Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.mft
File:                     CBBBC79B07882F9E7450A29909CCEB031ABB96D2.mft (raw, json)
Hash identifier:          seSjABKdxFog5Rd/xezaWSzL3e1bUsmPxE8Of/Xjk6g=
Subject key identifier:   5A:36:A0:56:ED:7A:8E:28:99:0C:C1:7C:79:6F:FE:7A:5C:42:58:7C
Authority key identifier: CB:BB:C7:9B:07:88:2F:9E:74:50:A2:99:09:CC:EB:03:1A:BB:96:D2
Certificate issuer:       /CN=CBBBC79B07882F9E7450A29909CCEB031ABB96D2
Certificate serial:       431AFA8A28E768EB21BBB7A1CB699BDC24C55B66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.mft
Manifest number:          41
Signing time:             Sun 14 Apr 2024 21:46:04 +0000
Manifest this update:     Sun 14 Apr 2024 21:41:04 +0000
Manifest next update:     Tue 16 Apr 2024 01:25:04 +0000
Files and hashes:         1: 323830313a38303a333664303a3a2f34382d3438203d3e20323639323136.roa (hash: vrp4qHn2yvF26JRdsRu/DQtybmWkHkqXNM1/4bd7LuY=)
                          2: CBBBC79B07882F9E7450A29909CCEB031ABB96D2.crl (hash: 79VdrtXOHH1gGZBia7ksYVwoKZhkzLs0n/rJ4NdpElY=)
                          3: 34352e3138312e372e302f32342d3234203d3e20323639323136.roa (hash: 6mbX3szooTQck8cncZDf4yd2ZtlhhAopy/9myjtHmPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1a:fa:8a:28:e7:68:eb:21:bb:b7:a1:cb:69:9b:dc:24:c5:5b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBBBC79B07882F9E7450A29909CCEB031ABB96D2
        Validity
            Not Before: Apr 14 21:41:04 2024 GMT
            Not After : Apr 16 01:25:04 2024 GMT
        Subject: CN=5A36A056ED7A8E28990CC17C796FFE7A5C42587C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:b0:b6:67:cf:f9:c4:87:24:8e:45:28:8a:
                    f7:6a:d0:bb:9c:32:30:47:e4:fa:be:db:c6:e5:4f:
                    b2:70:0b:cc:75:75:d2:3c:f1:56:62:9f:f0:a7:25:
                    00:f6:10:95:79:44:ea:8c:38:2e:ca:84:a1:8f:3e:
                    59:bb:96:ee:bc:2d:72:fc:cd:76:cf:10:ab:51:65:
                    f1:23:7e:56:97:8f:85:65:d8:9a:ab:f4:d4:5b:9b:
                    ad:e4:cf:13:e0:21:68:16:b3:9a:eb:9e:ab:af:3b:
                    ee:64:10:52:23:95:aa:36:27:ea:9d:44:51:05:8e:
                    ea:04:f8:b9:bc:47:13:3b:3c:2a:19:c2:65:70:5a:
                    3d:67:3f:ef:5b:fe:ad:08:9a:4d:82:99:d7:d1:93:
                    ad:41:46:2b:61:57:c2:37:de:f3:aa:f4:2a:cd:8f:
                    74:7a:74:3f:98:2f:9f:71:10:93:49:91:c1:8a:ff:
                    db:66:75:9b:9b:99:c4:d5:25:c2:0b:c3:5b:38:ea:
                    b8:54:c2:e2:b9:d0:bb:8a:16:7b:7e:0e:b5:01:59:
                    44:b5:c4:3f:8b:9f:1c:ee:2d:f5:39:ee:08:b3:e2:
                    66:d6:ed:7e:b9:2b:82:51:75:d4:aa:07:76:6a:e9:
                    b9:d3:c7:2f:4d:7c:ba:b1:84:f6:4c:7d:2d:e4:45:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:36:A0:56:ED:7A:8E:28:99:0C:C1:7C:79:6F:FE:7A:5C:42:58:7C
            X509v3 Authority Key Identifier:
                keyid:CB:BB:C7:9B:07:88:2F:9E:74:50:A2:99:09:CC:EB:03:1A:BB:96:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:89:51:29:18:69:35:a2:a3:ed:1a:43:42:b7:49:f0:02:46:
         79:74:a8:72:2f:99:3b:ad:8c:bf:b3:27:64:8c:4d:23:fc:aa:
         94:14:fd:f1:52:b3:71:53:5f:5c:db:2e:19:4f:13:2b:63:9f:
         d9:44:42:c4:88:8f:af:b1:11:6a:37:7b:d2:e7:b1:00:ff:fa:
         40:04:94:2f:a6:cf:c1:f3:2a:40:ef:a5:3a:3f:b6:20:9c:bf:
         b2:90:b8:c8:ca:c7:d8:f7:61:4f:c9:49:f3:9d:1a:a1:a9:6b:
         f7:29:b0:ea:6a:d7:79:5a:4c:1a:19:c6:49:28:11:f6:99:f6:
         3e:2c:9b:c7:45:eb:ac:c0:25:fb:7e:8b:37:10:15:ea:31:35:
         7b:e5:89:11:40:05:46:34:b6:b3:67:6e:f2:de:59:ad:08:a6:
         d8:99:bd:77:0c:7c:a5:dc:25:cb:99:34:0d:7d:70:b6:c7:da:
         30:d5:4d:1e:63:ab:75:b7:8e:4b:dd:f2:81:dd:f9:3a:37:22:
         74:3c:b7:80:fc:14:21:4f:2f:f5:b5:36:9f:67:71:a5:ef:a9:
         21:00:a7:9e:74:8d:10:fd:8b:b7:de:e1:c7:04:0f:90:19:e6:
         d6:ac:02:d2:3f:ef:20:33:2b:51:a3:d1:15:a8:f5:e5:31:a1:
         d4:68:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----