Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/1/22D207B390CFA59F780C523D88AB044E809E9D96.mft
File:                     22D207B390CFA59F780C523D88AB044E809E9D96.mft (raw, json)
Hash identifier:          Ghzd/aSRnhpblUs/PAe7+cJ9wy3QK6l6g+LvD2uyiWA=
Subject key identifier:   10:58:1B:E2:CB:63:A0:04:CC:7D:87:E9:13:52:C5:C9:76:DA:69:2D
Authority key identifier: 22:D2:07:B3:90:CF:A5:9F:78:0C:52:3D:88:AB:04:4E:80:9E:9D:96
Certificate issuer:       /CN=22D207B390CFA59F780C523D88AB044E809E9D96
Certificate serial:       04E708F8D1DA0A8BB4008D2D076CAF991486313A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D207B390CFA59F780C523D88AB044E809E9D96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/1/22D207B390CFA59F780C523D88AB044E809E9D96.mft
Manifest number:          01B6
Signing time:             Sun 14 Apr 2024 18:43:37 +0000
Manifest this update:     Sun 14 Apr 2024 18:38:37 +0000
Manifest next update:     Mon 15 Apr 2024 21:27:37 +0000
Files and hashes:         1: 3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa (hash: bsITVlyBpRuSNug8QTCgv8fu6WgfGQwzOi5DiMBRTrM=)
                          2: 323830343a383132343a3a2f33322d3438203d3e20323732343335.roa (hash: /ZnGarB/JTjO+4rPjvdM3+Xud9fBb/8cSbJLm0fc6Xo=)
                          3: 22D207B390CFA59F780C523D88AB044E809E9D96.crl (hash: pjNmFb+W6Zau1qZljzVg7J8EirvotB9xFZ059kL2klA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e7:08:f8:d1:da:0a:8b:b4:00:8d:2d:07:6c:af:99:14:86:31:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D207B390CFA59F780C523D88AB044E809E9D96
        Validity
            Not Before: Apr 14 18:38:37 2024 GMT
            Not After : Apr 15 21:27:37 2024 GMT
        Subject: CN=10581BE2CB63A004CC7D87E91352C5C976DA692D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:93:84:0e:74:c3:d9:d9:58:5e:ec:36:b2:
                    f2:72:84:73:45:6d:21:a0:fc:c0:70:05:7c:18:eb:
                    8a:25:3a:c0:fa:63:6c:46:d1:1e:00:f9:67:44:6e:
                    7e:02:b2:6e:17:3d:5e:08:56:32:47:ad:80:17:fb:
                    8a:6f:5e:12:1c:79:0b:99:5e:10:b0:59:b2:2e:b7:
                    9a:89:f6:32:6e:65:bb:7f:40:ef:26:38:3d:fd:59:
                    62:d6:08:42:2f:ad:bb:3e:8a:47:3a:20:78:10:0c:
                    83:4e:fb:41:c9:af:99:d5:b9:50:74:02:d1:b2:b0:
                    c8:0d:23:dd:52:d8:73:e0:b2:8f:96:48:88:70:59:
                    97:37:67:a3:97:10:e3:ff:3b:e8:9c:d9:2f:36:07:
                    a9:e2:ca:81:da:86:68:70:10:51:48:7e:e8:09:aa:
                    ec:ed:f6:56:b5:7e:0c:46:7c:7f:43:61:62:eb:93:
                    42:e5:47:7d:cc:ac:75:d0:1b:d7:07:95:86:29:7a:
                    67:ac:d0:52:21:f1:a1:e7:b1:28:48:76:08:be:b1:
                    c6:59:ad:d4:04:3a:2f:ef:de:e6:8f:8d:c9:20:0c:
                    97:cf:67:4e:29:94:e2:ef:9c:f4:87:9e:fe:3e:aa:
                    64:dd:61:77:83:5d:1a:50:16:8d:b6:ef:1b:44:99:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:58:1B:E2:CB:63:A0:04:CC:7D:87:E9:13:52:C5:C9:76:DA:69:2D
            X509v3 Authority Key Identifier:
                keyid:22:D2:07:B3:90:CF:A5:9F:78:0C:52:3D:88:AB:04:4E:80:9E:9D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/1/22D207B390CFA59F780C523D88AB044E809E9D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D207B390CFA59F780C523D88AB044E809E9D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/1/22D207B390CFA59F780C523D88AB044E809E9D96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:5d:6d:45:e2:af:15:3c:8e:a8:f2:4f:51:ce:87:00:60:
         a6:62:11:c0:fc:29:f6:fa:7d:6f:87:4c:9b:3a:80:59:bb:71:
         8e:eb:15:a5:22:fd:6f:6c:39:f7:8a:53:b0:6e:27:ab:c6:d2:
         96:97:b1:04:b4:b2:78:5d:e8:81:f9:f5:68:ec:88:f4:48:30:
         0e:73:a5:3a:39:50:f5:35:c4:bc:89:ec:cc:71:83:0a:b3:70:
         47:8e:1c:72:86:56:78:7b:c7:ff:ac:25:d0:46:bf:bc:1e:22:
         9a:29:1e:60:43:e6:b6:9e:98:7c:cf:b7:b3:aa:f9:2d:46:de:
         3c:42:ce:b0:25:9a:53:82:5a:d7:41:c9:44:54:e8:36:14:4f:
         d6:97:ba:5d:0b:c6:7f:41:6d:51:3d:3f:b5:47:fe:5d:05:f2:
         0c:80:6b:2a:e0:3f:3d:14:20:65:0e:4b:4b:85:ad:50:ef:d6:
         50:8d:e1:10:05:e1:3d:72:e5:b3:1d:0b:7a:bb:3c:2d:73:4f:
         75:98:41:01:13:84:2d:a0:91:67:18:c5:f5:1c:5d:73:b9:e8:
         ac:6f:7a:5a:f6:ce:d0:c9:10:4d:06:ab:ff:4b:30:4b:6e:95:
         41:0e:c9:a4:80:5c:28:60:1d:92:cd:8b:d8:3e:03:0f:88:1a:
         cf:11:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----