Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.mft
File:                     DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.mft (raw, json)
Hash identifier:          pemGT0PLi2TaVdOSt7bvA+G7YzYfgPDjaU4gpTRFLNE=
Subject key identifier:   66:D9:EA:86:61:CB:03:EA:54:28:34:55:13:AD:30:B1:7A:D5:D5:66
Authority key identifier: DD:5E:42:67:AF:37:77:DC:ED:3F:61:42:2A:AC:5A:FF:1F:1A:4B:E1
Certificate issuer:       /CN=DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1
Certificate serial:       13ED782791DC22ED2274AEB8BB0F93135FB1DB0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.mft
Manifest number:          0199
Signing time:             Sun 14 Apr 2024 19:23:22 +0000
Manifest this update:     Sun 14 Apr 2024 19:18:22 +0000
Manifest next update:     Mon 15 Apr 2024 22:29:22 +0000
Files and hashes:         1: DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.crl (hash: 312f4pd3N8ku6HMMaqmBBWIkYKiksRc5SkUV7L7SMOQ=)
                          2: 323830343a313462343a3a2f33322d313238203d3e20323633333435.roa (hash: j35XfBLIR+7wqHTf4aw2pL34oKtQMPVj7o/gNa7TD0s=)
                          3: 3139312e33362e3234302e302f32302d3332203d3e20323633333435.roa (hash: crXuokfuMHC7GeyLwqCw/St6B+H+MHXNc/Cs10e67G0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ed:78:27:91:dc:22:ed:22:74:ae:b8:bb:0f:93:13:5f:b1:db:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1
        Validity
            Not Before: Apr 14 19:18:22 2024 GMT
            Not After : Apr 15 22:29:22 2024 GMT
        Subject: CN=66D9EA8661CB03EA5428345513AD30B17AD5D566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:a0:df:cd:3c:f4:b0:fd:2d:c5:77:6b:fc:
                    23:3e:50:ce:79:e7:25:2c:1c:e8:d8:3a:b1:2c:84:
                    fb:30:f7:ad:e2:13:15:c5:77:6a:5f:61:c4:00:dd:
                    9e:f3:c3:1f:e1:7d:ab:08:4f:6b:6c:41:a2:e2:6a:
                    55:45:ba:df:73:71:da:f4:e9:67:3d:e4:ae:cd:3c:
                    f9:38:89:31:b5:9e:0e:d3:44:42:68:ad:06:d7:cc:
                    ce:7a:e6:ae:80:f6:54:6a:d9:c9:e2:fe:0d:2a:40:
                    68:70:74:ff:94:bd:d8:00:3d:cc:fc:ef:87:3e:dd:
                    a3:77:05:af:70:6e:46:b5:2f:da:3f:09:3a:e7:2b:
                    c0:ba:aa:31:0f:54:b5:65:65:87:fa:27:db:68:f0:
                    2f:b7:c3:4b:67:1b:fe:f5:36:d6:d4:90:22:a4:73:
                    01:f8:f8:bb:65:33:d1:99:fc:a7:67:cd:6d:34:78:
                    60:3b:b1:ae:2e:d0:91:52:6b:30:69:d6:94:81:05:
                    52:99:7d:24:fe:29:d2:6e:35:fd:4b:b5:4e:93:34:
                    97:2a:20:27:20:53:7e:24:36:df:9c:18:33:cb:a4:
                    56:c0:ec:d7:74:76:9b:c1:f1:6f:5c:90:f5:69:ad:
                    ca:84:97:35:5a:f3:0c:f5:e9:d4:a8:40:85:36:d5:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D9:EA:86:61:CB:03:EA:54:28:34:55:13:AD:30:B1:7A:D5:D5:66
            X509v3 Authority Key Identifier:
                keyid:DD:5E:42:67:AF:37:77:DC:ED:3F:61:42:2A:AC:5A:FF:1F:1A:4B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:32:95:ce:08:9c:06:f3:21:0a:42:a4:10:07:ef:0a:34:89:
         57:4d:15:92:c6:bd:74:f3:82:b4:c1:64:f4:bd:67:b3:79:01:
         cd:c4:4c:cc:f9:03:9d:4e:d5:47:9d:20:f6:5c:0b:10:8c:c6:
         aa:86:82:39:e9:c5:74:76:5b:2f:3c:ff:b7:29:27:b2:38:78:
         e7:c3:2a:92:d8:3c:b1:ae:0b:ab:82:9e:a6:7a:1a:22:9e:5c:
         56:a1:b9:76:1b:1f:eb:20:f9:ce:dd:57:41:96:00:40:d9:88:
         b1:11:c5:4f:0d:00:64:7b:40:a8:ce:87:1c:ca:52:3f:43:d8:
         72:2c:fd:eb:fe:78:b4:b0:87:ad:61:8f:0a:db:89:4c:c0:8d:
         f7:69:1c:27:f0:2f:9c:74:fe:ef:03:1a:9b:0c:52:4d:9f:0e:
         8d:af:fb:be:6a:31:8f:17:b4:98:ed:96:77:c1:a3:96:a1:3f:
         7c:ba:4e:35:3b:76:07:8e:a9:04:a4:6e:b0:33:61:f4:72:e1:
         01:36:27:38:74:61:63:e0:65:12:60:5c:79:0c:f1:f9:42:a6:
         cc:ea:4a:c3:24:7f:53:6d:c8:46:96:1e:91:b3:3f:ed:f5:00:
         f7:d8:1f:49:ef:a3:82:4b:69:1b:14:81:61:78:7c:62:00:76:
         14:09:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----