Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.mft
File:                     CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.mft (raw, json)
Hash identifier:          O5s1TD72JGclLPVKNyJ/8ejYaj5by4IfCVfKdcTWbw8=
Subject key identifier:   FA:37:09:77:25:9A:87:39:A4:97:F7:D5:64:13:EA:00:8A:AD:1B:C9
Authority key identifier: CA:A2:3E:EA:63:1A:37:96:DD:41:85:8E:8C:6E:BA:D5:78:F1:D0:6A
Certificate issuer:       /CN=CAA23EEA631A3796DD41858E8C6EBAD578F1D06A
Certificate serial:       4E6AE7789E181A783AC9A2BF54883CE03C6B65BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.mft
Manifest number:          0441
Signing time:             Mon 15 Apr 2024 08:30:00 +0000
Manifest this update:     Mon 15 Apr 2024 08:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 11:09:00 +0000
Files and hashes:         1: 323830343a343265303a3a2f33322d3430203d3e20323637353333.roa (hash: OsRp977PtS/evUNXnZVqY4lKyEsBpFnJkXilh7ofgXY=)
                          2: 3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa (hash: WhjOaSHKZYT9gZLvYgZX6ShiEPxM1u2gRs9azylFAzk=)
                          3: CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.crl (hash: 2MBUUttzGPFEjrLK+3Yxv9grG9Fsy0Zv5U+176Enz84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6a:e7:78:9e:18:1a:78:3a:c9:a2:bf:54:88:3c:e0:3c:6b:65:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA23EEA631A3796DD41858E8C6EBAD578F1D06A
        Validity
            Not Before: Apr 15 08:25:00 2024 GMT
            Not After : Apr 16 11:09:00 2024 GMT
        Subject: CN=FA370977259A8739A497F7D56413EA008AAD1BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:f6:e7:34:bd:55:34:dc:ef:eb:8e:b2:71:
                    ec:84:36:b4:58:79:74:8d:48:4b:9a:43:4e:e0:5e:
                    c7:d5:88:34:bb:11:17:42:a7:37:a1:d3:c0:b4:5b:
                    43:b9:91:a6:78:7e:de:00:e5:7f:6c:97:15:ae:ef:
                    bd:67:57:89:0d:1d:09:58:ae:bd:37:b3:f3:84:45:
                    6f:fd:75:94:95:c8:c5:46:40:88:17:99:92:18:21:
                    02:86:41:fa:03:fb:6c:43:ce:b9:2c:75:2e:bc:a1:
                    1c:57:89:ed:ac:1c:53:c3:44:cc:c8:16:e2:29:a1:
                    e6:c0:78:1a:c8:f2:3f:3e:a8:d3:0d:02:bc:0c:73:
                    73:ac:ac:5b:9e:85:3e:25:7c:c7:3c:36:cf:b1:57:
                    93:5b:1d:34:0b:b6:16:1f:83:04:a9:60:58:96:dc:
                    2a:6e:55:e3:93:d9:15:bc:f4:23:20:aa:7a:94:bb:
                    50:32:10:86:0c:39:fd:15:7f:36:31:98:b7:9e:9e:
                    82:80:05:30:58:96:4d:1d:75:f3:84:16:f3:4a:ab:
                    50:02:ef:d7:d2:28:03:4c:94:de:54:e1:cd:86:85:
                    fe:25:ce:14:3d:1f:06:2c:80:0a:d6:35:44:ad:90:
                    94:12:d2:e4:26:ec:09:0f:6d:1e:ac:a5:6c:fd:1f:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:37:09:77:25:9A:87:39:A4:97:F7:D5:64:13:EA:00:8A:AD:1B:C9
            X509v3 Authority Key Identifier:
                keyid:CA:A2:3E:EA:63:1A:37:96:DD:41:85:8E:8C:6E:BA:D5:78:F1:D0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:28:f2:b3:55:f2:92:42:aa:6b:59:e4:72:0e:74:c7:2d:
         36:6f:a3:f9:89:de:3c:46:79:f1:c7:18:fd:dc:c3:e8:ce:19:
         e4:42:f8:f9:ef:15:99:f8:dc:d5:06:11:ab:66:29:fd:82:6e:
         01:dc:18:b8:b4:c6:6a:80:40:7f:68:70:08:98:1f:68:a8:f7:
         f1:a1:c9:40:00:25:f5:f0:10:f7:6a:7f:36:2b:8c:33:75:fc:
         2e:d1:e8:9b:ea:d9:69:d7:20:90:46:58:a2:1a:4b:8d:fc:fb:
         53:0b:12:bb:84:12:fc:11:62:99:3f:27:49:19:66:69:42:9d:
         45:db:54:bd:ae:ca:4e:5f:d5:54:e6:24:73:ff:ea:0b:aa:b8:
         a6:5b:f0:08:d9:4c:81:d4:20:03:84:dd:f1:6a:09:e7:49:6e:
         df:5b:60:18:1e:1d:d4:a6:1d:77:05:d4:57:e1:15:cc:80:32:
         2f:63:18:2a:cb:fb:4d:62:09:a7:4b:73:bc:dc:05:17:33:31:
         bf:21:e1:62:77:09:de:f9:1a:dc:d2:f7:9e:65:90:b3:f6:f5:
         01:1e:2d:46:fd:9b:bd:fd:58:75:ee:42:5f:c6:8c:62:5f:fc:
         dd:51:97:3e:6f:52:59:29:76:9f:be:85:98:e4:f0:f0:4f:43:
         e1:7e:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----