Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.mft
File:                     125CBECECAD354CA7573FC1CC176552F49EEDC6D.mft (raw, json)
Hash identifier:          dWIqchyGpUbWq5gfLTJ/qlk2zIgGj64a+McpbkcRTFQ=
Subject key identifier:   92:86:99:33:3D:35:01:9C:13:A5:0F:E3:96:02:A9:01:A9:73:E9:52
Authority key identifier: 12:5C:BE:CE:CA:D3:54:CA:75:73:FC:1C:C1:76:55:2F:49:EE:DC:6D
Certificate issuer:       /CN=125CBECECAD354CA7573FC1CC176552F49EEDC6D
Certificate serial:       1D11C0E73CB713C1358ECDECE0A9B58303348629
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.mft
Manifest number:          19
Signing time:             Sun 21 Apr 2024 02:35:16 +0000
Manifest this update:     Sun 21 Apr 2024 02:30:16 +0000
Manifest next update:     Mon 22 Apr 2024 04:25:16 +0000
Files and hashes:         1: 323830343a333766343a3a2f33322d313238203d3e20323636343436.roa (hash: DO4eo1zv6Sa6rDsG+ldp9vRFToKy4U0bdm8RL7IASv0=)
                          2: 3137302e38322e3139322e302f32322d3332203d3e20323636343436.roa (hash: Txzne4J4Gdi+DjuJiHMbUfxHcvVsCayJ3npgZEVbLXw=)
                          3: 125CBECECAD354CA7573FC1CC176552F49EEDC6D.crl (hash: SNFfGWJ0vVMgCkKK5RD2rOq/Ukp8+TM1X6gWrGC1kW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:c0:e7:3c:b7:13:c1:35:8e:cd:ec:e0:a9:b5:83:03:34:86:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125CBECECAD354CA7573FC1CC176552F49EEDC6D
        Validity
            Not Before: Apr 21 02:30:16 2024 GMT
            Not After : Apr 22 04:25:16 2024 GMT
        Subject: CN=928699333D35019C13A50FE39602A901A973E952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:39:6d:81:28:74:1e:d1:02:11:77:13:c8:
                    2f:80:e4:d6:c0:f1:7a:ff:4c:59:32:8a:c9:6c:83:
                    06:2a:f6:e5:ce:fc:eb:2e:bd:36:ac:16:bf:76:b6:
                    55:93:3c:a0:af:cd:29:1a:01:f7:c8:8e:5f:9b:3d:
                    8a:9d:d6:f0:84:a4:d9:48:3a:91:89:32:cd:8a:68:
                    13:6a:40:61:6d:97:67:d6:fd:ed:26:68:09:9d:20:
                    b3:9e:3c:9a:87:b7:ea:80:ca:e9:bc:f9:fd:bc:ae:
                    61:d8:71:cd:e5:9e:d7:2a:d3:0d:6e:7d:24:54:00:
                    e9:2f:9f:0d:75:21:10:d2:09:83:b9:ec:49:3f:60:
                    90:52:da:86:16:04:e5:68:72:f5:8d:c5:50:82:01:
                    9d:3c:9b:82:02:be:1e:75:77:f3:72:35:17:4f:65:
                    86:62:f4:36:4c:d6:3a:33:10:1e:09:90:cb:14:a7:
                    db:55:c6:f7:7c:a2:a8:20:a4:33:56:57:51:a2:b5:
                    c8:6d:f2:28:f5:aa:45:78:c8:5c:4a:c1:c7:99:09:
                    5b:f4:c4:54:93:de:e5:41:70:3c:1f:60:24:e7:37:
                    e8:bc:5b:c8:4f:91:70:83:e4:0e:bc:9b:02:bf:5f:
                    b2:3f:1d:3f:52:56:9c:18:a2:54:f5:fe:04:b9:25:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:86:99:33:3D:35:01:9C:13:A5:0F:E3:96:02:A9:01:A9:73:E9:52
            X509v3 Authority Key Identifier:
                keyid:12:5C:BE:CE:CA:D3:54:CA:75:73:FC:1C:C1:76:55:2F:49:EE:DC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/1/125CBECECAD354CA7573FC1CC176552F49EEDC6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:04:b2:e5:bf:66:f5:c6:bb:9b:02:e3:bc:19:cd:c7:7a:c5:
         e2:b0:76:60:c7:0e:09:78:2b:50:51:75:98:1e:0e:c7:21:48:
         0c:28:62:47:32:24:7d:f1:6e:47:2f:f4:fe:00:20:5d:16:f0:
         e8:4d:14:6f:03:46:09:ca:e4:09:3f:4f:b0:3f:8b:af:ca:76:
         e0:17:41:0d:99:e1:d0:9e:b7:4d:48:61:af:d7:bc:ac:94:68:
         97:29:66:03:a0:74:35:9b:f6:1d:4f:00:b8:5a:41:b3:c5:0a:
         7d:40:63:d0:ad:67:97:6d:10:43:8e:a4:36:de:ce:06:0d:23:
         f1:e7:3c:6c:d5:7d:76:5f:3b:b2:2b:9a:b7:e5:76:94:b5:7c:
         d2:92:af:d8:15:1f:ea:38:81:04:17:d7:df:5b:91:73:ba:28:
         d2:e7:96:4e:e7:bf:c0:a3:82:00:12:35:67:b4:09:7f:77:3c:
         57:bb:a5:b8:64:3a:2a:3f:c8:ae:89:52:ce:5c:ff:66:1f:6c:
         99:b5:5d:60:4f:02:bd:ec:e8:fc:d0:44:a3:c2:1a:6a:94:d7:
         93:63:dc:c3:f0:13:73:33:7f:26:53:af:86:ac:30:9d:1b:42:
         57:7f:7b:e2:21:cb:41:8e:75:a3:54:43:37:5e:da:5d:c8:cf:
         77:70:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----