Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.mft
File:                     D41FBBD4BB9A705D55D26403EB508620E0DBC782.mft (raw, json)
Hash identifier:          r5xJUDvjr3Iw3r8ZBfexkBHvbc0G0P/9kQOH/fOgoeE=
Subject key identifier:   B4:65:AD:CA:6C:34:A5:B3:F0:2C:6D:4E:5A:2D:FB:E3:32:11:7B:9B
Authority key identifier: D4:1F:BB:D4:BB:9A:70:5D:55:D2:64:03:EB:50:86:20:E0:DB:C7:82
Certificate issuer:       /CN=D41FBBD4BB9A705D55D26403EB508620E0DBC782
Certificate serial:       2AAB7F2C86D2F5BA1D0B3072FA5D3A6F25ABCD49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.mft
Manifest number:          17
Signing time:             Sun 14 Apr 2024 17:04:29 +0000
Manifest this update:     Sun 14 Apr 2024 16:59:29 +0000
Manifest next update:     Mon 15 Apr 2024 20:03:29 +0000
Files and hashes:         1: D41FBBD4BB9A705D55D26403EB508620E0DBC782.crl (hash: ZteHlARluic7lD6U1tmDYj3wjycAdaWe8/hiCoh6Ujw=)
                          2: 323830343a363630633a3a2f33322d3334203d3e20323639353330.roa (hash: eu9unoOzk/Vsa36m8dMXiTCzxZPR7G9QqDpDlufWbak=)
                          3: 34352e3138382e3138342e302f32322d3234203d3e20323639353330.roa (hash: GVa6KS68tZP+juZVAdjUjq22Zmlozcq/e2PsbkU3lw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ab:7f:2c:86:d2:f5:ba:1d:0b:30:72:fa:5d:3a:6f:25:ab:cd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D41FBBD4BB9A705D55D26403EB508620E0DBC782
        Validity
            Not Before: Apr 14 16:59:29 2024 GMT
            Not After : Apr 15 20:03:29 2024 GMT
        Subject: CN=B465ADCA6C34A5B3F02C6D4E5A2DFBE332117B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:83:4c:e7:d9:58:f8:07:4d:5c:00:6d:47:
                    ed:dc:bc:83:72:ce:55:f5:3b:ee:f5:b1:ea:31:ca:
                    45:07:21:a1:d8:12:e6:06:57:36:db:98:70:10:33:
                    bd:2b:20:6f:ee:83:7e:a4:e2:e2:6e:9b:c2:7b:fc:
                    c6:83:4f:00:dd:1f:ba:d0:34:fb:f3:83:e0:a6:c9:
                    5c:2b:06:07:27:36:1f:5f:2a:93:71:ca:bf:d1:f6:
                    8b:ad:f4:66:01:6f:5a:f6:51:ea:a4:10:b3:6d:2a:
                    ad:52:92:4f:f6:f2:7d:c0:e6:d0:b8:b8:11:5b:60:
                    bd:23:09:9d:a1:7c:74:4d:7c:a1:64:64:e5:d0:2b:
                    a9:37:72:f0:3e:b2:e7:57:8e:ce:78:bb:0c:9e:31:
                    e2:b9:da:57:cb:12:f2:66:f8:b7:d4:81:4e:43:da:
                    f8:60:04:ee:9d:8c:27:40:62:fc:86:a8:63:e3:ea:
                    0e:79:b6:2e:e5:d2:68:4c:9a:df:15:b2:de:a9:6f:
                    f3:31:1a:2a:84:4a:08:1a:9d:89:e6:0d:42:86:d0:
                    56:20:ae:c7:c9:e9:96:db:1e:9c:fa:1a:f0:ed:46:
                    8c:f2:e5:fc:e0:9d:b4:76:1c:7f:84:71:ce:a7:39:
                    6e:31:6e:4a:a1:0e:31:76:70:74:b6:ad:9d:a5:d4:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:65:AD:CA:6C:34:A5:B3:F0:2C:6D:4E:5A:2D:FB:E3:32:11:7B:9B
            X509v3 Authority Key Identifier:
                keyid:D4:1F:BB:D4:BB:9A:70:5D:55:D2:64:03:EB:50:86:20:E0:DB:C7:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e8:ca:b2:3c:4e:5e:eb:02:6b:15:81:b0:65:41:88:3e:cd:
         e6:4b:91:b3:2f:21:ae:94:b4:f7:97:9f:3a:08:05:57:9a:18:
         b7:d0:ab:d8:18:21:54:16:0c:1d:2d:e7:f5:1c:9d:dc:ff:15:
         2e:fb:62:e9:c1:b6:19:15:d9:08:a7:00:81:5d:1a:57:b2:48:
         1f:59:3d:73:42:b3:b5:87:f9:4c:2f:e0:87:f9:d4:3e:9f:08:
         e7:7f:1c:c3:fb:49:fc:02:61:b4:ea:2e:ab:6d:ea:fe:e7:83:
         83:06:a5:91:54:23:24:63:2a:8f:66:36:23:55:f5:90:d0:13:
         cf:f8:3e:3c:a4:60:6d:bf:98:de:9e:48:25:0c:69:a7:fa:57:
         d3:46:47:9a:77:c3:cc:e2:a5:0c:76:dd:ee:38:e2:e4:82:39:
         5f:b3:09:14:3b:60:d1:a1:3a:35:4c:67:ca:44:be:d6:ed:3a:
         66:10:08:d8:76:d7:e5:1d:d9:46:d6:d7:a5:91:48:b5:a6:4a:
         9e:a3:ce:f8:cc:81:00:e6:90:b7:2f:c8:93:35:de:86:1d:53:
         86:e5:92:fd:4d:01:80:b5:30:4d:28:e9:40:68:16:f1:d6:be:
         12:23:33:7a:fe:35:5b:88:7a:3a:10:c1:7c:5a:2e:12:b5:5f:
         e3:f1:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----