Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.mft
File:                     4A652148ABBD2A28216F293F9FDB99E291A91E56.mft (raw, json)
Hash identifier:          cXeljsakau2wT69+vGXNjL/6689RiDw9XP/G6O03yOo=
Subject key identifier:   AF:1A:85:ED:CB:84:48:BA:94:4F:B9:D8:C9:1D:33:22:49:09:50:61
Authority key identifier: 4A:65:21:48:AB:BD:2A:28:21:6F:29:3F:9F:DB:99:E2:91:A9:1E:56
Certificate issuer:       /CN=4A652148ABBD2A28216F293F9FDB99E291A91E56
Certificate serial:       6A8EDA22521DBB0151D4CCBE7B0760F2A10875AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.mft
Manifest number:          025D
Signing time:             Mon 15 Apr 2024 00:15:03 +0000
Manifest this update:     Mon 15 Apr 2024 00:10:03 +0000
Manifest next update:     Tue 16 Apr 2024 01:42:03 +0000
Files and hashes:         1: 3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa (hash: KFEvRh2NORKZD3oavIrEEU4LRTDGJTC6dr3w13NAsnA=)
                          2: 323830343a376334633a3a2f33322d3438203d3e20323731343837.roa (hash: INOnh5+Ao5N3RBfg1KLVy9RRyAXnhcyezSC4gGKCrYo=)
                          3: 4A652148ABBD2A28216F293F9FDB99E291A91E56.crl (hash: 7OS69fyf87+QrE+PWIRgYj/lxL8SaGrIJG4B8TrWhiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8e:da:22:52:1d:bb:01:51:d4:cc:be:7b:07:60:f2:a1:08:75:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A652148ABBD2A28216F293F9FDB99E291A91E56
        Validity
            Not Before: Apr 15 00:10:03 2024 GMT
            Not After : Apr 16 01:42:03 2024 GMT
        Subject: CN=AF1A85EDCB8448BA944FB9D8C91D332249095061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:22:8d:10:e5:44:22:8c:e0:5a:74:f1:28:
                    2e:3b:7b:34:2a:02:16:f0:b9:63:0e:f8:36:d1:27:
                    5a:d8:85:c5:8a:6f:a0:a8:60:77:e5:59:b0:55:12:
                    e5:57:63:e4:aa:31:db:7b:eb:a8:61:4a:16:b0:31:
                    22:18:b0:f8:b7:94:4f:d7:c2:7e:5f:7c:9b:8e:09:
                    52:b8:c3:a5:1b:13:57:4f:de:53:4d:f7:5f:14:c0:
                    ee:0a:2e:69:51:bf:ec:be:9f:22:a4:79:27:93:4b:
                    05:1c:f4:ea:1b:68:4c:fc:8a:ae:8d:ed:bc:e9:1c:
                    19:39:13:90:98:23:90:e4:9c:f1:0c:ea:a5:9f:f0:
                    65:25:db:f7:6c:a8:9e:54:e7:b9:d7:7c:dc:9c:71:
                    c7:4f:5c:49:67:a8:74:45:8a:96:1c:d8:a5:b0:72:
                    7f:a5:90:d4:0c:f5:e2:18:d6:83:11:7e:57:71:a1:
                    26:34:57:cd:7d:c2:9b:d5:d9:16:a5:f9:52:20:d0:
                    c7:6c:0c:2b:f6:db:0d:a1:11:40:f6:14:5e:73:97:
                    0d:61:7a:f0:21:a9:28:4c:89:e3:14:8e:8b:b8:48:
                    e8:79:cd:92:6c:7a:16:80:fe:7a:54:4f:fe:6b:93:
                    c9:2d:7f:04:83:6a:4c:98:ec:b7:8f:06:ee:dc:3b:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1A:85:ED:CB:84:48:BA:94:4F:B9:D8:C9:1D:33:22:49:09:50:61
            X509v3 Authority Key Identifier:
                keyid:4A:65:21:48:AB:BD:2A:28:21:6F:29:3F:9F:DB:99:E2:91:A9:1E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:91:99:08:40:cf:b3:02:75:d4:fc:79:20:25:da:ec:d8:
         c1:1e:62:7c:5b:9b:28:a3:a2:79:fc:84:71:8a:75:d3:98:09:
         88:cd:36:60:a5:34:9b:f2:2f:f0:03:e0:a3:e5:54:69:56:03:
         d7:a4:4c:e3:db:aa:b3:69:42:58:21:a7:e0:68:c7:86:d0:b2:
         7b:ae:50:aa:c3:de:97:f9:d0:4b:f2:94:fa:56:fb:c7:8b:50:
         63:9e:16:2c:c4:40:be:f1:16:09:f8:15:30:dc:37:bd:92:24:
         ff:61:5a:40:24:40:87:8f:10:75:1a:4a:ae:37:e5:d6:6e:01:
         31:2a:30:0c:e3:84:d9:91:05:f2:bc:c8:65:63:c4:83:46:e1:
         88:59:38:36:3a:03:db:67:26:43:28:c2:a5:fe:e9:11:83:ee:
         06:6f:a6:62:76:44:15:ca:e7:17:7c:5e:b5:f4:8f:0f:b1:5c:
         a4:4f:a1:f4:c8:6c:29:44:d5:c1:97:85:fc:b9:51:d1:e9:6a:
         e8:4c:d7:22:33:6d:05:e6:f3:67:ae:74:7e:09:0f:4b:7f:63:
         d4:b2:92:13:4a:9f:b6:19:6a:14:d2:72:6b:36:3d:24:b0:37:
         f5:57:66:f2:6f:9e:74:95:77:7c:fc:1f:a4:e5:4a:d6:8d:a8:
         80:56:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----