Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D20A1285FD824B33D201655E524D8DC800C8E98B.mft
File:                     D20A1285FD824B33D201655E524D8DC800C8E98B.mft (raw, json)
Hash identifier:          mES0ZCXpJfSZPJ/sK1MpVv6Gt9WbsbJsjXyTlvwTN1Q=
Subject key identifier:   17:AE:99:18:6D:26:B7:E9:E6:78:35:4C:E2:FB:34:01:66:C8:7C:90
Authority key identifier: D2:0A:12:85:FD:82:4B:33:D2:01:65:5E:52:4D:8D:C8:00:C8:E9:8B
Certificate issuer:       /CN=D20A1285FD824B33D201655E524D8DC800C8E98B
Certificate serial:       41D89594F8C2A863A31CD459216480651641B209
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D20A1285FD824B33D201655E524D8DC800C8E98B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D20A1285FD824B33D201655E524D8DC800C8E98B.mft
Manifest number:          011D
Signing time:             Sun 14 Apr 2024 19:56:11 +0000
Manifest this update:     Sun 14 Apr 2024 19:51:11 +0000
Manifest next update:     Mon 15 Apr 2024 23:30:11 +0000
Files and hashes:         1: D20A1285FD824B33D201655E524D8DC800C8E98B.crl (hash: aWFRG9S35C+kgrEISK/zlueiGuUFN/c/yFb0T37b5F8=)
                          2: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: jSTkL+NtFn02NN8CokHti2lnzwjXw+WYr+U0Ht3wiYU=)
                          3: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: 3b1Y4aM8MhkM5wxmEYVaeIp8qvkqsgYnCOAIXQchSCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:95:94:f8:c2:a8:63:a3:1c:d4:59:21:64:80:65:16:41:b2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D20A1285FD824B33D201655E524D8DC800C8E98B
        Validity
            Not Before: Apr 14 19:51:11 2024 GMT
            Not After : Apr 15 23:30:11 2024 GMT
        Subject: CN=17AE99186D26B7E9E678354CE2FB340166C87C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:75:e8:7b:02:80:b2:95:1b:39:d3:42:ad:
                    c5:df:32:f7:f7:b8:6c:c6:76:f7:ba:5a:37:07:97:
                    1f:e7:ea:79:19:51:bd:01:f2:9e:5b:70:92:de:8a:
                    37:a4:07:80:b4:a8:28:0b:3c:f1:f9:a8:b0:85:31:
                    82:1d:ca:c4:95:00:ad:43:7d:45:97:04:94:d5:b4:
                    e5:1c:e4:86:85:68:20:25:69:18:31:74:b4:96:fa:
                    d0:4c:de:d7:2a:58:5e:27:18:32:24:10:4a:6a:13:
                    05:01:20:eb:04:ff:66:7b:9c:d1:2a:14:61:6b:a9:
                    f9:7e:df:c5:2e:08:14:16:75:c9:35:d3:f1:99:ad:
                    97:25:c4:96:13:77:5c:34:2c:be:44:ed:b6:fe:d7:
                    54:ff:f5:2e:ed:1d:12:8b:27:81:6a:ed:16:b7:82:
                    45:89:18:80:ce:fb:ef:e9:10:af:01:9b:44:80:ed:
                    c2:bd:25:d5:5e:9c:1c:ed:95:7b:24:af:8a:f2:ac:
                    d4:12:c8:94:cc:19:ec:81:69:94:cc:95:da:5a:97:
                    db:41:30:44:e3:3c:bc:4e:48:03:e3:9d:84:d1:e0:
                    db:bf:44:d0:48:66:30:61:82:6d:60:15:35:14:a7:
                    d5:ae:92:cb:4e:c8:53:e9:03:c9:88:50:36:a8:d6:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:99:18:6D:26:B7:E9:E6:78:35:4C:E2:FB:34:01:66:C8:7C:90
            X509v3 Authority Key Identifier:
                keyid:D2:0A:12:85:FD:82:4B:33:D2:01:65:5E:52:4D:8D:C8:00:C8:E9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D20A1285FD824B33D201655E524D8DC800C8E98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D20A1285FD824B33D201655E524D8DC800C8E98B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D20A1285FD824B33D201655E524D8DC800C8E98B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a7:a3:e0:59:72:af:74:55:79:31:9f:71:c9:d4:7b:fb:db:
         3f:98:e4:71:41:65:98:64:d5:f8:94:a9:2f:91:72:a5:d7:2c:
         a1:71:2d:74:19:d9:3a:ab:1b:cb:df:bc:33:78:a3:b6:2e:3f:
         24:e4:d7:6f:d8:20:eb:f0:9f:3e:24:9c:e3:7b:86:02:3b:7f:
         ce:6f:dd:0f:67:43:54:e7:b4:ec:32:f2:3a:61:33:a3:2d:24:
         12:2c:a1:8f:e4:e5:73:a3:54:4e:40:dc:44:f8:f8:e0:6f:d6:
         95:3b:28:be:44:2d:d4:24:a4:94:8d:38:d6:1c:c7:67:61:6d:
         5d:71:93:eb:90:7c:58:44:66:25:e0:8d:fb:8e:51:fa:c0:cd:
         1e:7b:c6:42:bc:5e:bf:95:90:85:87:a6:3f:68:bc:ab:c9:3b:
         66:b4:e1:7b:93:ca:ef:a8:74:0d:f1:17:53:39:14:ec:c6:ba:
         39:fb:fa:52:77:ce:d4:b2:43:a4:32:f0:4e:63:f9:b6:70:e4:
         42:28:24:8b:3b:66:d1:f4:cb:92:86:18:ee:55:10:a1:92:30:
         42:a4:5b:38:29:57:5e:ac:40:c7:b2:ad:93:53:1a:bb:27:f3:
         24:c5:c2:ec:f3:a7:48:88:1c:03:09:18:4e:56:49:2b:68:95:
         d0:43:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----