Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.mft
File:                     C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.mft (raw, json)
Hash identifier:          8jDkzb470o052CupqttUaDU2VFmvGPOPEVqqZArumyg=
Subject key identifier:   3E:2C:0C:06:D9:65:52:FC:26:E2:CF:67:8D:54:EC:56:08:59:D3:9D
Authority key identifier: C1:F8:0C:F5:CC:AB:65:25:17:0B:D6:FC:3D:9D:03:40:DD:63:EC:2C
Certificate issuer:       /CN=C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C
Certificate serial:       7408F16E90F6DF5930B5855E9FE5DE7F40051EC0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.mft
Manifest number:          11
Signing time:             Mon 15 Apr 2024 10:51:40 +0000
Manifest this update:     Mon 15 Apr 2024 10:46:40 +0000
Manifest next update:     Tue 16 Apr 2024 11:24:40 +0000
Files and hashes:         1: 3132382e3230312e3136342e302f32322d3234203d3e20323636363437.roa (hash: FYs6YFvKn/zxddspjlQ9FEfNDAcQA1TeWKkoPSJtqg0=)
                          2: 323830343a336633633a3a2f33322d3438203d3e20323636363437.roa (hash: uuua3qUnVxWoJuRfWna8Go1Y5PGLQ2KODm2/vhiUWXU=)
                          3: C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.crl (hash: 0CNOts0FJAAWo2d28Yg1QDyYRXrNYFzyOLmxkTcp+Ek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:08:f1:6e:90:f6:df:59:30:b5:85:5e:9f:e5:de:7f:40:05:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C
        Validity
            Not Before: Apr 15 10:46:40 2024 GMT
            Not After : Apr 16 11:24:40 2024 GMT
        Subject: CN=3E2C0C06D96552FC26E2CF678D54EC560859D39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:48:bd:7b:0e:5f:ea:87:6c:10:8c:e5:38:
                    ec:c0:33:99:15:c8:6e:e1:37:fc:41:8c:9e:a6:62:
                    b9:30:cb:99:32:16:b9:d6:47:a6:1a:81:2b:f2:a5:
                    c4:1f:80:99:6b:c1:0f:68:10:d7:3c:be:ab:7a:54:
                    ee:59:f5:de:89:4d:fc:0b:ab:48:5b:72:03:dc:dc:
                    4e:b2:79:91:15:f7:f8:ed:5f:b9:4f:58:10:e7:fe:
                    8a:dc:66:3b:82:99:d6:e5:c2:b5:2b:34:f0:93:77:
                    b6:cc:47:b1:ce:93:55:23:ae:19:31:11:4d:49:01:
                    ff:1b:b9:db:b5:3a:ae:c8:4a:69:02:3d:e7:b1:cf:
                    84:27:0b:e6:70:45:9b:8b:1d:5b:7a:c6:af:0e:55:
                    4d:ee:d8:e3:7e:86:76:3c:a9:83:6d:c6:d1:5b:f3:
                    e5:64:5e:69:72:e5:9b:8c:f4:50:d2:2a:80:52:f1:
                    96:08:d4:7c:8e:93:92:cc:1a:b0:6a:54:32:33:32:
                    0b:49:5f:7c:aa:2c:dd:64:a4:33:4c:88:da:16:7c:
                    d8:a6:b8:23:4d:aa:34:58:6f:39:5c:68:64:a6:e7:
                    06:9a:79:ca:ea:b7:ad:1d:ee:fe:11:45:42:e0:96:
                    3c:48:d3:48:4c:2d:40:83:5a:93:c9:a1:98:91:ea:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2C:0C:06:D9:65:52:FC:26:E2:CF:67:8D:54:EC:56:08:59:D3:9D
            X509v3 Authority Key Identifier:
                keyid:C1:F8:0C:F5:CC:AB:65:25:17:0B:D6:FC:3D:9D:03:40:DD:63:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:22:12:18:a0:81:42:13:73:fa:7b:40:d2:9b:7c:75:8e:20:
         6c:c2:43:a1:89:d3:09:c5:28:b9:cb:4d:44:5e:a3:96:eb:59:
         9f:00:42:ac:48:5f:cb:c2:57:da:20:0f:dd:24:a0:72:cb:75:
         70:4d:f8:a8:f6:04:0d:ec:dd:53:78:2f:a3:f8:67:52:cf:19:
         24:d9:fa:fb:73:82:50:52:b2:b0:87:50:97:1d:6f:b3:32:b3:
         a1:fd:b4:c0:20:30:31:f3:58:57:19:fc:eb:8e:59:9a:3e:83:
         2b:ae:0c:66:f5:2a:1f:b5:f2:d4:8c:d1:a5:c4:1b:ca:1f:28:
         cf:e3:a8:3c:fa:a5:71:37:7f:19:c2:f2:7a:26:ad:f0:79:4f:
         bc:73:29:69:b5:39:c8:4b:2c:73:65:f3:ab:68:9c:4f:6a:09:
         73:ed:63:dd:5b:87:85:06:ab:26:39:b6:5c:48:c9:32:d4:e7:
         26:b6:f5:c9:0d:3c:9f:6c:04:09:8e:ad:0a:b3:7f:91:a1:1d:
         5e:38:48:a3:ea:9d:67:a3:40:9f:45:2e:fb:ea:bf:3a:24:9d:
         9d:2a:f1:25:33:6a:72:89:61:55:73:e2:8d:6d:f8:8b:6f:f7:
         77:57:94:fb:d9:7d:9a:24:a6:ae:3d:d2:2d:26:9d:e7:76:72:
         5a:05:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----