Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.mft
File:                     19639BFB08A786F190FBE0E94689B63D40D8B8FD.mft (raw, json)
Hash identifier:          C82CyHKMQvEeR2vY4uNw3Z9a6vZ18Y4Nn0wsOb29Q0s=
Subject key identifier:   D7:B2:F4:E3:25:5E:16:F4:D7:CE:4D:AE:9A:B6:53:1E:2E:E4:49:8E
Authority key identifier: 19:63:9B:FB:08:A7:86:F1:90:FB:E0:E9:46:89:B6:3D:40:D8:B8:FD
Certificate issuer:       /CN=19639BFB08A786F190FBE0E94689B63D40D8B8FD
Certificate serial:       3E5432E39B8798FCA58BCC51A57BDEEDCFBFFBE9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.mft
Manifest number:          0251
Signing time:             Sat 30 Mar 2024 02:43:20 +0000
Manifest this update:     Sat 30 Mar 2024 02:38:20 +0000
Manifest next update:     Sun 31 Mar 2024 03:28:20 +0000
Files and hashes:         1: 34352e3136352e34382e302f32322d3234203d3e20323638363537.roa (hash: cYaEui7armx5bR4Vs/gols4PvCf5Yzm1rKhoI77ToeU=)
                          2: 19639BFB08A786F190FBE0E94689B63D40D8B8FD.crl (hash: yniToHokwACThHD0Wux1HRAuxU06+0ljz53URACDo8U=)
                          3: 323830343a353438633a3a2f33322d3438203d3e20323638363537.roa (hash: opC3d3VwBHk8GtaXccdcFLr42S5mO0aBdyITNG/iexU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:54:32:e3:9b:87:98:fc:a5:8b:cc:51:a5:7b:de:ed:cf:bf:fb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19639BFB08A786F190FBE0E94689B63D40D8B8FD
        Validity
            Not Before: Mar 30 02:38:20 2024 GMT
            Not After : Mar 31 03:28:20 2024 GMT
        Subject: CN=D7B2F4E3255E16F4D7CE4DAE9AB6531E2EE4498E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:55:44:ea:55:ed:c1:e8:47:f2:87:77:b3:
                    1e:49:8d:f4:c8:4c:cc:44:f3:79:4e:5f:ac:a3:8c:
                    20:ea:8f:c8:9e:6e:98:93:78:87:77:3b:d9:49:3d:
                    00:b5:85:00:53:ff:79:ba:b2:fa:5a:40:6d:74:17:
                    49:ea:74:02:62:3b:ce:ea:ac:bd:b2:8e:94:0e:4c:
                    2f:ad:07:67:94:77:ce:b1:86:40:36:73:f8:cc:e4:
                    0d:0e:ee:fb:e6:04:cc:fa:7c:37:22:d3:1e:0e:d0:
                    79:9a:04:d4:7c:d0:22:08:ca:6d:39:8c:6e:06:81:
                    b5:33:0c:39:f6:bc:ae:f2:5e:0a:64:27:53:91:f1:
                    81:64:d3:9b:9f:85:13:1e:57:85:12:a9:7e:38:fa:
                    0f:95:25:1d:00:97:d7:7d:1c:1e:0a:c1:24:01:75:
                    26:e7:64:05:ca:1f:5e:4c:f6:55:ee:69:52:1b:ff:
                    de:bf:98:ac:59:29:3d:21:e3:da:d3:9a:b0:04:c7:
                    11:29:5b:ed:09:0c:7c:8a:06:20:5f:2b:3a:ff:77:
                    7c:f4:2b:9c:b4:4e:94:4b:c3:8b:ce:e3:e8:e9:10:
                    0e:ae:6b:b0:8a:31:c1:e4:16:f2:61:da:07:bc:0a:
                    81:1e:89:cb:67:9a:52:53:08:36:8f:df:12:f2:ec:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B2:F4:E3:25:5E:16:F4:D7:CE:4D:AE:9A:B6:53:1E:2E:E4:49:8E
            X509v3 Authority Key Identifier:
                keyid:19:63:9B:FB:08:A7:86:F1:90:FB:E0:E9:46:89:B6:3D:40:D8:B8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:d2:2d:18:b5:50:fb:4e:fc:65:11:34:f7:2d:d8:d2:2a:
         36:93:0c:23:6d:56:0c:85:0f:d6:59:60:cf:82:83:2b:14:c4:
         bd:50:d2:0a:eb:57:2e:c7:ad:d7:b9:2e:2c:32:2e:1a:9c:e8:
         bb:d2:1c:78:9b:47:dc:af:37:d2:5c:ce:5f:6f:65:88:da:f1:
         ec:a1:14:f0:86:f9:52:8b:3b:e8:a3:ce:ff:83:ea:33:eb:8c:
         67:ef:c4:49:f1:5d:37:a4:22:6d:6f:a4:0a:47:cf:97:d5:ec:
         85:c0:52:39:b6:76:f2:19:92:87:a6:bd:87:f7:29:a0:70:e6:
         89:0e:a7:53:6f:57:68:9e:ec:16:cd:7d:1f:72:3f:c3:28:d5:
         21:6b:cd:9d:10:e4:3f:2e:17:9e:32:ba:bb:5f:00:b4:e4:c1:
         fd:b3:d2:74:6f:9d:24:50:66:18:86:76:7b:c7:bf:04:1c:de:
         5c:39:8d:1f:47:f6:3b:5b:8a:d5:bb:b5:ba:65:6a:21:31:6e:
         c3:0a:e8:c6:03:36:1c:5b:01:d1:6c:76:d2:60:31:37:8c:f9:
         c0:36:99:bf:df:ac:9d:4c:cc:8b:b4:79:0f:06:ba:e3:e1:83:
         85:2c:22:59:94:85:b6:c5:61:03:e1:f0:4b:70:b2:a4:15:83:
         45:96:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----