Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.mft
File:                     DADE0C80639BA985F0F9357586063522E5D2116B.mft (raw, json)
Hash identifier:          VayZQhZriy7Svz4wCLNSU9eNtfKHUSjqSnfW8IbMLW8=
Subject key identifier:   CD:C2:52:DD:6E:55:9B:7F:FF:1D:84:19:35:AA:F0:00:09:5C:A2:DF
Authority key identifier: DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
Certificate issuer:       /CN=DADE0C80639BA985F0F9357586063522E5D2116B
Certificate serial:       2AC0A5A0A54852EFF4940CF3A9E9E21F5FD6838A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.mft
Manifest number:          7B
Signing time:             Sun 14 Apr 2024 23:38:18 +0000
Manifest this update:     Sun 14 Apr 2024 23:33:18 +0000
Manifest next update:     Tue 16 Apr 2024 02:23:18 +0000
Files and hashes:         1: 323830343a6363633a3a2f33322d3438203d3e20323632383237.roa (hash: e4527Y8+ndhMPUPf3OUTcFDNNmmbrmgoE9QoWzhSTJA=)
                          2: 3138372e38342e3137362e302f32302d3234203d3e20323632383237.roa (hash: Z/8kTOGpS77Leev4TntGVKZmuaBUocSvF/B1Wp4Sqkc=)
                          3: DADE0C80639BA985F0F9357586063522E5D2116B.crl (hash: PwUSvphmUmfxC8+/ijLKarfU2wavlII80v2e5TMGP4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c0:a5:a0:a5:48:52:ef:f4:94:0c:f3:a9:e9:e2:1f:5f:d6:83:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADE0C80639BA985F0F9357586063522E5D2116B
        Validity
            Not Before: Apr 14 23:33:18 2024 GMT
            Not After : Apr 16 02:23:18 2024 GMT
        Subject: CN=CDC252DD6E559B7FFF1D841935AAF000095CA2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:e5:48:e7:c3:1c:cd:b0:39:d9:69:80:ae:
                    89:81:ca:b2:65:be:37:52:0e:68:de:4f:e0:a0:c9:
                    7c:a5:09:e6:99:c6:cd:c0:74:fe:6c:ff:75:d1:37:
                    af:35:94:66:41:cc:28:e4:58:c9:d0:8b:25:eb:8b:
                    da:e6:1e:aa:1d:c3:ee:a1:a3:6d:38:09:c9:47:e7:
                    29:4a:0c:fa:b0:f0:b6:92:fd:66:52:70:e4:39:cf:
                    c3:e9:00:fd:34:06:16:10:2f:db:06:93:01:df:70:
                    1e:3f:68:07:a3:7b:76:60:22:cb:f7:c7:ca:1c:4f:
                    55:f7:6a:1b:f0:b8:5a:00:58:56:62:e6:b4:bc:58:
                    af:79:f4:de:06:b7:3f:19:ab:03:0d:fd:3d:72:64:
                    1e:53:8a:53:ba:b9:31:bf:fa:1b:3e:fb:b7:8b:4e:
                    cf:2e:13:a7:1d:74:2a:38:c3:ca:8e:ad:a1:c7:2f:
                    cd:c1:38:a9:2d:98:91:60:94:21:09:68:9d:1e:87:
                    c8:91:cd:1e:c9:ba:7f:cd:0b:42:ae:47:1a:5b:86:
                    34:93:db:d6:05:08:b2:67:0d:4e:da:92:e0:34:75:
                    aa:3b:8c:1d:38:aa:20:8d:19:df:3a:ca:21:44:57:
                    8a:7d:54:d0:43:1c:05:4b:39:97:62:cc:24:9b:98:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C2:52:DD:6E:55:9B:7F:FF:1D:84:19:35:AA:F0:00:09:5C:A2:DF
            X509v3 Authority Key Identifier:
                keyid:DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:00:68:70:f8:92:92:24:e6:6b:11:ca:cd:e1:17:68:94:
         20:a4:10:0b:ef:f5:04:cd:6f:6b:c7:d7:a4:c9:4a:a2:9b:cb:
         5a:b8:06:a3:3d:33:a1:f0:57:be:ce:6f:5b:7a:15:66:5e:8f:
         cc:42:90:03:e0:a1:d1:92:5b:d6:65:61:06:a7:69:66:8f:66:
         00:8a:95:6a:46:f5:97:14:c7:5a:20:bf:46:9f:5c:b2:91:10:
         19:fe:e6:ca:97:67:5c:6b:38:4f:32:df:ac:b7:db:50:7e:32:
         04:ce:f8:fe:7b:32:94:29:fc:43:e3:86:ac:67:1e:bb:b0:d1:
         bf:81:ca:aa:52:5f:19:98:fb:4b:88:86:99:7c:69:d7:16:05:
         e5:97:61:19:a0:1d:64:f1:f6:5d:bd:9b:b8:5b:99:01:94:f8:
         5b:f9:45:e0:e3:4c:13:9c:4c:47:e3:14:02:12:3f:e0:5c:96:
         c6:8c:11:50:d6:fd:54:c0:60:54:9d:77:3b:36:d5:31:21:9c:
         bd:ba:06:85:77:03:a9:22:89:ea:79:2d:25:89:7f:e5:e2:57:
         a0:f5:a6:64:5a:12:d4:31:ef:42:ff:14:b1:5c:7c:92:66:7a:
         d4:11:7c:1f:37:48:61:5f:3f:b5:f4:84:a9:0f:11:9d:fb:f5:
         32:35:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----