Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.mft
File:                     F648B3E33D4A34C0451A6847DC9402F09BF30EA1.mft (raw, json)
Hash identifier:          oXGRnvnEn1nJZdR42uhg6+TKYpomGlb0gg5l/yiyt34=
Subject key identifier:   80:EC:22:99:2F:E1:07:06:2C:66:33:80:06:DB:11:E7:BB:60:A6:1F
Authority key identifier: F6:48:B3:E3:3D:4A:34:C0:45:1A:68:47:DC:94:02:F0:9B:F3:0E:A1
Certificate issuer:       /CN=F648B3E33D4A34C0451A6847DC9402F09BF30EA1
Certificate serial:       308FD9B77A98AC35B029E92575684CAA1A895DFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.mft
Manifest number:          20
Signing time:             Fri 26 Apr 2024 13:01:30 +0000
Manifest this update:     Fri 26 Apr 2024 12:56:30 +0000
Manifest next update:     Sat 27 Apr 2024 13:11:30 +0000
Files and hashes:         1: F648B3E33D4A34C0451A6847DC9402F09BF30EA1.crl (hash: Ezld1RthSQuFyN0UdRXKp6teTeBMwY/KgGIdAHr1wBs=)
                          2: 34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa (hash: hfRBBOnJQGn7aWNNomeoDcCfG1j7vh80Ds8pT/x3f/I=)
                          3: 323830343a356463343a3a2f33322d313238203d3e20323638393931.roa (hash: b5xc0uHj8jXnc3LO6ZPfEbElsQ9Xd4MFFMx54ZuO3fI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8f:d9:b7:7a:98:ac:35:b0:29:e9:25:75:68:4c:aa:1a:89:5d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F648B3E33D4A34C0451A6847DC9402F09BF30EA1
        Validity
            Not Before: Apr 26 12:56:30 2024 GMT
            Not After : Apr 27 13:11:30 2024 GMT
        Subject: CN=80EC22992FE107062C66338006DB11E7BB60A61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:b8:dc:ae:e8:e0:e6:05:40:77:cc:93:1e:
                    c1:d0:e0:60:c7:f9:80:a2:45:28:29:08:35:99:bb:
                    58:1c:f6:ab:d3:37:05:96:80:ac:29:11:1e:aa:07:
                    15:92:6d:27:f4:53:58:0f:c4:65:31:32:c5:a4:fd:
                    ec:00:ec:ed:53:b1:aa:2f:e4:0b:22:b8:40:b3:d5:
                    48:85:63:46:7c:b4:a6:f0:a3:47:0b:9a:6f:ad:c4:
                    1d:63:bb:8c:ff:8d:1b:8d:ab:84:e7:21:b5:d6:5c:
                    0e:62:43:b9:5f:d3:55:e3:8e:e6:5f:9d:38:b6:0b:
                    60:52:c8:2f:6f:b8:5a:97:3a:ca:19:d0:ae:36:2f:
                    d8:cd:e2:4a:e4:0d:26:1a:e0:ff:bb:e4:34:32:71:
                    67:33:ad:a8:7f:d7:0f:5f:64:83:77:a2:57:82:bf:
                    19:d1:1c:6a:dd:7d:4a:28:48:fa:b2:57:8c:68:79:
                    54:68:df:23:3b:c5:f8:f0:dd:0f:bf:c8:8f:2b:c6:
                    8d:49:71:8d:3e:bc:41:ed:f8:d0:73:18:f1:60:2b:
                    59:77:3c:ba:e9:13:ad:22:ee:73:38:4b:05:81:a5:
                    bb:fc:23:7d:19:b8:a0:55:d2:fb:dd:8a:92:01:09:
                    74:b0:39:d1:a2:e9:2b:71:94:48:9a:9a:7b:1e:aa:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EC:22:99:2F:E1:07:06:2C:66:33:80:06:DB:11:E7:BB:60:A6:1F
            X509v3 Authority Key Identifier:
                keyid:F6:48:B3:E3:3D:4A:34:C0:45:1A:68:47:DC:94:02:F0:9B:F3:0E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/1/F648B3E33D4A34C0451A6847DC9402F09BF30EA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ac:da:09:8a:dd:64:22:de:bc:39:2a:e3:4e:51:5a:f9:35:
         df:08:33:4f:65:d4:1e:d7:2a:c7:99:fd:7b:07:7a:9c:63:e0:
         af:af:42:8a:91:f6:49:98:cc:aa:9e:d5:4c:c2:b9:2a:3f:c6:
         b6:c6:8e:ff:90:7d:85:8b:06:f7:63:8c:6a:16:b2:d8:2f:08:
         8d:af:ce:a1:da:a9:e8:db:e8:44:f8:80:1a:7c:f6:d7:3c:8b:
         88:09:69:a0:4e:eb:20:be:d6:4f:24:e8:74:f2:8c:6d:29:69:
         8a:f2:a8:22:e9:cc:e8:a3:1d:1b:7d:e0:b0:15:1b:bd:f4:aa:
         29:9f:82:fa:cb:45:17:8b:8a:cc:ae:e9:bd:fa:f9:89:b3:20:
         97:88:fc:ee:6f:77:7a:6f:c4:26:7b:42:f8:b8:1d:55:7f:9c:
         03:a1:21:1b:84:6d:12:e4:4d:a1:9d:63:06:c3:ca:21:24:a9:
         64:50:7c:10:5f:8a:7f:de:61:d4:f7:c6:d9:7d:27:12:95:ef:
         5f:5c:3a:3f:c9:eb:60:d3:91:a5:7f:99:3b:77:97:21:f7:81:
         2e:d8:7e:f2:e3:f9:4e:aa:ee:01:06:01:66:d0:ad:49:94:78:
         9c:27:4c:74:ab:7a:d0:32:bd:6d:f4:d3:96:19:44:55:2c:38:
         92:4e:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----