Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.mft
File:                     CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.mft (raw, json)
Hash identifier:          pmWe6S/fLFG1zHk6MFvNldwaMFnyo7Hl6SFUykArFyM=
Subject key identifier:   82:F9:15:FF:39:CE:73:86:FF:E0:61:60:94:0F:45:A4:E7:89:EF:D9
Authority key identifier: CD:A0:E2:D3:46:DE:DE:75:DC:8D:40:92:CF:5D:A9:4F:A2:44:C0:1C
Certificate issuer:       /CN=CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C
Certificate serial:       1AA7A5C73199C8CF5180F0F50235700D3066278D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.mft
Manifest number:          18
Signing time:             Sat 20 Apr 2024 15:16:27 +0000
Manifest this update:     Sat 20 Apr 2024 15:11:27 +0000
Manifest next update:     Sun 21 Apr 2024 17:37:27 +0000
Files and hashes:         1: 323830343a353936343a3a2f33322d3336203d3e203631363133.roa (hash: 1GcgEEPK7HgyH7CM90tTABlV1Ys0tcRISnfaIzgOIn4=)
                          2: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: dJCbGGqNaD8VybWlVHB1zxUTQes4EtF1SJf1D2Ilj6g=)
                          3: CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.crl (hash: fqXTWskZ6TSemnE8t6nkDZ+SR0Zss/rLoBWtv8La+7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a7:a5:c7:31:99:c8:cf:51:80:f0:f5:02:35:70:0d:30:66:27:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C
        Validity
            Not Before: Apr 20 15:11:27 2024 GMT
            Not After : Apr 21 17:37:27 2024 GMT
        Subject: CN=82F915FF39CE7386FFE06160940F45A4E789EFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6c:d9:57:d8:bb:95:a7:0c:37:74:e7:2c:fa:
                    a8:cc:ca:45:c5:27:f3:d9:f5:68:75:b0:eb:08:e6:
                    e0:9e:47:c3:ab:81:a9:bf:1e:5a:00:d8:eb:ed:59:
                    c0:92:3a:c3:03:c8:ef:b2:ab:7a:0b:a5:35:b2:ca:
                    71:32:31:ea:5c:42:b2:f9:dc:37:9d:a3:b9:cd:6f:
                    47:39:2c:ec:ee:01:3b:f4:f9:fa:b3:25:7f:29:72:
                    73:be:6f:b8:91:3e:03:4f:36:41:d7:4f:44:cf:ba:
                    07:f9:f5:bb:12:ef:e3:11:72:a1:96:7e:8d:de:1c:
                    28:d4:03:59:f6:17:b7:ea:5c:75:e5:72:09:11:b0:
                    69:70:af:ac:fc:4d:8e:65:be:72:87:d0:2f:8e:7d:
                    26:ac:f1:a0:36:52:66:fa:2e:11:47:a3:16:3f:15:
                    bb:b6:c6:c1:27:d6:ee:f6:6c:87:1a:0e:65:8a:81:
                    93:9b:81:e3:65:24:1d:c4:1a:2f:63:79:9a:4c:b3:
                    d2:96:0e:c0:6d:25:e1:ea:99:f1:fd:59:df:90:e8:
                    c1:c3:d2:cc:38:c0:fd:77:ea:0c:88:1e:60:67:be:
                    eb:12:7c:3f:e2:33:7f:24:69:21:4f:ee:38:26:c3:
                    57:88:fb:49:f3:90:57:57:6d:36:fb:d9:4a:54:93:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F9:15:FF:39:CE:73:86:FF:E0:61:60:94:0F:45:A4:E7:89:EF:D9
            X509v3 Authority Key Identifier:
                keyid:CD:A0:E2:D3:46:DE:DE:75:DC:8D:40:92:CF:5D:A9:4F:A2:44:C0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/1/CDA0E2D346DEDE75DC8D4092CF5DA94FA244C01C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:90:4d:29:15:78:42:c9:e7:f1:84:bf:e1:cd:b7:42:ef:
         1f:da:d9:6b:5e:17:40:2f:01:de:6f:57:2b:da:e4:0c:19:f6:
         90:72:d1:01:0e:1c:3f:b0:db:dd:7f:95:11:31:94:e4:9c:54:
         ed:23:9b:d7:94:7a:d3:80:7c:81:66:68:17:ff:da:ff:5f:3c:
         9a:37:de:5a:ef:d4:cc:b1:66:c4:46:34:5e:92:e1:ca:a2:3c:
         e3:9a:76:2f:28:7f:62:f3:cf:8f:14:d3:79:d1:e3:2e:86:66:
         af:6f:ed:c9:40:5a:5d:7b:74:91:a4:d6:b6:25:a3:6c:b8:f2:
         72:9f:22:14:1d:7d:e2:73:2c:c2:ba:c4:55:ae:78:a7:8d:9b:
         a5:03:89:22:ac:1e:40:f8:60:cb:79:16:fc:f0:06:f5:00:7b:
         81:0b:44:d4:dd:90:81:82:92:29:14:0e:5f:79:bc:25:29:3b:
         af:2f:dc:eb:6a:ac:70:37:e1:62:d9:a8:f3:2d:07:1a:ae:dc:
         54:06:71:06:ec:3d:42:d1:9b:01:87:8d:ba:ec:7f:e9:2e:7b:
         8c:01:0d:b3:33:7b:53:1a:87:b7:97:31:ec:78:cb:36:5d:bb:
         75:f6:d0:1d:2f:fe:82:bb:f1:ff:9b:78:c7:91:a7:5d:9b:18:
         d4:e3:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----