Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft
File:                     19CACECF1715A1C974AF169D14ABF46962EEF36F.mft (raw, json)
Hash identifier:          R0hCLX3QcZQEGl9p7vm2AAJWhyewpJqhdS7Js6781vo=
Subject key identifier:   5B:0B:AB:9E:BA:93:91:DC:A2:6D:91:BB:99:44:CD:A1:21:50:B8:05
Authority key identifier: 19:CA:CE:CF:17:15:A1:C9:74:AF:16:9D:14:AB:F4:69:62:EE:F3:6F
Certificate issuer:       /CN=19CACECF1715A1C974AF169D14ABF46962EEF36F
Certificate serial:       03043AA5604F3E418B33279B58FD3301C4100BFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft
Manifest number:          3B
Signing time:             Tue 30 Jan 2024 11:01:35 +0000
Manifest this update:     Tue 30 Jan 2024 10:56:35 +0000
Manifest next update:     Wed 31 Jan 2024 13:41:35 +0000
Files and hashes:         1: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: RjVgM7mQnWB7UOVZzN5KiMf/kNXnWXT5W1leJXf2x9U=)
                          2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: xq4CzG9Q4dcHtisu11S4JM81Z6WTftiRSd39BjXnNBE=)
                          3: 19CACECF1715A1C974AF169D14ABF46962EEF36F.crl (hash: uO/CKZuFV2CKGZr+53kKWvtTQB66RbuFiENLU4SX5zs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:04:3a:a5:60:4f:3e:41:8b:33:27:9b:58:fd:33:01:c4:10:0b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19CACECF1715A1C974AF169D14ABF46962EEF36F
        Validity
            Not Before: Jan 30 10:56:35 2024 GMT
            Not After : Jan 31 13:41:35 2024 GMT
        Subject: CN=5B0BAB9EBA9391DCA26D91BB9944CDA12150B805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:3a:e6:2c:cf:6e:60:04:88:89:33:46:24:
                    f5:7a:c7:5c:b9:2b:2c:8b:72:4a:c8:8c:05:92:23:
                    e6:43:4d:11:88:7f:ba:05:03:6c:b2:e7:cf:ef:db:
                    c7:0e:76:07:e7:23:a1:38:b5:3d:86:5a:fb:67:85:
                    44:13:b4:9b:2e:c9:59:41:04:40:06:97:6f:cb:0c:
                    81:74:ca:5b:52:50:48:24:6b:bd:cd:5f:9f:6c:49:
                    0c:3a:44:b3:4c:80:e0:97:b5:2b:22:2a:bb:e6:fe:
                    fc:0a:d7:6d:67:f6:98:d3:d5:25:91:ca:13:91:5e:
                    57:48:80:73:cc:f0:d6:bd:52:3a:90:6f:77:6c:1b:
                    92:dc:7c:73:ed:dd:c8:4c:d5:7b:dd:7d:61:0d:27:
                    b7:79:ed:60:cb:ef:19:0a:51:43:4e:d1:71:93:c5:
                    0a:21:c7:33:6e:7c:d9:7f:e0:9c:39:b8:9e:e2:aa:
                    02:72:0c:ec:d9:65:42:45:5e:14:6a:7b:58:42:9b:
                    51:cc:19:bb:d8:33:9d:27:08:2b:d6:42:d3:29:17:
                    a6:5c:af:5b:ef:c0:42:e1:1d:e7:2c:19:16:a8:01:
                    a8:16:57:93:dd:3b:da:01:20:cd:e9:fb:a6:05:a9:
                    7c:f2:e0:92:cf:ca:77:1d:fa:51:18:d2:0e:2c:d3:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0B:AB:9E:BA:93:91:DC:A2:6D:91:BB:99:44:CD:A1:21:50:B8:05
            X509v3 Authority Key Identifier:
                keyid:19:CA:CE:CF:17:15:A1:C9:74:AF:16:9D:14:AB:F4:69:62:EE:F3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c5:62:65:99:99:13:65:23:15:ae:0d:f1:71:49:ae:01:2d:
         99:1c:89:c3:94:03:fb:32:51:d4:f4:8a:17:ad:d2:23:32:d5:
         64:95:34:33:98:16:76:e1:2a:6b:79:3d:9e:57:35:97:fb:3e:
         66:0e:6a:08:66:5c:42:75:e2:ae:8e:b0:20:b5:97:c9:05:9a:
         0b:34:c6:6c:0b:82:f7:bb:67:1b:c4:3c:77:a0:12:ea:27:ee:
         62:5f:81:13:9f:38:22:1e:ce:06:53:57:2b:a5:a7:45:4f:82:
         5c:b2:7d:fc:1e:d5:72:b1:cc:21:9a:d7:68:81:67:1e:ba:dd:
         ec:c6:8e:24:98:df:e9:3a:0e:ee:d7:18:39:84:e6:25:52:c0:
         36:39:c5:57:d7:36:39:21:51:d5:24:2f:83:54:1a:b1:02:f7:
         43:af:a6:f2:b3:99:fe:b9:05:fd:dc:b7:ca:69:36:7a:94:33:
         c8:14:62:83:72:9b:4a:89:0a:8d:8e:7b:89:94:75:41:96:63:
         57:e2:84:88:e2:25:33:75:7f:0f:b9:80:3a:5a:ba:09:be:93:
         87:74:08:e0:c3:73:a3:9c:c8:08:ae:a0:af:a9:6a:fc:60:c8:
         e7:cb:c6:27:86:d4:21:3b:d4:6f:79:8f:f0:3d:3f:c5:c0:73:
         b1:9e:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----