Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/CDBB2AB6D632E955A756955729107E2352C882ED.mft
File:                     CDBB2AB6D632E955A756955729107E2352C882ED.mft (raw, json)
Hash identifier:          UER0GTmWO2D5eIzZG6jNF0pwjdQZJLjkwkoXZMjqlhA=
Subject key identifier:   23:62:DD:98:52:09:51:4B:CF:EB:C4:87:B4:05:31:25:B5:D1:80:1E
Authority key identifier: CD:BB:2A:B6:D6:32:E9:55:A7:56:95:57:29:10:7E:23:52:C8:82:ED
Certificate issuer:       /CN=CDBB2AB6D632E955A756955729107E2352C882ED
Certificate serial:       3BF1D2A872396172A1D69B85ACC5E9866CB9FACB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDBB2AB6D632E955A756955729107E2352C882ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/CDBB2AB6D632E955A756955729107E2352C882ED.mft
Manifest number:          05F6
Signing time:             Mon 15 Apr 2024 10:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 09:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:00:00 +0000
Files and hashes:         1: CDBB2AB6D632E955A756955729107E2352C882ED.crl (hash: lPQiKrj8cEiqXiY/VwCxo4PhbtVms1jhxeuQl+aBOqE=)
                          2: 3137372e33382e3139322e302f32312d3234203d3e20323632343039.roa (hash: wqpP8g91Tf8Bfw07uyFTP5o5VQUqigzg4A1qwSHDzJI=)
                          3: 323830343a3430303a3a2f33322d3334203d3e20323632343039.roa (hash: 1PhX687eWD8I7fVFHf5ZULX6f5snP5fyMqPx8QR76co=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f1:d2:a8:72:39:61:72:a1:d6:9b:85:ac:c5:e9:86:6c:b9:fa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBB2AB6D632E955A756955729107E2352C882ED
        Validity
            Not Before: Apr 15 09:55:00 2024 GMT
            Not After : Apr 22 10:00:00 2024 GMT
        Subject: CN=3082010A0282010100E2D57DDA4D18F70ACA84947A60E2E6086AB18AB353C90B5B11C07FFCE5CA6303C491AB3514CE64A56A4B6DC784D0221BA6F5CDDA67FA6973EE7BBB1134EA8DDCF40F3EAE10D4E8A58B5BACCF88DA200A72EB5E00A813D14AE1EC6908D85008E9224BCA5297DB5749B534D6CDF7071FF121D904750412C916A89404E4ADBFEEB276150393467096487771EC6634E839D07E7A606D317C7AF03BBD7ED788DC3A4AFF46849A19812786AB1DC79DDCB53DA55C1FFD41686A2424142EF8D269C097F6C30FFF05BA7407BD0C01B82842D0C132F2367167A2AAF47FE89870E695BD96142EBBFB499C5B7C23DAED445D989EABFB62AB5B5D429C1CAE314F1732F30F6D910203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:7d:da:4d:18:f7:0a:ca:84:94:7a:60:e2:
                    e6:08:6a:b1:8a:b3:53:c9:0b:5b:11:c0:7f:fc:e5:
                    ca:63:03:c4:91:ab:35:14:ce:64:a5:6a:4b:6d:c7:
                    84:d0:22:1b:a6:f5:cd:da:67:fa:69:73:ee:7b:bb:
                    11:34:ea:8d:dc:f4:0f:3e:ae:10:d4:e8:a5:8b:5b:
                    ac:cf:88:da:20:0a:72:eb:5e:00:a8:13:d1:4a:e1:
                    ec:69:08:d8:50:08:e9:22:4b:ca:52:97:db:57:49:
                    b5:34:d6:cd:f7:07:1f:f1:21:d9:04:75:04:12:c9:
                    16:a8:94:04:e4:ad:bf:ee:b2:76:15:03:93:46:70:
                    96:48:77:71:ec:66:34:e8:39:d0:7e:7a:60:6d:31:
                    7c:7a:f0:3b:bd:7e:d7:88:dc:3a:4a:ff:46:84:9a:
                    19:81:27:86:ab:1d:c7:9d:dc:b5:3d:a5:5c:1f:fd:
                    41:68:6a:24:24:14:2e:f8:d2:69:c0:97:f6:c3:0f:
                    ff:05:ba:74:07:bd:0c:01:b8:28:42:d0:c1:32:f2:
                    36:71:67:a2:aa:f4:7f:e8:98:70:e6:95:bd:96:14:
                    2e:bb:fb:49:9c:5b:7c:23:da:ed:44:5d:98:9e:ab:
                    fb:62:ab:5b:5d:42:9c:1c:ae:31:4f:17:32:f3:0f:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:62:DD:98:52:09:51:4B:CF:EB:C4:87:B4:05:31:25:B5:D1:80:1E
            X509v3 Authority Key Identifier:
                keyid:CD:BB:2A:B6:D6:32:E9:55:A7:56:95:57:29:10:7E:23:52:C8:82:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/CDBB2AB6D632E955A756955729107E2352C882ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDBB2AB6D632E955A756955729107E2352C882ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/CDBB2AB6D632E955A756955729107E2352C882ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:05:d1:21:c6:0d:f9:c2:c0:21:03:16:22:58:aa:13:22:27:
         be:bf:76:44:a4:bd:0a:dd:f3:7a:02:c6:d0:1e:bc:86:ad:82:
         c7:1b:bd:b8:71:9f:f1:b4:b5:ac:a7:fb:21:8e:7e:57:96:8a:
         1f:d9:13:57:1c:3b:3a:4a:3c:00:67:10:39:61:ef:d7:cb:36:
         4f:04:f0:97:ae:3f:88:21:21:a8:0d:79:cf:e5:20:30:71:bf:
         79:e7:1a:64:87:7f:4a:fc:df:cd:eb:11:23:4d:90:d3:a5:cf:
         4a:83:8c:75:35:91:1d:bc:6e:be:05:21:fb:36:2b:3b:4d:38:
         04:b5:43:3c:15:68:7c:dc:14:4d:29:b8:17:ac:1a:79:b1:79:
         a0:d0:12:5f:c8:55:68:96:f1:45:9a:01:d1:9e:d2:5d:49:e3:
         d2:b7:f1:11:f7:72:a7:dc:6d:ba:fb:f4:34:3e:35:32:d9:58:
         49:b1:55:da:d7:46:0b:b4:04:bc:8d:b8:73:3a:d8:fb:72:ea:
         87:ea:87:3e:0c:c2:71:ed:ad:35:f9:5d:f8:21:b6:61:95:85:
         bc:fd:6d:3b:5a:91:d6:5d:da:cd:2a:e0:76:47:ca:75:4e:06:
         eb:e6:d0:7f:3c:32:b2:4b:81:ed:96:4c:2b:20:05:1b:6f:2f:
         6e:19:e6:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----