Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.mft
File:                     17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.mft (raw, json)
Hash identifier:          UujFvabIsPYqpCiZ086iME0dEW4cfVBEjAjrwTyPVO8=
Subject key identifier:   37:5B:E3:15:DA:22:FA:19:FF:E9:93:38:BC:73:D0:C2:5A:69:BD:0B
Authority key identifier: 17:BB:9C:BC:3B:FA:B3:BF:19:B4:BD:6E:9C:8F:D2:E2:B2:B3:5A:AE
Certificate issuer:       /CN=17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE
Certificate serial:       225E39E620866539BF79EDD2824AC5BC0F356E74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.mft
Manifest number:          12
Signing time:             Mon 15 Apr 2024 04:56:38 +0000
Manifest this update:     Mon 15 Apr 2024 04:51:38 +0000
Manifest next update:     Tue 16 Apr 2024 17:54:38 +0000
Files and hashes:         1: 323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (hash: HOq1cggynsjIdOmNNvRIxN62CTv2KMXJO/+szxLYokA=)
                          2: 3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (hash: OVqWissp0J4ldmukW0ysMHfMdJEiIG8X+padmpJcdzE=)
                          3: 17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.crl (hash: 6vi4vUrR0xZGmz8P6mn8epVmJPvtGBetdO7MNQyS/Rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5e:39:e6:20:86:65:39:bf:79:ed:d2:82:4a:c5:bc:0f:35:6e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE
        Validity
            Not Before: Apr 15 04:51:38 2024 GMT
            Not After : Apr 16 17:54:38 2024 GMT
        Subject: CN=375BE315DA22FA19FFE99338BC73D0C25A69BD0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:5a:06:8e:01:55:56:5e:8d:27:7d:00:53:
                    13:29:5d:ed:ab:c8:e2:fa:1b:52:ee:da:76:1c:78:
                    13:d8:d1:7c:93:92:b7:d0:7d:9b:4b:56:bd:ec:d3:
                    07:52:cd:e8:06:ba:58:95:51:b0:40:ca:77:0b:96:
                    76:7e:0d:2a:65:99:9a:1a:72:ee:cb:4b:d7:49:92:
                    bc:5a:13:df:9b:2e:29:2b:4e:b6:5b:18:d8:76:fe:
                    9d:b0:d5:63:09:62:c7:fa:0f:f7:51:35:9a:86:a1:
                    03:4e:e7:c7:0f:6b:6d:77:5f:37:19:b7:62:b8:56:
                    9f:c6:7e:99:fe:19:a9:94:f3:bb:a6:86:3e:78:d4:
                    c8:ce:f3:37:c5:c9:30:59:11:b8:d4:14:41:0d:45:
                    61:d5:bb:c8:dd:e7:89:1c:b5:42:a5:ff:6d:58:e0:
                    1a:6f:1d:e4:81:e2:d6:04:07:c7:dd:64:a6:96:eb:
                    9e:fc:91:ee:81:6d:0c:f6:d2:42:7f:00:06:c8:80:
                    f3:63:10:70:3e:ce:ab:a6:c6:b3:0b:7a:0d:da:36:
                    84:a9:26:9a:b6:02:e2:7e:b4:2a:69:18:6e:f1:46:
                    3e:97:10:e2:8a:de:c7:66:29:4d:bf:b7:1a:e3:5d:
                    ed:7e:f2:f3:70:bb:47:75:92:2e:40:0e:42:53:c2:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:E3:15:DA:22:FA:19:FF:E9:93:38:BC:73:D0:C2:5A:69:BD:0B
            X509v3 Authority Key Identifier:
                keyid:17:BB:9C:BC:3B:FA:B3:BF:19:B4:BD:6E:9C:8F:D2:E2:B2:B3:5A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:29:32:4f:90:59:df:75:29:70:b9:c0:df:04:80:0a:90:67:
         2b:21:59:0a:f1:fd:da:53:73:f3:9d:f8:cc:4b:d5:0c:0c:4a:
         74:71:86:2e:64:aa:f2:c9:33:50:4c:d0:64:3a:1d:84:43:9a:
         30:ba:3c:a3:55:82:77:2a:30:49:11:37:45:f1:ba:e1:91:f4:
         ac:cd:3d:44:ec:21:1d:a0:88:3a:02:f1:d0:a3:80:c5:bc:30:
         62:0d:f8:9d:9d:b6:9a:a3:9d:cf:bc:2b:a7:a2:57:26:57:3e:
         65:c3:57:a4:3f:bc:2c:09:fd:59:9b:a7:9a:b6:92:70:39:39:
         28:b5:37:bb:e9:14:e2:82:61:38:d0:0c:39:86:93:b0:2e:cc:
         59:7c:d4:84:9c:6d:56:98:df:a1:45:82:fc:f3:d1:10:33:69:
         3b:6c:2e:fc:cb:19:d8:e9:dd:bd:61:d7:c0:ae:1f:06:95:c2:
         5c:13:4e:bd:43:f1:c3:3d:13:46:0a:83:dd:57:8e:7f:80:3f:
         81:7e:32:ce:4a:3d:31:7e:ce:91:12:fd:53:12:76:8a:ed:84:
         30:5e:33:d7:e2:00:e7:54:42:d5:7e:27:50:c6:14:b1:83:c5:
         21:fa:88:38:9d:39:4f:d3:c6:21:3f:4e:e5:8b:ff:e6:85:3a:
         62:90:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----