Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/4C253784F401B39C0D2AFECC20B3BDB3D8775219.mft
File:                     4C253784F401B39C0D2AFECC20B3BDB3D8775219.mft (raw, json)
Hash identifier:          xQ10JunF9TG3NWKrcIFD3LUUgFMZ0ObQQkPdEj/2Oz8=
Subject key identifier:   CC:E0:72:8C:1A:DF:7A:75:78:C6:CE:E2:78:FD:CF:43:6D:D8:96:EC
Authority key identifier: 4C:25:37:84:F4:01:B3:9C:0D:2A:FE:CC:20:B3:BD:B3:D8:77:52:19
Certificate issuer:       /CN=4C253784F401B39C0D2AFECC20B3BDB3D8775219
Certificate serial:       3AE797707244A1691CD2E2B18C0D033B5018EE0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C253784F401B39C0D2AFECC20B3BDB3D8775219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/4C253784F401B39C0D2AFECC20B3BDB3D8775219.mft
Manifest number:          2F
Signing time:             Mon 15 Apr 2024 08:13:51 +0000
Manifest this update:     Mon 15 Apr 2024 08:08:51 +0000
Manifest next update:     Tue 16 Apr 2024 11:54:51 +0000
Files and hashes:         1: 4C253784F401B39C0D2AFECC20B3BDB3D8775219.crl (hash: G6aH+75JegRZYPpV0FtI9hedTO6zuKTkvgyRCbjixSc=)
                          2: 323830343a386632343a3a2f33322d313238203d3e20323733343730.roa (hash: lKiq00QTq500rryp/kYuPjF2+fnSYzSRHmG2eOJSmXw=)
                          3: 34352e3137332e3135362e302f32342d3332203d3e20323733343730.roa (hash: 6IlDW1KOLg/Sicp5rhgB2LY0v9UMxOjGW4a4LQdZUG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e7:97:70:72:44:a1:69:1c:d2:e2:b1:8c:0d:03:3b:50:18:ee:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C253784F401B39C0D2AFECC20B3BDB3D8775219
        Validity
            Not Before: Apr 15 08:08:51 2024 GMT
            Not After : Apr 16 11:54:51 2024 GMT
        Subject: CN=CCE0728C1ADF7A7578C6CEE278FDCF436DD896EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:c4:7e:13:e2:99:73:81:f9:f2:67:fa:2e:
                    4c:07:f6:09:ce:fa:27:3e:5e:e2:14:58:7b:eb:bc:
                    ca:e8:42:ed:a5:c0:e3:a8:50:8f:e9:4f:28:57:20:
                    97:57:93:61:44:91:98:e9:03:01:7a:a2:a4:2c:0e:
                    17:49:67:76:ff:45:d1:ce:0f:b3:1c:81:d0:f7:92:
                    1f:b7:48:f2:eb:fe:45:63:e2:d3:bd:b2:cc:6f:19:
                    8c:e8:91:42:e9:03:cf:c2:8c:14:6e:78:36:56:a5:
                    0d:5b:37:c4:67:5c:8a:61:28:8f:f6:68:d3:10:36:
                    90:90:da:14:34:5d:91:97:9a:e2:f0:7f:02:a3:b7:
                    ad:56:a4:26:33:db:da:ac:11:04:6b:c2:7f:af:26:
                    00:46:8c:17:72:a9:f1:bb:e4:1e:f9:c7:a4:09:50:
                    ed:0f:be:5d:6c:5e:b6:2a:8c:17:56:76:1a:89:27:
                    a2:82:fa:16:ad:df:1b:81:dc:80:b5:af:4d:46:7c:
                    e5:1e:4c:dc:29:42:d4:58:27:5a:85:56:ce:5a:f0:
                    0c:8c:84:ec:2b:98:98:a3:86:59:4d:fb:5f:35:5a:
                    a9:d9:fb:e6:80:d0:60:e7:3a:48:e0:7f:38:72:3b:
                    e9:8a:ea:c2:e4:04:91:50:6b:d6:46:3c:54:4b:cd:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:72:8C:1A:DF:7A:75:78:C6:CE:E2:78:FD:CF:43:6D:D8:96:EC
            X509v3 Authority Key Identifier:
                keyid:4C:25:37:84:F4:01:B3:9C:0D:2A:FE:CC:20:B3:BD:B3:D8:77:52:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/4C253784F401B39C0D2AFECC20B3BDB3D8775219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C253784F401B39C0D2AFECC20B3BDB3D8775219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/4C253784F401B39C0D2AFECC20B3BDB3D8775219.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:90:f9:76:5a:c5:86:95:c5:32:aa:6c:00:82:1e:c3:4d:70:
         ac:06:65:fd:9f:60:85:e0:16:43:50:04:9a:5f:0b:60:1f:c2:
         3c:74:3e:c7:f3:0f:2a:35:4b:df:80:d4:97:17:60:d5:ce:6f:
         0c:dc:88:e1:5d:56:ee:b2:5a:29:3c:06:ca:90:9e:af:0c:d1:
         7c:8d:6b:88:0b:56:33:0a:b6:16:70:3f:2d:a4:b7:87:dd:4a:
         8e:ad:68:60:57:2a:18:2d:5a:4f:07:45:4a:23:05:91:fb:32:
         43:36:da:ff:9d:9a:1b:3e:16:2f:00:5c:2a:74:62:c5:e7:3d:
         e7:cd:c0:c2:c3:0d:83:b1:b7:11:c0:44:04:cb:01:ea:e5:d5:
         66:01:46:f5:5a:1b:c2:e1:c3:8c:10:67:2f:90:18:4a:3b:ac:
         7b:ed:4b:6c:ac:fb:f9:04:f5:23:7c:0c:0e:89:33:7e:16:43:
         56:80:6c:01:7a:49:d2:a3:1e:48:e3:6e:e2:ae:99:80:0f:c2:
         84:ee:c8:c1:30:48:13:e2:6c:53:c1:f4:61:12:c0:08:83:61:
         86:e8:4c:02:52:a8:26:1a:29:27:6b:34:4f:bf:bc:6f:58:21:
         8f:08:c1:e6:d6:f0:16:31:67:1d:90:df:fb:b4:d0:08:d3:c2:
         4d:d4:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----