Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.mft
File:                     428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.mft (raw, json)
Hash identifier:          UvXkWxeLky5sN/QutYfSHa3T7khiG3dzl+WERzz1OSk=
Subject key identifier:   5A:65:AB:38:E7:A1:62:BA:AA:5E:7D:3A:E4:DC:B5:C4:46:D4:31:09
Authority key identifier: 42:8A:79:E1:50:41:62:F3:A8:F4:6A:5C:7E:EC:41:8F:AA:C4:2B:6F
Certificate issuer:       /CN=428A79E1504162F3A8F46A5C7EEC418FAAC42B6F
Certificate serial:       65A92E0E599688C1CFE48FC337514700A52AF381
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.mft
Manifest number:          1B
Signing time:             Sun 14 Apr 2024 17:21:19 +0000
Manifest this update:     Sun 14 Apr 2024 17:16:19 +0000
Manifest next update:     Mon 15 Apr 2024 21:07:19 +0000
Files and hashes:         1: 323830343a336163633a3a2f33322d313238203d3e20323636313130.roa (hash: ggepYQfBJY+84U1VuFLQ2t9aTX12cyWsxjZscsf0mGQ=)
                          2: 428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.crl (hash: xhDFAVnq95fwO1lHmVlug+ENFgIi7TFZ46BlREY9Va0=)
                          3: 34352e352e3234342e302f32322d3332203d3e20323636313130.roa (hash: x6nzaxUMETd0MwtcGQyDGZAeg87K4UhWqHi4F3q/dOU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a9:2e:0e:59:96:88:c1:cf:e4:8f:c3:37:51:47:00:a5:2a:f3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428A79E1504162F3A8F46A5C7EEC418FAAC42B6F
        Validity
            Not Before: Apr 14 17:16:19 2024 GMT
            Not After : Apr 15 21:07:19 2024 GMT
        Subject: CN=5A65AB38E7A162BAAA5E7D3AE4DCB5C446D43109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:fa:c7:06:9e:4d:e9:47:b8:81:7f:eb:12:
                    53:cc:35:58:ad:7b:71:da:9a:40:c4:ba:a2:77:46:
                    35:bc:f6:fa:60:a2:7a:5c:ef:8f:30:1f:59:79:d7:
                    01:a5:0c:05:c6:60:94:9f:08:ca:3b:c9:c4:a1:10:
                    f4:54:af:76:24:8c:e2:79:0c:e1:46:ec:8b:6d:32:
                    fb:67:77:69:fb:61:b0:0b:70:ce:f1:b6:ca:da:8d:
                    a9:87:f0:35:9a:dd:1c:e9:94:a0:02:e7:99:f3:02:
                    09:9f:6a:37:c9:8c:e1:7f:48:58:22:61:5e:67:c6:
                    fd:4f:68:2a:79:0b:9e:af:b3:64:48:83:e8:8c:98:
                    29:80:a4:e7:d9:94:47:32:dd:29:55:e8:fb:04:63:
                    77:8b:b6:f1:72:ea:2b:23:a4:70:21:f8:1c:10:a2:
                    98:15:d6:20:14:c8:c0:88:70:38:dc:2a:f3:8d:6b:
                    28:45:c6:0f:cb:e5:e1:37:96:03:73:c9:62:83:f2:
                    2c:40:6d:30:cb:8e:2a:72:81:6b:7f:f9:d8:c8:f1:
                    46:37:56:28:76:c4:32:56:c6:57:21:8f:5a:67:0d:
                    7b:65:95:ea:76:fc:18:d9:4c:84:bc:2e:29:b7:0c:
                    74:95:30:c0:04:56:9b:5d:a8:08:19:5b:1d:bf:62:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:65:AB:38:E7:A1:62:BA:AA:5E:7D:3A:E4:DC:B5:C4:46:D4:31:09
            X509v3 Authority Key Identifier:
                keyid:42:8A:79:E1:50:41:62:F3:A8:F4:6A:5C:7E:EC:41:8F:AA:C4:2B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:69:b8:4a:a5:9e:98:13:f6:79:2a:20:10:a7:3e:db:6d:2c:
         77:02:32:cf:f2:10:2a:4b:60:02:31:03:8b:70:71:0b:db:fa:
         83:9a:24:76:dd:f8:35:c9:a5:c5:24:eb:47:0d:eb:4f:aa:58:
         84:c8:d5:2f:57:47:0b:25:1e:7e:a6:37:3e:ba:17:4c:8c:15:
         74:c2:2a:cc:64:c3:2c:d3:95:83:f4:9d:8d:a8:77:36:91:ee:
         b7:e7:68:c3:12:04:e1:2e:58:0b:95:bc:fb:13:4c:25:af:75:
         6e:61:5e:76:f4:89:55:ad:62:6b:5f:d3:f9:2d:ca:6d:77:df:
         83:a8:6c:58:9a:2d:44:83:30:6f:f3:a6:b5:e3:4c:77:18:df:
         e4:56:63:5e:f9:d4:0e:5a:c3:ae:43:03:f2:5d:f8:28:a0:3b:
         9e:24:f8:a8:0e:02:6b:23:34:df:b9:a7:e4:f8:8f:e5:d1:bf:
         ad:3a:44:0e:85:8b:c5:e5:61:1e:06:c3:e5:7c:6b:ea:5b:81:
         07:ae:42:1e:64:39:9d:10:1c:5d:c1:32:92:2c:e0:4c:b9:17:
         03:4b:81:1b:ba:d4:d1:65:cd:e2:bc:63:1b:f3:3f:06:48:47:
         0b:4d:2b:60:7f:d6:e6:8e:49:81:46:1b:3c:a6:87:ce:80:c8:
         02:37:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----