Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/D013D6CAFF551C6AF6F856674C682771D78090E1.mft
File:                     D013D6CAFF551C6AF6F856674C682771D78090E1.mft (raw, json)
Hash identifier:          E5p+45uMAlEhZcZWTi3jq3OkHG60xjh7wBmk/aHJdMs=
Subject key identifier:   21:F3:AC:6A:17:65:35:B7:7D:86:1B:82:2F:98:EF:1D:43:85:47:C7
Authority key identifier: D0:13:D6:CA:FF:55:1C:6A:F6:F8:56:67:4C:68:27:71:D7:80:90:E1
Certificate issuer:       /CN=D013D6CAFF551C6AF6F856674C682771D78090E1
Certificate serial:       0ED221A86E244817D5495628FFA761CF41710020
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D013D6CAFF551C6AF6F856674C682771D78090E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/D013D6CAFF551C6AF6F856674C682771D78090E1.mft
Manifest number:          0286
Signing time:             Mon 15 Apr 2024 10:44:57 +0000
Manifest this update:     Mon 15 Apr 2024 10:39:57 +0000
Manifest next update:     Tue 16 Apr 2024 10:59:57 +0000
Files and hashes:         1: 323830343a336236343a3a2f33322d3432203d3e20323636313436.roa (hash: f1Vq4pPsiexXiVAMYat3ZAc38DGGqNivetf4DgjqgMM=)
                          2: D013D6CAFF551C6AF6F856674C682771D78090E1.crl (hash: JXE0evCnV5eEnwsW4BkGNjPccempOuYtgIMoJF/6Nzc=)
                          3: 3136302e32302e36382e302f32322d3234203d3e20323636313436.roa (hash: 9nyqheaW3djVfwKq66xjWvOoFygPzvf+xQ5HGx+PE/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d2:21:a8:6e:24:48:17:d5:49:56:28:ff:a7:61:cf:41:71:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D013D6CAFF551C6AF6F856674C682771D78090E1
        Validity
            Not Before: Apr 15 10:39:57 2024 GMT
            Not After : Apr 16 10:59:57 2024 GMT
        Subject: CN=21F3AC6A176535B77D861B822F98EF1D438547C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:65:63:57:84:43:29:29:7e:d2:6a:63:b7:
                    39:28:ee:ef:a1:2c:ab:20:cd:53:24:42:73:44:0e:
                    f1:84:5b:7e:d1:be:f7:21:5a:75:c8:fa:d0:46:cb:
                    40:7b:66:bf:f3:20:35:58:e9:cb:8d:ec:af:ec:77:
                    b2:7d:f1:f7:e6:35:80:fc:c9:2f:d3:b1:db:e6:45:
                    1e:ae:23:55:16:a8:f5:34:78:5d:11:f1:f3:78:7e:
                    3b:a9:d2:18:f6:70:35:e7:04:e9:7e:82:ee:9e:82:
                    5f:7c:8a:db:00:ee:57:6c:56:83:fc:a6:d6:39:69:
                    2d:3b:a4:23:a3:9a:48:10:a2:34:0b:6b:d0:e7:17:
                    db:ff:c9:d6:39:91:5f:3a:e9:8e:3c:91:4b:2e:5c:
                    86:ed:40:60:15:c7:c0:0e:42:a3:7f:ba:28:61:a9:
                    0f:91:aa:9c:71:54:96:99:e9:e9:4e:a8:62:4d:89:
                    60:16:37:02:d7:35:2a:1e:51:b7:54:fa:41:02:81:
                    72:48:eb:d9:2a:ac:33:3f:b1:b5:4f:a4:99:54:cb:
                    81:b6:e8:19:70:01:b5:7b:06:33:d3:4c:4c:08:30:
                    80:56:cf:8f:a4:45:3f:73:82:58:24:80:01:55:41:
                    a6:d4:44:10:44:69:7c:38:26:be:3f:ec:c3:17:a2:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:AC:6A:17:65:35:B7:7D:86:1B:82:2F:98:EF:1D:43:85:47:C7
            X509v3 Authority Key Identifier:
                keyid:D0:13:D6:CA:FF:55:1C:6A:F6:F8:56:67:4C:68:27:71:D7:80:90:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/D013D6CAFF551C6AF6F856674C682771D78090E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D013D6CAFF551C6AF6F856674C682771D78090E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/D013D6CAFF551C6AF6F856674C682771D78090E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:53:12:82:e8:87:5f:d6:d3:4a:58:4e:75:9a:bb:7a:7a:05:
         1d:59:11:42:a8:7f:f4:28:3d:96:d1:05:7e:e6:ad:d2:e1:00:
         29:a3:07:15:b7:a1:54:b2:d4:41:79:5d:25:e5:3d:e3:a2:23:
         8b:05:93:b3:e5:cb:ed:b7:fa:b2:75:ef:d7:ab:8d:66:a8:1a:
         af:66:c8:e3:83:e5:ea:5e:0e:65:9d:91:ed:00:b6:ce:2d:63:
         a9:87:b3:3a:78:b5:d5:00:87:43:90:55:4f:62:7d:78:78:0f:
         fc:cd:d5:79:38:a9:13:73:35:5f:8e:52:39:6a:e1:26:75:01:
         4e:21:ab:42:b9:a7:7a:05:b8:0e:64:c7:1b:1c:60:b0:f5:29:
         12:18:84:2e:19:90:51:4d:a0:fb:8c:e9:92:86:52:ab:dd:10:
         6e:73:fb:8f:da:f0:50:eb:60:10:dd:51:ca:db:0f:9c:78:21:
         f7:da:f7:83:91:b7:fc:d3:4a:ea:5e:2e:fd:f3:62:38:27:c6:
         e1:23:4f:11:11:4b:55:af:4f:c6:7c:fd:55:6a:f0:fb:13:d5:
         93:d5:4f:c3:23:fb:8b:7f:a2:e3:ae:1b:1f:a3:54:25:17:a5:
         f2:8a:54:14:f6:bf:5a:19:3c:b6:34:f1:9f:4e:be:8d:c3:bf:
         8a:b6:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----