Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.mft
File:                     C422E0B8C0893646916FBC7155048940DBDE3512.mft (raw, json)
Hash identifier:          asRvHTVKzhJW/4jZj2aZ8JdTmShklYx9fLGEom0dxyY=
Subject key identifier:   19:A5:85:F5:09:9C:FD:EF:FA:96:3A:06:55:AD:A9:98:50:DD:1B:76
Authority key identifier: C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12
Certificate issuer:       /CN=C422E0B8C0893646916FBC7155048940DBDE3512
Certificate serial:       7A5AA4706C2C991DDA66DE3853CC021F3202F832
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.mft
Manifest number:          2D
Signing time:             Sun 14 Apr 2024 21:53:40 +0000
Manifest this update:     Sun 14 Apr 2024 21:48:40 +0000
Manifest next update:     Tue 16 Apr 2024 00:52:40 +0000
Files and hashes:         1: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: b5UenwI2EOmjQo32ybaqof0lOM9V52hzDFCLRqy2f9k=)
                          2: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: odYxRp/W7D7RdaQMJwndqOl8VSFgxLBNQXZYWRJOpmI=)
                          3: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: XH6BFKNRvGtJtAG7yqdMjGgLQC/CI+VprqTPh2G3oHw=)
                          4: C422E0B8C0893646916FBC7155048940DBDE3512.crl (hash: ja/lumXAFZ7yZ55Ncy1HUgvBsuLjIQjVj4gvKD3sJHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5a:a4:70:6c:2c:99:1d:da:66:de:38:53:cc:02:1f:32:02:f8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C422E0B8C0893646916FBC7155048940DBDE3512
        Validity
            Not Before: Apr 14 21:48:40 2024 GMT
            Not After : Apr 16 00:52:40 2024 GMT
        Subject: CN=19A585F5099CFDEFFA963A0655ADA99850DD1B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:28:ec:ad:b7:dc:e4:ea:a3:12:a7:e0:5f:
                    04:1f:8b:b5:60:7f:bf:ee:6d:8b:c0:4e:9d:e2:d6:
                    98:37:6c:87:90:ee:b8:79:94:0c:53:91:dc:be:25:
                    55:f5:1d:4c:f2:f0:d5:3a:19:b2:1b:ac:c8:08:67:
                    96:8b:7e:3b:11:d0:a8:35:78:aa:b1:74:6d:a2:4b:
                    36:cf:89:c9:4b:da:75:58:48:fe:47:c6:b2:97:2b:
                    dc:cd:cc:04:9d:ec:2b:ea:42:92:d4:2b:07:2a:47:
                    16:23:7a:83:f5:0e:2d:b2:d9:be:f1:07:77:05:d4:
                    01:b4:8e:32:98:4a:7e:d2:09:5e:44:67:35:f9:ae:
                    66:98:7f:9f:c0:10:19:e7:49:79:68:33:aa:ca:00:
                    9a:0c:1c:cb:1a:b1:f9:12:8b:bb:1b:68:30:1c:9b:
                    88:79:80:b4:98:c6:d5:6b:75:f5:97:5c:4c:c4:68:
                    c0:31:ce:58:b6:08:85:2e:b5:0e:0e:7b:e7:8a:cd:
                    b9:c2:34:a9:f6:45:20:eb:ff:d3:fd:d5:27:4d:3a:
                    2b:ce:d1:2c:d7:b6:37:8c:d1:72:cf:e0:67:19:11:
                    ec:75:df:64:9d:a3:32:fb:c9:bd:50:ac:1c:9d:fb:
                    e2:69:cc:a7:04:4d:f4:00:49:65:c8:f7:58:13:f4:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A5:85:F5:09:9C:FD:EF:FA:96:3A:06:55:AD:A9:98:50:DD:1B:76
            X509v3 Authority Key Identifier:
                keyid:C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:be:58:79:0c:7f:8e:0c:e3:c2:6b:c7:ee:98:01:9c:f6:b3:
         ba:94:2d:cb:bc:f0:ba:1a:ad:e2:b7:be:b4:5e:cd:26:cb:9b:
         ec:c5:a0:9a:dc:da:65:e8:7d:e6:20:51:9c:24:c6:72:79:70:
         29:1c:a1:80:d0:31:6d:75:b9:71:50:8a:ba:bf:6a:45:dd:54:
         8e:26:79:6a:33:50:d9:e7:c6:f6:ae:5c:7a:b5:77:07:4f:83:
         4d:b5:38:39:ad:83:4f:6a:a3:d5:05:27:b6:1a:70:d3:37:96:
         82:48:5c:25:ed:c0:2c:7c:4c:f5:92:3e:a5:91:dd:6b:9f:88:
         4a:b2:29:28:b5:65:35:54:40:ed:20:37:95:8e:85:a3:47:75:
         f4:b8:72:0a:0b:74:6d:c6:6a:24:d8:7e:37:0a:b3:7a:18:8d:
         aa:76:8c:eb:7b:d7:49:76:90:a0:d7:43:a6:5b:af:52:9c:d8:
         dd:db:41:06:fd:8c:26:a9:f9:e4:6e:ba:9a:6e:97:0d:d0:3e:
         a5:18:b0:e3:81:f6:e6:b5:72:14:ae:34:c5:ca:3c:ea:65:ac:
         04:4b:90:d5:ee:79:7c:d9:23:7e:c3:07:9a:12:d2:9e:af:5e:
         d7:0e:35:81:06:cc:4a:c7:04:13:d4:98:cf:66:ed:56:02:ba:
         00:76:a1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----