Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.mft
File:                     212F087EBCC43B9BA592104DEB42E5A1FFA94122.mft (raw, json)
Hash identifier:          bqa5yGTeXlIhGQTcq07YEt+pkCIfr7voLa7TeHHXh8I=
Subject key identifier:   41:81:DF:1F:18:F7:DF:E6:D2:EE:60:55:FA:BC:8B:B7:D9:55:1E:C2
Authority key identifier: 21:2F:08:7E:BC:C4:3B:9B:A5:92:10:4D:EB:42:E5:A1:FF:A9:41:22
Certificate issuer:       /CN=212F087EBCC43B9BA592104DEB42E5A1FFA94122
Certificate serial:       A3DBBFE37681F39760BEA81CAF0DCF092B64B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.mft
Manifest number:          6E
Signing time:             Mon 15 Apr 2024 08:57:07 +0000
Manifest this update:     Mon 15 Apr 2024 08:52:07 +0000
Manifest next update:     Tue 16 Apr 2024 11:23:07 +0000
Files and hashes:         1: 3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (hash: g/mUC0Bf5hkMrVV9dsFXDAhuzG01/rCoYlp/0ZNTkkg=)
                          2: 212F087EBCC43B9BA592104DEB42E5A1FFA94122.crl (hash: 1Lxh/oI8Fx7FAWTnf1P4JY7B7Dorbbf+Uh+gyE2AehU=)
                          3: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (hash: 5oskpKrX6Yed09V8tcDmN+l2x+9isaRoaS026EnczIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:db:bf:e3:76:81:f3:97:60:be:a8:1c:af:0d:cf:09:2b:64:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212F087EBCC43B9BA592104DEB42E5A1FFA94122
        Validity
            Not Before: Apr 15 08:52:07 2024 GMT
            Not After : Apr 16 11:23:07 2024 GMT
        Subject: CN=4181DF1F18F7DFE6D2EE6055FABC8BB7D9551EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:e7:7d:36:27:2e:74:85:b0:f6:6b:7c:cd:
                    79:89:1a:73:c2:16:b3:d4:be:be:85:54:a2:d7:d7:
                    ed:b6:6f:c1:cf:93:b3:62:51:c3:10:48:eb:cc:0d:
                    d6:87:0e:bb:16:38:5b:dd:86:a9:b0:a4:fa:c7:38:
                    df:38:8e:8e:ea:92:ab:31:48:03:91:fb:36:aa:91:
                    c9:11:a9:82:db:72:7e:2f:46:2b:dd:1b:12:9a:14:
                    2f:05:b8:b5:32:f2:50:d9:27:b5:53:6e:8c:a4:01:
                    0d:e0:19:ee:46:10:6d:61:49:af:52:77:a3:2a:f2:
                    b2:22:32:e4:f7:72:2b:63:32:d1:cf:b3:68:a6:ba:
                    bc:d7:4e:68:db:03:2b:5e:2b:69:f9:b1:3f:1a:ab:
                    89:48:70:1f:2d:98:3d:d4:13:83:02:85:49:3d:84:
                    f6:98:d7:86:e5:b4:f3:00:76:b9:f8:50:25:a9:85:
                    88:f3:7e:47:c2:31:8c:f4:b8:38:ef:ad:ca:9d:d0:
                    bd:92:3f:f6:37:43:39:d5:55:db:49:b2:a5:8a:1c:
                    93:63:99:2e:5f:88:d1:78:8b:52:0a:32:e2:77:fe:
                    42:89:ab:95:8d:9c:c8:44:cf:f3:28:59:46:4e:91:
                    9b:2c:ab:f9:17:fb:67:7f:0e:0e:92:ee:82:cf:fa:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:81:DF:1F:18:F7:DF:E6:D2:EE:60:55:FA:BC:8B:B7:D9:55:1E:C2
            X509v3 Authority Key Identifier:
                keyid:21:2F:08:7E:BC:C4:3B:9B:A5:92:10:4D:EB:42:E5:A1:FF:A9:41:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:3f:da:ae:4e:f2:01:68:b6:50:3f:c5:05:c6:09:4e:a1:
         5d:01:cb:cb:ce:aa:de:b9:e7:da:6c:a5:09:a0:e8:82:94:da:
         61:03:8b:7d:75:5e:b0:40:68:b9:37:6a:8a:e7:2a:64:45:63:
         37:4c:bc:82:50:ec:0f:19:9a:3f:75:0b:58:1c:29:77:02:5f:
         47:df:97:a1:d9:fe:bf:f7:e6:a5:52:44:17:87:26:df:7e:40:
         73:fa:33:90:bc:b5:0e:09:5a:b1:b9:06:1b:16:6b:f5:f8:ce:
         ee:0f:23:b0:c6:11:b6:a9:be:3e:2b:ff:88:b3:d2:7d:bd:e3:
         86:c0:a7:88:a8:d9:c7:2e:94:56:e5:11:21:f8:19:1f:ca:f5:
         b3:72:a5:70:a1:cd:e2:ed:32:fd:ae:b2:09:b3:a5:a2:1b:2f:
         3b:6b:f7:66:82:20:4c:a6:42:4d:63:05:24:4a:e6:9e:93:5d:
         97:a7:bd:c4:c8:9b:54:1d:e7:d5:10:ea:24:df:2e:aa:2e:81:
         27:b4:fa:27:b1:ae:fc:8c:35:86:c5:af:b3:6a:82:61:0e:25:
         57:06:46:82:cb:9a:6c:e9:39:e7:d8:78:21:b0:ec:ee:d0:48:
         14:c1:ad:5b:d3:05:23:e6:19:39:d9:dc:9c:8c:56:5e:1a:cb:
         35:be:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----