Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.mft
File:                     57AF2DD217BFC98BC90686B4E02C2581542C05C9.mft (raw, json)
Hash identifier:          oL+IHvU8LrZcZTzd26kNhhgG0ResaC9fRMa0lKdEwbM=
Subject key identifier:   C1:BD:06:AA:CA:68:18:B5:8D:65:E6:7D:A8:1E:42:8C:7A:B1:E8:DB
Authority key identifier: 57:AF:2D:D2:17:BF:C9:8B:C9:06:86:B4:E0:2C:25:81:54:2C:05:C9
Certificate issuer:       /CN=57AF2DD217BFC98BC90686B4E02C2581542C05C9
Certificate serial:       42186CC32C1EDD37F6728BC666AFEF1CC3EBCAE5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.mft
Manifest number:          021D
Signing time:             Wed 17 Jan 2024 18:25:00 +0000
Manifest this update:     Wed 17 Jan 2024 18:20:00 +0000
Manifest next update:     Thu 18 Jan 2024 19:13:00 +0000
Files and hashes:         1: 57AF2DD217BFC98BC90686B4E02C2581542C05C9.crl (hash: wW0sfh1Lg2SQg5yLwJ9FTKTmWF7euZQtvSd9/ADhAqk=)
                          2: 3136302e3233382e3232382e302f32322d3234203d3e20323636353536.roa (hash: jMMj00ku9Mddu/HCpF8SAX5jJA/Sob1OP+mk80WgHzQ=)
                          3: 323830343a336464343a3a2f33322d3335203d3e20323636353536.roa (hash: brTVWQ8QVwgsxFXpdxXZS6GwGW6K4R7RtGyMvRRpq8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:18:6c:c3:2c:1e:dd:37:f6:72:8b:c6:66:af:ef:1c:c3:eb:ca:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57AF2DD217BFC98BC90686B4E02C2581542C05C9
        Validity
            Not Before: Jan 17 18:20:00 2024 GMT
            Not After : Jan 18 19:13:00 2024 GMT
        Subject: CN=C1BD06AACA6818B58D65E67DA81E428C7AB1E8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:56:d4:8a:06:02:92:56:4e:22:5c:ab:9a:
                    53:b3:7a:cc:ed:65:18:ee:34:cc:d8:4a:a9:56:c9:
                    c0:90:74:c2:74:74:95:54:1e:ac:78:b4:f6:07:e2:
                    14:05:75:8b:18:22:31:84:6c:cb:2c:ef:e1:99:38:
                    26:5a:70:29:90:6b:1c:47:30:62:14:46:38:88:f6:
                    b7:7e:1b:57:78:03:7b:51:59:82:5d:cf:d0:f2:e2:
                    3b:9b:b2:4b:2e:59:11:69:bc:d9:67:97:76:57:c1:
                    9f:a2:4b:bc:81:a7:17:40:a4:b8:2a:31:31:76:02:
                    5a:74:eb:57:08:be:f7:0b:f7:06:66:ac:bd:f4:55:
                    55:00:c0:42:23:04:ac:e8:c6:c8:68:e3:60:2d:06:
                    23:cc:da:67:6d:57:9a:75:56:d8:09:ad:d1:15:ba:
                    4c:07:ea:38:47:66:13:39:3b:07:b9:c7:d9:9e:3f:
                    ee:ea:7e:ed:55:0f:da:6d:0d:be:d1:3a:e9:82:a7:
                    e2:02:3a:f8:c1:fc:d8:f5:a0:b9:c0:79:37:69:cc:
                    0c:23:b9:07:6e:89:88:c6:f5:6a:e7:f5:ee:79:82:
                    c3:fd:9b:14:59:e2:11:7e:25:ad:c3:5a:04:63:65:
                    42:36:2b:26:1c:a8:8c:39:e7:8f:ab:51:5d:1c:26:
                    57:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BD:06:AA:CA:68:18:B5:8D:65:E6:7D:A8:1E:42:8C:7A:B1:E8:DB
            X509v3 Authority Key Identifier:
                keyid:57:AF:2D:D2:17:BF:C9:8B:C9:06:86:B4:E0:2C:25:81:54:2C:05:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:70:f1:ac:c3:55:d9:3c:ba:ad:5a:4b:23:ac:ee:64:dd:
         43:e4:f6:89:02:34:b8:f7:e8:db:1a:5f:32:8a:20:3c:b8:f5:
         67:49:b4:11:53:8a:92:dc:c6:13:43:79:e5:89:ac:8b:0a:d0:
         76:98:2b:09:92:fa:0c:b2:b1:85:f5:99:82:b7:a5:92:26:9c:
         fa:4f:10:07:8f:64:92:c3:51:ec:e4:da:a5:11:43:db:76:e5:
         d1:6a:7a:d0:90:6a:3e:1e:48:f3:e5:42:88:f3:54:f6:0a:1a:
         d2:d1:4d:9c:2b:57:6f:d3:72:7a:04:c1:e4:67:a2:f9:7c:22:
         8a:c9:f1:8d:5a:ae:1b:33:a5:24:6f:8b:77:45:68:21:b7:d7:
         ef:78:39:3d:1c:9d:9c:c5:fc:1e:97:d0:9b:e7:2b:da:95:95:
         92:62:20:87:a7:2f:cb:e1:cd:81:f1:8a:1d:f2:a4:c3:14:71:
         6a:27:a9:75:ac:0f:35:c0:b0:64:09:90:ce:59:a7:7f:8c:03:
         eb:37:fc:36:79:37:99:15:4d:c5:5e:11:70:07:10:84:08:46:
         2a:bb:e0:04:6c:77:46:7b:99:ff:f4:7f:52:b1:ad:32:f6:87:
         00:e3:6a:ce:8c:b8:0b:3a:96:d2:bf:9b:33:67:7e:44:1f:9f:
         64:8c:6a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----