Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.mft
File:                     A257B01974D35AFB5E96E170F25E9F0AE4726A04.mft (raw, json)
Hash identifier:          cY7b5ReJ1meSXKI7DJCwSSltiqMlleu0ruFQUQkwoEA=
Subject key identifier:   41:EB:E4:2A:40:1C:37:F2:92:F2:28:B8:24:20:D8:2F:4C:B8:38:8E
Authority key identifier: A2:57:B0:19:74:D3:5A:FB:5E:96:E1:70:F2:5E:9F:0A:E4:72:6A:04
Certificate issuer:       /CN=A257B01974D35AFB5E96E170F25E9F0AE4726A04
Certificate serial:       096F0ABC8610BC2C9A113387C58AB8031C784F50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.mft
Manifest number:          35
Signing time:             Mon 15 Apr 2024 01:36:48 +0000
Manifest this update:     Mon 15 Apr 2024 01:31:48 +0000
Manifest next update:     Tue 16 Apr 2024 01:54:48 +0000
Files and hashes:         1: 3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa (hash: usBo9lWnzo1317rPTuEXGv2wwKGw1STF6QewWZFklFI=)
                          2: A257B01974D35AFB5E96E170F25E9F0AE4726A04.crl (hash: a0FF2tYFUYYjNjA+yI+x/OpZNFyWKz3I7VGykzVfwMI=)
                          3: 323830343a323635303a3a2f33322d3438203d3e20323634333430.roa (hash: btwnwRvNBLfWQF3rRi93gxrULOsgNkgFu/UMCRYf2DA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6f:0a:bc:86:10:bc:2c:9a:11:33:87:c5:8a:b8:03:1c:78:4f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A257B01974D35AFB5E96E170F25E9F0AE4726A04
        Validity
            Not Before: Apr 15 01:31:48 2024 GMT
            Not After : Apr 16 01:54:48 2024 GMT
        Subject: CN=41EBE42A401C37F292F228B82420D82F4CB8388E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:01:f0:69:67:06:91:ad:ef:2f:9d:09:00:
                    6d:fd:5c:a2:ce:da:23:ff:da:59:df:8f:36:23:e8:
                    df:d2:f8:38:72:d8:08:f5:ca:02:27:00:a4:89:b7:
                    e7:86:7e:d3:53:a4:30:3a:2c:46:5f:ed:a5:f3:c6:
                    7d:10:b0:ee:c3:00:1b:f9:31:fb:27:27:b8:3b:53:
                    1a:1b:f4:5e:d0:4b:cc:ca:af:9b:a2:b1:09:2d:fe:
                    bd:10:6e:fc:6e:a4:dd:31:5f:35:15:fa:c3:3c:4f:
                    a5:0a:9d:b2:bb:e9:c1:8d:00:94:0e:ce:2f:6f:3f:
                    f0:5a:98:2d:5f:35:e5:c5:8e:da:6b:8b:18:a2:79:
                    ca:e4:36:8c:4d:33:b2:77:14:b8:99:b5:e1:68:ab:
                    c8:a4:e7:e0:5c:57:12:8a:d8:85:dc:18:01:64:a9:
                    24:77:be:b9:0c:58:50:14:eb:1b:8c:83:3b:75:1c:
                    db:48:02:4d:d9:04:68:b2:a8:b2:f7:ee:e6:e8:41:
                    20:83:c6:38:09:a8:b9:b5:f5:a5:44:c5:aa:f8:9d:
                    f0:f5:28:5c:40:c0:e8:82:c6:34:39:a8:45:25:85:
                    1c:e0:24:f3:0c:18:28:1f:a3:e2:91:98:1a:4c:ba:
                    59:62:79:a9:4b:72:84:15:ac:cb:be:d2:0b:3c:ba:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EB:E4:2A:40:1C:37:F2:92:F2:28:B8:24:20:D8:2F:4C:B8:38:8E
            X509v3 Authority Key Identifier:
                keyid:A2:57:B0:19:74:D3:5A:FB:5E:96:E1:70:F2:5E:9F:0A:E4:72:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f6:b7:74:7f:17:48:7c:90:b4:a2:cf:9a:4e:c2:f4:d0:28:
         f1:17:78:2f:8b:46:e2:45:b2:49:25:31:a8:0a:10:f8:cf:d1:
         b7:cc:57:43:52:00:c2:93:83:38:23:c1:2a:63:85:bf:c9:e0:
         cb:99:40:2c:d8:08:3b:ab:68:5b:d8:81:01:3c:2e:89:b1:b1:
         92:13:1c:28:2f:fa:4c:07:96:9e:2e:3b:02:aa:06:61:c6:07:
         9c:c0:c9:92:bd:c7:38:76:a4:67:8d:76:ac:31:73:88:a6:e3:
         33:f9:17:a4:51:b9:1a:bb:00:03:49:c9:13:e1:9f:38:f9:64:
         52:f6:6f:d0:51:2f:f3:c0:e2:96:a9:c0:59:31:1a:f9:cc:cb:
         54:59:9b:22:7b:a9:7b:b5:aa:d5:82:7a:2e:97:e8:9d:0e:e8:
         e3:00:a8:73:b3:5e:51:f1:1f:7e:34:19:60:8a:da:4a:d0:e1:
         63:cc:27:e7:fa:e0:6a:0c:bc:1a:71:61:e4:e4:ab:70:26:d5:
         3a:b8:02:51:f3:6f:f3:e4:56:79:83:ee:e9:02:25:10:11:cf:
         5c:cf:82:2d:16:c7:1c:cc:7c:c0:f9:9c:fe:3b:67:c9:2e:76:
         33:50:41:9d:d7:d6:ce:20:6a:57:e1:10:35:41:7f:e6:13:a7:
         49:c1:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----