Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/0/19617D832A8477A4652E04958CE146D5C479909D.mft
File:                     19617D832A8477A4652E04958CE146D5C479909D.mft (raw, json)
Hash identifier:          8pGKgPXMWrj5vENInxOt5QaoRYhGOydPV4BhAaiGx6c=
Subject key identifier:   4B:33:5D:BA:BC:CF:F8:99:37:8B:12:60:57:E2:13:67:85:D3:DF:B5
Authority key identifier: 19:61:7D:83:2A:84:77:A4:65:2E:04:95:8C:E1:46:D5:C4:79:90:9D
Certificate issuer:       /CN=19617D832A8477A4652E04958CE146D5C479909D
Certificate serial:       5613A33D4E3A00992246FA0B6DD147BC2FFE67D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19617D832A8477A4652E04958CE146D5C479909D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/0/19617D832A8477A4652E04958CE146D5C479909D.mft
Manifest number:          03A0
Signing time:             Mon 15 Apr 2024 06:33:06 +0000
Manifest this update:     Mon 15 Apr 2024 06:28:06 +0000
Manifest next update:     Tue 16 Apr 2024 08:15:06 +0000
Files and hashes:         1: 3136382e3232372e36302e302f32322d3234203d3e20323634383736.roa (hash: cfM6yL/+4kit+bnshjdWFnfBvMKw4lUaeZXs1oPp8bk=)
                          2: 323830343a326632633a3a2f33322d3438203d3e20323634383736.roa (hash: fbrz5lORCEECWfmc43yiCvMdrCxkd4CAOGgsdjhU77M=)
                          3: 19617D832A8477A4652E04958CE146D5C479909D.crl (hash: 6cUASJXvaOovyeIRNy+QNyGmqtkb7A3D8xXm/FHQK/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:13:a3:3d:4e:3a:00:99:22:46:fa:0b:6d:d1:47:bc:2f:fe:67:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19617D832A8477A4652E04958CE146D5C479909D
        Validity
            Not Before: Apr 15 06:28:06 2024 GMT
            Not After : Apr 16 08:15:06 2024 GMT
        Subject: CN=4B335DBABCCFF899378B126057E2136785D3DFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ec:d3:72:70:e2:9c:5d:b5:98:55:2b:25:66:
                    14:1f:c6:33:e1:04:be:e6:f8:bb:5b:37:5c:42:6a:
                    ce:db:f6:1b:29:ac:c6:63:fd:a3:18:0a:ec:6c:be:
                    6b:3d:24:cd:50:71:b3:7e:4e:53:6f:77:d8:70:5c:
                    71:b6:97:93:67:a9:0f:8f:e1:ee:8f:5d:47:67:2c:
                    05:a7:90:f5:cd:4d:c3:45:91:a0:1a:ae:03:93:e5:
                    10:d0:0b:d0:78:c9:5d:42:6f:3d:df:3c:a2:e9:91:
                    ce:51:d0:98:3b:b9:bb:8d:44:e2:c0:52:71:5a:22:
                    42:53:f6:39:01:72:7f:28:5d:f6:03:7b:2b:ee:3d:
                    f5:55:99:c0:52:e1:9e:ab:f7:6c:d6:e0:bc:3d:40:
                    0e:30:8c:43:fd:e4:cf:b7:18:ab:bf:97:29:66:c7:
                    4b:5c:0c:8b:f7:8f:0f:61:8a:eb:1f:f9:b4:c2:78:
                    7c:cf:ff:27:e4:77:32:5d:52:26:73:a6:5d:7c:43:
                    33:ab:f6:56:8f:da:7b:a6:e4:be:a7:8d:31:b1:86:
                    20:06:e3:cd:2c:c3:a0:53:68:3b:72:00:15:ea:b6:
                    d1:01:6b:8a:c3:97:1f:27:a9:42:2e:6b:d0:b8:14:
                    a1:bd:ca:c3:12:38:10:2f:b6:93:66:54:9c:d6:37:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:5D:BA:BC:CF:F8:99:37:8B:12:60:57:E2:13:67:85:D3:DF:B5
            X509v3 Authority Key Identifier:
                keyid:19:61:7D:83:2A:84:77:A4:65:2E:04:95:8C:E1:46:D5:C4:79:90:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/0/19617D832A8477A4652E04958CE146D5C479909D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19617D832A8477A4652E04958CE146D5C479909D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/0/19617D832A8477A4652E04958CE146D5C479909D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:cf:6d:91:3c:49:de:3b:c6:d9:59:a6:65:c0:1a:35:da:
         f8:70:8b:a5:50:db:7c:a3:c4:e3:59:8f:00:77:a1:49:cd:e3:
         6a:52:83:88:7f:b0:88:d5:c0:49:91:fe:88:1f:e5:bb:fa:d0:
         1a:71:9d:22:0e:4a:8a:7d:50:9d:df:b9:ed:ff:8a:97:93:d0:
         37:24:35:21:e9:4f:eb:4f:5e:ab:44:42:7c:06:7d:ad:11:35:
         26:8e:d8:fb:23:77:01:ca:ee:97:ee:0a:6d:09:17:61:d4:f0:
         7f:95:70:46:74:f0:b2:66:45:ea:60:34:37:77:0e:2f:48:e9:
         51:58:dc:f8:8b:6d:1d:6c:18:2a:0c:a0:55:05:a6:ee:7d:17:
         28:04:c3:9a:eb:8a:07:b6:47:28:31:93:e1:d7:85:bc:3c:e8:
         0f:6b:5a:9d:ee:6c:44:74:ff:bd:4a:07:81:c2:48:77:57:15:
         35:f9:3a:15:60:b2:88:bc:43:04:fc:33:a7:0b:a7:be:cc:92:
         52:d8:09:e7:86:47:4b:96:eb:32:44:19:1f:fc:47:29:87:7f:
         d8:10:5c:49:96:c0:f4:7b:90:6e:c6:1b:f1:77:fd:70:81:6b:
         33:da:98:29:6e:13:6a:2f:d1:cc:39:22:c0:83:31:07:84:35:
         ea:ea:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----