Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.mft
File:                     62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.mft (raw, json)
Hash identifier:          rTKQa/UzWXJz3ZA5wqK/orSaFrYTsEs30QIYr4vhDbU=
Subject key identifier:   06:17:C9:77:AC:25:E2:FC:61:9C:61:F3:36:80:63:54:F1:A7:ED:EF
Authority key identifier: 62:E3:44:D1:7A:5F:C9:38:1E:6A:72:18:D1:E6:D0:DE:C5:EB:63:D7
Certificate issuer:       /CN=62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7
Certificate serial:       49D0D48D02E0D95E97FCB83FAE125147918BD0F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.mft
Manifest number:          1E
Signing time:             Mon 15 Apr 2024 08:51:32 +0000
Manifest this update:     Mon 15 Apr 2024 08:46:32 +0000
Manifest next update:     Tue 16 Apr 2024 12:09:32 +0000
Files and hashes:         1: 3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa (hash: raT2/qy2/COUjVt+FOy5TsPAeSfsYTpxEBY2AD66Erk=)
                          2: 62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.crl (hash: UWjM+HxSY1uY9WBRts2En5rWSw0CB6Cxwl4KdZBbQhI=)
                          3: 323830343a336663343a3a2f33322d313238203d3e20323635393133.roa (hash: zDjIveVrf6tXiu4vGU20+uuDwLh3wlhRuCOpgsl3U/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d0:d4:8d:02:e0:d9:5e:97:fc:b8:3f:ae:12:51:47:91:8b:d0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7
        Validity
            Not Before: Apr 15 08:46:32 2024 GMT
            Not After : Apr 16 12:09:32 2024 GMT
        Subject: CN=0617C977AC25E2FC619C61F336806354F1A7EDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:06:49:24:b5:b6:a6:82:43:58:e3:e2:f9:bb:
                    f1:1e:53:24:a5:62:3b:97:0d:7e:43:39:9c:2b:79:
                    c0:7a:de:45:f7:0e:cf:e9:99:c1:82:71:2c:17:bd:
                    3f:40:7f:5f:b0:3e:5e:b7:b2:b0:be:7c:2b:58:6d:
                    a0:91:62:26:90:0e:46:23:1a:07:e7:38:c4:54:5f:
                    ca:82:bd:5d:ae:31:13:05:69:87:9a:df:dd:f2:75:
                    73:bc:89:f2:35:21:0e:ff:4f:06:92:a8:93:ae:2d:
                    49:2f:b9:a9:e3:31:7d:93:fd:e0:b5:f2:19:da:fc:
                    a1:6e:71:06:65:9a:38:42:00:1a:ac:73:f3:57:69:
                    f2:cf:c2:30:43:62:84:93:8f:c9:68:e9:42:59:e0:
                    c9:a5:2e:b7:5e:74:49:30:45:20:18:cd:77:3a:4c:
                    26:66:31:a5:08:01:55:49:ae:34:1d:c9:00:b9:2a:
                    df:76:c6:4d:e1:e2:27:90:4e:a3:77:51:39:de:51:
                    a8:41:8c:be:26:70:4f:8a:78:4f:53:0c:09:dd:80:
                    de:67:69:d4:e5:77:36:47:53:af:9a:ba:de:7d:00:
                    6f:ef:bf:40:4a:d8:2e:51:6a:11:45:55:48:a6:c1:
                    23:19:b6:a9:f5:97:fc:cc:17:11:53:00:72:72:b1:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:17:C9:77:AC:25:E2:FC:61:9C:61:F3:36:80:63:54:F1:A7:ED:EF
            X509v3 Authority Key Identifier:
                keyid:62:E3:44:D1:7A:5F:C9:38:1E:6A:72:18:D1:E6:D0:DE:C5:EB:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c5:1e:ea:7f:66:f5:39:4e:e0:69:b0:12:7f:23:f7:87:8e:
         12:f6:fb:67:13:b9:74:08:53:0c:a5:44:13:91:70:ea:5d:58:
         24:c2:0a:75:8a:25:41:f8:78:39:cd:fe:7b:00:56:3d:b9:ec:
         db:ab:03:27:d5:15:be:a0:03:29:85:57:47:d4:68:ab:9d:6d:
         06:07:22:03:bc:bb:7f:44:a6:ba:a7:99:cb:61:9b:e8:d5:aa:
         33:d4:00:bd:2f:92:ed:cf:f9:68:99:02:c6:a1:1d:83:1f:ab:
         53:2d:9f:1f:d6:d8:1b:35:b2:02:b9:e6:ea:52:d7:65:62:f3:
         c2:30:77:0f:88:50:0e:6d:71:92:c7:83:68:b5:b9:66:dd:6a:
         a9:72:1f:77:63:6d:d1:4f:30:13:ea:15:9a:87:5c:51:12:8a:
         40:8c:d2:16:84:d2:ee:6d:60:67:2c:81:4d:28:26:6e:1a:a5:
         be:8e:e8:f0:34:ff:dc:7e:93:e2:f2:ff:8c:c7:91:f4:fb:bd:
         e8:f3:78:8f:f2:91:4c:7a:b2:cc:c9:48:c6:ae:bd:2a:10:b0:
         e3:1c:d3:d4:1b:d3:61:22:34:39:a3:ba:32:9a:9e:cb:ac:35:
         5a:e7:96:b2:10:88:ab:15:c3:79:42:1b:da:e4:a2:2c:6b:b8:
         38:c5:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----