Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/161ABBC320A5379368876CB238330293202E742A.mft
File:                     161ABBC320A5379368876CB238330293202E742A.mft (raw, json)
Hash identifier:          gGHo/mG7V3OhvUslIDhY9xRxe3wnU+LEPW0og0nlbuw=
Subject key identifier:   C2:C1:63:D7:67:D9:35:C0:2B:B9:63:77:B1:29:9A:12:EE:09:CE:37
Authority key identifier: 16:1A:BB:C3:20:A5:37:93:68:87:6C:B2:38:33:02:93:20:2E:74:2A
Certificate issuer:       /CN=161ABBC320A5379368876CB238330293202E742A
Certificate serial:       0B6E486AFC3C7FD13D882D82C3D0847EDE4FC199
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/161ABBC320A5379368876CB238330293202E742A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/161ABBC320A5379368876CB238330293202E742A.mft
Manifest number:          2C
Signing time:             Mon 15 Apr 2024 05:45:29 +0000
Manifest this update:     Mon 15 Apr 2024 05:40:29 +0000
Manifest next update:     Tue 16 Apr 2024 09:20:29 +0000
Files and hashes:         1: 323830343a376566383a3a2f33322d3332203d3e20323731363538.roa (hash: SqkvfOvWuL9v8j0S/YnzVowZyvMbnldg8MIBfdLok1E=)
                          2: 161ABBC320A5379368876CB238330293202E742A.crl (hash: pLfxiLnUAlnUX5HRLyW+1Y8hB6WsGUqKdEjSx/RI2AM=)
                          3: 3133312e3235352e3133312e302f32342d3234203d3e20323731363538.roa (hash: I1vqQrMmkRcLr8xec2HYOlMs9ZOm+4imttyFAshSyrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6e:48:6a:fc:3c:7f:d1:3d:88:2d:82:c3:d0:84:7e:de:4f:c1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161ABBC320A5379368876CB238330293202E742A
        Validity
            Not Before: Apr 15 05:40:29 2024 GMT
            Not After : Apr 16 09:20:29 2024 GMT
        Subject: CN=C2C163D767D935C02BB96377B1299A12EE09CE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:e3:57:44:e4:9a:f8:74:07:06:f3:19:bf:
                    ab:a4:63:9e:4a:ed:d5:1e:cb:72:4d:52:fa:40:1e:
                    e9:4c:1f:bb:2a:28:53:fb:eb:e9:a7:c3:51:f1:ff:
                    bf:6d:7e:4a:35:c1:44:59:25:30:75:cb:60:3d:69:
                    17:67:5e:c4:dd:93:ab:39:ed:91:bd:4c:6c:c8:56:
                    82:99:5c:5b:8f:64:8e:20:51:3b:e3:c8:ec:09:1d:
                    b3:64:76:24:c2:b9:7c:c9:f0:4a:f8:35:1d:0e:b1:
                    23:68:ad:df:b2:17:e3:d6:34:6e:22:e4:45:d8:fb:
                    fa:97:28:8c:b1:36:0f:09:fb:5c:fb:60:31:26:e3:
                    5b:f4:42:b7:4b:c4:01:bc:6e:8b:3c:22:57:a9:c6:
                    fd:da:14:cd:60:20:4f:26:d7:ac:f3:46:b5:a2:54:
                    2d:d0:73:98:d6:0b:d9:59:07:0a:ef:a4:bf:85:84:
                    95:78:34:5f:86:ba:64:0b:b9:48:e0:d6:85:bf:df:
                    4b:e3:c6:99:85:b3:54:ec:22:7d:62:55:34:18:e2:
                    94:4b:64:21:b0:ae:22:76:da:63:44:e4:f6:cf:28:
                    da:4a:0d:7e:1f:56:42:81:fd:a2:cc:bb:bd:a7:6a:
                    03:44:e7:d5:cd:fa:d5:3c:58:c4:75:7c:85:91:f5:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C1:63:D7:67:D9:35:C0:2B:B9:63:77:B1:29:9A:12:EE:09:CE:37
            X509v3 Authority Key Identifier:
                keyid:16:1A:BB:C3:20:A5:37:93:68:87:6C:B2:38:33:02:93:20:2E:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/161ABBC320A5379368876CB238330293202E742A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/161ABBC320A5379368876CB238330293202E742A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/161ABBC320A5379368876CB238330293202E742A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:68:45:47:f3:1b:13:77:11:b6:79:9a:88:e9:8b:d5:87:b6:
         83:06:4d:47:7c:5a:23:59:ac:5c:0c:97:e8:bc:60:43:cc:14:
         80:f7:23:6f:e8:0a:eb:9b:7b:37:d8:7c:0f:f8:02:bb:ad:60:
         ea:ab:fe:ea:a0:a0:ea:2a:30:eb:73:f0:2b:7d:ad:fd:0e:ce:
         01:8c:3b:30:9e:61:81:f0:5e:9c:f8:db:26:ec:12:95:3b:1f:
         4c:6c:ef:fb:2f:2b:e0:b3:b4:4d:c2:2d:46:e8:2d:b8:92:02:
         89:5b:06:19:ef:67:b8:96:ea:67:71:c8:2e:04:6d:0a:61:1c:
         a7:65:3f:67:b4:74:86:78:8b:71:b9:25:fe:db:4e:91:9c:d2:
         e3:5f:52:24:80:37:d1:4c:ce:ac:72:01:24:1f:98:81:3b:fe:
         ab:89:c3:04:9e:fb:f7:26:c6:a3:8d:e5:93:92:69:fa:88:20:
         e0:2f:12:d1:e1:bf:94:d0:7a:a0:5f:c2:68:be:fc:d0:f1:99:
         1a:a1:bf:14:66:6b:f1:a9:1e:75:65:f9:34:37:0a:c7:92:23:
         02:d2:f8:4c:88:93:1c:f0:1d:d5:76:e7:72:93:93:c9:78:8f:
         57:80:cb:53:33:ce:07:df:67:b0:35:98:64:b3:c0:e5:2c:c8:
         33:f1:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----