Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.mft
File:                     D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.mft (raw, json)
Hash identifier:          sc9keVvudY8p/9DB7+aUQlAlPtAuTAEdkIM3l5yBP3w=
Subject key identifier:   37:D2:99:B2:B1:F2:E1:8D:ED:C4:9A:5E:89:FF:89:10:10:E8:86:5E
Authority key identifier: D3:3C:E6:A3:00:3B:1C:66:B7:E4:52:9F:D0:F8:AB:30:18:88:58:BA
Certificate issuer:       /CN=D33CE6A3003B1C66B7E4529FD0F8AB30188858BA
Certificate serial:       3504AFF20BCDF256A9E7CDA8DAF1727C57DD98AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.mft
Manifest number:          19
Signing time:             Mon 15 Apr 2024 10:04:47 +0000
Manifest this update:     Mon 15 Apr 2024 09:59:47 +0000
Manifest next update:     Tue 16 Apr 2024 13:55:47 +0000
Files and hashes:         1: 3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa (hash: uQ6DPSWYG4E4DSdacUqPazqH4xVHvS/iBrW6NP3dWzc=)
                          2: D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.crl (hash: HxqyvTKR/kPuTKaTSRaFaTOdaM1Mzx9KISVAoxaXUio=)
                          3: 323830343a323434343a3a2f33322d313238203d3e20323634323131.roa (hash: UnVpr1CegOy0vs6eg6Bn1Llr26e+E1Kp7wC3qKaNNdY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:04:af:f2:0b:cd:f2:56:a9:e7:cd:a8:da:f1:72:7c:57:dd:98:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D33CE6A3003B1C66B7E4529FD0F8AB30188858BA
        Validity
            Not Before: Apr 15 09:59:47 2024 GMT
            Not After : Apr 16 13:55:47 2024 GMT
        Subject: CN=37D299B2B1F2E18DEDC49A5E89FF891010E8865E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:66:70:2a:7a:47:3a:9f:cb:c9:56:e6:56:
                    b1:77:a4:2d:bd:be:b4:3a:43:18:5e:92:e4:c1:c9:
                    e3:84:5a:6f:00:21:5b:6c:f0:48:ce:bd:f2:15:97:
                    50:b3:ac:46:56:58:82:6e:da:d2:9c:cd:4e:85:a5:
                    e6:f4:16:0e:c3:01:69:75:e4:99:11:c6:df:91:16:
                    70:71:c2:f4:31:16:3c:1d:6a:60:3d:dc:4d:d9:df:
                    79:0c:59:99:b9:70:6a:b9:c9:63:63:83:0a:b7:5a:
                    a9:8d:5c:c0:6b:8d:28:df:12:d3:97:26:06:1d:48:
                    de:cd:87:91:df:83:0f:ad:a4:0b:49:10:bf:a3:6d:
                    a6:75:e5:12:63:c4:a8:ad:11:27:05:1f:b0:c2:dd:
                    b6:80:be:fe:83:39:3a:a9:1f:0f:a1:39:4a:dc:c3:
                    34:d8:95:f4:8c:ba:fd:c9:30:56:d7:61:22:61:aa:
                    14:fd:c7:e1:31:41:c6:a1:6f:2e:12:65:de:82:d0:
                    8d:82:8e:da:8e:21:08:b9:bf:21:f7:c8:55:9b:d6:
                    21:5e:5f:7e:1e:d1:c1:8e:09:86:b6:58:64:fc:d2:
                    ed:ca:f9:d7:82:60:a6:3e:7d:c7:64:8f:d7:bf:85:
                    9c:56:47:4d:9d:f7:77:57:62:74:3b:d9:90:09:70:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D2:99:B2:B1:F2:E1:8D:ED:C4:9A:5E:89:FF:89:10:10:E8:86:5E
            X509v3 Authority Key Identifier:
                keyid:D3:3C:E6:A3:00:3B:1C:66:B7:E4:52:9F:D0:F8:AB:30:18:88:58:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:d7:16:44:ef:25:41:76:50:bb:dc:60:d4:8d:9e:6c:61:
         92:56:9c:a1:58:59:3e:01:76:76:87:bc:65:34:cd:ae:0d:91:
         93:3e:09:ad:9d:32:ad:aa:de:18:ee:7c:37:95:1a:79:ee:0c:
         42:27:6c:8a:38:67:c7:42:a0:15:fc:81:0b:d8:72:e2:f2:f4:
         d5:15:8c:4b:3b:2d:96:29:3b:11:f6:21:0d:73:f8:91:2e:7a:
         b1:22:47:93:3a:07:c7:bd:d8:78:bd:fc:e6:c6:44:e3:7d:e1:
         c8:7c:1d:26:5f:f6:26:15:1d:dc:da:53:99:46:fc:ce:5b:12:
         ee:9b:25:73:2a:69:bb:6f:3d:9e:11:a2:d4:23:cc:2e:d9:4c:
         dd:08:eb:a1:05:a0:5b:f7:bf:70:65:81:a9:e8:a7:e5:2c:51:
         a2:1a:2b:b5:66:fb:51:53:91:7f:4e:a2:88:65:99:7a:c2:9c:
         4c:08:19:0e:e4:44:06:05:51:45:2c:e6:d3:98:1b:26:34:82:
         86:53:fa:92:41:8a:fd:2b:0f:ad:81:f7:9d:1f:2e:cb:84:8e:
         4a:5f:79:bd:46:5e:55:95:b3:02:18:a6:bf:0f:d9:ee:c7:ab:
         49:e1:67:42:9d:94:cd:e2:66:ad:c7:af:fc:60:79:71:73:b7:
         87:72:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----