Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.mft
File:                     66BB468AD419CCD0B6DF4265467F9C63C74D974E.mft (raw, json)
Hash identifier:          fAmcrxu8NxMDopyPZNHRyM2S/+uqXtBc2MoM59JogDQ=
Subject key identifier:   4A:7C:80:72:09:8A:E4:73:9C:63:1C:C2:A8:36:D7:D1:8B:9B:51:2C
Authority key identifier: 66:BB:46:8A:D4:19:CC:D0:B6:DF:42:65:46:7F:9C:63:C7:4D:97:4E
Certificate issuer:       /CN=66BB468AD419CCD0B6DF4265467F9C63C74D974E
Certificate serial:       40058C2DA22F1FC60F0BAB01394A2C45A5D8B1AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.mft
Manifest number:          017B
Signing time:             Sun 14 Apr 2024 23:40:57 +0000
Manifest this update:     Sun 14 Apr 2024 23:35:57 +0000
Manifest next update:     Mon 15 Apr 2024 23:56:57 +0000
Files and hashes:         1: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: R2KWqpK6w63VvGvNl7dhMaevYGyTRaIVYy4+xsYSoVA=)
                          2: 66BB468AD419CCD0B6DF4265467F9C63C74D974E.crl (hash: ALETZmEhGaxWnhxT4RC7+8ChypV/XaGjd3vW8JUYS6I=)
                          3: 3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa (hash: NWoZu6FMYmjKzUAi0tu5RZXTZgH7KlEz2GOpP81Trso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:05:8c:2d:a2:2f:1f:c6:0f:0b:ab:01:39:4a:2c:45:a5:d8:b1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB468AD419CCD0B6DF4265467F9C63C74D974E
        Validity
            Not Before: Apr 14 23:35:57 2024 GMT
            Not After : Apr 15 23:56:57 2024 GMT
        Subject: CN=4A7C8072098AE4739C631CC2A836D7D18B9B512C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:56:79:a9:f0:4d:f2:e7:26:a1:97:48:46:
                    35:ac:e2:65:1b:8d:51:f3:fc:28:56:0b:60:c8:37:
                    dd:98:ca:35:42:74:8e:4c:40:ee:01:1d:2e:40:5a:
                    0a:c7:05:0a:19:7b:84:59:2e:2e:d7:51:8f:46:45:
                    e1:aa:85:5f:b8:31:07:54:3e:b1:38:33:c4:05:e5:
                    1d:76:52:48:5f:b1:7e:d4:c5:fe:17:8c:f8:60:ed:
                    56:1c:a3:34:da:c6:a3:97:2b:bb:ec:e8:5a:fe:56:
                    d0:3e:96:64:e0:73:c2:f6:df:46:24:87:dd:67:d3:
                    df:02:91:e0:2c:a9:d7:f5:08:24:81:5c:be:5d:7b:
                    55:69:31:83:24:4e:98:24:8a:f8:22:97:43:7f:0e:
                    50:a5:38:cf:14:e7:0a:96:d6:c1:35:be:ab:e4:5b:
                    0e:05:b1:f6:71:c5:0a:d7:88:e1:93:63:47:8c:24:
                    6e:8e:12:ca:32:23:78:c4:cf:c8:88:8d:b5:63:8f:
                    ad:fa:03:c1:c3:44:86:b4:96:a1:15:4a:24:a2:36:
                    c8:b5:91:6f:9b:08:f2:08:a1:4f:e4:c3:b2:0d:95:
                    44:97:19:7e:8d:18:af:f7:d7:f5:c2:f6:2a:c5:c8:
                    9a:5e:dd:0b:69:73:9e:3f:d2:c8:e6:a9:6e:dc:d7:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7C:80:72:09:8A:E4:73:9C:63:1C:C2:A8:36:D7:D1:8B:9B:51:2C
            X509v3 Authority Key Identifier:
                keyid:66:BB:46:8A:D4:19:CC:D0:B6:DF:42:65:46:7F:9C:63:C7:4D:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/0/66BB468AD419CCD0B6DF4265467F9C63C74D974E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:e0:bc:7b:44:f1:27:66:c0:2c:95:a6:8d:f8:c2:c1:01:
         f2:7e:2d:70:5e:b8:84:b4:1e:54:19:c8:a7:30:ad:9a:b3:ae:
         02:3a:22:48:5b:9a:40:2f:55:80:5e:b6:5b:c3:1a:d0:4f:84:
         b5:dc:f0:88:40:e3:f6:66:d2:a9:93:73:0c:b6:2b:d1:52:4d:
         a4:2c:1b:7d:da:48:83:9c:12:8c:e1:49:4a:d5:be:28:88:6f:
         bd:e3:13:b2:07:8d:0c:fa:52:65:a1:f5:0f:f5:e4:7b:ad:7f:
         29:ad:fa:78:e0:08:37:0e:2e:ce:75:b6:1c:d7:08:2e:a3:c3:
         48:cf:63:1b:dc:a3:fc:8a:c6:be:dd:3c:68:26:d0:3c:f1:db:
         44:d0:64:4f:2f:80:c8:9a:4b:1f:d5:93:53:18:04:fa:04:86:
         db:26:69:59:4c:6d:fa:20:a5:f4:85:63:94:10:f2:ad:86:93:
         64:c2:c6:a6:97:0c:ea:6b:d1:5e:a3:26:61:77:02:f0:e8:ee:
         84:6f:8d:f3:11:c9:13:eb:c8:a3:55:b1:b9:87:b0:05:8e:c5:
         6a:24:dc:ea:04:16:6e:29:e1:08:1b:34:b8:88:21:ec:c2:0c:
         1b:fa:2d:01:68:d8:6a:c6:49:bf:45:8a:c1:22:2d:e7:38:fa:
         35:a5:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----