Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.mft
File:                     C16B2DF662105F4A086EEC8619FD4906DC645428.mft (raw, json)
Hash identifier:          U/LZ01P/kIjJMBBp38KvRDoM29b2xsxP8W9j/PrmrR0=
Subject key identifier:   CC:84:33:7B:22:A5:90:9E:BB:13:48:DD:7A:C6:5C:5E:54:CF:2C:FD
Authority key identifier: C1:6B:2D:F6:62:10:5F:4A:08:6E:EC:86:19:FD:49:06:DC:64:54:28
Certificate issuer:       /CN=C16B2DF662105F4A086EEC8619FD4906DC645428
Certificate serial:       1BB317E11349D8B247A8131C68BB85779BA75308
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.mft
Manifest number:          0535
Signing time:             Mon 15 Apr 2024 00:25:43 +0000
Manifest this update:     Mon 15 Apr 2024 00:20:43 +0000
Manifest next update:     Tue 16 Apr 2024 00:40:43 +0000
Files and hashes:         1: 34352e3139302e35322e302f32322d3234203d3e20323639363237.roa (hash: UBMmEf92t8plb6B2YAPcZXNCAglEzhJJm5th8gal0Jk=)
                          2: 323830343a363736633a3a2f33322d3438203d3e20323639363237.roa (hash: /bvxeNFOYL0hrfldp0EAOQNrTosdknC5InJeheUWuD0=)
                          3: C16B2DF662105F4A086EEC8619FD4906DC645428.crl (hash: +/6+84z/9/r6I8eoZz72iNXV2nl/4OFk5Imdzqjsr18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b3:17:e1:13:49:d8:b2:47:a8:13:1c:68:bb:85:77:9b:a7:53:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16B2DF662105F4A086EEC8619FD4906DC645428
        Validity
            Not Before: Apr 15 00:20:43 2024 GMT
            Not After : Apr 16 00:40:43 2024 GMT
        Subject: CN=CC84337B22A5909EBB1348DD7AC65C5E54CF2CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:82:2a:77:3c:17:2a:49:eb:3b:41:f8:c6:
                    58:3d:42:39:db:a2:ac:84:ae:ba:d7:40:39:0c:76:
                    e9:14:48:90:7f:a8:ee:4d:4c:da:32:08:c6:df:63:
                    4f:d9:ca:83:a2:2a:e6:35:d7:2b:81:f8:d0:78:88:
                    d4:24:ae:21:8c:77:78:80:f8:3f:6d:bc:65:50:9e:
                    b3:d3:eb:02:cf:00:b7:46:14:f2:9d:2f:27:21:09:
                    48:38:92:ee:1e:d5:cd:1e:13:35:67:63:37:56:a4:
                    54:7e:78:fa:3a:9d:54:10:c6:d7:19:81:39:67:3b:
                    dd:79:5f:5c:1e:ae:1d:98:8e:87:4c:b9:f3:32:07:
                    58:f0:ac:92:e7:d2:f6:c2:f0:e4:c7:17:d9:c3:c5:
                    87:17:10:df:2b:2e:f5:90:56:d8:a7:e7:79:64:8a:
                    22:09:0a:59:d2:9f:8f:9a:28:67:f0:57:13:87:61:
                    79:46:55:c8:a8:1c:65:68:8d:c4:88:17:8a:e8:c7:
                    12:28:3f:d6:df:87:24:ae:22:ff:c3:64:70:e4:9c:
                    45:0c:b8:e1:ba:b7:fa:67:84:64:b4:c0:70:20:b8:
                    57:3a:1f:a4:2f:e1:85:be:42:96:08:4e:61:5c:6d:
                    8d:5b:fd:b1:0c:f6:ee:83:19:1f:a3:7d:e0:50:0d:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:84:33:7B:22:A5:90:9E:BB:13:48:DD:7A:C6:5C:5E:54:CF:2C:FD
            X509v3 Authority Key Identifier:
                keyid:C1:6B:2D:F6:62:10:5F:4A:08:6E:EC:86:19:FD:49:06:DC:64:54:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/C16B2DF662105F4A086EEC8619FD4906DC645428.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ca:ff:12:67:af:b8:e6:e0:64:81:ea:ce:e9:df:6c:0e:f1:
         a1:cd:a9:11:88:f5:d7:16:2f:b1:8d:e6:91:8f:63:e4:76:c9:
         ef:c7:a7:a1:5d:13:7e:c2:96:01:65:3a:96:7f:63:a0:50:03:
         a8:32:44:c0:9a:ad:72:2d:14:00:be:13:8a:ef:03:1a:15:18:
         4c:69:32:05:19:3b:c6:f6:0f:b4:e5:f6:2f:db:8f:57:b8:31:
         c4:89:eb:6a:b8:d8:5f:47:86:b6:95:2a:c4:04:ac:bb:82:77:
         4e:79:fe:70:ba:e4:f2:3e:d9:bf:78:36:18:aa:b4:8c:d7:9a:
         d3:d1:13:ef:2c:12:d5:3b:b3:62:fb:76:0a:70:2c:f7:74:e5:
         b5:d6:9a:cc:dc:fb:1e:44:ce:37:7b:aa:93:48:5a:12:e7:38:
         88:2d:fa:ec:83:1f:04:04:21:b4:49:66:e7:76:e5:b8:6c:04:
         b5:1b:2f:bf:2e:c2:25:a9:3e:00:44:7a:bd:1e:ab:7d:73:8e:
         3f:8c:92:6a:3b:7c:76:c1:60:cf:06:b0:15:b8:1b:e6:a5:c7:
         29:99:9b:d6:e6:ee:36:fd:16:7b:cd:d5:78:89:13:5a:8b:3e:
         1f:d4:ef:67:ce:9f:65:ad:2b:05:74:22:3d:12:59:40:cb:11:
         a6:91:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----