Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/449501A41FB5B63BE134A62426AA3A72D306EF80.mft
File:                     449501A41FB5B63BE134A62426AA3A72D306EF80.mft (raw, json)
Hash identifier:          72PDifG+RCVr5uWiEvus3NHWU6P57HthSbMjX4mcqfk=
Subject key identifier:   35:2C:70:49:5A:13:59:21:C1:AA:24:6E:5F:47:DA:FA:7A:79:09:00
Authority key identifier: 44:95:01:A4:1F:B5:B6:3B:E1:34:A6:24:26:AA:3A:72:D3:06:EF:80
Certificate issuer:       /CN=449501A41FB5B63BE134A62426AA3A72D306EF80
Certificate serial:       323C399276BC648BDB14D231B93E5DE36DD6F7F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449501A41FB5B63BE134A62426AA3A72D306EF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/449501A41FB5B63BE134A62426AA3A72D306EF80.mft
Manifest number:          14
Signing time:             Mon 15 Apr 2024 08:38:26 +0000
Manifest this update:     Mon 15 Apr 2024 08:33:26 +0000
Manifest next update:     Tue 16 Apr 2024 08:59:26 +0000
Files and hashes:         1: 34352e3138352e37362e302f32322d3332203d3e20323639333637.roa (hash: 1GtQMSqluwfu4vD1bQATvbZjH8xHWEcFuzs2KyyDcIY=)
                          2: 323830343a363338383a3a2f33322d313238203d3e20323639333637.roa (hash: tuAyIpRK2rHT63Okt/6p0ggSmAZrhJbYDzN/m6ej6f4=)
                          3: 449501A41FB5B63BE134A62426AA3A72D306EF80.crl (hash: b/a7r8uHB4Jd1lBVAAH8C1dKVK8uB8IimVbgoL8mDS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3c:39:92:76:bc:64:8b:db:14:d2:31:b9:3e:5d:e3:6d:d6:f7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449501A41FB5B63BE134A62426AA3A72D306EF80
        Validity
            Not Before: Apr 15 08:33:26 2024 GMT
            Not After : Apr 16 08:59:26 2024 GMT
        Subject: CN=352C70495A135921C1AA246E5F47DAFA7A790900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:f3:89:61:ee:1a:74:cc:89:0d:3d:e0:50:
                    af:f7:53:09:4b:fb:f0:30:a7:ac:11:fe:02:19:37:
                    85:1d:82:f4:fe:a7:c4:18:53:66:31:09:7e:b8:0a:
                    7f:ca:bb:e6:67:46:3e:21:32:6a:2d:d3:d9:d1:0e:
                    aa:df:71:03:80:82:09:1b:20:fa:91:0a:be:6b:d4:
                    69:b2:f9:57:e9:17:9f:6b:e0:fe:03:9c:7d:bd:8b:
                    c3:f0:82:c2:e4:f0:8b:bd:7f:fa:fe:26:23:a2:a0:
                    50:23:ec:51:79:8b:e3:ad:95:d9:84:28:c0:eb:a2:
                    09:58:c7:1a:53:ff:9c:84:8a:16:44:7f:ae:7e:5e:
                    4e:00:09:50:4d:0d:62:10:d2:22:d2:8b:bf:fc:a4:
                    c7:f8:86:42:b0:52:5c:e5:af:bd:9f:61:f4:3e:ae:
                    91:4a:d9:f3:2a:fc:6a:c6:5a:e5:8e:bc:e5:48:18:
                    2a:52:86:db:ae:c0:1a:2c:e8:7e:12:fe:04:26:28:
                    58:ef:46:a1:3d:85:50:25:dd:a8:4c:39:d8:e3:3e:
                    a2:13:d2:13:bd:3e:89:90:eb:96:4f:b7:41:fa:26:
                    be:54:88:55:d4:dc:3e:ea:a6:70:39:ca:14:f6:95:
                    7d:a3:20:5c:b3:66:2f:e4:70:50:a2:8c:e3:0b:6b:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2C:70:49:5A:13:59:21:C1:AA:24:6E:5F:47:DA:FA:7A:79:09:00
            X509v3 Authority Key Identifier:
                keyid:44:95:01:A4:1F:B5:B6:3B:E1:34:A6:24:26:AA:3A:72:D3:06:EF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/449501A41FB5B63BE134A62426AA3A72D306EF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449501A41FB5B63BE134A62426AA3A72D306EF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/449501A41FB5B63BE134A62426AA3A72D306EF80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:23:10:17:96:6c:a4:ab:e6:d2:5e:d3:22:62:32:19:10:c3:
         b5:19:eb:ce:d1:50:0f:ea:96:b6:fd:9b:c3:56:20:90:05:07:
         01:fa:b5:32:ba:97:b0:e6:f9:ad:9f:71:e7:24:a5:b0:43:c9:
         8f:c8:80:5c:bf:f1:d8:15:56:1e:8d:71:d5:fe:e9:ae:0c:6b:
         6b:5b:92:68:06:6a:4d:71:ca:07:83:e3:43:70:a7:4b:9a:b3:
         3d:02:2c:9a:4f:04:6d:86:46:99:1f:b3:d3:24:f7:43:5e:02:
         4a:8d:8c:4c:5c:91:a4:8f:7c:7d:ce:53:14:f3:26:8b:10:e0:
         be:5c:bc:2d:72:c8:69:02:c0:91:35:81:4c:95:6b:f8:8c:f9:
         bc:5f:a1:29:19:38:ae:88:15:c0:06:85:e2:c5:14:05:6b:05:
         4a:c5:92:08:97:02:2c:b9:c6:cb:91:73:d4:82:b6:f7:1f:c8:
         b6:14:cf:c4:90:32:93:61:9f:51:fc:b3:78:a5:7d:1f:bd:bf:
         46:00:60:f4:82:56:89:73:f4:ea:20:5f:cd:b4:9e:5f:a2:41:
         01:e7:4d:ee:1c:a9:84:03:46:a1:cc:18:b1:9e:46:0c:42:60:
         e8:e5:dc:45:75:ef:fd:22:9a:a0:5a:c0:e2:d4:fd:bd:21:e5:
         07:61:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----