Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.mft
File:                     98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.mft (raw, json)
Hash identifier:          h/IrS6tDqw8yhsPcZnJXUEHlSu/IWY1BTtRS/1YQk7U=
Subject key identifier:   D5:52:B8:EA:37:50:18:06:32:39:72:99:57:3B:B3:D8:62:A4:BA:15
Authority key identifier: 98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F
Certificate issuer:       /CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
Certificate serial:       32A1D0CC947CE733108FDFC147DF614DB555E187
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.mft
Manifest number:          0532
Signing time:             Sun 14 Apr 2024 19:42:21 +0000
Manifest this update:     Sun 14 Apr 2024 19:37:20 +0000
Manifest next update:     Mon 15 Apr 2024 21:19:20 +0000
Files and hashes:         1: 323830343a353865303a3a2f33322d3334203d3e20323638313535.roa (hash: JFIwoMlOrSGNbowj0frlNDJfN7eituAPL0h7ru9ahNE=)
                          2: 98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.crl (hash: aKVYBS7dDaL6ymu0UkmvT6ULKn1V9iYrnNA/ionpSOo=)
                          3: 34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (hash: JxtO2Z6Z0jDd29z5RNxvMeE8z9Dd5onlRNmra9kQado=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a1:d0:cc:94:7c:e7:33:10:8f:df:c1:47:df:61:4d:b5:55:e1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
        Validity
            Not Before: Apr 14 19:37:20 2024 GMT
            Not After : Apr 15 21:19:20 2024 GMT
        Subject: CN=D552B8EA3750180632397299573BB3D862A4BA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:96:69:7d:cf:fa:b4:07:53:c3:c2:91:b9:
                    02:34:d2:df:de:0f:97:60:16:16:9c:a5:13:20:77:
                    53:84:8f:c1:df:bc:46:02:ba:f5:90:7f:36:1c:ab:
                    c3:14:ba:57:0d:0d:8c:9b:54:70:ea:36:2c:f6:9a:
                    ce:37:5a:bd:cc:9a:ba:0c:ec:33:cc:f5:3b:29:03:
                    45:b4:7e:8b:3b:f7:9c:47:1e:12:0d:9d:00:58:86:
                    81:84:0b:51:a5:1d:a0:f7:15:39:44:5f:59:53:f0:
                    3d:c3:4f:92:68:ad:14:4a:4e:d4:25:04:5d:ee:cc:
                    12:1b:80:cd:c2:26:51:15:a3:9a:a7:5b:99:95:4e:
                    61:30:c1:3c:de:12:b4:0c:93:ff:08:b9:54:d6:91:
                    b8:73:a3:1b:78:a1:cf:32:5c:72:d2:cb:7f:4a:d3:
                    1b:ee:16:0d:4d:e1:11:62:2d:e3:d5:77:bf:78:b7:
                    be:b9:65:2e:f9:16:0a:a3:28:73:28:89:07:ea:a3:
                    b5:27:dc:2a:8e:70:08:e8:f7:94:54:18:64:cf:0e:
                    0e:5b:1d:e1:ac:21:1f:5c:b7:67:55:42:8b:df:5c:
                    2c:8f:ad:a8:62:59:c3:e6:ee:8c:44:d2:bf:45:f7:
                    13:13:0b:96:06:8d:3a:44:c7:36:1e:5d:db:5a:2d:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:52:B8:EA:37:50:18:06:32:39:72:99:57:3B:B3:D8:62:A4:BA:15
            X509v3 Authority Key Identifier:
                keyid:98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:69:9e:19:d6:d5:b8:48:0d:54:90:10:1e:21:a0:d9:93:c6:
         96:3c:27:30:84:3e:bb:0a:70:91:46:5f:0b:95:77:21:15:83:
         cf:98:00:f5:97:e4:b9:7c:ae:07:0e:24:db:47:46:88:e5:de:
         b1:14:57:d3:ac:8d:ed:38:b1:1f:24:d3:a6:c3:d3:d7:63:f8:
         c6:de:12:64:37:f2:1e:a3:34:d7:90:7f:06:08:df:4e:a1:3f:
         72:0e:42:ef:7a:23:46:e9:d4:f2:d7:fc:a3:d8:a3:67:2f:c2:
         5f:e3:9b:c6:1f:7b:7c:c7:f0:96:14:8b:97:c7:12:a1:75:13:
         a8:82:96:bf:ec:24:3f:92:b9:9a:d3:4f:bf:ad:f4:14:cd:61:
         45:4f:c7:d6:63:83:e8:be:ba:af:0e:41:21:68:f2:eb:6e:8e:
         fd:61:56:cf:38:88:0e:01:36:18:ef:df:ce:af:70:12:ab:97:
         70:ac:f7:75:84:c7:51:e7:0a:55:f2:c7:6d:db:74:cb:3e:0e:
         87:a1:de:58:79:b8:ee:94:f7:0b:48:39:fe:15:54:09:8e:5a:
         f5:49:b5:20:3b:89:dc:e9:c4:9f:86:86:ea:fc:b9:02:3b:3c:
         91:1e:52:fc:17:31:19:e4:b3:ff:1a:ea:12:fc:4f:01:8f:d3:
         c9:60:1d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----