Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/16891515D0732DB1B361B42718F50E035993171B.mft
File:                     16891515D0732DB1B361B42718F50E035993171B.mft (raw, json)
Hash identifier:          pntf8eTGlOOTvx6bfhjpsgJOQLnzZMin3VIBfeKTiJk=
Subject key identifier:   98:FD:C1:D4:3C:79:EA:D0:02:A7:8C:8F:6C:1E:83:02:84:32:BE:2A
Authority key identifier: 16:89:15:15:D0:73:2D:B1:B3:61:B4:27:18:F5:0E:03:59:93:17:1B
Certificate issuer:       /CN=16891515D0732DB1B361B42718F50E035993171B
Certificate serial:       68A454CA9591F17FEE1647D68700E9EADBDBEF9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16891515D0732DB1B361B42718F50E035993171B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/16891515D0732DB1B361B42718F50E035993171B.mft
Manifest number:          0288
Signing time:             Mon 15 Apr 2024 09:09:08 +0000
Manifest this update:     Mon 15 Apr 2024 09:04:08 +0000
Manifest next update:     Tue 16 Apr 2024 10:32:08 +0000
Files and hashes:         1: 34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa (hash: G3Ra8DHz+EIosWXNMPDnKkdVkIuA/DtAHLVxEFM7t2k=)
                          2: 16891515D0732DB1B361B42718F50E035993171B.crl (hash: ceP2ibnKSLbMgI6aDEL8N1Xqclda+EJqnXUhhAuM+Pk=)
                          3: 323830343a343931343a3a2f33322d3438203d3e20323637313633.roa (hash: gxvq3PmHX1IEcC5PGfxrZqr9W1Qn5iDJhStZVuQSovg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a4:54:ca:95:91:f1:7f:ee:16:47:d6:87:00:e9:ea:db:db:ef:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16891515D0732DB1B361B42718F50E035993171B
        Validity
            Not Before: Apr 15 09:04:08 2024 GMT
            Not After : Apr 16 10:32:08 2024 GMT
        Subject: CN=98FDC1D43C79EAD002A78C8F6C1E83028432BE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:79:29:00:06:3a:1f:1c:72:cb:da:bd:bb:
                    e8:ba:62:3c:31:1b:e9:b5:d0:34:54:9e:f2:0c:83:
                    83:5d:8d:8b:35:c9:f6:f5:d8:8b:c7:a1:76:d3:72:
                    d6:12:5f:c9:e7:00:1e:09:91:fc:f5:9d:ec:7a:bf:
                    e6:ec:70:15:df:d5:99:69:5c:6b:09:68:66:ff:bf:
                    bc:42:c2:c6:e5:3a:d5:ee:42:f0:d0:72:c8:19:2f:
                    3f:f5:2b:27:3b:9c:b6:c8:5d:a9:66:c1:ad:25:5b:
                    7a:b4:89:55:47:bf:f5:ff:65:9e:4d:7f:98:1b:48:
                    fa:dc:65:d7:b0:06:0b:8e:7c:ca:e4:f7:61:12:b5:
                    f8:aa:f3:f0:a3:0c:9a:85:e1:45:78:f2:c9:80:f0:
                    c5:65:84:be:f9:9f:08:bb:2f:78:12:47:4f:eb:98:
                    71:c5:12:6a:af:c5:d0:0e:54:fe:10:be:ef:08:4e:
                    0e:4d:61:fa:df:43:5d:f7:73:b0:cb:b4:e0:4e:30:
                    01:97:ce:7b:6e:f3:a5:44:b0:4d:38:03:ca:47:75:
                    22:2d:3f:23:4b:09:1d:74:9f:55:9b:61:1e:b3:3c:
                    d8:ff:1a:7e:4a:69:34:14:90:4b:b6:d9:c0:93:3e:
                    f5:98:8a:7e:30:37:d8:8f:6b:9f:08:f4:d6:9c:81:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FD:C1:D4:3C:79:EA:D0:02:A7:8C:8F:6C:1E:83:02:84:32:BE:2A
            X509v3 Authority Key Identifier:
                keyid:16:89:15:15:D0:73:2D:B1:B3:61:B4:27:18:F5:0E:03:59:93:17:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/16891515D0732DB1B361B42718F50E035993171B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16891515D0732DB1B361B42718F50E035993171B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/16891515D0732DB1B361B42718F50E035993171B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:e6:d2:08:2a:77:2e:15:28:15:86:6a:ab:58:9e:f5:0a:
         08:d5:e1:cc:a7:8c:b9:cc:be:3e:b9:a7:12:0d:c7:67:90:a7:
         d7:21:c3:97:6e:4e:f3:bf:c1:cc:a7:aa:e8:df:be:e3:1a:0b:
         8b:72:38:20:be:c5:06:af:db:3e:d3:a3:49:5f:6b:1b:d0:42:
         0f:09:04:15:eb:e0:55:68:ec:28:c4:0d:14:0a:1c:01:df:c3:
         20:89:5c:20:53:05:67:be:74:33:7a:77:3e:74:50:9c:27:82:
         2b:d4:cd:10:69:88:b6:a9:66:7f:19:79:e6:f1:07:84:10:67:
         80:d3:48:6d:1b:be:dd:7c:47:b0:75:cb:40:6e:77:79:e4:86:
         53:4a:55:17:7a:9e:6f:92:96:b0:88:99:d0:8e:fd:97:7f:c1:
         d8:6b:19:1a:6b:b4:56:53:69:69:c2:fc:65:5b:da:1d:68:aa:
         12:8a:77:08:b7:2a:9c:4a:69:67:cb:97:f5:39:50:26:82:c7:
         ae:02:dc:5b:2b:d8:fd:a0:5e:5e:15:96:1a:36:19:7c:94:dc:
         2e:df:e8:bd:ca:31:02:67:1d:f8:b9:ae:25:38:3c:58:6b:fa:
         c4:6c:b5:2f:d9:76:a2:a1:9f:c0:1c:5f:ee:50:5c:83:67:54:
         ba:ee:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----