Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.mft
File:                     BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.mft (raw, json)
Hash identifier:          OzaftHJPUcZRx5mUU7jj4KxQJqGhmw/kj9QZLjE7GjY=
Subject key identifier:   3B:4D:E1:C7:DA:B8:2A:64:2F:D3:A6:7A:94:DC:31:7E:C1:85:81:59
Authority key identifier: BA:91:9A:A3:A0:FA:6D:DD:DD:71:AB:94:6E:CA:11:DB:9D:13:3B:11
Certificate issuer:       /CN=BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11
Certificate serial:       661C9CFC742EA4D6FCCD20D099A31705063863F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.mft
Manifest number:          4D
Signing time:             Sun 14 Apr 2024 22:41:17 +0000
Manifest this update:     Sun 14 Apr 2024 22:36:17 +0000
Manifest next update:     Mon 15 Apr 2024 23:19:17 +0000
Files and hashes:         1: 3133322e3235352e33362e302f32322d3234203d3e20323634343535.roa (hash: mGzPbBnHHjICxmL3KDLDTuJ3OEIDI+82Gf4mxjm5Jb0=)
                          2: BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.crl (hash: RStlOOr0QmZoHm31lBLEzGlcNSdX+DjU3n//XSym26o=)
                          3: 323830343a316565633a3a2f33322d3336203d3e20323634343535.roa (hash: 3QNqNMUwS4yAqTJ/sL38KNbcVNL524ezvSLGEDFXwxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1c:9c:fc:74:2e:a4:d6:fc:cd:20:d0:99:a3:17:05:06:38:63:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11
        Validity
            Not Before: Apr 14 22:36:17 2024 GMT
            Not After : Apr 15 23:19:17 2024 GMT
        Subject: CN=3B4DE1C7DAB82A642FD3A67A94DC317EC1858159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:31:67:d5:5c:bb:86:2f:0a:98:d8:04:dc:
                    43:87:bc:6f:8c:cc:6e:6c:cf:2a:19:cc:e5:a4:d2:
                    d4:b1:ed:7f:3f:72:96:e2:65:ee:0f:60:81:3e:58:
                    44:08:48:f7:19:ec:83:1d:fc:bf:82:72:b7:ab:1e:
                    ff:81:9d:c3:0f:7f:d8:38:46:dc:48:8d:c1:2b:51:
                    56:98:f4:2f:af:33:9d:8f:11:7e:fa:1f:e0:bb:e1:
                    81:e6:05:af:b2:91:78:f9:4c:ff:22:6c:73:f7:fd:
                    1b:e6:82:45:b3:62:0c:a6:76:c0:6e:a8:e1:c5:a8:
                    bc:a7:ed:70:c5:df:67:0f:43:00:a6:ed:05:6f:e8:
                    b1:e4:5b:51:57:c2:90:f9:c7:df:30:d2:5b:ca:63:
                    d6:b4:2a:ce:2f:ac:3d:6e:c8:12:c8:c4:9c:25:44:
                    6c:1e:aa:5f:fc:98:1e:40:8b:0f:0b:4a:8d:7c:01:
                    c4:3d:70:18:3c:d4:1a:89:6a:a6:b4:d8:b3:85:a1:
                    14:c2:b2:16:66:b5:4e:91:f3:35:30:22:c4:75:21:
                    06:d5:8f:c7:d2:3d:56:2c:a2:81:5e:36:a4:fd:60:
                    41:9a:55:eb:19:60:01:97:1f:c0:2b:17:3b:43:f0:
                    18:a6:13:73:76:da:94:67:d5:9e:e5:cd:01:2a:eb:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4D:E1:C7:DA:B8:2A:64:2F:D3:A6:7A:94:DC:31:7E:C1:85:81:59
            X509v3 Authority Key Identifier:
                keyid:BA:91:9A:A3:A0:FA:6D:DD:DD:71:AB:94:6E:CA:11:DB:9D:13:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c8:3d:0a:33:76:d2:e1:85:32:27:de:83:c5:16:d1:ac:76:
         2d:18:c6:d0:a9:d7:1d:e1:19:1f:6e:3d:82:61:c3:fc:70:d5:
         0d:92:34:00:b9:13:5b:c8:ca:2b:3d:0c:3e:43:bf:ed:7d:d1:
         54:41:34:f0:51:bb:c9:28:06:b3:65:fd:67:96:bc:41:a9:54:
         27:25:ec:ba:d5:4b:0b:dd:3d:35:31:e3:60:69:a3:3f:e5:bd:
         c0:4d:9b:0f:51:6a:0e:4c:1b:9e:6f:8a:e1:c5:4a:a8:88:c3:
         9c:94:15:a9:c6:bb:b3:51:11:f4:32:a8:95:d5:23:0c:21:42:
         07:1c:2d:56:cc:55:52:14:70:3a:be:7c:59:d2:56:9a:76:0c:
         1e:88:8f:37:38:73:4c:2f:16:79:7f:aa:51:f2:c5:dc:8a:94:
         2d:8d:ad:ef:1a:e2:08:c2:ce:ee:f2:fd:ec:ac:6c:4e:cc:4e:
         43:d3:f6:0c:fe:f8:d1:af:0d:37:8a:75:05:be:7a:b6:af:33:
         f7:96:dc:d3:bb:85:29:a5:39:57:12:01:f7:0c:53:1b:e7:80:
         51:77:65:b5:32:c4:6f:bb:68:07:28:e9:d0:19:04:96:1f:cf:
         b6:a3:02:cc:26:15:27:7b:14:78:84:03:bf:1b:f6:1b:34:08:
         f7:01:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----