Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.mft
File:                     AE2616710A04D19943FCBDA2F29AC92D9E964998.mft (raw, json)
Hash identifier:          6jgh1fJBUEwkv16GJbo1z+mxGJkjVcp19nMJ84gk6dg=
Subject key identifier:   22:87:95:41:5A:C0:08:E8:98:23:6F:70:BF:B1:4F:18:85:00:F3:6C
Authority key identifier: AE:26:16:71:0A:04:D1:99:43:FC:BD:A2:F2:9A:C9:2D:9E:96:49:98
Certificate issuer:       /CN=AE2616710A04D19943FCBDA2F29AC92D9E964998
Certificate serial:       4CF62BF51442FAB3E05E7E32D851A703F3634A43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.mft
Manifest number:          0288
Signing time:             Mon 15 Apr 2024 00:26:59 +0000
Manifest this update:     Mon 15 Apr 2024 00:21:59 +0000
Manifest next update:     Tue 16 Apr 2024 03:38:59 +0000
Files and hashes:         1: 323830343a363362633a3a2f33322d3438203d3e20323639333830.roa (hash: nQXlwNZE4cP5DrXdb10MiND/y1EEMaDfOEsOW2uBtHg=)
                          2: AE2616710A04D19943FCBDA2F29AC92D9E964998.crl (hash: TnKSCuv1L82y1ybhnda5D+c2ZVOsmnyFHKDrgXAmtyc=)
                          3: 34352e3138352e39322e302f32322d3234203d3e20323639333830.roa (hash: WI+ee9VviafJABW7CKOriunZf+rHdtLALoAeb6JeXC4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f6:2b:f5:14:42:fa:b3:e0:5e:7e:32:d8:51:a7:03:f3:63:4a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2616710A04D19943FCBDA2F29AC92D9E964998
        Validity
            Not Before: Apr 15 00:21:59 2024 GMT
            Not After : Apr 16 03:38:59 2024 GMT
        Subject: CN=228795415AC008E898236F70BFB14F188500F36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:9a:95:de:cb:eb:fe:d9:7b:d0:17:a3:dc:
                    f5:3c:6b:33:fd:f6:54:88:6e:0c:90:63:25:1d:de:
                    57:24:a9:6d:bf:2b:20:c8:68:35:1b:07:39:9f:e6:
                    14:bc:32:90:ef:44:2d:99:cb:03:3f:8a:39:65:72:
                    3b:f3:c8:0b:1a:a3:3f:de:dc:cf:76:1d:5f:31:f1:
                    1e:9d:7f:23:b5:1e:f6:3c:e3:ef:d6:63:ff:de:d5:
                    40:d5:12:c0:77:96:64:1e:1f:3c:ad:7d:29:17:a2:
                    19:e3:e1:4e:b9:05:ef:b9:6c:e7:40:70:81:f4:81:
                    92:38:cd:9e:7d:e2:92:b4:86:29:7f:09:35:98:41:
                    01:db:67:cc:70:7f:5e:18:d8:cd:38:6a:38:bf:d5:
                    52:cd:12:b0:8d:f5:8f:2f:3c:80:e7:81:75:9b:59:
                    7b:67:0f:97:29:5c:f5:20:2c:97:f9:ca:54:81:13:
                    da:48:2d:3d:c4:dc:3b:aa:3c:00:19:83:9d:98:12:
                    1d:9c:4a:6f:83:fa:41:a6:8a:5d:d1:ac:87:7e:d2:
                    36:3d:23:a1:0c:1b:02:c7:a5:5b:f8:e5:27:15:7d:
                    e8:43:d0:f7:2a:75:b3:76:fb:0c:25:e4:74:02:93:
                    2b:eb:c6:ef:df:03:57:62:07:26:11:93:d3:af:de:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:87:95:41:5A:C0:08:E8:98:23:6F:70:BF:B1:4F:18:85:00:F3:6C
            X509v3 Authority Key Identifier:
                keyid:AE:26:16:71:0A:04:D1:99:43:FC:BD:A2:F2:9A:C9:2D:9E:96:49:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:e1:b2:27:a5:57:1e:03:95:12:b2:92:2d:de:2b:e7:d8:
         d9:2f:c1:44:7a:06:40:1b:64:91:b4:b7:67:90:a9:4b:b8:5e:
         d1:95:e7:58:4b:11:5b:c2:6c:ec:32:d3:5e:81:e1:c0:f7:ab:
         7a:dc:1e:e1:f9:75:a0:ae:4b:63:dc:73:93:d3:1b:5c:c3:e5:
         17:84:12:4c:bb:9c:ac:66:2e:ba:f6:ac:cd:e7:ea:b0:5d:72:
         0d:81:be:ad:91:6a:c9:9a:aa:a4:5a:50:d6:dc:76:57:fa:d2:
         f5:ec:f3:1b:42:76:57:51:35:1c:54:2d:ce:5a:cf:33:bb:92:
         e9:e1:55:d3:2e:24:38:4e:a6:8d:2b:3c:16:17:e8:70:a2:cc:
         dc:d6:cc:7e:51:d2:97:57:2a:a6:65:a4:31:ec:42:b0:4c:a0:
         e1:c8:79:cc:11:00:60:2b:5e:0f:1c:ff:10:c7:79:30:ea:d3:
         22:da:c7:a4:f9:f0:e3:be:b6:64:4c:3b:b3:90:f8:56:3d:db:
         d4:bf:51:2e:61:0c:7b:d9:db:02:6a:a7:25:68:64:ba:8e:52:
         35:44:63:11:23:54:9c:13:3a:6a:4b:46:81:35:63:2d:c5:ab:
         df:48:fd:be:9b:92:2d:71:16:48:24:85:9c:16:04:11:71:13:
         68:48:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----