Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.mft
File:                     246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.mft (raw, json)
Hash identifier:          mW2tJCaQLAcn9cRpLOTyYK1UweSPTbF47G7DUUTP6tQ=
Subject key identifier:   31:77:09:92:04:CC:27:C9:90:82:7F:4E:18:CD:BA:23:49:26:E6:31
Authority key identifier: 24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC
Certificate issuer:       /CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
Certificate serial:       79B8CCF655EE9A8A00FE7BA09C9FC03AB7BE8497
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.mft
Manifest number:          046D
Signing time:             Mon 15 Apr 2024 04:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 04:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 06:22:00 +0000
Files and hashes:         1: 34352e3136372e3130362e302f32332d3233203d3e20323638303534.roa (hash: abksv9QDkJkHuTWKS9DI6a+DitwU874Lp1v6usvptW0=)
                          2: 323830343a353734303a3a2f33322d3332203d3e20323638303534.roa (hash: pvJNpJH/HLjIwYUUOjk+VOhiZZ0zPT/QWXioGBqrGQU=)
                          3: 246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.crl (hash: jY7Q/Ca+NxCCKKHDuuw++/ySbAjw/8QSLV1IwcO1Yb8=)
                          4: 34352e3136372e3130342e302f32332d3233203d3e20323638303534.roa (hash: XgsshlD8ctFOuw/fZy1hSFhLFQLKVYLjbB4X+IaxRMw=)
                          5: 34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa (hash: wv6dDoHl3pF9eOx1sBCXmA+rqgL5ENouHwhljel5pWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b8:cc:f6:55:ee:9a:8a:00:fe:7b:a0:9c:9f:c0:3a:b7:be:84:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
        Validity
            Not Before: Apr 15 04:15:00 2024 GMT
            Not After : Apr 16 06:22:00 2024 GMT
        Subject: CN=3177099204CC27C990827F4E18CDBA234926E631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:87:30:15:a4:d6:bc:9b:38:ef:d7:49:db:
                    db:a3:47:7a:19:a7:f1:5f:71:34:2a:24:47:b0:f8:
                    88:f5:c0:93:ab:d1:29:e3:76:7a:db:86:0a:99:1c:
                    7a:d2:a3:8d:fc:4f:3f:50:c6:e3:9d:03:e8:9a:0c:
                    78:0d:73:1c:aa:b0:ea:c0:52:40:5d:15:9c:13:e9:
                    53:5a:1c:cf:8f:fb:b1:6e:46:ed:d8:87:dc:2e:e7:
                    95:c7:cd:df:60:da:0d:88:bd:25:d7:f0:b4:50:97:
                    4f:c1:36:3b:bb:13:2e:d8:81:62:4b:a5:4d:d0:cf:
                    3e:5e:c0:d5:2c:9d:20:77:8f:7c:aa:e2:8c:cc:d5:
                    62:20:25:73:fe:86:bb:88:b7:5c:42:46:49:27:a5:
                    52:34:65:c2:00:8e:38:bc:d5:2e:58:72:58:b4:f6:
                    cc:2e:e7:76:46:2f:22:03:ea:a7:17:be:2d:84:3a:
                    09:b3:ea:b1:e9:f8:bd:1b:f8:c4:5c:dc:49:fb:7e:
                    38:5b:4a:40:1d:7c:2b:40:b3:3b:be:cd:27:5d:6e:
                    46:1f:7c:5f:76:fb:1c:33:59:34:ce:65:25:9a:63:
                    d2:f5:a1:ff:14:78:fa:e5:4f:55:24:3c:d2:ce:d8:
                    7c:58:f4:d0:b2:bd:0a:89:d8:a8:10:88:bf:b0:5b:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:77:09:92:04:CC:27:C9:90:82:7F:4E:18:CD:BA:23:49:26:E6:31
            X509v3 Authority Key Identifier:
                keyid:24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:fa:97:10:47:1f:d0:c0:de:a9:8b:3c:bd:ab:3a:5f:8b:
         7b:01:ee:8b:64:35:75:ff:9d:c8:90:0a:74:a7:05:b5:e2:96:
         df:eb:07:11:13:1c:20:c4:65:57:d3:26:3d:9b:a7:48:f2:db:
         6d:96:42:e1:8b:e0:ab:c7:d8:8f:89:28:45:70:66:d7:54:08:
         fa:bb:02:7f:06:ae:3f:6d:2b:ee:8d:b6:8c:97:d1:54:04:1c:
         22:72:0d:2a:d1:ac:3f:89:4f:46:c7:57:cf:81:21:84:43:9a:
         d5:2a:ff:f7:eb:e7:e1:61:8b:1f:5e:f9:ec:d6:3d:7f:a4:94:
         d3:88:b4:58:dd:67:0c:f5:fe:0c:a9:8d:9e:33:5c:a9:f8:a1:
         87:ff:d3:e5:00:dd:07:f6:00:d9:d3:93:25:bd:bd:df:ed:32:
         55:7a:87:85:e8:12:73:12:43:c2:70:c9:8c:16:33:e2:3c:f2:
         fe:82:68:bc:f2:7d:a9:90:e6:43:3c:13:a5:e8:c2:c5:eb:66:
         42:c6:5e:b8:0c:9d:d0:77:7b:07:fb:f3:2d:3a:64:9a:90:7c:
         d2:de:10:b1:1b:0b:ad:2a:1f:f4:e2:1b:58:6a:6b:f1:30:0f:
         73:b4:3d:5d:d8:bd:b1:db:7e:0f:f6:02:45:25:49:4f:64:55:
         68:54:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----