Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/317B2083DA24C1BA69201702A19EDCA376FA0379.mft
File:                     317B2083DA24C1BA69201702A19EDCA376FA0379.mft (raw, json)
Hash identifier:          eo/yuo4zofKV0lLohPeGcy5NIeeUoFoHBkzhn7LkoFY=
Subject key identifier:   F9:45:01:59:3A:DD:8B:95:92:14:BF:D2:E9:0D:19:B5:51:90:90:4A
Authority key identifier: 31:7B:20:83:DA:24:C1:BA:69:20:17:02:A1:9E:DC:A3:76:FA:03:79
Certificate issuer:       /CN=317B2083DA24C1BA69201702A19EDCA376FA0379
Certificate serial:       683E3B17B9A2A4D9369C737DFEA5F98BD2BF37DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317B2083DA24C1BA69201702A19EDCA376FA0379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/317B2083DA24C1BA69201702A19EDCA376FA0379.mft
Manifest number:          13
Signing time:             Wed 17 Apr 2024 10:31:47 +0000
Manifest this update:     Wed 17 Apr 2024 10:26:47 +0000
Manifest next update:     Thu 18 Apr 2024 10:43:47 +0000
Files and hashes:         1: 323830343a313934633a3a2f33322d3438203d3e203631373835.roa (hash: xiqYGBlzj+Sp5Y/LrTaJPW7Nf8c59SOZw1dH6uprRG0=)
                          2: 317B2083DA24C1BA69201702A19EDCA376FA0379.crl (hash: 8rxodFiL0LHY44Evjxr1Ofn625tTPKR6fMuIu6nj9fc=)
                          3: 3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa (hash: Mu7V8BDiMsPukuOQGbm+UAcBocR1J8Wk3EBDbdqSe3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3e:3b:17:b9:a2:a4:d9:36:9c:73:7d:fe:a5:f9:8b:d2:bf:37:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317B2083DA24C1BA69201702A19EDCA376FA0379
        Validity
            Not Before: Apr 17 10:26:47 2024 GMT
            Not After : Apr 18 10:43:47 2024 GMT
        Subject: CN=F94501593ADD8B959214BFD2E90D19B55190904A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:0c:77:ca:54:53:eb:ee:6a:ef:a0:50:c0:
                    5d:5d:54:e8:a2:f2:b9:d8:11:e4:d9:93:53:12:8c:
                    e7:aa:01:8b:56:ec:46:f6:0d:70:85:1c:6d:86:62:
                    ec:e9:06:bd:a3:f5:8f:b5:45:fa:68:de:ee:0e:9d:
                    a7:3e:eb:66:c6:1a:69:14:50:c0:25:a6:60:4d:13:
                    6c:44:a2:5f:68:ba:39:fc:d7:00:d1:b8:c0:54:ef:
                    9f:5b:0f:b2:03:d2:c9:06:e4:2f:a5:ae:04:3c:d1:
                    4f:00:4f:8f:4e:37:73:e5:0f:b3:20:41:57:e3:7a:
                    b0:c6:86:f5:b2:7f:50:fa:db:1c:7f:56:d8:a8:be:
                    78:3e:17:10:17:82:3c:5f:85:e1:e3:1b:20:c1:76:
                    c0:30:72:cd:ee:a9:68:dd:01:38:11:87:7e:b4:4f:
                    20:e0:ac:ba:4c:ab:e7:5f:09:bc:b5:17:71:13:82:
                    90:a1:03:7b:93:9d:ba:53:b0:d9:67:f1:23:bd:57:
                    f0:a8:b2:8e:b4:8d:ac:ec:df:d6:d4:5f:bb:a0:3f:
                    dc:f3:a4:ab:e0:60:bf:62:ad:0a:27:c1:b5:d1:2f:
                    02:1a:6e:a3:55:c1:3d:2c:c8:aa:37:bf:0b:dc:db:
                    63:7c:40:72:36:f6:9e:b8:c2:03:2e:78:1b:e8:b8:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:45:01:59:3A:DD:8B:95:92:14:BF:D2:E9:0D:19:B5:51:90:90:4A
            X509v3 Authority Key Identifier:
                keyid:31:7B:20:83:DA:24:C1:BA:69:20:17:02:A1:9E:DC:A3:76:FA:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/317B2083DA24C1BA69201702A19EDCA376FA0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317B2083DA24C1BA69201702A19EDCA376FA0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/317B2083DA24C1BA69201702A19EDCA376FA0379.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:3a:74:6f:8f:c1:4e:62:9f:a0:e9:f4:3e:a2:46:ee:91:
         f3:f8:20:15:4a:37:13:6c:2e:37:06:dd:b0:92:5e:ac:86:3e:
         6d:b4:38:0f:9a:3a:e0:c5:db:c5:99:64:e1:a3:10:e0:08:65:
         ad:9d:d7:0b:2f:2a:d5:bf:ec:1a:17:fc:a7:63:28:8d:45:cb:
         1f:35:e3:5d:12:d8:9a:da:1e:f2:0d:5e:07:51:f5:04:26:a9:
         71:e8:b1:5b:51:4a:bc:fe:d7:91:ef:c8:77:74:f3:a8:29:d4:
         d9:94:35:36:a4:1d:40:05:82:21:96:94:bc:e0:0f:91:2d:34:
         57:81:27:db:42:b3:a9:bc:8e:0a:f5:c5:38:e0:8d:d4:42:fd:
         1c:34:e1:88:1a:d2:e8:55:2b:b6:37:67:bb:03:d4:71:c3:fc:
         c2:7c:e8:a9:76:be:bd:1e:02:3e:cd:d3:65:9f:3c:23:a6:bf:
         27:2e:76:27:00:00:80:aa:0b:09:28:48:4a:4b:6d:d1:c5:a8:
         7a:6b:45:f1:6d:58:58:94:07:42:9f:3c:ff:d9:3b:fa:b7:24:
         b1:12:e4:51:73:31:fa:48:6e:ec:17:63:e4:07:b6:5a:51:82:
         c4:03:6c:8a:6a:aa:31:de:ac:2f:e1:ef:f1:0a:98:10:94:46:
         b7:34:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----