Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.mft
File:                     1CE78DE47E8BDBA4A648DDC8FFEE696941848504.mft (raw, json)
Hash identifier:          np0LIfgBHPFYu7GkvM7PoAv06H+/Aq64WXwL+yAmMfM=
Subject key identifier:   32:A3:18:45:C3:4A:96:86:60:4B:BD:BA:C8:56:1D:8E:9B:FE:94:2A
Authority key identifier: 1C:E7:8D:E4:7E:8B:DB:A4:A6:48:DD:C8:FF:EE:69:69:41:84:85:04
Certificate issuer:       /CN=1CE78DE47E8BDBA4A648DDC8FFEE696941848504
Certificate serial:       3797B296C2D66F0752B46F72264CB827C36633A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.mft
Manifest number:          0330
Signing time:             Mon 15 Apr 2024 00:34:42 +0000
Manifest this update:     Mon 15 Apr 2024 00:29:42 +0000
Manifest next update:     Tue 16 Apr 2024 02:28:42 +0000
Files and hashes:         1: 34352e362e3131322e302f32322d3234203d3e20323636313331.roa (hash: zOjDUzHDg2a/OsL0oksm72pTZZ0jfRSC9LWcUpZg0N8=)
                          2: 323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (hash: j9O9k6iCPps52OXNK2s04ucvOKL5UNaMFs+o25rIdfY=)
                          3: 1CE78DE47E8BDBA4A648DDC8FFEE696941848504.crl (hash: zouhogYV21PwNQ7JBBBdPxkV8NXGe8vXwmuov+BK3U4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:97:b2:96:c2:d6:6f:07:52:b4:6f:72:26:4c:b8:27:c3:66:33:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CE78DE47E8BDBA4A648DDC8FFEE696941848504
        Validity
            Not Before: Apr 15 00:29:42 2024 GMT
            Not After : Apr 16 02:28:42 2024 GMT
        Subject: CN=32A31845C34A9686604BBDBAC8561D8E9BFE942A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:09:a4:87:43:bf:28:99:8a:21:b1:31:87:
                    cb:26:a8:54:8f:ff:38:bb:6c:72:dc:a9:3b:de:1e:
                    96:2e:80:98:ff:2b:b7:77:31:fb:2e:6d:01:9c:e1:
                    b5:fd:aa:4c:42:d6:5e:ff:56:de:a2:57:2f:15:e5:
                    c8:69:3d:fc:65:0b:83:29:10:8b:65:bc:c8:74:76:
                    2c:38:e0:33:74:9e:e1:3c:1c:d0:7b:ec:6b:bf:3f:
                    e2:1e:5e:b9:d3:e4:f2:b1:ba:4f:33:30:9a:fd:46:
                    3a:ab:65:2d:c9:44:17:93:4e:2f:e2:66:d7:58:db:
                    d3:17:8b:73:63:98:33:6b:f8:a4:ef:ce:f9:12:d8:
                    e9:bf:ee:b2:ea:31:b0:10:7b:9c:3d:3e:61:fb:e1:
                    d0:48:6a:bc:49:b7:d6:8c:c5:a0:14:b7:6e:3b:7c:
                    e5:b8:73:2b:e8:43:76:5f:fe:be:70:23:30:6e:74:
                    b1:de:3f:82:df:1a:ce:e0:00:dc:ec:0e:c3:a3:43:
                    46:d7:e0:12:3b:ac:c1:cd:c6:95:c9:57:67:ff:b8:
                    45:c8:1b:47:68:1a:63:9f:a3:fa:65:be:c7:d1:16:
                    9c:fa:2d:28:14:2f:54:84:af:cd:c1:3f:93:75:78:
                    71:77:2a:03:72:45:73:d1:1b:55:f9:1c:ac:39:a3:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:18:45:C3:4A:96:86:60:4B:BD:BA:C8:56:1D:8E:9B:FE:94:2A
            X509v3 Authority Key Identifier:
                keyid:1C:E7:8D:E4:7E:8B:DB:A4:A6:48:DD:C8:FF:EE:69:69:41:84:85:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:e5:c0:b9:5b:ba:e9:2d:8e:84:2c:59:74:6f:aa:d5:68:
         b7:ed:a0:7d:02:a5:67:3d:8f:fb:c3:b3:94:61:3f:35:28:f6:
         29:41:b0:b8:5b:57:a4:e3:5c:40:b2:6d:5e:93:52:1b:d6:4e:
         f1:58:c7:1c:87:4e:56:dd:32:07:58:aa:14:1a:2f:72:c9:f4:
         6e:e6:f3:53:8b:a5:97:2b:b8:36:ff:02:ea:e8:0a:1e:fd:8a:
         3c:22:72:67:18:98:c7:c9:6c:38:d9:2b:bc:06:28:8c:d0:c9:
         34:1b:ef:74:bb:7f:d6:d5:91:5b:e6:42:4b:e1:eb:d2:94:b0:
         b6:08:b4:49:03:d8:18:53:2d:16:4e:83:7d:aa:54:4d:fd:74:
         89:65:fb:54:85:a7:3c:b2:89:9b:92:73:7e:57:37:ae:fc:d0:
         88:49:29:2a:e9:d1:2a:37:d0:a4:07:73:57:28:7a:15:52:fd:
         cf:db:b3:19:1f:fb:6d:31:07:a4:be:7e:9a:23:28:07:2e:5d:
         34:db:cc:64:f3:b3:fb:77:8a:9e:5b:bc:5c:94:26:15:d7:83:
         cf:18:14:cf:79:85:43:e7:b9:a9:76:f4:0a:20:a1:d8:4a:25:
         11:d4:6c:0d:e8:8a:d6:15:b3:0b:fc:90:19:c0:92:24:05:96:
         91:58:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----