Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/CC5C6605B0184CD966A534765CB262C325C72E43.mft
File:                     CC5C6605B0184CD966A534765CB262C325C72E43.mft (raw, json)
Hash identifier:          HupHf7/cO/rGXsd++v2mEhRA5cnRZuFaI+BEx0aR8wc=
Subject key identifier:   3A:02:1F:97:58:76:1C:17:39:0C:6A:DF:3A:E1:F0:D3:BE:3C:54:DC
Authority key identifier: CC:5C:66:05:B0:18:4C:D9:66:A5:34:76:5C:B2:62:C3:25:C7:2E:43
Certificate issuer:       /CN=CC5C6605B0184CD966A534765CB262C325C72E43
Certificate serial:       17EE8C0C057D97733F07ED04EEB1EBE76550D7F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5C6605B0184CD966A534765CB262C325C72E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/CC5C6605B0184CD966A534765CB262C325C72E43.mft
Manifest number:          18
Signing time:             Sun 17 Mar 2024 04:45:12 +0000
Manifest this update:     Sun 17 Mar 2024 04:40:12 +0000
Manifest next update:     Mon 18 Mar 2024 05:23:12 +0000
Files and hashes:         1: CC5C6605B0184CD966A534765CB262C325C72E43.crl (hash: /Qz1UPAMyUebnwO6b3SaL39mBqo2DYuOY81q3PBG6Z0=)
                          2: 323830343a356566303a3a2f33322d3438203d3e20323639303636.roa (hash: r/iDpgj1tQtAebphESnakQuEoib+NFFbBWgyXgdDBgk=)
                          3: 34352e3137392e35362e302f32322d3332203d3e20323639303636.roa (hash: GUxhZwk+rJwEWg3yo11FOsMy2h+LlRxvpdqNXFm780Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ee:8c:0c:05:7d:97:73:3f:07:ed:04:ee:b1:eb:e7:65:50:d7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC5C6605B0184CD966A534765CB262C325C72E43
        Validity
            Not Before: Mar 17 04:40:12 2024 GMT
            Not After : Mar 18 05:23:12 2024 GMT
        Subject: CN=3A021F9758761C17390C6ADF3AE1F0D3BE3C54DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:88:ed:7a:d7:36:b8:c5:37:a5:00:53:ba:
                    64:fd:0e:2a:da:1d:8d:f0:6b:0e:b1:b6:ab:0d:e3:
                    37:0e:97:3d:d6:4a:f3:9e:3d:9d:40:31:09:d4:3c:
                    ea:52:29:ef:36:8f:2a:9c:e0:8d:69:30:b3:b3:88:
                    20:ae:40:77:d4:59:64:98:79:bd:77:11:5a:8b:b4:
                    56:9f:85:29:f3:d0:35:0b:f7:42:88:98:c8:41:30:
                    b6:0f:e0:0c:16:45:4f:9e:77:16:8f:63:34:cf:e2:
                    f6:3b:f7:ca:77:28:bb:23:f1:fb:2d:de:c8:08:18:
                    42:e3:ab:9b:e5:ba:d1:2a:2d:93:41:29:32:21:04:
                    4d:de:8e:75:15:a2:66:76:67:fb:c4:34:35:01:6a:
                    22:19:1c:38:b1:da:b1:d2:54:03:3a:1a:3e:6f:94:
                    dd:f4:21:44:44:e2:28:f7:28:98:52:f4:82:59:5f:
                    23:ba:ad:16:bf:36:f4:c1:7b:01:64:a5:ab:c9:4b:
                    70:29:66:f3:bc:53:ab:d7:3e:dd:b7:f7:c7:c8:ea:
                    48:8d:ac:83:aa:92:15:1c:40:bd:92:96:63:f7:d2:
                    e4:c8:a5:a5:f0:4f:fd:91:79:3c:c9:00:a5:4f:eb:
                    90:51:7e:a1:21:56:5c:ba:95:cc:d8:b9:74:a2:1d:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:02:1F:97:58:76:1C:17:39:0C:6A:DF:3A:E1:F0:D3:BE:3C:54:DC
            X509v3 Authority Key Identifier:
                keyid:CC:5C:66:05:B0:18:4C:D9:66:A5:34:76:5C:B2:62:C3:25:C7:2E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/CC5C6605B0184CD966A534765CB262C325C72E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5C6605B0184CD966A534765CB262C325C72E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/0/CC5C6605B0184CD966A534765CB262C325C72E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:40:b9:5c:fa:29:c3:4a:67:7d:09:c7:da:fa:f1:54:eb:c7:
         8b:a0:6c:be:80:dd:e8:82:b5:be:48:43:b9:2b:bd:ea:18:8c:
         05:56:96:b5:dd:e6:9f:ac:db:0a:97:3f:4b:57:d6:7a:6a:89:
         38:6f:9a:76:60:de:f7:ea:88:a8:00:67:f1:6c:c7:fc:2e:8b:
         ac:c8:0e:52:d0:25:76:87:75:21:46:cb:c9:d3:46:bc:24:3c:
         91:58:43:80:68:f9:96:9a:b6:c0:e7:e6:9d:79:6a:18:4f:a1:
         ec:e4:6b:a4:c4:fb:1e:ea:79:31:c1:fb:68:92:a0:c1:3d:95:
         c6:d0:8b:93:71:7b:05:83:76:7c:a0:7c:b5:33:a2:7d:7e:a0:
         f0:f0:3b:01:8e:90:df:d2:b3:8e:05:4d:bf:7c:4e:1f:7f:d1:
         54:01:45:c5:79:2e:2e:aa:7d:e9:16:fa:ea:59:79:01:31:ef:
         8f:50:ce:a3:11:bd:e3:0c:d4:0a:03:05:dc:b3:f3:b9:40:bf:
         c0:54:1f:0e:38:03:03:0d:bd:98:f8:da:40:99:5c:fc:4d:85:
         66:dc:b7:80:52:0c:25:0c:8d:dd:3d:1e:41:1c:3f:52:26:9d:
         05:99:cc:b5:f1:51:56:bb:c2:c2:e6:cf:00:50:da:9c:6b:17:
         4d:57:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----