Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.mft
File:                     18B854A9A3D838C10CF123C6F7913E1A3CA401B5.mft (raw, json)
Hash identifier:          GaYRK1/6Jvlux7V9uhFwAphFoHh+uSgndcFkiMd62YA=
Subject key identifier:   2C:20:D9:5E:06:E4:F3:BF:63:E3:83:5E:8D:DD:D0:DC:F5:69:08:40
Authority key identifier: 18:B8:54:A9:A3:D8:38:C1:0C:F1:23:C6:F7:91:3E:1A:3C:A4:01:B5
Certificate issuer:       /CN=18B854A9A3D838C10CF123C6F7913E1A3CA401B5
Certificate serial:       6D0B43A0F6803BBA1BF991AD2A20E93BEC80B409
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.mft
Manifest number:          64
Signing time:             Sun 14 Apr 2024 18:23:16 +0000
Manifest this update:     Sun 14 Apr 2024 18:18:16 +0000
Manifest next update:     Mon 15 Apr 2024 21:05:16 +0000
Files and hashes:         1: 18B854A9A3D838C10CF123C6F7913E1A3CA401B5.crl (hash: 0GruoOz4D3AH0oJa+sTm+zSZ6ktexiGpvGdahtVZbK4=)
                          2: 323830343a383064303a3a2f33322d3438203d3e20323732343134.roa (hash: rdjQ6O6tU+CdVye0FofScg0IAx+w3a4o0CppMO7HSaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0b:43:a0:f6:80:3b:ba:1b:f9:91:ad:2a:20:e9:3b:ec:80:b4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B854A9A3D838C10CF123C6F7913E1A3CA401B5
        Validity
            Not Before: Apr 14 18:18:16 2024 GMT
            Not After : Apr 15 21:05:16 2024 GMT
        Subject: CN=2C20D95E06E4F3BF63E3835E8DDDD0DCF5690840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:07:dc:31:6c:27:5e:6c:3b:c0:0b:a9:0c:
                    6f:85:54:9c:61:bf:97:53:c7:05:89:d1:4b:16:3f:
                    f8:cb:7a:7c:1f:c5:2e:64:f4:7f:ef:12:96:55:c9:
                    0f:c4:e0:8f:cd:85:ae:f5:2b:ad:2a:b2:4b:b1:d5:
                    7b:df:7c:4b:bf:f9:f1:0f:c4:7b:a6:2f:a7:46:d5:
                    68:f9:5f:85:19:32:2f:74:0d:ef:85:22:b7:12:96:
                    0d:ed:78:60:14:47:22:ed:f0:33:0f:f9:34:5f:80:
                    e5:1d:c0:35:01:f1:94:7d:75:5d:6c:7f:18:ec:7a:
                    ba:03:20:3f:44:85:0f:6e:ad:94:e0:cb:50:23:e5:
                    65:92:b6:9b:f8:3b:59:87:07:27:71:61:64:cc:28:
                    e6:78:c5:b0:75:8b:c4:e6:74:b1:e4:76:1d:5d:6c:
                    54:5a:0d:ed:46:71:7e:d4:e4:1a:60:e7:fb:8b:06:
                    b5:b4:e3:31:15:8a:d0:a2:90:5e:04:3b:37:7e:87:
                    5b:c1:bf:e2:11:8e:ce:f2:e5:bd:c8:88:8f:67:ce:
                    ff:07:0e:26:a3:37:bf:3e:04:65:25:00:f5:5f:40:
                    7a:f8:3f:ff:03:50:6d:53:30:b4:a7:91:8d:b0:bb:
                    dc:ff:06:76:77:19:3c:72:be:eb:b7:1a:cf:7a:a4:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:20:D9:5E:06:E4:F3:BF:63:E3:83:5E:8D:DD:D0:DC:F5:69:08:40
            X509v3 Authority Key Identifier:
                keyid:18:B8:54:A9:A3:D8:38:C1:0C:F1:23:C6:F7:91:3E:1A:3C:A4:01:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:07:9e:18:c1:26:66:00:69:f6:9e:a3:b2:b5:db:5d:b3:
         7a:11:b3:c0:9d:c8:28:4d:60:80:57:21:37:07:d5:fa:14:88:
         e8:21:59:15:0d:bf:64:0d:33:aa:bf:7d:68:1a:66:71:d9:bc:
         f4:55:de:95:51:6a:50:57:dd:51:b0:ee:6c:62:e4:52:15:8f:
         0a:1c:11:f7:20:4c:5e:5c:ed:56:bf:29:fc:14:dc:45:a2:3b:
         1f:47:43:af:26:95:df:05:0b:32:8f:20:82:7f:df:7c:bf:81:
         be:52:3e:b7:38:67:f7:bb:c9:c1:e9:ac:11:02:69:80:f9:31:
         a5:2c:d6:b8:e8:72:5d:42:6d:ec:9f:f3:e9:d0:cb:a5:16:d2:
         9c:2d:32:e6:aa:02:3f:68:1c:86:b8:57:e6:07:0a:57:0d:93:
         61:6a:1e:77:ee:8f:f4:56:0e:1f:7f:f1:8f:e7:ff:68:79:75:
         a4:14:26:1e:3e:2e:80:50:5a:a8:8e:65:dc:18:aa:3a:8a:d8:
         64:9c:36:e6:45:cb:c7:b0:25:28:a5:9a:de:c4:b0:fa:cf:7c:
         dc:ba:54:75:b9:89:96:e1:31:7c:7c:e1:ee:07:1a:82:55:64:
         98:b5:6c:e8:65:82:e4:6e:e2:d3:93:cb:c7:38:32:45:ee:4c:
         75:2b:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----