Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/19173A52C083B2FBECEC8F9929630EF36F40D063.mft
File:                     19173A52C083B2FBECEC8F9929630EF36F40D063.mft (raw, json)
Hash identifier:          tnTH86iZAWriyeu1HjsCGphvYGz7nlHi9qG9q/BdXQU=
Subject key identifier:   00:8C:A1:18:D6:9D:16:A2:24:87:EA:BF:52:11:14:6F:CB:FC:66:09
Authority key identifier: 19:17:3A:52:C0:83:B2:FB:EC:EC:8F:99:29:63:0E:F3:6F:40:D0:63
Certificate issuer:       /CN=19173A52C083B2FBECEC8F9929630EF36F40D063
Certificate serial:       36D692828FE940397A2CF6A6094C61F516033CF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19173A52C083B2FBECEC8F9929630EF36F40D063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/19173A52C083B2FBECEC8F9929630EF36F40D063.mft
Manifest number:          3F
Signing time:             Sun 14 Apr 2024 20:49:00 +0000
Manifest this update:     Sun 14 Apr 2024 20:44:00 +0000
Manifest next update:     Mon 15 Apr 2024 21:06:00 +0000
Files and hashes:         1: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: dSpad7hyAotHmkC9Fgb8l0O9HL5Y7MzZK0YNkYJJoAY=)
                          2: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: fiw959Mzgn6PoW1mkcqqsyqtmQK4aakf+wIzJS1U5AM=)
                          3: 19173A52C083B2FBECEC8F9929630EF36F40D063.crl (hash: UBEPq0Tgpco1ThbYVI4OrliReNZQa061FfNbmLidBgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d6:92:82:8f:e9:40:39:7a:2c:f6:a6:09:4c:61:f5:16:03:3c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19173A52C083B2FBECEC8F9929630EF36F40D063
        Validity
            Not Before: Apr 14 20:44:00 2024 GMT
            Not After : Apr 15 21:06:00 2024 GMT
        Subject: CN=008CA118D69D16A22487EABF5211146FCBFC6609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:79:63:b0:af:a8:c4:ed:55:c8:2a:c3:46:
                    8a:68:6c:f1:15:e2:99:99:a4:dc:e6:eb:2d:32:b4:
                    ff:af:dc:af:92:36:b9:8a:85:5e:bf:bf:51:f3:6d:
                    43:e1:2e:8f:5f:98:d2:ce:62:a0:e8:22:72:75:0c:
                    76:cb:50:52:19:e9:c7:09:09:46:15:32:04:22:ad:
                    b9:fa:77:c6:58:0f:94:4a:d2:52:c8:c2:59:9a:26:
                    09:01:3f:9b:68:14:f5:9c:23:47:0a:85:a1:91:d2:
                    1b:d1:10:6b:1a:79:de:13:33:1e:3b:45:33:89:82:
                    9e:9f:bf:e6:0b:07:9a:6c:4f:b4:83:37:02:7d:53:
                    30:05:58:2c:98:79:aa:82:d5:d9:a5:e5:0c:78:e3:
                    44:e0:b6:2a:21:79:06:50:3b:4d:ac:b1:f0:a8:10:
                    4a:d5:65:b1:bd:3d:1c:9e:cd:4b:ee:83:b5:a3:88:
                    39:fa:78:c0:5b:4f:af:c3:50:0d:01:ab:00:54:6b:
                    36:d3:40:a8:8d:e1:41:13:12:da:83:dd:c7:27:3d:
                    2c:ec:87:38:31:ec:cf:3c:38:30:70:4f:b6:c1:ba:
                    5e:6e:f6:b6:21:9e:eb:89:3d:23:01:c5:c9:83:87:
                    a1:02:6b:21:3c:78:31:ca:a6:e5:6c:b1:0d:c6:19:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8C:A1:18:D6:9D:16:A2:24:87:EA:BF:52:11:14:6F:CB:FC:66:09
            X509v3 Authority Key Identifier:
                keyid:19:17:3A:52:C0:83:B2:FB:EC:EC:8F:99:29:63:0E:F3:6F:40:D0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/19173A52C083B2FBECEC8F9929630EF36F40D063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19173A52C083B2FBECEC8F9929630EF36F40D063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/19173A52C083B2FBECEC8F9929630EF36F40D063.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:9a:3f:bd:c7:90:7b:13:c8:0c:4f:dd:b0:26:fd:46:a4:
         c6:76:45:b2:37:fc:18:d9:eb:71:e9:0f:49:50:71:4e:91:28:
         99:42:8b:18:9a:fb:d2:4a:cd:78:eb:94:74:f3:c9:0b:a1:7f:
         2f:50:b2:33:3b:d5:74:13:e1:10:8c:bc:8d:01:97:8b:f2:14:
         d5:68:13:e5:ac:2c:80:0b:d5:e4:db:23:5f:ff:e3:f4:c4:df:
         82:4c:c1:0b:70:ca:fc:90:92:ce:94:99:e2:c1:45:d8:c2:39:
         92:55:10:bf:c4:64:9c:9d:b1:9a:ba:43:8a:b0:52:e3:f8:64:
         aa:81:a6:3f:38:fe:9a:67:17:b2:76:69:2b:0e:34:2b:f7:ae:
         70:b8:4c:76:90:2d:7f:34:87:16:98:5e:bf:6c:7d:ee:13:c1:
         39:f1:ea:c6:21:92:ac:63:f2:a3:ca:38:da:5f:46:24:85:a9:
         11:30:57:23:68:37:00:b0:31:46:9d:12:44:2c:1a:41:03:e1:
         c7:af:6f:d5:ff:9b:bb:d7:5f:cc:40:66:a3:d3:38:ca:9e:96:
         6a:63:1b:7f:10:57:55:6e:91:a3:f0:5e:fc:35:ee:a3:dd:3e:
         fb:64:03:05:f2:03:6f:15:cf:4a:7e:4f:0f:07:96:61:6c:7a:
         bc:d0:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----