Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.mft
File:                     47186A1911BD977912FE4B2FC41A1632ED67B9B1.mft (raw, json)
Hash identifier:          fDhHqo72ZdYhBt9P8KE5llPpGkhdgePIrSH1nr0Wv1Y=
Subject key identifier:   83:28:90:46:21:DE:AD:1C:66:32:14:04:70:80:B0:C3:47:DD:88:EC
Authority key identifier: 47:18:6A:19:11:BD:97:79:12:FE:4B:2F:C4:1A:16:32:ED:67:B9:B1
Certificate issuer:       /CN=47186A1911BD977912FE4B2FC41A1632ED67B9B1
Certificate serial:       311D8F9BBFE4680FB0FAAC412F5958168AD691DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.mft
Manifest number:          0445
Signing time:             Mon 15 Apr 2024 08:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 08:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:35:00 +0000
Files and hashes:         1: 32342e3135322e39362e302f32322d3234203d3e20323730343930.roa (hash: omilZnysXZ11Na4AclbAPjMYVjmZIpzNATctrEOuIcM=)
                          2: 323830343a366363343a3a2f33322d3336203d3e20323730343930.roa (hash: 76zEuBrNlAXkq5QecM8ZhKvq+UX1gxzJr3/Y18+wZVE=)
                          3: 47186A1911BD977912FE4B2FC41A1632ED67B9B1.crl (hash: OUUiSYOBO1C+gbCbFH/2QyfLhYArjDVHioBucPofGMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1d:8f:9b:bf:e4:68:0f:b0:fa:ac:41:2f:59:58:16:8a:d6:91:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47186A1911BD977912FE4B2FC41A1632ED67B9B1
        Validity
            Not Before: Apr 15 08:15:00 2024 GMT
            Not After : Apr 16 10:35:00 2024 GMT
        Subject: CN=8328904621DEAD1C663214047080B0C347DD88EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:e3:cc:15:c6:d7:ef:8a:0f:dc:89:49:05:
                    f7:99:50:f1:25:a2:53:ff:96:10:34:19:f9:48:5d:
                    44:7a:7b:c9:de:cc:05:82:4a:82:e5:8d:1e:9e:b6:
                    44:2a:d8:67:12:03:49:f4:42:9d:1d:78:d4:95:1b:
                    8c:20:14:62:5d:59:53:3f:f9:cb:52:90:51:25:ed:
                    96:19:9f:13:18:00:1d:9f:1b:13:a4:ff:d5:48:cc:
                    76:86:c2:79:51:d9:7c:c6:74:66:63:71:03:73:6c:
                    6b:d6:1d:38:86:73:c3:24:e0:72:e1:9a:ae:55:ca:
                    56:7a:1d:c6:44:ad:f4:f5:16:a0:40:e9:c5:56:bb:
                    02:0b:3c:fb:27:c7:28:71:c3:8c:39:fd:ac:fd:d0:
                    12:0b:eb:42:6b:f7:ff:06:e2:a8:6f:b9:d0:52:19:
                    7f:b2:53:30:e4:c8:f7:06:d4:50:06:c4:35:3e:24:
                    4c:65:40:ed:97:02:ba:15:6e:d9:81:a3:c4:60:77:
                    8a:c8:25:d4:47:8a:2a:fd:6e:26:bf:83:31:a8:ae:
                    e9:4f:0d:4e:4c:df:a9:63:06:b7:5c:db:e1:3b:4b:
                    f2:1b:c6:83:a0:b4:98:3a:4d:dc:3e:0a:8d:78:f1:
                    a3:2f:36:fa:15:9b:76:db:ab:0b:eb:18:7e:5d:f1:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:90:46:21:DE:AD:1C:66:32:14:04:70:80:B0:C3:47:DD:88:EC
            X509v3 Authority Key Identifier:
                keyid:47:18:6A:19:11:BD:97:79:12:FE:4B:2F:C4:1A:16:32:ED:67:B9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:06:bf:2b:89:a5:d4:4b:c8:e2:1e:1d:8b:b3:e3:a0:d6:
         39:ec:a8:f2:9d:4c:05:8d:c2:68:8e:8f:c4:3c:15:1c:1b:15:
         0c:db:f2:51:cf:30:f7:76:7d:fe:a5:01:89:24:4f:02:93:0d:
         a6:d3:08:ff:69:92:d1:6f:8a:8a:1f:e8:b9:42:e1:cb:d9:ef:
         11:f0:eb:59:a5:f2:de:78:9d:ba:aa:e0:33:ba:4b:69:2f:5c:
         60:83:5a:e1:9a:97:c1:61:b4:fe:c8:4e:26:1d:83:ae:90:b1:
         f2:ae:8e:0d:a0:82:e8:31:dd:3d:d0:f7:ea:2b:a1:fe:f1:d9:
         08:f8:57:0f:55:c5:46:b2:8c:ca:6e:f5:24:b3:2d:24:25:e5:
         49:0f:ce:f0:90:c5:20:77:a7:ca:47:3f:0c:b5:4e:4d:c3:89:
         af:79:ab:cc:84:47:b7:c8:46:4e:7a:c9:0b:58:5b:5c:3e:33:
         cf:c2:90:aa:40:62:77:68:de:2b:54:9d:29:e9:fb:f6:90:db:
         35:6f:d6:ed:2e:6e:e0:d9:c6:2d:1a:83:f5:24:93:5b:e7:a1:
         aa:af:3b:bb:aa:b8:b7:02:71:b6:11:56:0c:3c:85:7a:10:85:
         c9:c7:e5:84:03:98:05:0f:be:f6:ff:f0:37:0c:9d:9a:2e:a8:
         1d:17:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----