Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.mft
File:                     66BCBE742E9AFD2055BC7A34D73105EF55747D15.mft (raw, json)
Hash identifier:          KIrJ4x3nFe+S0IRxQLLgX/cIjF306ljhQbWaJZ0+HZI=
Subject key identifier:   E1:9C:77:F8:16:6D:7F:2A:A4:59:78:9D:1D:CD:F2:78:BA:CE:83:5E
Authority key identifier: 66:BC:BE:74:2E:9A:FD:20:55:BC:7A:34:D7:31:05:EF:55:74:7D:15
Certificate issuer:       /CN=66BCBE742E9AFD2055BC7A34D73105EF55747D15
Certificate serial:       1C46DDC82A4F1DA41D4F0F76FFD1AD10B249E964
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.mft
Manifest number:          1B
Signing time:             Tue 23 Apr 2024 00:21:05 +0000
Manifest this update:     Tue 23 Apr 2024 00:16:05 +0000
Manifest next update:     Wed 24 Apr 2024 03:34:05 +0000
Files and hashes:         1: 3137372e36362e38302e302f32312d3234203d3e20323632343930.roa (hash: MdjwcWH97GDis2e60a1XbpPhk6xow3vVh8Eu3HGIgv8=)
                          2: 66BCBE742E9AFD2055BC7A34D73105EF55747D15.crl (hash: oxwAYnuZL1wycpW4P25vnAk+KXnELVVvSOn0lYQZ5jg=)
                          3: 323830343a3531343a3a2f33322d3438203d3e20323632343930.roa (hash: 5YSxLGCw+m/tyq8ox/DDKJUZNLboj5agrk/LuAVWNog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:dd:c8:2a:4f:1d:a4:1d:4f:0f:76:ff:d1:ad:10:b2:49:e9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BCBE742E9AFD2055BC7A34D73105EF55747D15
        Validity
            Not Before: Apr 23 00:16:05 2024 GMT
            Not After : Apr 24 03:34:05 2024 GMT
        Subject: CN=E19C77F8166D7F2AA459789D1DCDF278BACE835E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:b8:c0:aa:aa:59:9a:c9:4c:2e:af:ab:d9:
                    61:3d:7f:cd:97:06:d6:4c:35:a4:7c:a8:73:ce:a5:
                    e4:f6:13:8b:4c:67:52:a6:11:d5:4f:ec:46:ca:25:
                    0e:f1:30:47:61:88:7c:22:f6:6f:56:25:5e:b3:5f:
                    f5:80:be:2e:f7:fc:b6:3d:58:96:01:95:b5:bf:63:
                    2b:7f:81:cf:51:9b:4e:4f:b5:40:e9:9a:f3:37:80:
                    f2:96:81:29:50:9f:58:8f:86:00:b7:89:76:72:cc:
                    92:28:0e:c9:ef:88:91:6d:42:74:c3:28:ee:a6:6b:
                    eb:1f:f3:0c:38:1f:9d:a0:69:e5:16:ab:d2:88:80:
                    5b:b1:5a:6b:56:83:9a:e1:31:2d:ff:44:bd:ff:ba:
                    a8:3e:41:9b:8d:24:9f:67:bf:c9:7e:b6:3a:63:3e:
                    64:ed:02:e5:28:9e:67:1f:f2:a8:3b:c2:20:d5:83:
                    ff:6a:82:16:c0:38:70:06:f6:5e:d1:ec:5b:ae:72:
                    72:7e:ee:b6:ad:c0:9c:82:9f:4b:f8:ee:39:1a:d8:
                    0f:0b:6c:cb:61:df:72:c9:66:33:ac:8f:8d:a3:7b:
                    63:5d:dd:ab:b5:00:2c:52:a9:d4:c6:2e:a4:a5:11:
                    7e:7e:b5:46:b4:10:fc:d5:82:62:c0:11:cc:46:03:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9C:77:F8:16:6D:7F:2A:A4:59:78:9D:1D:CD:F2:78:BA:CE:83:5E
            X509v3 Authority Key Identifier:
                keyid:66:BC:BE:74:2E:9A:FD:20:55:BC:7A:34:D7:31:05:EF:55:74:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/1/66BCBE742E9AFD2055BC7A34D73105EF55747D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:99:a9:ce:f7:25:a3:0f:95:b6:42:97:8b:a4:99:e6:31:11:
         1a:0a:35:4f:9d:fb:3f:60:60:df:5e:5d:91:88:a5:bd:b6:5f:
         c2:f5:9f:ee:10:c5:b7:26:c7:a7:9d:42:d0:3c:aa:8d:d4:c0:
         6d:88:bb:71:ce:b0:22:a3:af:51:c0:39:21:4d:0b:8f:c1:07:
         ce:26:c1:3d:d4:9f:28:39:24:a6:eb:52:11:58:12:e8:90:35:
         e6:35:d7:ce:77:24:ca:4e:f1:c3:6e:74:77:a6:0f:df:ef:31:
         fc:77:9d:c1:df:79:91:5f:f0:16:68:1e:b6:c5:af:3d:05:7d:
         9e:3b:3e:31:2e:22:42:e4:83:fd:ab:d0:47:c6:76:28:43:62:
         8b:de:01:d4:35:bd:89:f0:ae:a2:fc:6f:89:c2:97:e7:a3:a3:
         43:d5:c2:ac:7b:5e:c8:0d:d6:f9:58:e0:65:2a:a8:a4:ea:4f:
         3e:91:64:b2:2b:ff:57:af:33:69:71:18:ec:ed:f3:4f:69:25:
         66:15:35:cf:1f:d6:be:f1:38:fb:08:9e:51:3e:3f:0d:32:91:
         07:ed:19:a0:b2:a2:96:83:51:03:81:5b:12:9e:69:7d:a3:d9:
         dc:72:1d:86:bb:49:fb:70:91:95:98:61:a2:22:ad:2e:b5:79:
         65:e1:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----