Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/D4E12815E28CC48F16AA86EB9E03192DEF10468C.mft
File:                     D4E12815E28CC48F16AA86EB9E03192DEF10468C.mft (raw, json)
Hash identifier:          rrEIDcPjvj7hh5Ul65Z5YorzzrCW78v++LklKFiNknU=
Subject key identifier:   17:B6:E8:48:91:59:07:CD:07:C8:9F:B0:80:A6:9C:77:59:FF:68:B1
Authority key identifier: D4:E1:28:15:E2:8C:C4:8F:16:AA:86:EB:9E:03:19:2D:EF:10:46:8C
Certificate issuer:       /CN=D4E12815E28CC48F16AA86EB9E03192DEF10468C
Certificate serial:       6478905B114C3C191CD1D79F608F9C534C4F9E4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4E12815E28CC48F16AA86EB9E03192DEF10468C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/D4E12815E28CC48F16AA86EB9E03192DEF10468C.mft
Manifest number:          3B
Signing time:             Wed 23 Oct 2024 07:42:33 +0000
Manifest this update:     Wed 23 Oct 2024 07:37:33 +0000
Manifest next update:     Thu 24 Oct 2024 07:42:33 +0000
Files and hashes:         1: D4E12815E28CC48F16AA86EB9E03192DEF10468C.crl (hash: e+Cn4xRNDeDwZuRPN/YrC7cm4t4IEDi01+80NnrON/o=)
                          2: 323830343a326331303a3a2f33322d3438203d3e20323635313932.roa (hash: F5p+8N5uBRsB3GZ5N78YcrtLWQWTgrzNRcL90i9OyQE=)
                          3: 3136372e3234392e3134342e302f32322d3332203d3e20323635313932.roa (hash: MId3nNE+QGkhihfT2Veeg/A/Vb/u0z+1fqQx3H5Yzu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:78:90:5b:11:4c:3c:19:1c:d1:d7:9f:60:8f:9c:53:4c:4f:9e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E12815E28CC48F16AA86EB9E03192DEF10468C
        Validity
            Not Before: Oct 23 07:37:33 2024 GMT
            Not After : Oct 24 07:42:33 2024 GMT
        Subject: CN=17B6E848915907CD07C89FB080A69C7759FF68B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:ca:fa:86:1a:0b:c4:39:fa:e0:55:ea:55:
                    85:2b:fe:7d:8a:3f:71:bd:55:12:fb:10:cc:40:b9:
                    60:01:26:70:16:cf:87:3f:5a:86:63:d2:6f:e3:22:
                    e9:20:d2:af:79:09:d0:f7:e1:41:00:23:ad:8c:ba:
                    b8:bf:7d:f0:4d:22:f9:71:36:84:a0:bb:59:c6:c0:
                    66:76:78:ad:cc:df:a6:17:ac:cf:4c:c4:2f:eb:e6:
                    fd:8a:24:3d:3a:3e:8b:59:67:bb:f4:14:f2:0f:36:
                    df:dc:da:41:2a:9a:29:81:f7:76:76:ef:4a:7a:34:
                    1b:a7:f8:f3:fb:7f:23:4d:d8:14:fe:fd:60:90:df:
                    20:59:e9:5d:f3:8c:f3:64:89:39:85:a2:f3:02:ae:
                    18:d3:6e:97:d7:72:15:f4:28:56:fd:c5:1a:73:91:
                    0e:95:62:b6:bd:91:3e:4f:a2:5e:93:73:cd:e5:c1:
                    66:69:6a:ad:3e:a5:38:ae:a0:de:d3:15:30:b1:a8:
                    d8:29:fb:6d:a8:48:4f:cf:8e:58:40:d7:45:79:fc:
                    cc:80:e2:9b:07:b9:fd:ad:61:e5:5d:ab:18:e2:a6:
                    a7:a0:ba:d0:c2:9b:87:84:15:8b:11:fe:3b:8a:0f:
                    9f:bd:4d:8f:4c:c0:f9:ce:7b:c3:25:a2:44:6c:c7:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:E8:48:91:59:07:CD:07:C8:9F:B0:80:A6:9C:77:59:FF:68:B1
            X509v3 Authority Key Identifier:
                keyid:D4:E1:28:15:E2:8C:C4:8F:16:AA:86:EB:9E:03:19:2D:EF:10:46:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/D4E12815E28CC48F16AA86EB9E03192DEF10468C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4E12815E28CC48F16AA86EB9E03192DEF10468C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/D4E12815E28CC48F16AA86EB9E03192DEF10468C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4a:c1:73:3e:b5:a6:c6:e4:67:b6:a3:eb:d6:38:6c:c7:04:
         f8:05:18:0f:26:d8:f5:d3:3b:e7:78:2f:9c:19:82:ff:bd:03:
         86:e4:01:5a:8c:cb:4c:3f:62:c4:d7:19:c7:cb:fe:4a:d1:4f:
         29:3f:a3:59:5c:9b:a1:49:a4:35:02:9b:0e:04:a6:de:9e:c8:
         dc:a7:15:b6:7b:92:01:01:41:66:95:01:ae:fd:25:dd:70:7f:
         e5:f5:8e:c1:c9:73:cf:c1:bc:e7:fb:41:fe:73:47:58:91:f2:
         63:1e:5c:0d:2a:8b:b9:2e:ed:86:c8:bb:bb:3f:44:93:51:ed:
         3e:6d:70:59:af:fe:6d:8b:42:4d:e5:e3:57:0b:9f:09:d0:49:
         27:33:5f:71:26:c3:7a:8c:29:a0:72:56:6c:f3:e8:ec:15:b1:
         09:2a:98:d9:f2:74:af:a7:9a:a4:71:e0:c9:21:c9:ca:a9:64:
         41:8c:ae:84:30:22:dd:b2:08:b7:16:6f:e0:6d:1b:e5:ad:7c:
         95:2d:1e:ea:4e:57:9b:4b:2f:e9:ec:e7:1f:ff:58:4a:73:b4:
         cb:52:3b:56:af:99:4e:a7:9d:ad:3b:69:37:3c:07:00:a6:3b:
         4f:07:6f:5a:c6:55:e7:54:89:3d:d4:21:15:b3:fb:94:09:51:
         5b:67:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----