Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.mft
File:                     BCC3258242A58B6E444EAA150DB77FD133FCAF99.mft (raw, json)
Hash identifier:          2K3h/vy+SgGtu0YKJnv3n6nOAvg6T8u44SpKcLLLQBo=
Subject key identifier:   7A:3B:47:7C:0D:5F:80:4D:EF:20:9F:A5:AC:71:69:2F:29:55:55:A8
Authority key identifier: BC:C3:25:82:42:A5:8B:6E:44:4E:AA:15:0D:B7:7F:D1:33:FC:AF:99
Certificate issuer:       /CN=BCC3258242A58B6E444EAA150DB77FD133FCAF99
Certificate serial:       14AE1B8DD44E333068E8EB5D2DFBECFB16A66519
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.mft
Manifest number:          028E
Signing time:             Mon 15 Apr 2024 05:14:57 +0000
Manifest this update:     Mon 15 Apr 2024 05:09:57 +0000
Manifest next update:     Tue 16 Apr 2024 06:23:57 +0000
Files and hashes:         1: 34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa (hash: rW2F8BKUFotVDWWZ+yi5/z0OCEU8gfnRfea5PEbmKtU=)
                          2: BCC3258242A58B6E444EAA150DB77FD133FCAF99.crl (hash: 9kRr+/aEoMCeHwOFPBTdgOMrItEHqY09AF8oEAijhfc=)
                          3: 323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (hash: FZTmmh67Gp7ehjqUg9weUcCzLbVMuImBv6XBtVRQKWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ae:1b:8d:d4:4e:33:30:68:e8:eb:5d:2d:fb:ec:fb:16:a6:65:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC3258242A58B6E444EAA150DB77FD133FCAF99
        Validity
            Not Before: Apr 15 05:09:57 2024 GMT
            Not After : Apr 16 06:23:57 2024 GMT
        Subject: CN=7A3B477C0D5F804DEF209FA5AC71692F295555A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:b1:ee:c6:e7:4a:d4:ca:ae:5a:4e:25:b8:
                    76:e6:2f:a1:e4:75:f8:16:5d:57:d8:f5:56:06:56:
                    f8:c8:40:03:eb:60:fe:27:0b:41:9d:d8:0d:63:24:
                    18:f8:0a:58:6c:2a:a3:13:6f:e3:22:41:98:4e:76:
                    3b:e1:71:b6:76:d6:17:22:f9:36:17:b4:e5:45:b7:
                    af:c8:32:9b:b9:b8:a4:a6:86:4b:4e:15:7f:e0:c7:
                    e6:c4:9c:7a:09:5a:28:9c:49:e1:b3:87:2f:5b:9e:
                    b3:a3:ee:ec:c3:06:84:a0:76:a1:1a:8c:3b:53:38:
                    88:e9:1c:70:82:67:fe:84:9c:53:05:9d:dd:1c:3a:
                    e3:ef:94:87:3c:d5:4c:de:de:63:f1:fe:d1:bf:4c:
                    e7:6a:eb:82:ce:31:4b:fc:5d:8d:8e:72:3e:61:30:
                    63:53:f0:f4:56:c6:9e:46:45:b8:47:a9:01:78:df:
                    fd:72:11:68:f7:92:15:e0:39:a1:30:35:d9:3f:21:
                    c0:25:94:1a:34:fc:fc:6b:f6:db:09:73:98:7f:ff:
                    18:14:d7:ff:de:58:f7:c1:15:8d:ff:a1:67:6d:63:
                    61:ca:14:a3:2f:a7:bc:c5:1b:36:b3:0c:54:fc:00:
                    22:af:3e:76:9a:e5:2f:bb:10:ab:39:7f:ef:29:90:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3B:47:7C:0D:5F:80:4D:EF:20:9F:A5:AC:71:69:2F:29:55:55:A8
            X509v3 Authority Key Identifier:
                keyid:BC:C3:25:82:42:A5:8B:6E:44:4E:AA:15:0D:B7:7F:D1:33:FC:AF:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/0/BCC3258242A58B6E444EAA150DB77FD133FCAF99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:8a:91:40:6c:20:c2:b2:66:58:69:10:9e:82:bf:f4:4a:
         09:78:b0:ba:40:5e:08:2f:bb:19:e9:f6:97:3b:22:0c:87:4b:
         c5:3c:da:44:55:3e:ac:35:71:8c:86:98:38:6f:2a:10:71:15:
         46:6e:5b:9a:2e:c2:d6:9e:d3:23:c4:95:f5:42:a2:ca:84:4c:
         65:7e:02:8c:c0:b0:fe:03:02:7d:51:51:be:db:d1:85:91:2a:
         ce:a6:22:1d:51:57:86:66:4f:87:e0:a2:3a:fc:62:1c:a5:48:
         15:d6:a7:59:58:45:73:80:86:e9:66:7c:c8:53:ec:16:e3:9d:
         4f:97:c1:72:93:05:0d:f7:6b:27:5a:6b:1a:72:0d:c1:a4:17:
         6c:f7:48:2c:09:48:31:e5:42:23:90:01:53:b2:9c:94:18:32:
         f7:7a:64:11:d7:b4:93:96:86:f2:b2:e1:96:fc:f3:cb:24:e2:
         38:b6:c1:d1:9e:72:9d:34:94:ea:c0:61:f1:d5:72:63:ae:0d:
         8e:53:3a:cb:4b:17:36:33:e8:11:9b:2b:7f:b2:f0:4b:2b:a9:
         a6:d7:de:2b:75:cf:6f:9e:f7:90:d8:9f:80:0b:da:c6:2e:82:
         7a:58:f0:34:11:a2:6c:be:dd:5a:eb:2e:88:0f:37:9a:e6:1f:
         f1:3a:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----