Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.mft
File:                     A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.mft (raw, json)
Hash identifier:          OlTU9nOiyXJ7zJxvWknWwntvc8ky8WIQr8zFub/Ngjk=
Subject key identifier:   23:10:F3:0A:2D:A0:17:49:71:BA:3A:67:47:8B:2C:64:81:41:6C:03
Authority key identifier: A2:0B:DD:CD:2F:FB:E8:C8:E5:36:76:93:28:2A:EB:F7:83:D8:0B:4B
Certificate issuer:       /CN=A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B
Certificate serial:       26DD4D0572DD9853C00156F7739591812ACDD5EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.mft
Manifest number:          6D
Signing time:             Sun 14 Apr 2024 18:44:57 +0000
Manifest this update:     Sun 14 Apr 2024 18:39:57 +0000
Manifest next update:     Mon 15 Apr 2024 22:25:57 +0000
Files and hashes:         1: 323830343a386435343a3a2f33322d3335203d3e20323733333530.roa (hash: LG7J2OwhdKa2s9YE1PMw5On7XhQyvMWbAI55/qEpssE=)
                          2: 34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa (hash: P/T1M1ULi1h1UiZxelaWO1ag7tnfu7kpUkaF7fC0N+o=)
                          3: A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.crl (hash: xt8WSEb/Ngwtk2bCDtLFpwnapTxnytt1bVzPEjnIOjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dd:4d:05:72:dd:98:53:c0:01:56:f7:73:95:91:81:2a:cd:d5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B
        Validity
            Not Before: Apr 14 18:39:57 2024 GMT
            Not After : Apr 15 22:25:57 2024 GMT
        Subject: CN=2310F30A2DA0174971BA3A67478B2C6481416C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:5c:e4:c6:11:e9:3f:1c:df:28:bb:0b:ab:
                    75:fd:03:51:bf:66:ba:c9:a1:87:05:1e:46:e6:5e:
                    16:9c:88:6e:81:20:4f:80:16:92:86:f5:8c:ba:d5:
                    1f:52:c0:28:6c:a2:ab:68:10:00:01:1d:78:d5:9e:
                    46:5c:52:ac:b8:7d:ac:34:d7:c6:44:5d:4e:ba:48:
                    10:8e:1b:40:81:e3:e1:45:0f:8d:6e:4e:1a:6e:50:
                    ae:57:8c:ee:99:d2:98:58:87:6f:75:23:8e:30:38:
                    c4:c1:b4:df:e9:44:80:eb:4c:61:67:98:e8:a2:4c:
                    35:80:9f:eb:11:a6:4a:3b:0f:de:dc:02:9d:84:05:
                    a8:e2:a2:40:ab:57:e1:e1:e3:ce:8c:e3:d9:83:2c:
                    f3:bd:38:1d:44:43:be:6a:8a:9b:49:12:09:d7:6d:
                    c2:9d:53:d2:b1:27:25:58:25:c4:1b:7a:aa:74:e0:
                    ea:8d:34:e4:2c:f1:4d:a5:78:77:f1:00:ca:65:9c:
                    6e:2b:17:c3:8d:79:1a:4d:16:be:11:6b:09:03:5d:
                    2c:00:61:76:4e:dc:6b:b4:b3:7f:a5:88:30:a8:a5:
                    5e:d7:ec:bc:f1:4f:6d:ac:5a:01:bf:6d:05:57:ca:
                    91:1d:93:4d:1d:81:33:7e:87:33:6d:35:57:57:45:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:F3:0A:2D:A0:17:49:71:BA:3A:67:47:8B:2C:64:81:41:6C:03
            X509v3 Authority Key Identifier:
                keyid:A2:0B:DD:CD:2F:FB:E8:C8:E5:36:76:93:28:2A:EB:F7:83:D8:0B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:12:05:13:be:f1:06:96:28:5f:a0:db:2f:b7:52:4e:3f:d6:
         b8:65:fa:18:7a:90:8d:5f:14:87:18:c0:bc:4f:03:83:33:1f:
         9c:02:e0:9c:d9:d2:99:18:cb:7a:f1:9c:ab:c6:cf:32:ba:9d:
         79:a1:0d:0c:ae:4c:d9:1a:01:1b:18:e3:ff:6a:21:ed:c8:8a:
         84:7e:6e:e5:f5:f0:87:4e:69:22:10:37:94:62:22:ee:35:2f:
         a9:cc:3b:e3:f2:79:79:f6:3e:fa:0f:f6:c2:87:0f:36:c4:00:
         0f:50:44:b4:4b:35:35:83:33:0f:bf:b5:7a:ec:1a:ab:f5:15:
         1f:fe:91:79:56:85:56:5e:ad:7c:52:8d:d2:64:6b:a5:a3:a2:
         13:75:01:77:ed:b5:1f:de:12:23:0a:32:0c:8c:93:23:2e:89:
         8f:8a:9a:f9:8a:1f:92:54:46:66:e6:26:8a:5c:48:18:23:eb:
         2b:5f:3e:02:1a:45:0c:8d:64:f0:15:fd:4a:eb:3d:21:d4:d7:
         e2:0b:ad:51:e7:0b:e5:bd:70:09:20:1f:c9:e4:05:28:19:59:
         43:e1:d3:53:90:ce:fc:c4:54:81:d2:5b:2f:5a:73:5e:ed:8c:
         cb:47:b3:61:ea:da:9b:62:5e:df:2c:6d:55:cd:97:d2:fd:57:
         d7:94:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----