Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/532C1A267C53598C2047E8EF38C6C186C91BEA74.mft
File:                     532C1A267C53598C2047E8EF38C6C186C91BEA74.mft (raw, json)
Hash identifier:          XyN4CBZ5/2Vdgy+zipn8UMThotdKI/8ybVhL4FBh7TE=
Subject key identifier:   0B:79:0D:A0:40:F0:D7:71:AF:A3:3B:A5:36:0A:34:B3:3E:24:70:7F
Authority key identifier: 53:2C:1A:26:7C:53:59:8C:20:47:E8:EF:38:C6:C1:86:C9:1B:EA:74
Certificate issuer:       /CN=532C1A267C53598C2047E8EF38C6C186C91BEA74
Certificate serial:       4047D46774DFC5BB6EF907D2FB65CB29EA9D8DD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/532C1A267C53598C2047E8EF38C6C186C91BEA74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/532C1A267C53598C2047E8EF38C6C186C91BEA74.mft
Manifest number:          01DD
Signing time:             Wed 14 Feb 2024 04:51:52 +0000
Manifest this update:     Wed 14 Feb 2024 04:46:52 +0000
Manifest next update:     Thu 15 Feb 2024 05:37:52 +0000
Files and hashes:         1: 34352e342e31362e302f32322d3332203d3e20323636303533.roa (hash: SF45QyeH5gpG+lvqmAiV1VeHRbkSgoqNu9HafGWFYc0=)
                          2: 323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (hash: jWCQothN9lQCfyqioPfdy7KhbwlYkAT7LOxjqFL8K2k=)
                          3: 532C1A267C53598C2047E8EF38C6C186C91BEA74.crl (hash: 5n/tWhindQxnAo2xbE1h1p4w4xnnaRxuJlpBBOENwho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:47:d4:67:74:df:c5:bb:6e:f9:07:d2:fb:65:cb:29:ea:9d:8d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532C1A267C53598C2047E8EF38C6C186C91BEA74
        Validity
            Not Before: Feb 14 04:46:52 2024 GMT
            Not After : Feb 15 05:37:52 2024 GMT
        Subject: CN=0B790DA040F0D771AFA33BA5360A34B33E24707F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:52:b5:3c:ad:cf:de:74:01:d1:bf:be:4a:
                    53:cd:e0:fe:2a:1c:ae:72:a3:81:b3:42:3e:1c:d8:
                    5a:39:53:92:68:cd:85:3f:36:df:a9:83:7f:5f:58:
                    0f:4e:11:c6:e1:4a:79:39:43:3c:4c:d2:e2:a9:0e:
                    39:e7:a2:64:7d:5c:9a:be:66:88:9a:a2:d3:bd:15:
                    95:cd:8a:90:a1:23:68:e5:e0:8c:5c:3d:9d:ce:89:
                    ee:a2:fb:1e:cf:73:c5:92:49:a8:ac:68:c1:c4:3b:
                    fe:02:0e:70:d4:5e:dd:8b:cb:c6:c5:25:e1:00:a1:
                    45:a1:9e:3e:3b:3e:08:3e:1a:4e:a6:37:e5:cd:42:
                    ea:87:cc:5a:36:94:2e:fd:1c:54:cb:8d:ed:bf:b9:
                    af:ac:57:a4:14:4f:68:c0:ee:37:05:fd:87:3f:93:
                    10:e0:8a:78:3c:1b:7f:ee:b5:d5:c5:e0:84:ea:fc:
                    7d:73:56:c1:22:e6:e9:a4:2a:36:53:73:68:d6:0a:
                    c4:ef:05:26:b5:a9:c7:8a:35:cd:8b:e5:79:42:61:
                    c5:5a:93:9d:a0:c9:fb:d4:14:57:ed:64:e6:66:09:
                    07:f7:26:5f:ed:89:aa:e9:e3:93:1b:10:12:72:fb:
                    6a:82:cf:ca:e2:01:38:f1:cc:8e:ed:4d:76:79:eb:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:0D:A0:40:F0:D7:71:AF:A3:3B:A5:36:0A:34:B3:3E:24:70:7F
            X509v3 Authority Key Identifier:
                keyid:53:2C:1A:26:7C:53:59:8C:20:47:E8:EF:38:C6:C1:86:C9:1B:EA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/532C1A267C53598C2047E8EF38C6C186C91BEA74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/532C1A267C53598C2047E8EF38C6C186C91BEA74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/532C1A267C53598C2047E8EF38C6C186C91BEA74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0b:be:df:12:c9:98:36:eb:ab:cd:dd:c4:ea:67:0b:09:91:
         2b:fb:ba:9e:a7:d6:15:b0:40:bc:cb:4e:6a:9e:01:e0:60:9f:
         a5:93:d5:4a:9c:70:f0:40:bb:b6:df:8b:d3:de:47:f6:00:f2:
         db:8c:43:ee:82:bf:0f:94:2a:9b:e1:f1:c2:34:57:5b:fb:bb:
         70:8c:c9:06:50:1d:2c:ec:bd:2c:18:5b:97:29:1e:74:8d:72:
         16:e7:b0:4d:c1:eb:0d:45:e6:13:fa:d4:ba:4a:9c:7c:71:b2:
         36:4a:1b:77:89:dc:50:52:9d:6e:9e:23:f5:8f:30:42:93:cd:
         65:f4:88:5b:4e:8c:a1:ce:96:12:48:05:7f:61:a2:fc:94:d4:
         76:7c:a0:0a:cc:d6:7a:83:d9:69:e2:a6:9b:2a:3c:7a:a3:e1:
         95:3d:3d:d7:3f:17:d4:a0:01:93:2d:cb:16:4a:ff:9b:f8:2a:
         b0:fe:16:d6:e2:b5:76:06:49:f1:ac:a0:0d:49:58:fe:13:9f:
         11:2f:3d:02:50:2e:92:6c:50:2a:85:b3:b3:e3:e5:87:fe:b8:
         04:0c:5b:92:77:06:4a:db:60:2e:28:03:1d:65:01:54:4f:b2:
         3a:b3:ff:53:3b:47:3b:7b:07:32:b5:e3:14:0a:34:04:60:f2:
         c6:1b:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----