Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.mft
File:                     1654602F744B5A09AB43A0DC57F75D95B59E2ED6.mft (raw, json)
Hash identifier:          ksu9s6VKFkM4jWRMAopqqIiAjDWLVdOaPui+dX86Z5w=
Subject key identifier:   69:F3:10:D8:BE:A0:5E:35:06:BF:E0:75:C1:49:1E:26:58:84:DD:E2
Authority key identifier: 16:54:60:2F:74:4B:5A:09:AB:43:A0:DC:57:F7:5D:95:B5:9E:2E:D6
Certificate issuer:       /CN=1654602F744B5A09AB43A0DC57F75D95B59E2ED6
Certificate serial:       6823776E566995661E1D95B8BDE4DAD8B439472B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.mft
Manifest number:          03EA
Signing time:             Sun 14 Apr 2024 18:00:00 +0000
Manifest this update:     Sun 14 Apr 2024 17:55:00 +0000
Manifest next update:     Mon 15 Apr 2024 19:50:00 +0000
Files and hashes:         1: 323830343a346464303a3a2f33322d3334203d3e20323638323231.roa (hash: T8FPEyJvbw8nCIEarj66qfon1HAmqNdv0ZA2vl27V9Y=)
                          2: 1654602F744B5A09AB43A0DC57F75D95B59E2ED6.crl (hash: fd3KXtZcuHJSMN1l9wJFkoT0JlHneM9BtgC/pRlNHU8=)
                          3: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: 2I9RMLruvW+YF/AYqXbs6mVjtc9YsWH4Zg7iNg4lPTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:23:77:6e:56:69:95:66:1e:1d:95:b8:bd:e4:da:d8:b4:39:47:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1654602F744B5A09AB43A0DC57F75D95B59E2ED6
        Validity
            Not Before: Apr 14 17:55:00 2024 GMT
            Not After : Apr 15 19:50:00 2024 GMT
        Subject: CN=69F310D8BEA05E3506BFE075C1491E265884DDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:fa:78:70:c7:6d:26:15:81:85:a7:2a:d3:
                    07:a0:cf:b7:93:48:51:f2:75:b2:72:bb:e6:88:ba:
                    63:d2:48:9e:f2:40:fd:08:f1:83:b1:36:43:4b:a0:
                    33:d1:23:59:7f:1b:28:50:9a:7a:e2:00:8c:80:e2:
                    81:d2:72:c0:86:56:40:6b:19:be:2b:f2:07:9c:d4:
                    47:15:16:90:17:cf:d0:3f:10:a4:ea:07:6b:cf:82:
                    1b:2c:5e:34:e4:51:2b:1b:eb:f0:d7:b8:33:3e:d0:
                    8d:4a:62:96:e1:87:a5:c1:d1:04:d2:84:dd:ce:05:
                    a3:c8:a4:2e:1c:61:d1:f2:76:8b:97:be:25:a6:97:
                    52:ac:26:d1:2b:b6:57:76:83:23:34:cd:e4:bd:60:
                    4b:82:94:77:17:29:80:bb:8e:80:69:c6:e0:ba:70:
                    16:03:df:a6:58:de:ee:34:af:06:c2:76:06:f9:c1:
                    a6:23:35:8e:95:b4:08:b3:36:29:bb:7e:25:e6:a8:
                    20:a5:c9:c1:ac:46:16:24:90:23:31:47:d6:f5:9e:
                    4a:11:9e:a0:bf:d3:f6:b8:e9:61:2c:e0:29:86:3c:
                    39:cb:84:51:bf:5f:61:da:87:74:02:ac:1f:c9:f4:
                    3e:e9:3b:d1:c6:4d:ab:2f:28:95:f1:63:81:59:4b:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F3:10:D8:BE:A0:5E:35:06:BF:E0:75:C1:49:1E:26:58:84:DD:E2
            X509v3 Authority Key Identifier:
                keyid:16:54:60:2F:74:4B:5A:09:AB:43:A0:DC:57:F7:5D:95:B5:9E:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:91:22:3d:9d:86:88:94:45:a0:cb:90:7e:27:f0:f9:50:4a:
         af:e1:43:6a:38:99:27:9e:91:99:de:f8:aa:23:af:2c:84:b5:
         b0:8c:e4:2a:14:99:17:39:c7:8c:a9:32:b3:04:a0:1c:0c:ff:
         ab:ae:fd:f0:8f:fb:14:53:0a:4e:3c:40:94:41:94:10:79:8d:
         b8:7f:91:11:a0:6d:25:8a:89:bb:15:20:f9:aa:f4:ca:a7:50:
         a9:b0:9c:47:c0:92:ef:d3:22:44:c4:39:27:8c:cd:9d:a8:3f:
         47:01:b8:51:25:1f:11:8d:a0:99:52:c5:8e:8e:c0:7d:32:61:
         9c:08:9e:12:bd:54:53:97:0e:fd:66:cb:15:5c:e2:85:5b:57:
         3a:02:47:fa:a2:1a:d9:41:dc:fe:c6:51:84:7b:fe:0f:3c:df:
         7f:d9:fc:cc:1d:b3:00:ef:c3:cf:5a:cc:ee:55:4a:db:f0:c4:
         96:d9:ab:4c:2a:d1:0c:8e:64:c2:76:1b:62:24:e7:fb:39:2c:
         07:6d:5e:ae:93:83:92:3f:c8:9a:7c:0a:10:6d:0a:b3:a0:38:
         d2:05:10:e9:b7:2d:81:96:05:e8:0b:4e:c8:aa:68:ed:eb:8e:
         6f:5f:b9:ad:f6:02:ce:50:a6:12:a7:ae:9a:0e:02:0f:72:e8:
         53:f1:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----