Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.mft
File:                     16D16B20BBB43E296EB1AC368C83824C9BB0A64B.mft (raw, json)
Hash identifier:          qbHA7gbZaN51oRa+g6IsIIydOq811LONQf+MikdJnTo=
Subject key identifier:   66:32:5D:28:82:37:29:0B:60:4C:E9:CE:46:B1:CE:94:A7:1B:DD:67
Authority key identifier: 16:D1:6B:20:BB:B4:3E:29:6E:B1:AC:36:8C:83:82:4C:9B:B0:A6:4B
Certificate issuer:       /CN=16D16B20BBB43E296EB1AC368C83824C9BB0A64B
Certificate serial:       6F21C9E9C144A6707CB4F08B75D64752DCED9B3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.mft
Manifest number:          3A
Signing time:             Sun 14 Apr 2024 16:52:40 +0000
Manifest this update:     Sun 14 Apr 2024 16:47:40 +0000
Manifest next update:     Mon 15 Apr 2024 20:14:40 +0000
Files and hashes:         1: 16D16B20BBB43E296EB1AC368C83824C9BB0A64B.crl (hash: KalCbN95Wro1Ft4xfvhEYXp33gJp8lD0+gWwlstEhyY=)
                          2: 323830343a383331383a3366303a3a2f34342d3434203d3e20323732313736.roa (hash: FslugfqE+5K8/YpFfrYYcSAaMioypTBgajkyu+y513A=)
                          3: 323830343a383331383a3a2f34382d3438203d3e20323732313736.roa (hash: AxKWY774qmGO9lPQtp8kVStxRrUJxQob6d/fYaxvV9M=)
                          4: 323830343a383331383a3a2f33322d3332203d3e20323732313736.roa (hash: lZf+3R8uSQIb91Q14+AwY0KyFlBpkdWyeWdKl9peHIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:21:c9:e9:c1:44:a6:70:7c:b4:f0:8b:75:d6:47:52:dc:ed:9b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D16B20BBB43E296EB1AC368C83824C9BB0A64B
        Validity
            Not Before: Apr 14 16:47:40 2024 GMT
            Not After : Apr 15 20:14:40 2024 GMT
        Subject: CN=66325D288237290B604CE9CE46B1CE94A71BDD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:49:7f:d9:d1:52:09:55:67:b9:24:aa:d0:
                    0d:2d:d2:44:bf:fd:c7:f0:bf:dc:12:ff:16:ba:fc:
                    29:fa:89:a3:63:e0:28:fd:63:fd:3e:03:fa:fe:ab:
                    c6:e0:bb:e9:5d:d9:10:fd:ee:64:8b:21:5f:9f:57:
                    f4:6b:28:40:02:a8:3f:31:54:ce:13:3c:89:4e:7a:
                    0a:74:a5:de:23:ab:63:5c:4f:07:31:b3:c1:e4:f7:
                    56:ea:37:90:73:de:43:aa:16:21:26:7f:7a:e3:df:
                    af:bf:24:f9:42:00:ca:7a:60:d3:af:c2:c9:b1:cb:
                    5b:17:8f:b5:ff:3c:b2:d0:f0:98:50:fd:63:0e:f2:
                    a7:f5:4b:15:5e:8e:c0:61:2f:08:b2:b4:0a:71:79:
                    8a:2e:a5:b1:fa:30:fa:2a:a5:b7:04:3e:01:45:ac:
                    74:bc:42:85:67:17:6d:97:d6:c2:82:f2:b9:0e:ea:
                    4b:38:fc:6f:7a:bf:28:42:39:41:0d:b1:33:1d:5d:
                    e1:65:cc:f2:b3:71:1f:01:ce:56:33:33:28:10:fd:
                    26:89:0c:af:62:97:fc:f5:80:48:35:e5:f0:f7:f7:
                    1c:e9:4f:d8:13:04:22:3e:e4:8a:28:16:12:ef:46:
                    43:79:06:bd:cf:a1:df:3c:a3:3a:39:c5:45:98:9f:
                    7f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:32:5D:28:82:37:29:0B:60:4C:E9:CE:46:B1:CE:94:A7:1B:DD:67
            X509v3 Authority Key Identifier:
                keyid:16:D1:6B:20:BB:B4:3E:29:6E:B1:AC:36:8C:83:82:4C:9B:B0:A6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:54:c5:c3:8e:1c:e2:23:b9:a1:f1:79:df:e0:5d:82:5d:4e:
         8f:c3:c7:92:47:23:f9:b4:38:c9:40:da:47:99:6f:0c:ee:97:
         63:3a:2f:94:52:a5:57:74:95:2e:05:fe:7b:fc:67:97:55:65:
         f9:8d:dc:38:93:29:a1:5e:fb:cc:7f:dc:aa:91:21:7e:68:35:
         d9:1b:f6:46:12:ab:0d:4d:da:2f:f4:48:6c:ce:84:e2:f7:21:
         3f:32:38:86:e8:80:10:e1:bf:c2:9c:8e:80:06:67:26:29:34:
         4d:44:8d:1e:55:41:bc:ff:38:f7:06:b5:f2:73:b8:72:13:f7:
         ce:97:50:52:e0:90:e6:ab:dd:57:9b:28:bb:d3:58:0d:bb:6b:
         d7:24:16:b8:96:9b:73:14:50:87:df:c8:c1:4f:7f:36:90:7f:
         76:5c:e2:b8:b5:df:b7:d6:f4:27:fc:20:e3:70:8e:12:13:4c:
         e9:06:29:90:61:79:16:d0:94:ea:36:d6:7b:24:d6:e5:fc:0e:
         7c:de:ac:76:a8:68:05:f8:c6:5d:76:ea:7f:5e:2c:f1:55:d1:
         c7:df:6c:17:83:89:8d:9f:7e:7e:64:cc:f0:ac:e8:89:35:2b:
         70:4e:de:2f:7e:c7:93:0d:3a:e8:8e:99:27:d1:88:e9:4c:b1:
         df:4c:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----