Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.mft
File:                     DA1F477B3B82C1A260C1D7857E482F0D8596E756.mft (raw, json)
Hash identifier:          g95qzXWy1S1q0TiYFRdH+gBfK8ILQOwVyqhmvuJ0gG8=
Subject key identifier:   DB:E0:D6:D8:B1:C3:64:74:E4:BF:06:2B:D4:33:0B:CE:3A:44:0C:E7
Authority key identifier: DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56
Certificate issuer:       /CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
Certificate serial:       47C040E1BF44287CD9189F3E0EFBB7CFF4E33D2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.mft
Manifest number:          58
Signing time:             Mon 15 Apr 2024 01:58:26 +0000
Manifest this update:     Mon 15 Apr 2024 01:53:26 +0000
Manifest next update:     Tue 16 Apr 2024 02:13:26 +0000
Files and hashes:         1: 34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa (hash: JV1JXx9+NwmttCK/fz1Wm+16cLm++YPJFUbWEwL7vqU=)
                          2: DA1F477B3B82C1A260C1D7857E482F0D8596E756.crl (hash: UBUo5zNv9/PgbHq2fG54I1gvR49FXPLI+6t7jFlNhXM=)
                          3: 323830343a343531383a3a2f33322d3438203d3e20323637363732.roa (hash: KHYMO9Mgv9cYYJWfFZzenfPo9d55BtJb+qISk2q19us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c0:40:e1:bf:44:28:7c:d9:18:9f:3e:0e:fb:b7:cf:f4:e3:3d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
        Validity
            Not Before: Apr 15 01:53:26 2024 GMT
            Not After : Apr 16 02:13:26 2024 GMT
        Subject: CN=DBE0D6D8B1C36474E4BF062BD4330BCE3A440CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:25:4c:87:a4:c3:62:f9:31:e5:28:81:6b:
                    64:7d:f1:06:c4:fd:36:44:c2:6e:ea:59:a4:b7:34:
                    18:e0:2f:aa:47:48:20:c0:b9:a7:b5:2e:aa:2a:9b:
                    50:07:01:28:35:97:ce:fe:b4:fe:41:b7:79:ca:4e:
                    5f:e4:ca:14:c8:33:a0:23:4e:38:2d:63:5a:2e:7c:
                    07:26:50:ce:dd:76:5d:21:4e:97:72:28:eb:74:0d:
                    95:3b:45:a5:75:11:74:83:8c:76:3a:fa:f8:68:e9:
                    eb:69:0b:ec:b8:0b:2e:c7:05:03:a7:6f:f2:82:4b:
                    1b:0c:08:3d:dd:64:c7:f8:e8:c7:fa:77:bd:54:ad:
                    67:d7:70:34:82:4b:e0:0f:f0:11:a0:6d:e5:e5:ae:
                    12:67:2d:4a:4f:99:64:d8:fc:29:6d:a5:20:18:8f:
                    d1:82:02:04:1b:ed:d2:db:6f:15:ea:a6:f1:9d:32:
                    86:a0:b8:51:21:fc:10:c6:0c:23:e0:17:93:a2:56:
                    85:8f:33:c0:02:0d:17:aa:ed:3c:05:bb:08:a8:89:
                    09:db:b8:2b:da:8c:3e:4b:ef:67:ed:05:6a:72:6d:
                    86:cb:d7:03:d2:91:cc:e4:2e:26:e8:16:b3:c6:ee:
                    c7:9f:00:a3:d3:49:06:79:4e:52:01:fe:b0:68:b7:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E0:D6:D8:B1:C3:64:74:E4:BF:06:2B:D4:33:0B:CE:3A:44:0C:E7
            X509v3 Authority Key Identifier:
                keyid:DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3e:b4:77:2b:f0:02:6f:0b:93:79:5f:d7:fd:ff:b9:38:9f:
         02:88:66:2d:5b:ff:e6:a8:29:c0:d2:47:94:85:c3:07:2d:eb:
         38:c2:45:a0:0e:32:5e:b1:13:01:12:98:5c:9c:81:ba:77:43:
         3d:c0:e3:d3:c1:a5:0f:75:a0:73:ca:05:0b:fd:5a:e7:bf:c4:
         a2:a3:31:a1:94:d2:8a:15:00:17:2a:53:0d:e5:db:75:fa:00:
         f1:d3:9c:aa:31:2f:a7:9d:21:24:dd:1e:14:8d:2c:cd:09:c0:
         6e:a0:99:66:40:fe:91:1a:74:36:a0:a9:bd:73:4e:3d:77:29:
         0e:e5:8f:40:1e:bc:01:aa:7c:df:99:8f:52:48:b1:bb:51:7b:
         f5:4b:ac:b1:91:80:68:0f:b4:2d:58:a4:93:90:65:26:c2:b7:
         f6:f1:c7:56:3a:27:98:93:04:37:09:fc:d5:a5:27:da:f1:db:
         72:4a:1e:a9:c4:7b:6b:da:84:83:5a:2a:8d:26:bb:5e:1c:c1:
         d2:88:af:1a:67:bb:52:57:75:99:41:bf:4f:f8:fb:c8:bb:d0:
         e4:a3:2f:d4:aa:8c:96:a8:6c:fa:82:40:0c:c7:93:e4:5d:b1:
         54:54:c1:5b:63:05:42:8b:ee:08:d8:9a:f3:88:cf:94:8b:74:
         87:e8:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----