Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.mft
File:                     23C3E44CA01A119A4CB89CB013DD725A6EE2137A.mft (raw, json)
Hash identifier:          +uZ7K9mHFQ6OjkbtB6Ug4RV0Eeo7BqzdCqIAiEkzNLI=
Subject key identifier:   5D:06:28:0B:F3:F5:D2:1B:52:FD:4E:72:73:02:B9:FE:83:76:3C:CA
Authority key identifier: 23:C3:E4:4C:A0:1A:11:9A:4C:B8:9C:B0:13:DD:72:5A:6E:E2:13:7A
Certificate issuer:       /CN=23C3E44CA01A119A4CB89CB013DD725A6EE2137A
Certificate serial:       262A56AA1D950B1E97911933F3972B585ED35C00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.mft
Manifest number:          0297
Signing time:             Mon 15 Apr 2024 11:33:06 +0000
Manifest this update:     Mon 15 Apr 2024 11:28:06 +0000
Manifest next update:     Tue 16 Apr 2024 12:59:06 +0000
Files and hashes:         1: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: JuNNGOyyklvatOTdeSaPf+Jv2poHhEp6Yduhuku1JbE=)
                          2: 23C3E44CA01A119A4CB89CB013DD725A6EE2137A.crl (hash: kzjk2qmXhbCE/MQXlP2FDiOcz4Hlh/v3dq1CPpVpqVk=)
                          3: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: ye7LOfLxzkXwS5BRSi4gqp/JwadgLXO1okW4u6HDNgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2a:56:aa:1d:95:0b:1e:97:91:19:33:f3:97:2b:58:5e:d3:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C3E44CA01A119A4CB89CB013DD725A6EE2137A
        Validity
            Not Before: Apr 15 11:28:06 2024 GMT
            Not After : Apr 16 12:59:06 2024 GMT
        Subject: CN=5D06280BF3F5D21B52FD4E727302B9FE83763CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:aa:ca:77:5e:7b:c6:31:40:4d:ae:68:e1:
                    5a:44:49:6b:c8:cc:1d:f2:47:82:0f:c7:1c:f1:d9:
                    05:e5:50:7f:13:e7:0e:f6:7f:51:70:34:90:d0:f3:
                    d7:20:a9:d4:0e:4c:d1:b6:cd:91:2b:81:22:f5:7a:
                    4f:5b:f3:13:08:22:ea:3e:80:14:39:f0:3b:53:68:
                    26:25:40:fe:e8:99:ce:d4:99:08:26:b8:65:0a:e2:
                    4b:45:21:b1:4e:7b:d5:89:3c:32:91:81:f6:3f:6d:
                    1d:ea:48:b7:12:1f:ab:8c:9d:12:c9:a2:bb:65:f1:
                    07:d3:33:4c:0f:3a:ae:f1:84:e0:9c:e6:5d:0c:cb:
                    dd:2c:ad:63:4b:a8:c5:bb:58:db:09:56:72:76:b8:
                    d4:4f:c1:2f:b3:ac:2a:7d:d9:eb:bb:a7:b6:49:59:
                    54:46:5e:b4:b9:59:8d:92:a1:8c:d8:9d:79:a3:b7:
                    b1:72:4f:5e:04:de:29:4e:ec:4c:dc:66:d6:b3:d0:
                    6d:e3:72:a5:fe:2d:f6:74:ca:ff:ff:37:21:e1:7b:
                    5a:e8:58:bc:7f:a3:5e:6b:a9:39:53:9e:1d:63:4c:
                    e2:ca:94:3b:47:be:51:a5:58:d9:2c:e4:cf:2a:2f:
                    e6:f8:26:0c:04:c1:c5:75:c3:97:61:00:fc:19:d3:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:06:28:0B:F3:F5:D2:1B:52:FD:4E:72:73:02:B9:FE:83:76:3C:CA
            X509v3 Authority Key Identifier:
                keyid:23:C3:E4:4C:A0:1A:11:9A:4C:B8:9C:B0:13:DD:72:5A:6E:E2:13:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:45:be:b8:fc:05:96:21:f3:b4:a0:26:d9:19:6b:23:40:2d:
         24:bd:f6:b4:8d:8b:4c:21:ee:dc:28:0f:8c:ad:bd:45:64:ba:
         b6:2c:27:57:2c:ba:50:09:d5:64:6f:05:b8:21:b7:01:6d:5f:
         81:cb:26:75:f4:51:77:3f:9f:dc:d3:22:ec:5a:36:27:90:1d:
         26:5e:69:03:10:01:f8:50:fb:e5:ae:b0:3c:46:0c:c6:5c:35:
         97:65:f8:3a:d8:cd:35:0b:7a:5f:67:42:8b:b7:2f:16:95:38:
         1c:e2:0c:4d:e6:c1:cb:84:4a:b7:a4:59:5e:0e:0b:e9:5c:45:
         ff:8e:37:19:15:59:6a:68:f3:18:52:0c:ce:42:7a:e8:52:c4:
         3a:a2:0f:d1:c0:72:83:0a:7b:56:88:ff:61:b3:37:fa:1a:bf:
         fc:53:29:8c:fc:8b:97:5f:e6:ec:6b:5a:d7:7d:cb:78:43:b6:
         98:a7:c5:3a:12:04:4a:03:64:3c:86:ba:05:5c:5b:5b:21:7f:
         b0:9b:44:d3:2f:62:93:59:79:8d:4b:47:e7:01:c9:90:26:33:
         7a:27:d4:9a:2f:9f:6e:9f:23:63:0d:3a:08:51:9e:48:a3:01:
         14:a4:b3:a3:d9:7c:f3:92:f9:0d:e9:fe:11:4c:a1:96:24:9c:
         e0:db:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----