Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.mft
File:                     4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.mft (raw, json)
Hash identifier:          /JrUS+fDAi2BJRvxsyqC2n/P1Fb0Z4o+zjMseo1qA40=
Subject key identifier:   15:99:EB:F5:79:BB:B8:E0:18:2F:09:23:12:DF:5E:D9:9F:3E:7A:15
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Certificate issuer:       /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial:       61B06B1DE8EE2341AE2E2EA2DBC72B1EBAEFD57E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.mft
Manifest number:          0279
Signing time:             Mon 15 Apr 2024 05:05:12 +0000
Manifest this update:     Mon 15 Apr 2024 05:00:12 +0000
Manifest next update:     Tue 16 Apr 2024 08:30:12 +0000
Files and hashes:         1: 3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa (hash: jaw11jMiyALEoJmqolIqN4jwgba2d+eF4vDUNr5fJ1c=)
                          2: 323830343a316539343a3a2f33322d3336203d3e20323634343337.roa (hash: kboqg7EZkKlGNq+Y4iQuCtdlp+htiBo9SQRc7opyrjw=)
                          3: 4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl (hash: jU5dXRKKTIXz66f1j45kgLBoJbaurYMWsTpB7OffBio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b0:6b:1d:e8:ee:23:41:ae:2e:2e:a2:db:c7:2b:1e:ba:ef:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
        Validity
            Not Before: Apr 15 05:00:12 2024 GMT
            Not After : Apr 16 08:30:12 2024 GMT
        Subject: CN=1599EBF579BBB8E0182F092312DF5ED99F3E7A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cf:75:a9:ca:a8:04:b4:0a:37:71:5b:2b:c2:
                    04:72:ba:43:25:18:6f:fa:8c:0c:11:8e:69:2d:48:
                    36:e9:41:8d:1b:7a:48:7f:e0:fd:d9:32:d0:1e:ad:
                    cd:6d:f5:83:9c:3b:bd:da:7e:a0:8d:59:b0:ed:3e:
                    7b:05:56:47:95:9f:e7:01:eb:f5:3f:4e:f6:45:44:
                    de:db:62:90:74:89:68:24:c3:d9:c4:b6:ff:d5:97:
                    aa:cf:09:a6:df:3f:4a:9c:52:53:a3:35:b6:01:82:
                    1e:99:59:00:be:4f:29:30:58:74:77:73:cf:e8:78:
                    79:cc:18:1c:52:1b:45:88:b6:95:b3:1f:4e:b3:e3:
                    23:23:0c:35:85:58:fa:ef:6a:7d:9e:b9:a0:2d:c7:
                    9b:e4:ee:31:f4:18:29:dc:17:ce:96:16:ef:6e:55:
                    70:5f:9a:77:43:d6:c6:b9:e0:f1:ee:ff:eb:24:da:
                    a3:ca:b6:03:e8:da:4c:b1:b3:f0:1b:e9:b6:59:6a:
                    0f:ae:78:16:b0:90:46:18:f1:2b:6c:67:09:d5:22:
                    6d:29:98:86:25:95:ee:5b:08:98:70:9d:10:ac:72:
                    ce:9f:42:e8:2c:ad:38:5f:b4:4b:0f:4c:2c:13:4c:
                    48:eb:ba:e4:51:0d:f1:a4:d9:4a:2d:73:cf:c1:46:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:99:EB:F5:79:BB:B8:E0:18:2F:09:23:12:DF:5E:D9:9F:3E:7A:15
            X509v3 Authority Key Identifier:
                keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:ea:d0:45:95:5c:93:d2:3f:95:a6:12:67:64:0b:9e:ce:
         40:fe:9b:48:27:47:a1:11:ed:ea:e2:c2:3a:6f:10:6a:df:c0:
         2d:d3:45:d4:98:67:31:d0:08:6d:86:d0:e8:1e:c9:23:68:f9:
         14:db:5c:4e:4c:5e:9d:4b:ec:8b:82:56:0b:69:94:48:bf:12:
         55:41:da:0c:5c:df:ac:ee:9d:fe:07:9f:69:17:d5:72:1b:bb:
         98:57:9d:6e:4a:82:ec:83:a5:3a:ba:29:d7:e8:e4:a3:b6:d7:
         41:5d:c0:28:43:e6:01:d5:61:83:a9:c2:f5:ff:ca:ac:d0:9a:
         b6:15:73:ab:3f:15:aa:d3:7c:5c:24:9b:c4:5f:8a:64:3e:df:
         91:2f:4c:7a:b6:c6:c1:d5:67:91:6d:33:3d:be:d8:a6:a1:ff:
         50:9e:65:6f:dd:ab:cf:0e:76:35:33:bb:ce:ff:fa:21:6b:05:
         22:38:27:00:b5:da:dc:45:60:0e:5e:6b:88:c5:ee:79:23:d3:
         3e:8a:82:d0:07:72:ad:4d:39:47:fe:52:eb:bb:35:21:f4:8a:
         16:59:cd:98:f2:70:34:73:b7:a3:f1:17:e4:24:b5:4f:58:f1:
         73:d3:68:e4:d7:a9:76:6f:b0:61:3f:22:85:d8:6b:06:3d:1d:
         30:6c:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----