Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/895CE9CC028EB09A717FF63AB3D6805F54210796.mft
File:                     895CE9CC028EB09A717FF63AB3D6805F54210796.mft (raw, json)
Hash identifier:          U5l41c8LlJJBPkGO1lWZ1saVYzamIEfU9cZs34zmi+c=
Subject key identifier:   39:22:AA:71:6A:50:17:25:FD:4F:29:26:B8:DE:41:01:50:06:EA:1C
Authority key identifier: 89:5C:E9:CC:02:8E:B0:9A:71:7F:F6:3A:B3:D6:80:5F:54:21:07:96
Certificate issuer:       /CN=895CE9CC028EB09A717FF63AB3D6805F54210796
Certificate serial:       4752620F175058D786545A122EA1B9C4ADCD58D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895CE9CC028EB09A717FF63AB3D6805F54210796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/895CE9CC028EB09A717FF63AB3D6805F54210796.mft
Manifest number:          55
Signing time:             Mon 15 Apr 2024 08:22:24 +0000
Manifest this update:     Mon 15 Apr 2024 08:17:24 +0000
Manifest next update:     Tue 16 Apr 2024 09:20:24 +0000
Files and hashes:         1: 323830343a313934633a3a2f33322d3438203d3e203631373835.roa (hash: z9DQG43jWWg2RFK8Z22IgQ1DL8ZQQIMKS/x/Y19KK9g=)
                          2: 895CE9CC028EB09A717FF63AB3D6805F54210796.crl (hash: YzQGNQe5bP7Q+IDdCsLmGD0uo4mgT9Ff0ZBOlsJ8LnA=)
                          3: 3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa (hash: hYVfc7xRfQepYZeHCDWIvQ8Ye1OOpJC2KvDfCqbikYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:52:62:0f:17:50:58:d7:86:54:5a:12:2e:a1:b9:c4:ad:cd:58:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895CE9CC028EB09A717FF63AB3D6805F54210796
        Validity
            Not Before: Apr 15 08:17:24 2024 GMT
            Not After : Apr 16 09:20:24 2024 GMT
        Subject: CN=3922AA716A501725FD4F2926B8DE41015006EA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:76:f7:43:10:66:26:af:99:e9:d4:17:2a:66:
                    a0:82:97:cb:48:78:e5:86:79:a9:78:ee:0e:a5:cb:
                    c7:8f:f1:52:d7:21:57:aa:f8:e6:24:14:82:dd:7b:
                    70:66:09:c0:95:32:88:6f:bf:0c:0e:06:4f:34:6b:
                    79:0f:9c:39:3c:0f:4a:00:a7:56:7a:6a:2a:6e:d0:
                    b0:6f:9f:d8:cb:6b:69:6c:96:e8:88:85:dd:3a:7e:
                    c8:93:58:ed:7e:34:a7:3b:8b:45:1e:c2:78:ce:da:
                    b2:a1:de:5b:8f:0e:f6:bc:ec:83:13:db:6c:45:bf:
                    1a:9e:d3:c4:cf:32:e5:16:d8:65:05:fd:26:d8:e2:
                    9e:62:95:4a:ac:a5:e2:b5:0f:17:65:73:cf:c2:db:
                    6d:5c:09:fa:90:da:be:a4:f4:e8:65:a0:9e:d5:4e:
                    9c:2a:ba:4c:3a:05:77:25:c9:52:34:06:39:b9:88:
                    f6:6c:6a:a2:b8:80:1f:55:eb:22:3e:b4:fe:e7:73:
                    05:71:f7:d8:62:15:8e:58:a6:6d:9f:b3:bb:9e:8f:
                    e8:0b:01:a9:77:96:a3:f7:a8:92:e3:a9:7d:b6:68:
                    38:d8:06:fc:2b:38:2b:46:e9:28:c6:71:92:77:99:
                    31:76:88:a3:d3:5d:d8:84:ad:85:d0:71:86:9c:62:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:22:AA:71:6A:50:17:25:FD:4F:29:26:B8:DE:41:01:50:06:EA:1C
            X509v3 Authority Key Identifier:
                keyid:89:5C:E9:CC:02:8E:B0:9A:71:7F:F6:3A:B3:D6:80:5F:54:21:07:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/895CE9CC028EB09A717FF63AB3D6805F54210796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895CE9CC028EB09A717FF63AB3D6805F54210796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/895CE9CC028EB09A717FF63AB3D6805F54210796.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:81:56:b2:67:fa:71:b0:ea:9a:a3:5c:9a:9d:01:28:15:
         78:6c:50:1f:ed:45:2b:9c:f3:89:91:43:c7:e4:2a:03:ec:67:
         7d:35:e4:93:25:cf:1d:37:03:87:e5:d7:b9:e3:cc:e6:dd:8e:
         de:bd:e2:81:e0:a6:d4:ae:c9:5b:b6:a7:0c:c0:9a:e1:43:25:
         2e:4b:08:2c:9b:35:c3:51:e8:7c:d6:e8:28:61:e8:7d:ba:a1:
         b9:85:35:8c:d5:2e:4c:a0:ce:55:0a:d4:a9:96:b7:09:af:78:
         c2:05:a7:8d:84:f1:bf:16:c0:99:f7:39:0a:58:ac:5c:3c:48:
         17:85:53:30:51:04:62:5a:fb:e2:73:3f:34:d7:17:d1:c3:73:
         9a:ad:4d:a1:d2:87:1a:03:8a:8c:7e:1d:5f:3d:39:8d:fc:90:
         98:18:5d:07:01:25:7f:c8:c8:7d:cf:53:32:f5:36:9c:cc:28:
         42:f9:c7:dc:09:e5:80:0a:09:d1:64:79:ac:3d:01:c5:fc:56:
         06:55:40:15:ed:88:b3:be:1f:18:9d:1e:64:e6:01:d6:2a:0c:
         7d:8a:7f:b5:90:9a:98:31:56:25:4f:a0:02:6e:19:7a:6b:14:
         9b:66:a5:71:36:ff:59:fa:73:6a:36:07:20:c7:46:5f:eb:fe:
         6b:fe:6c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----