Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.mft
File:                     1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.mft (raw, json)
Hash identifier:          ToduGQw5xH4OaVVM+CcwgBYqJit/jUKtXArSS4GQjZo=
Subject key identifier:   D4:9C:D0:67:7E:BB:6C:9E:F4:40:62:B2:7A:37:CD:DE:EF:09:58:1E
Authority key identifier: 1D:99:E9:AD:3D:63:7A:53:C8:5C:20:B4:68:2E:7B:A1:FB:03:F4:53
Certificate issuer:       /CN=1D99E9AD3D637A53C85C20B4682E7BA1FB03F453
Certificate serial:       6D8CC4C2BAFEFDB0D7245866D4D78444913824C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.mft
Manifest number:          3F
Signing time:             Thu 23 May 2024 20:16:47 +0000
Manifest this update:     Thu 23 May 2024 20:11:47 +0000
Manifest next update:     Fri 24 May 2024 21:55:47 +0000
Files and hashes:         1: 3133312e302e34382e302f32322d3234203d3e203631383832.roa (hash: 1YIHkIotGQeuK0Ak074Je+zwjkDGOuXWC39YYjCrFqo=)
                          2: 323830343a316162633a3a2f33322d3438203d3e203631383832.roa (hash: 9HmFqE3pKp9SiW73kZB6+lpZ0p3cRtgM1HBi/kyVbq8=)
                          3: 1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.crl (hash: hMh4s+cY6XlGKFMJm109qC+GxTTzOC+NALWt2RfVVwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8c:c4:c2:ba:fe:fd:b0:d7:24:58:66:d4:d7:84:44:91:38:24:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D99E9AD3D637A53C85C20B4682E7BA1FB03F453
        Validity
            Not Before: May 23 20:11:47 2024 GMT
            Not After : May 24 21:55:47 2024 GMT
        Subject: CN=D49CD0677EBB6C9EF44062B27A37CDDEEF09581E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:aa:51:42:35:62:98:d7:2e:bc:d6:66:3f:
                    b0:09:76:a0:fe:ea:25:b0:ed:d2:42:60:d3:4e:48:
                    ca:f8:5a:7b:95:af:54:17:7d:8a:c0:55:3c:66:72:
                    32:c0:b9:b2:76:8c:35:c5:13:bc:86:47:2a:92:bb:
                    a7:46:d8:6c:c5:f8:72:20:a9:76:53:f9:d2:f7:fd:
                    fe:19:bf:5f:9c:e0:ce:53:2c:dc:a7:82:25:53:ea:
                    c9:59:16:56:53:af:2c:ff:9a:c0:56:f7:16:48:6a:
                    db:45:08:88:b9:a8:cd:37:c3:04:b0:8b:92:6e:d2:
                    ff:e5:58:2e:9b:9e:b1:db:d3:4f:cc:f2:f2:73:55:
                    d8:f9:ff:59:a2:1a:8b:6a:5e:06:7c:ee:65:11:36:
                    ab:d2:76:b0:b9:49:c8:d0:3d:ef:b9:81:7d:2f:26:
                    29:bb:51:c5:9c:5f:91:e0:56:2d:aa:8a:ff:c7:29:
                    33:a6:19:02:be:b1:44:7a:0c:a0:2b:27:17:5b:dd:
                    14:c9:5c:3e:7a:c4:1f:53:1a:61:43:4b:a9:be:9e:
                    d0:ad:89:60:14:b1:77:3c:2f:44:d0:29:ef:19:70:
                    62:45:04:5b:aa:21:2c:30:3b:56:08:31:32:77:b2:
                    99:f7:99:f1:4a:c6:52:72:d9:d2:d8:d2:92:08:a5:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:D0:67:7E:BB:6C:9E:F4:40:62:B2:7A:37:CD:DE:EF:09:58:1E
            X509v3 Authority Key Identifier:
                keyid:1D:99:E9:AD:3D:63:7A:53:C8:5C:20:B4:68:2E:7B:A1:FB:03:F4:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:01:a0:ea:63:ae:9f:da:6f:43:c3:f7:c4:e7:7f:5b:2e:71:
         51:52:07:74:06:76:5b:cd:17:8f:a1:83:c1:1e:46:93:60:1c:
         d2:7d:a4:c2:22:aa:1f:43:e4:e8:ac:aa:ce:db:72:f2:bb:0b:
         89:0a:d2:e6:76:2d:e2:33:57:73:c3:0b:2a:68:8e:35:5a:9e:
         23:6b:4f:3d:24:1b:4c:1d:20:9d:4f:a8:15:95:8a:fc:c4:4e:
         6d:4f:ab:5a:af:8b:96:b4:5a:ec:36:e6:87:86:06:1e:3a:2c:
         7f:65:60:00:18:6b:b2:9d:5d:5e:31:af:46:0e:3a:07:9d:07:
         2c:86:1b:bb:10:43:9f:b8:81:74:82:7b:c6:ff:a6:e8:59:3b:
         c8:0c:bd:94:25:7f:24:64:bd:60:68:8b:6f:01:8b:ad:48:b7:
         de:ae:da:ed:3e:51:ab:7b:5c:a8:f6:37:ce:e4:cd:95:89:cd:
         3a:7f:da:16:3e:80:eb:17:31:63:9d:b5:3a:37:8f:62:56:e1:
         26:9f:89:33:cb:42:4d:df:13:e6:82:98:b6:f8:50:a6:92:69:
         9e:c3:14:9b:65:6c:d6:c4:db:53:8d:de:bf:31:71:71:64:49:
         c4:39:92:f8:cb:70:d5:05:bb:c0:bd:e8:70:f4:a1:a2:e1:2c:
         18:fb:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----