Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/5298BEF89784E172203A0E1E33315AA21F420297.mft
File:                     5298BEF89784E172203A0E1E33315AA21F420297.mft (raw, json)
Hash identifier:          UgzAyqdAHDPS3XKxh6Ly1Z9taO4NT3dOs4uIVgmp2nU=
Subject key identifier:   73:BE:10:FA:A1:18:70:CA:69:5E:9C:67:D7:49:B6:B9:8C:59:47:E0
Authority key identifier: 52:98:BE:F8:97:84:E1:72:20:3A:0E:1E:33:31:5A:A2:1F:42:02:97
Certificate issuer:       /CN=5298BEF89784E172203A0E1E33315AA21F420297
Certificate serial:       777AC25213340BFAE9F971F14EA6B06641A21685
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5298BEF89784E172203A0E1E33315AA21F420297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/5298BEF89784E172203A0E1E33315AA21F420297.mft
Manifest number:          0188
Signing time:             Mon 15 Apr 2024 06:13:50 +0000
Manifest this update:     Mon 15 Apr 2024 06:08:50 +0000
Manifest next update:     Tue 16 Apr 2024 10:00:50 +0000
Files and hashes:         1: 3138312e3139312e302e302f32322d3234203d3e20323637343336.roa (hash: rrBLHd3X1s1GpToyuvU225V0X/3Wpbx686b+1fTGhig=)
                          2: 5298BEF89784E172203A0E1E33315AA21F420297.crl (hash: MzLaDaDkOGYUUO8VyYdRxpMXzoAEEX5LNBIkO5HTOHg=)
                          3: 323830343a343137633a3a2f33322d3438203d3e20323637343336.roa (hash: JIKOUOrBd1lBVWiDID5Fyn3NCTr0QyQTUzwvTLb+zu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7a:c2:52:13:34:0b:fa:e9:f9:71:f1:4e:a6:b0:66:41:a2:16:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5298BEF89784E172203A0E1E33315AA21F420297
        Validity
            Not Before: Apr 15 06:08:50 2024 GMT
            Not After : Apr 16 10:00:50 2024 GMT
        Subject: CN=73BE10FAA11870CA695E9C67D749B6B98C5947E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f0:b4:c6:ff:d3:82:b9:01:cf:85:65:f5:2e:
                    c8:2b:6a:b4:80:a6:17:11:47:e0:aa:00:5e:52:da:
                    5f:23:5a:bf:af:d7:d9:a6:1a:53:5e:11:d7:af:75:
                    15:eb:9c:d3:3b:25:37:32:a1:95:76:2a:ea:7b:fa:
                    e9:20:eb:8b:62:5f:7f:7e:65:da:ef:a8:2a:21:d6:
                    37:a4:9f:d4:cb:28:88:a7:c6:98:2c:b0:8f:22:d2:
                    4d:ad:8f:54:0b:d7:13:ef:44:5b:5f:5e:b7:4f:18:
                    fa:35:46:df:a7:ec:81:81:37:55:80:ae:7c:45:b4:
                    b8:1b:98:ef:48:5d:2c:91:d2:fa:46:e3:9a:b9:9a:
                    bc:28:64:6e:a1:bd:1f:21:24:9a:ab:a3:3b:78:51:
                    49:f9:6f:1e:fd:82:27:32:fe:b6:e9:95:85:a4:38:
                    05:a7:69:3b:2c:39:8d:46:e6:d7:ac:a1:8d:0c:a0:
                    24:25:05:5e:b0:aa:65:35:6c:9e:f8:6a:54:e6:45:
                    0a:b4:56:64:1e:5d:5c:f5:bb:fb:40:9a:04:6a:ce:
                    ba:a4:96:43:eb:3d:f1:32:6c:39:94:51:a5:2f:fa:
                    50:66:31:a5:2c:06:6c:f9:e9:d0:9d:18:46:e8:f2:
                    76:ec:59:84:9e:d5:bf:66:45:6b:5b:85:30:19:42:
                    dc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:10:FA:A1:18:70:CA:69:5E:9C:67:D7:49:B6:B9:8C:59:47:E0
            X509v3 Authority Key Identifier:
                keyid:52:98:BE:F8:97:84:E1:72:20:3A:0E:1E:33:31:5A:A2:1F:42:02:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/5298BEF89784E172203A0E1E33315AA21F420297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5298BEF89784E172203A0E1E33315AA21F420297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/5298BEF89784E172203A0E1E33315AA21F420297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:51:e6:d6:25:53:cb:a8:fc:15:ad:57:14:ec:4f:a8:41:51:
         96:2e:58:4c:da:87:73:c2:88:2c:7a:dc:f3:b2:2e:7e:85:63:
         b1:73:ba:92:e1:d9:4b:04:67:05:d8:5d:06:7f:1f:13:c5:00:
         5f:cd:79:11:64:87:03:0c:df:5d:39:6e:98:fc:45:a8:8a:2c:
         ec:d8:69:c4:16:54:4e:38:35:6e:48:3c:24:7a:13:76:d4:ea:
         10:ef:fc:51:09:b5:2f:83:9b:6e:7b:6d:4d:18:ac:05:e6:27:
         20:d4:2e:39:c6:2c:e4:f8:bb:ea:8d:18:4f:97:eb:27:97:d1:
         35:67:b6:35:f0:dd:ae:af:f7:0b:8a:3f:40:d9:d7:08:4e:c1:
         a5:0f:50:96:8a:8a:3b:e5:73:71:59:e9:b6:4b:62:09:67:10:
         07:07:0d:78:4c:2a:d7:06:0e:8b:24:d7:11:1d:5e:0f:00:10:
         61:e4:46:e4:ba:06:f9:82:01:39:6f:1e:3d:7c:c3:34:0f:c4:
         3e:56:79:d4:4b:44:f1:04:21:0f:ba:74:95:bd:b5:6c:62:86:
         2e:3a:a4:2e:9b:aa:d0:b1:00:14:fb:8d:b2:c0:5c:18:17:aa:
         62:63:f0:8b:0a:bc:c2:8f:5e:c2:2f:b2:8d:8e:dc:62:f8:75:
         38:ce:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----