Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/31bDzjNtxEUahULpC1NjApRNPhY5vzJkLZPgzWpoEgrf/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.mft
File:                     15D3F36B8922FF349E1B6AACACB04A8040E743CA.mft (raw, json)
Hash identifier:          piXz888YgwSQw4QWhkA1K/Sw8oiTK6YITHEh2wSClGY=
Subject key identifier:   33:0F:9F:45:04:74:7A:99:21:B4:37:C6:C6:BA:ED:E6:D6:B5:78:83
Authority key identifier: 15:D3:F3:6B:89:22:FF:34:9E:1B:6A:AC:AC:B0:4A:80:40:E7:43:CA
Certificate issuer:       /CN=15D3F36B8922FF349E1B6AACACB04A8040E743CA
Certificate serial:       30331FA47F01B64119FEBE445BB0B7F7B2685E6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31bDzjNtxEUahULpC1NjApRNPhY5vzJkLZPgzWpoEgrf/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.mft
Manifest number:          0298
Signing time:             Thu 15 Feb 2024 17:31:30 +0000
Manifest this update:     Thu 15 Feb 2024 17:26:30 +0000
Manifest next update:     Fri 16 Feb 2024 18:49:30 +0000
Files and hashes:         1: 323830343a373666343a3a2f33322d3438203d3e20323731313435.roa (hash: n25awMXp+/4Y1kbIei+3PpliALcdpMvcj3fngCNtGT0=)
                          2: 3230312e37312e3231362e302f32322d3234203d3e20323731313435.roa (hash: LdUZcGUY4OoO97B0PfWFZquGLKgsgJYaF/OKH+u0pPY=)
                          3: 15D3F36B8922FF349E1B6AACACB04A8040E743CA.crl (hash: V+ErE1m1j9O1oaq9g6HAhilbirMKo5V/94eJrYZux7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:33:1f:a4:7f:01:b6:41:19:fe:be:44:5b:b0:b7:f7:b2:68:5e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D3F36B8922FF349E1B6AACACB04A8040E743CA
        Validity
            Not Before: Feb 15 17:26:30 2024 GMT
            Not After : Feb 16 18:49:30 2024 GMT
        Subject: CN=330F9F4504747A9921B437C6C6BAEDE6D6B57883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:26:fc:b2:1f:44:4c:16:b5:e4:a1:42:75:
                    ff:5b:a8:54:77:67:da:96:cc:c4:b4:b2:08:33:75:
                    68:24:90:29:f8:dd:06:57:64:af:4c:2e:41:76:d2:
                    c1:e4:0d:20:71:f0:cb:bb:39:37:16:52:d4:77:ce:
                    c4:2e:a1:36:df:86:a3:d0:24:ef:92:f6:bd:c7:40:
                    7f:e5:49:2c:f9:ad:47:17:2b:ff:f2:aa:5d:d4:18:
                    85:77:34:f1:5f:e0:a2:e1:61:89:1e:dd:6e:ff:e1:
                    bc:0b:84:b9:ea:d4:e8:90:56:35:f9:c9:24:a7:d2:
                    ad:0d:e0:4d:f3:80:b9:ff:4f:dd:cb:21:db:02:7f:
                    2d:ee:2d:23:65:c4:cc:63:05:73:ad:61:d1:1d:4c:
                    3d:ba:a3:7f:f4:d7:85:7f:9d:d8:55:e5:1f:20:08:
                    8f:4c:1c:9f:2a:1b:82:ae:26:e9:54:d0:b1:36:a7:
                    a6:ae:0f:7f:f3:07:69:48:6b:df:f1:4b:4d:79:3a:
                    ed:dd:de:f1:32:f6:04:f6:77:2d:45:d3:c5:87:cf:
                    c9:56:23:4a:3e:98:26:e0:6f:9a:f2:3f:63:86:cf:
                    9f:27:a5:66:7b:97:f6:1c:e7:9b:c2:b3:81:2e:3a:
                    2c:7e:60:77:f8:d2:6e:37:5f:1d:9b:87:d2:9b:3c:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0F:9F:45:04:74:7A:99:21:B4:37:C6:C6:BA:ED:E6:D6:B5:78:83
            X509v3 Authority Key Identifier:
                keyid:15:D3:F3:6B:89:22:FF:34:9E:1B:6A:AC:AC:B0:4A:80:40:E7:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31bDzjNtxEUahULpC1NjApRNPhY5vzJkLZPgzWpoEgrf/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31bDzjNtxEUahULpC1NjApRNPhY5vzJkLZPgzWpoEgrf/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:29:a2:14:5a:35:46:2e:6f:f5:b5:a1:c2:1e:ed:d3:50:de:
         77:67:dd:79:6e:39:80:f8:51:a4:20:5a:13:b2:2a:9e:f5:ca:
         77:e3:6f:bf:f3:ed:a0:a3:ef:bf:60:01:e8:8b:b7:5e:b8:0a:
         59:28:86:e4:f2:d1:c6:ea:70:93:8a:d1:d7:e6:73:19:88:ee:
         aa:89:b1:0f:7a:6b:11:bf:49:d7:26:8e:70:58:c1:84:3d:4a:
         ce:55:be:d2:3f:a1:1b:b5:a8:4d:86:60:4d:9b:3b:4b:a0:c7:
         75:20:59:9b:83:08:be:52:fd:dd:06:b0:4e:b3:84:c6:d0:5e:
         e5:53:72:d5:78:30:5a:a3:09:c4:d9:d7:d8:12:e1:46:c4:35:
         cd:33:fb:1d:d4:99:e0:0c:e6:d6:1d:59:89:4a:ff:1f:81:eb:
         17:29:6b:8b:1b:82:7f:35:00:95:7a:40:44:ed:43:92:2d:e2:
         bd:6f:49:fa:42:04:aa:a5:03:46:68:eb:32:71:1a:41:fa:b7:
         4e:af:52:3e:9e:fe:f9:d0:08:41:d8:da:41:63:08:52:22:0a:
         21:8d:a6:54:18:49:0b:a9:20:12:ca:b1:59:b5:e2:26:e9:1a:
         55:12:8d:4e:1f:22:59:c4:51:3f:51:82:63:ee:f6:e4:54:f9:
         c6:9c:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----