Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/D89B0FED7D290296B533B374765DEA8424476141.mft
File:                     D89B0FED7D290296B533B374765DEA8424476141.mft (raw, json)
Hash identifier:          /CmxoW0+sZGfaVT4ljFAIbBLItxqe8b5iYeWE00To04=
Subject key identifier:   4B:3C:C7:53:A6:9A:3C:99:0A:31:FD:A7:D2:1E:C9:C2:3D:EE:F8:6A
Authority key identifier: D8:9B:0F:ED:7D:29:02:96:B5:33:B3:74:76:5D:EA:84:24:47:61:41
Certificate issuer:       /CN=D89B0FED7D290296B533B374765DEA8424476141
Certificate serial:       0CDB87E5835327ADE172CD2411CA32D69DCE7B6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D89B0FED7D290296B533B374765DEA8424476141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/D89B0FED7D290296B533B374765DEA8424476141.mft
Manifest number:          1E
Signing time:             Sun 14 Apr 2024 18:30:47 +0000
Manifest this update:     Sun 14 Apr 2024 18:25:47 +0000
Manifest next update:     Mon 15 Apr 2024 20:52:47 +0000
Files and hashes:         1: 323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (hash: prcZovsdEilbSOYtJS0wed1lHM2RFiniW7dg1uw0jeM=)
                          2: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (hash: TgGC/UbAEnoCDV4QJPYfQMHinfxBfu9NKLXoTdGPv34=)
                          3: D89B0FED7D290296B533B374765DEA8424476141.crl (hash: 2bsqV+ey3Y2Gzeh4m0n+j4y7nDyhGAoY37lhR8DAEY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:db:87:e5:83:53:27:ad:e1:72:cd:24:11:ca:32:d6:9d:ce:7b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D89B0FED7D290296B533B374765DEA8424476141
        Validity
            Not Before: Apr 14 18:25:47 2024 GMT
            Not After : Apr 15 20:52:47 2024 GMT
        Subject: CN=4B3CC753A69A3C990A31FDA7D21EC9C23DEEF86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:4f:62:11:ff:03:f1:e4:a4:9d:a9:2e:25:
                    3b:39:b3:17:61:0c:0b:23:66:33:27:83:a5:c4:95:
                    78:27:19:b6:61:6e:b6:ff:05:82:2c:1a:c4:0b:d7:
                    53:c3:30:87:10:b3:95:e1:0b:61:47:b8:e0:25:59:
                    bc:2f:d2:a6:cb:ab:c1:a6:3b:5f:73:f9:81:82:59:
                    e2:4b:da:46:a4:e8:83:66:66:0f:b8:70:58:b2:aa:
                    8b:28:0a:78:04:db:c2:53:af:6a:c5:a9:80:2a:5d:
                    82:d4:df:d6:2c:a2:ab:73:73:e8:bf:06:87:9b:79:
                    5c:d5:69:9b:db:e6:d8:26:2e:4b:50:6a:2e:32:9b:
                    ed:70:6c:1d:e6:80:ca:3c:b9:d8:c2:8d:ec:9a:e3:
                    99:af:d2:c6:e6:ba:e7:f4:2f:4f:d2:7c:e4:70:14:
                    db:52:45:af:7a:71:07:f4:61:66:4c:d3:e2:e4:bc:
                    6a:af:dc:cd:ec:74:7d:2a:b0:4d:e2:1f:cc:ec:86:
                    8d:50:75:4f:9a:9a:13:4e:2a:81:3b:43:c6:82:ad:
                    e0:39:d0:92:df:8e:2c:c2:2c:8a:9a:bf:ef:dd:d6:
                    98:a5:de:e3:85:33:da:f3:80:93:93:1d:84:50:98:
                    07:2b:00:5e:b8:d0:46:70:38:84:5d:49:1d:b7:c0:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3C:C7:53:A6:9A:3C:99:0A:31:FD:A7:D2:1E:C9:C2:3D:EE:F8:6A
            X509v3 Authority Key Identifier:
                keyid:D8:9B:0F:ED:7D:29:02:96:B5:33:B3:74:76:5D:EA:84:24:47:61:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/D89B0FED7D290296B533B374765DEA8424476141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D89B0FED7D290296B533B374765DEA8424476141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/D89B0FED7D290296B533B374765DEA8424476141.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c6:59:ce:06:ba:2f:a5:5a:95:d8:80:7e:68:6f:c7:2b:3c:
         61:47:9d:f8:00:6b:15:54:ee:1e:f1:2d:5a:59:4c:f4:b1:94:
         39:30:a1:95:57:ac:cc:42:a1:59:ed:08:4a:d9:4d:a0:21:26:
         f2:81:3e:75:c2:61:bc:79:4f:fa:73:fe:17:38:0d:fe:5e:27:
         26:23:06:ee:c5:5a:47:38:c7:f4:0d:42:45:56:91:65:71:b6:
         41:67:66:95:79:d3:3e:18:78:4e:b5:11:14:fe:4e:5c:12:3a:
         ff:76:90:86:df:da:44:74:93:c6:13:d5:1c:3f:3f:ae:9f:12:
         d1:a7:4d:a1:85:14:06:35:67:96:e4:9c:f8:97:cc:4b:50:76:
         43:ac:1a:df:42:0a:f9:1f:5c:82:6e:bc:8f:19:26:2d:37:11:
         b0:88:b7:d5:1a:0b:dc:e6:90:1c:4f:29:fa:f5:26:54:51:35:
         c7:ef:de:e1:32:85:1e:17:3a:52:9f:fa:42:71:df:15:ec:b5:
         17:31:75:6d:dc:fa:f3:27:58:d2:7c:37:39:c9:59:b0:0b:a9:
         80:2f:4a:f9:60:c8:3e:bd:c3:46:ae:47:b8:d9:c4:fe:52:dc:
         8c:fe:1b:43:b7:fe:15:60:4e:d1:b5:f9:b3:fc:d6:18:d1:79:
         f3:2c:32:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----