Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/0/C12CEC200C90080FFC0CBA10A978CE8CE7873ED0.mft
File:                     C12CEC200C90080FFC0CBA10A978CE8CE7873ED0.mft (raw, json)
Hash identifier:          xFUehq4eO9yG68vnRQbNQNI0kdcCtIAAefBM3qQpf94=
Subject key identifier:   EC:22:2E:6E:3C:E9:68:DC:DE:3E:2F:EC:EA:49:B5:F2:2A:E4:65:85
Authority key identifier: C1:2C:EC:20:0C:90:08:0F:FC:0C:BA:10:A9:78:CE:8C:E7:87:3E:D0
Certificate issuer:       /CN=C12CEC200C90080FFC0CBA10A978CE8CE7873ED0
Certificate serial:       2193366F84C23DCC75EE4FFB67E9349064110559
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C12CEC200C90080FFC0CBA10A978CE8CE7873ED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/0/C12CEC200C90080FFC0CBA10A978CE8CE7873ED0.mft
Manifest number:          0321
Signing time:             Mon 15 Apr 2024 06:14:40 +0000
Manifest this update:     Mon 15 Apr 2024 06:09:40 +0000
Manifest next update:     Tue 16 Apr 2024 06:32:40 +0000
Files and hashes:         1: 3137302e3233332e3134302e302f32322d3234203d3e20323635303838.roa (hash: KlLstOPlM+KXbdRlB+qgV8MNRAqxVHYa1VqVXotkNgQ=)
                          2: C12CEC200C90080FFC0CBA10A978CE8CE7873ED0.crl (hash: SdBOK+UpbI0PWa9mz6fFcWeGGXE3WSpyv2mqC8zZHD8=)
                          3: 323830343a333239633a3a2f33322d3438203d3e20323635303838.roa (hash: +sZJVTAvbQL/wT9ZHuJ81qgfWQSfw8omX5IXnOEvY8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:93:36:6f:84:c2:3d:cc:75:ee:4f:fb:67:e9:34:90:64:11:05:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12CEC200C90080FFC0CBA10A978CE8CE7873ED0
        Validity
            Not Before: Apr 15 06:09:40 2024 GMT
            Not After : Apr 16 06:32:40 2024 GMT
        Subject: CN=EC222E6E3CE968DCDE3E2FECEA49B5F22AE46585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:bc:13:c0:f6:74:c0:17:2a:b2:7f:65:f2:
                    29:e2:29:81:21:16:5e:48:2e:0b:1f:98:4c:e5:2c:
                    46:e5:6e:98:7a:21:9f:2c:be:c2:94:e2:9a:7e:86:
                    c3:12:2e:ab:59:3a:66:4a:0c:5b:72:f0:1b:26:dc:
                    b2:f6:a1:bb:38:ec:3f:62:84:66:66:41:4c:fa:58:
                    45:9b:c0:4d:2e:51:86:82:d1:82:39:2f:ea:b3:7b:
                    8e:2c:3b:71:c0:f1:ea:1a:0c:4c:81:80:63:2e:fb:
                    06:8c:3e:28:11:22:5e:8d:0c:ae:4d:89:09:51:85:
                    b8:26:0c:f2:8a:22:e6:b3:8a:a2:83:85:5c:3a:97:
                    0e:27:03:04:f0:ac:08:db:01:b5:05:08:6d:bf:21:
                    c2:f8:7a:83:d7:37:76:36:97:6d:fa:fa:8f:51:f0:
                    b1:c1:a6:4e:b8:58:3b:d0:72:3b:da:71:3b:e8:62:
                    83:96:a7:e6:38:54:cd:6f:2c:76:ca:cb:51:bb:6f:
                    81:86:75:69:a8:3d:99:26:84:60:5d:69:d6:39:4c:
                    60:3c:66:d6:e5:36:97:f9:52:ee:0a:72:94:c5:8f:
                    39:6c:60:13:ec:ba:52:4f:fe:aa:61:db:a1:d7:04:
                    eb:6e:e3:34:f6:e3:6f:66:c4:02:ca:62:ac:c5:0a:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:2E:6E:3C:E9:68:DC:DE:3E:2F:EC:EA:49:B5:F2:2A:E4:65:85
            X509v3 Authority Key Identifier:
                keyid:C1:2C:EC:20:0C:90:08:0F:FC:0C:BA:10:A9:78:CE:8C:E7:87:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/0/C12CEC200C90080FFC0CBA10A978CE8CE7873ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C12CEC200C90080FFC0CBA10A978CE8CE7873ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/0/C12CEC200C90080FFC0CBA10A978CE8CE7873ED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:11:49:09:c8:cf:9f:63:6a:d0:1a:ba:3e:21:42:a3:44:2f:
         3a:a4:a4:cc:6e:33:2e:07:a8:be:b2:b7:42:2a:2a:4f:00:b3:
         70:7a:d7:eb:3c:07:d3:5c:e2:14:5b:3f:17:e0:5d:25:52:08:
         b2:15:70:b2:79:b1:72:38:b2:c0:9e:03:21:1d:05:56:08:f1:
         7a:bb:3d:b4:1d:73:58:a9:a5:9c:03:c7:1c:b7:fc:e1:b1:cf:
         d8:bb:33:f2:d6:83:a0:c8:67:46:91:2b:b5:52:58:07:ee:1c:
         96:cb:29:a5:20:4c:10:ed:d7:e5:6a:61:c3:60:fb:1c:f6:19:
         34:c1:8e:c5:66:9c:fd:25:0d:92:48:64:93:b7:db:e6:32:60:
         7d:6d:5a:b1:ce:df:0b:a4:31:af:fa:8a:2f:a2:0a:56:9c:70:
         96:b5:25:d2:3f:4b:6d:40:4a:bd:9a:2f:39:58:62:da:02:0e:
         b4:54:c7:92:43:78:fb:17:c5:46:25:b7:80:9b:6e:5f:1c:f7:
         bb:b1:e7:c5:97:5a:5f:ac:37:2a:a0:31:b9:1f:71:7c:70:07:
         fa:23:27:07:cf:5b:be:9a:70:b3:f4:92:0d:8a:87:df:ab:e5:
         ea:d1:ab:5d:59:c9:17:bd:6b:4a:eb:85:de:2b:14:3e:b1:4e:
         a4:da:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----