Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.mft
File:                     D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.mft (raw, json)
Hash identifier:          Js3KfhrugrOmwooxYUdziVsqOsIgX0zUCTR/MhRv9mo=
Subject key identifier:   15:FD:C0:C0:7B:3C:C3:58:0F:BA:38:AF:1C:34:9F:BE:41:5F:A9:2F
Authority key identifier: D2:CE:04:BD:F6:34:87:D6:7E:2D:99:D2:0E:E0:D1:9C:2B:D6:5F:8F
Certificate issuer:       /CN=D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F
Certificate serial:       26C3313A9DE1BE14B4AFBBE85226805FAD4AD6CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.mft
Manifest number:          19
Signing time:             Sun 14 Apr 2024 19:30:00 +0000
Manifest this update:     Sun 14 Apr 2024 19:25:00 +0000
Manifest next update:     Mon 15 Apr 2024 21:43:00 +0000
Files and hashes:         1: D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.crl (hash: fLK0MMFH9EmRl0ARAIQ3qBSvxVPATEAKoU7+Zl+RCNo=)
                          2: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (hash: 0XNGc0CCL3L2YXRx+RPF/0BKm/wadHq6IajQmsKQ9rc=)
                          3: 3137372e39322e3138342e302f32312d3231203d3e20323633313236.roa (hash: 2glufBndjfCQDzXr1EmwyAIUAOY9OV/mBYF4nHHMIZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c3:31:3a:9d:e1:be:14:b4:af:bb:e8:52:26:80:5f:ad:4a:d6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F
        Validity
            Not Before: Apr 14 19:25:00 2024 GMT
            Not After : Apr 15 21:43:00 2024 GMT
        Subject: CN=15FDC0C07B3CC3580FBA38AF1C349FBE415FA92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:97:64:77:b8:5f:30:c9:ab:6a:b4:a9:6f:
                    61:73:29:bd:3d:42:58:86:4b:fb:ef:be:97:f1:05:
                    e6:76:4d:fc:20:ee:85:5d:51:28:ba:a0:19:27:f3:
                    01:a6:f2:24:e6:8f:41:ae:be:c1:87:57:20:b4:68:
                    08:1c:fe:1b:60:f5:cc:5a:28:64:88:de:60:67:c0:
                    f8:28:d4:3b:d6:8a:4f:6e:00:eb:71:a8:ff:01:0e:
                    5e:6d:1b:30:fa:46:0b:8d:a0:0f:d6:b7:f6:7b:9c:
                    76:45:15:e0:8c:9f:3c:95:4a:37:44:ea:55:06:b0:
                    c3:00:42:d1:22:c2:36:12:55:6e:6a:72:f8:ae:50:
                    36:83:4e:34:b2:50:57:07:2f:72:3b:14:01:26:69:
                    eb:12:ee:46:08:c0:1e:49:62:df:bc:42:00:cf:f8:
                    e6:36:c0:e9:d3:9b:7a:da:39:ed:80:53:d7:fa:41:
                    8a:05:53:72:a5:1d:95:a7:40:b0:54:fb:1f:63:57:
                    07:a4:e9:80:04:7c:d2:16:2e:43:70:bb:1d:9d:b4:
                    ef:ac:76:c5:ee:a7:d5:38:33:d8:f6:9f:11:ff:3c:
                    2c:3f:88:e9:77:2c:f4:78:f6:a9:56:64:f6:35:8f:
                    bc:8f:02:d1:01:5b:c8:f3:6e:3c:2f:cd:ab:0e:eb:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FD:C0:C0:7B:3C:C3:58:0F:BA:38:AF:1C:34:9F:BE:41:5F:A9:2F
            X509v3 Authority Key Identifier:
                keyid:D2:CE:04:BD:F6:34:87:D6:7E:2D:99:D2:0E:E0:D1:9C:2B:D6:5F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:df:39:e2:a6:7e:3d:1f:2c:3f:7e:25:e4:9a:f4:12:34:
         1c:a3:5f:1f:e6:d8:fb:5c:79:87:c7:ce:92:7f:ee:0d:59:0f:
         b0:9e:5d:06:7b:e8:a0:22:cb:47:41:1b:21:5a:42:f8:85:6c:
         6d:9e:e1:25:05:8e:d0:4f:18:c5:98:0d:b0:11:d2:68:60:fa:
         87:71:9e:e4:86:a0:d8:14:fa:6f:d4:ff:5c:45:7e:4e:69:e2:
         8f:54:56:90:34:a4:f2:7d:c2:b4:12:ed:38:be:97:b4:19:1b:
         a8:8d:2e:3b:e8:59:58:72:98:da:9a:3c:bd:bb:56:3e:15:67:
         fc:1a:e8:6f:40:d4:60:f0:a8:ec:f1:a9:2d:1f:dc:bf:29:ab:
         be:76:5b:57:2f:51:e9:f3:0b:4f:3a:22:b6:dd:01:07:15:df:
         c7:43:31:38:b7:c1:a4:92:e4:8c:ef:53:b8:5d:8b:5c:60:86:
         54:7b:94:71:8c:8f:37:17:b5:79:97:60:e4:aa:5b:33:0e:a1:
         ec:96:3d:39:79:93:64:30:88:ac:7b:b9:81:1c:df:b9:72:cc:
         77:42:91:fa:a4:a7:90:5d:4b:c8:2e:d8:34:28:03:62:7c:f0:
         f8:1d:85:0e:f2:b9:d3:bf:0a:41:e0:5a:c0:e9:42:cd:51:4a:
         15:82:5e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----