Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.mft
File:                     AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.mft (raw, json)
Hash identifier:          4kuO17uRMNPrXuBdWTNaqJ0N3nXNZO7WVloTf56OtEU=
Subject key identifier:   F7:59:E1:32:7E:7A:D5:12:2D:14:7E:A4:B6:8E:36:D8:E1:41:6C:BD
Authority key identifier: AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E
Certificate issuer:       /CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
Certificate serial:       4A51EE9D7122BED2DEF52712E0656E5F4426FA1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.mft
Manifest number:          72
Signing time:             Mon 15 Apr 2024 08:21:06 +0000
Manifest this update:     Mon 15 Apr 2024 08:16:06 +0000
Manifest next update:     Tue 16 Apr 2024 09:57:06 +0000
Files and hashes:         1: 3133382e302e3131322e302f32322d3233203d3e20323634353434.roa (hash: vI31R/3jjUgDFQb8WNPyBGM0ugMkKUKjG4G8ef6fR2A=)
                          2: AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.crl (hash: RJlLF/544fZVvVgCrIxoj+A6LEffM+WIcyQqLaAFplM=)
                          3: 323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (hash: 1criocqu2qw36JDFWgBXTD02BgaCgVxa5N+w8UibFZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:51:ee:9d:71:22:be:d2:de:f5:27:12:e0:65:6e:5f:44:26:fa:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
        Validity
            Not Before: Apr 15 08:16:06 2024 GMT
            Not After : Apr 16 09:57:06 2024 GMT
        Subject: CN=F759E1327E7AD5122D147EA4B68E36D8E1416CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:1c:3a:94:98:12:43:bf:31:ce:71:63:46:
                    bc:29:07:8c:af:b0:50:b2:b0:62:a5:63:17:58:a6:
                    9a:48:31:a8:3c:fd:4d:51:1d:33:79:ca:5f:21:94:
                    7a:8b:fb:bb:b8:29:1f:50:6b:88:0b:4e:30:c3:5f:
                    8e:c1:fd:57:96:01:fc:91:b5:fd:cd:8c:fe:f1:64:
                    30:43:45:81:88:4b:0f:b4:d6:dc:ef:24:cc:07:82:
                    b4:4a:04:97:81:88:c5:90:14:81:1d:3e:18:e8:0b:
                    95:dd:ee:db:f8:c7:d9:45:3b:c4:9a:b6:e3:30:11:
                    0a:dd:59:be:75:d6:9c:88:4c:e7:61:f2:0c:b7:b9:
                    1a:e5:04:ce:3a:db:28:cc:3f:e1:23:cc:8c:ae:be:
                    0e:78:d5:6c:b1:1d:04:20:39:6b:dd:3a:74:7f:20:
                    72:0d:fd:7c:00:34:14:38:9d:4a:f5:ca:40:ab:d5:
                    7f:59:d0:59:12:47:c7:2a:f7:d2:09:ad:26:6e:01:
                    05:69:52:1f:8b:cc:c3:e6:b5:cc:d4:a5:d9:92:46:
                    62:9b:c5:d9:a3:62:78:31:d4:35:c3:49:3c:90:48:
                    fa:fd:7f:7e:2f:ec:5d:55:01:b6:fe:65:00:b6:4f:
                    77:ee:02:69:42:11:9b:b9:bc:dd:eb:c9:31:11:9c:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:E1:32:7E:7A:D5:12:2D:14:7E:A4:B6:8E:36:D8:E1:41:6C:BD
            X509v3 Authority Key Identifier:
                keyid:AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:88:40:de:e9:17:9f:df:f4:97:fd:1b:18:fe:82:2b:b6:
         49:72:f3:e4:64:fd:f1:5e:0b:29:3f:dc:4f:82:90:3a:45:fd:
         eb:23:1a:14:27:6a:96:9d:78:22:dd:fd:d9:c6:b2:40:00:31:
         3b:3e:16:8b:41:31:98:03:f6:b8:ca:24:12:e5:3d:e8:46:d2:
         84:81:e1:28:88:e7:88:3a:08:92:14:bc:de:ca:88:e6:c1:69:
         4c:12:f9:2a:40:e3:e8:f3:48:9a:9d:b7:d3:f0:54:f0:61:71:
         16:8c:c8:2a:18:d4:ee:a5:fd:23:66:91:c9:bc:e6:be:27:16:
         5b:fe:df:27:42:de:67:86:f9:df:e5:d2:56:fa:ad:aa:cf:96:
         32:a7:ee:26:b2:66:4e:d3:6b:48:16:2a:f2:84:db:c1:50:75:
         13:b8:7e:f5:95:ba:2b:e9:2c:38:7e:2b:ee:f5:52:1e:93:67:
         82:40:fa:3d:f1:23:4c:a4:d7:bf:d5:99:be:c4:ff:79:27:d2:
         01:b8:11:16:4e:b1:34:29:ad:f9:41:b0:d4:90:69:ad:74:39:
         fb:57:16:1a:0e:87:5d:bd:f5:03:f3:63:4f:87:f7:0c:2e:ec:
         bd:f8:1d:4d:0c:8f:f1:d9:20:8e:6b:df:58:a2:ce:15:72:69:
         e9:38:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----