         45:28:24:84:85:8f:fa:0e:d2:cc:48:68:10:d9:a1:6d:29:1c:
         4c:98:5e:0a:34:29:de:cf:15:fe:cd:28:9e:64:80:5f:92:f0:
         5a:7c:a7:c3:05:38:44:c6:58:ea:c3:17:5b:5c:8c:3a:f7:ee:
         0c:2f:7c:eb:2a:dd:ff:23:e5:fc:f7:db:9d:61:97:c7:d5:65:
         40:0a:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----