Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.mft
File:                     3031188AB6BEC48612DEFA14DBF67C31676B0E40.mft (raw, json)
Hash identifier:          6PPcvkuwu9RH8hckHnOAysJ88efYXfzRkxm1maZUJjo=
Subject key identifier:   7B:3D:16:41:47:27:20:19:35:2D:63:DD:1A:B0:E2:8E:AF:97:B1:3C
Authority key identifier: 30:31:18:8A:B6:BE:C4:86:12:DE:FA:14:DB:F6:7C:31:67:6B:0E:40
Certificate issuer:       /CN=3031188AB6BEC48612DEFA14DBF67C31676B0E40
Certificate serial:       1794CED260C05488A37F9A2F68B085B9769A9656
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.mft
Manifest number:          0214
Signing time:             Mon 15 Apr 2024 09:21:41 +0000
Manifest this update:     Mon 15 Apr 2024 09:16:41 +0000
Manifest next update:     Tue 16 Apr 2024 12:26:41 +0000
Files and hashes:         1: 323830343a353139383a3a2f33322d313238203d3e20323638343634.roa (hash: nsiKcQEp2mLEsm+7DadPzF8arVfVpRhlPqtBvn0OsJQ=)
                          2: 34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (hash: siz8nXzTWIVEQd8//q8M2Asxmnd2bhtseMiFbvoTUsE=)
                          3: 3031188AB6BEC48612DEFA14DBF67C31676B0E40.crl (hash: 7BCp11Pv6TmsfBgirx1oJnMFtpAo6eW2Ponfxg0i/+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:94:ce:d2:60:c0:54:88:a3:7f:9a:2f:68:b0:85:b9:76:9a:96:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3031188AB6BEC48612DEFA14DBF67C31676B0E40
        Validity
            Not Before: Apr 15 09:16:41 2024 GMT
            Not After : Apr 16 12:26:41 2024 GMT
        Subject: CN=7B3D164147272019352D63DD1AB0E28EAF97B13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:d9:c9:61:7e:18:57:2f:7b:08:20:f6:e5:
                    17:65:08:37:2c:88:4c:0f:c2:2a:66:3a:e8:03:88:
                    6a:ba:16:dc:06:07:4a:e7:07:27:cb:4f:db:2d:38:
                    ba:19:95:13:ff:b0:e0:1d:9c:12:5d:a9:e7:0b:5f:
                    69:0a:b3:76:5f:2d:39:3d:e9:03:ed:c0:fd:0c:78:
                    9b:cb:c3:d6:37:bf:ee:b6:f7:fd:38:fe:a4:c2:11:
                    e9:a7:1e:fc:ae:bb:6a:12:47:65:6b:a3:1e:94:a6:
                    51:01:1c:28:65:0c:21:24:fa:93:5e:d6:2f:e3:26:
                    a7:fc:fb:54:f0:33:5e:2c:8c:f4:e5:10:b4:0f:91:
                    8d:e3:65:b0:d5:a4:bf:3c:1d:04:82:fd:70:e3:7b:
                    a7:62:8e:89:50:a8:26:4d:32:90:78:2f:40:e9:95:
                    13:94:93:eb:6c:3a:ec:fa:79:ad:89:5d:3b:4f:89:
                    03:3a:e1:df:8d:e0:7a:58:0b:90:de:a3:19:ce:6c:
                    c0:67:8c:3d:a6:82:ec:13:29:33:e8:ac:30:a4:ba:
                    b9:35:35:d2:84:d9:6c:c4:c2:d1:34:66:f1:bb:9f:
                    e4:39:09:91:b7:05:4b:52:4a:22:c0:52:6b:78:cb:
                    2e:fe:6e:54:bd:0b:31:56:3d:72:6b:8d:7c:f0:61:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3D:16:41:47:27:20:19:35:2D:63:DD:1A:B0:E2:8E:AF:97:B1:3C
            X509v3 Authority Key Identifier:
                keyid:30:31:18:8A:B6:BE:C4:86:12:DE:FA:14:DB:F6:7C:31:67:6B:0E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:97:ab:b9:d9:e7:46:6d:43:6e:69:85:40:24:46:b7:0d:3c:
         b5:f3:68:28:ec:fb:8f:14:1e:ca:72:32:a3:03:d3:b6:50:71:
         4a:59:3e:a8:66:7c:af:06:08:ba:d3:13:d2:46:18:19:e3:97:
         ed:1d:1e:53:e4:5c:ec:69:09:aa:5a:5a:65:bb:bc:ee:49:67:
         60:9d:1d:ad:87:10:f2:5a:38:ea:34:04:1a:a2:c9:82:83:2d:
         b9:a5:37:08:42:f5:37:1d:f4:0f:14:bb:4b:35:c0:62:b5:f8:
         c4:c4:32:3d:5e:83:4e:6c:d1:7a:91:ea:a0:17:4e:52:ee:1a:
         de:d6:79:e5:89:e6:b6:6e:4f:a9:26:71:13:02:fc:a7:63:73:
         10:95:bf:70:22:33:1f:e8:b5:f6:85:f7:06:f3:a4:cf:04:28:
         8a:cb:cd:6a:33:7a:ef:04:44:5e:93:f4:05:1b:45:1e:04:e9:
         65:a3:4b:50:13:0a:dd:0a:08:aa:da:70:ea:c0:c9:f0:8d:75:
         44:27:33:f3:76:f5:e9:76:8f:fc:de:b0:e8:5e:d1:b6:2e:0f:
         47:66:05:dd:41:44:c8:8c:8b:a5:93:ab:cd:47:cf:ae:0b:3a:
         87:17:17:26:33:73:58:24:b2:29:39:aa:f1:c8:5b:44:38:86:
         84:03:3b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----