Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.mft
File:                     ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.mft (raw, json)
Hash identifier:          KJQK+maqw7QfJFre8+saY5ux85U7Nn1Bd1uyy9TeBDY=
Subject key identifier:   86:25:44:B8:7F:AE:11:F2:C6:CB:85:10:B8:D0:15:A5:87:A0:DF:99
Authority key identifier: AC:CC:A6:3E:7F:5C:F9:6D:1B:DA:D6:96:47:DD:C1:F5:33:9B:46:07
Certificate issuer:       /CN=ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607
Certificate serial:       7B17FD8A3C626E356A96ED22A98C9AD2B95E5F4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.mft
Manifest number:          02D1
Signing time:             Mon 15 Apr 2024 00:02:32 +0000
Manifest this update:     Sun 14 Apr 2024 23:57:32 +0000
Manifest next update:     Tue 16 Apr 2024 01:12:32 +0000
Files and hashes:         1: ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.crl (hash: nrYoR21GreR0N6emZHi81b/7DbG94fLKuyB174jCkpo=)
                          2: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: LKSKsDyYIpp47291z+nIu6blp60EmZFL+zoG90s6Vws=)
                          3: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: XVp1xOH6GbaMsOtDk9UOXsbteORFg4Mk/XVxKTn3FUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:17:fd:8a:3c:62:6e:35:6a:96:ed:22:a9:8c:9a:d2:b9:5e:5f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607
        Validity
            Not Before: Apr 14 23:57:32 2024 GMT
            Not After : Apr 16 01:12:32 2024 GMT
        Subject: CN=862544B87FAE11F2C6CB8510B8D015A587A0DF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:21:a6:9c:ef:f8:39:19:1a:6e:bc:3d:8f:51:
                    25:65:d4:f6:01:7a:3a:49:ce:fe:d2:c8:5b:a8:6e:
                    cc:f2:b8:97:5f:3a:d8:be:8e:ce:2f:02:f0:7f:f2:
                    5f:81:4b:dc:c5:0c:79:6d:7e:77:ae:93:a7:7e:46:
                    57:b2:55:c7:53:1f:19:1e:e2:20:05:f5:a2:11:05:
                    83:33:ea:20:f4:92:00:26:9f:21:79:8d:30:fb:28:
                    d7:20:f7:10:74:cf:93:d1:f1:9d:aa:ca:de:73:dd:
                    4b:ac:99:54:52:7c:9c:bf:4a:05:3f:6b:ca:f3:4e:
                    e8:36:6b:9e:19:20:04:26:31:a1:ba:22:82:aa:8a:
                    af:c6:e1:3d:9e:0d:dc:6e:e3:d9:c8:98:68:3d:d3:
                    47:3e:53:86:05:7c:18:8f:ef:7e:97:e5:29:f9:1c:
                    c1:07:7a:74:fc:0e:0b:45:4c:11:bf:58:f4:4e:d2:
                    53:07:a2:ec:d2:21:5e:33:52:ca:66:97:88:f4:a2:
                    8d:38:f7:ce:7b:53:f8:91:42:b0:32:3f:a1:06:80:
                    aa:e2:ef:74:8b:28:24:4d:4e:f3:61:3e:6e:bc:0a:
                    a2:28:23:ea:e6:6d:fb:a6:3a:18:41:24:8f:47:ff:
                    38:f3:59:b1:82:d6:82:92:49:5e:cf:71:c3:80:0d:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:25:44:B8:7F:AE:11:F2:C6:CB:85:10:B8:D0:15:A5:87:A0:DF:99
            X509v3 Authority Key Identifier:
                keyid:AC:CC:A6:3E:7F:5C:F9:6D:1B:DA:D6:96:47:DD:C1:F5:33:9B:46:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:34:ca:ae:84:69:5b:db:44:a8:91:dc:26:60:1f:43:3a:
         e0:84:28:d9:f8:6e:39:ce:3c:1a:39:50:44:85:4e:c8:41:9d:
         c9:f7:19:d3:70:0f:b6:2a:a0:02:53:fc:4f:4f:5e:a8:0a:ea:
         f5:f4:91:08:70:15:17:97:c9:e1:37:e0:33:9a:46:16:93:07:
         8f:e6:4d:d5:b5:ba:1d:16:e5:b1:99:61:c3:2d:91:e6:96:1d:
         19:e0:02:52:96:15:57:2a:a2:df:b7:9e:3b:1d:dc:f7:81:6d:
         1d:82:44:01:13:b0:45:f7:31:a2:f4:6f:de:eb:a5:16:a7:c3:
         83:a6:d4:82:ea:24:12:63:83:c6:a7:9e:47:1b:93:10:2d:a9:
         06:43:d2:00:d7:4f:05:9e:71:bb:c3:97:5a:aa:96:bb:c5:51:
         6c:d4:08:8e:57:ee:27:d4:db:ee:c9:46:da:97:f7:86:37:65:
         8a:24:ba:33:46:0b:08:35:05:7a:82:c0:bb:48:20:63:06:ea:
         5b:66:ef:55:c5:5b:2e:b3:80:6d:cb:1e:fb:45:21:dc:0d:52:
         14:4f:8e:08:dd:11:58:03:45:c4:33:bc:dd:0d:33:56:1b:2c:
         a4:3d:26:8e:ac:2e:e4:9e:ec:14:43:17:4d:b6:08:96:51:46:
         51:c2:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----