Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.mft
File:                     C0501490D0E5E31AEE0C8BBD76C2719A183C500C.mft (raw, json)
Hash identifier:          OTjcGTowhMIPenfV7T+YtShg/dqKhNECSkMBI8QiWf4=
Subject key identifier:   1D:74:B0:14:9F:CD:3F:03:8C:27:64:5D:3B:15:CF:3C:78:BD:0E:58
Authority key identifier: C0:50:14:90:D0:E5:E3:1A:EE:0C:8B:BD:76:C2:71:9A:18:3C:50:0C
Certificate issuer:       /CN=C0501490D0E5E31AEE0C8BBD76C2719A183C500C
Certificate serial:       10641601B7B3F620F325EAD5BC09C057D6117919
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.mft
Manifest number:          19
Signing time:             Sun 14 Apr 2024 21:23:55 +0000
Manifest this update:     Sun 14 Apr 2024 21:18:55 +0000
Manifest next update:     Mon 15 Apr 2024 22:43:55 +0000
Files and hashes:         1: 34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa (hash: n4H587CMfqzguk9T357M6CyyXlRTMMw3lMZMj1xE17k=)
                          2: 323830343a363537303a3a2f33322d3336203d3e20323639343930.roa (hash: B9kdj6Am0ntl0Oq+iwhwcchZl45tF+iV3qz5O22wTxg=)
                          3: C0501490D0E5E31AEE0C8BBD76C2719A183C500C.crl (hash: ZGlP6LS/nto8Xl0jMnOv3A/ZQSLoJvHltABMElgoNQw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:64:16:01:b7:b3:f6:20:f3:25:ea:d5:bc:09:c0:57:d6:11:79:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0501490D0E5E31AEE0C8BBD76C2719A183C500C
        Validity
            Not Before: Apr 14 21:18:55 2024 GMT
            Not After : Apr 15 22:43:55 2024 GMT
        Subject: CN=1D74B0149FCD3F038C27645D3B15CF3C78BD0E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:60:13:5c:63:e8:f4:55:2e:7f:f1:ae:0e:33:
                    8a:ed:3e:7a:37:7e:ba:20:82:c7:75:93:9c:40:15:
                    71:8f:d9:f5:27:5d:c3:1a:00:64:92:c6:65:c4:98:
                    09:03:a9:19:68:57:aa:57:ed:44:24:54:75:5f:16:
                    9c:07:30:67:7b:02:4a:27:db:cb:4b:68:7c:c4:8e:
                    b7:a8:e5:c1:36:a1:2d:4e:91:ee:e3:21:30:ab:9c:
                    67:74:9e:3d:39:a2:f8:1c:90:19:6c:87:cc:9e:93:
                    14:30:1e:c2:72:7d:35:0d:45:a7:47:ea:cf:6f:7a:
                    97:9e:41:12:32:03:d7:97:43:99:c1:55:4a:81:d4:
                    e1:0a:93:6c:c7:d3:bd:13:8c:da:34:83:37:dc:83:
                    8e:8e:04:d9:61:e8:c3:24:0a:ac:60:b5:c5:6b:db:
                    5c:cf:8c:d9:27:05:52:80:83:89:e9:9f:de:63:2d:
                    71:39:87:01:90:d6:96:59:3e:74:2e:21:85:46:89:
                    04:d1:0f:1c:d7:a6:cd:a2:05:8e:45:be:06:a7:05:
                    12:58:b5:06:67:94:2c:9d:a8:fb:41:bf:29:bf:36:
                    8f:fb:0e:c4:11:12:e4:ef:ac:ae:47:31:87:fd:a2:
                    79:92:24:b5:2d:12:45:f0:94:3c:8b:ee:ac:c8:ed:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:74:B0:14:9F:CD:3F:03:8C:27:64:5D:3B:15:CF:3C:78:BD:0E:58
            X509v3 Authority Key Identifier:
                keyid:C0:50:14:90:D0:E5:E3:1A:EE:0C:8B:BD:76:C2:71:9A:18:3C:50:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/C0501490D0E5E31AEE0C8BBD76C2719A183C500C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:31:1f:2f:b2:8c:a9:54:9b:62:62:01:2e:90:6b:f4:b6:32:
         b3:af:70:98:76:4c:bd:d7:2c:ab:2c:96:aa:67:dd:19:be:cf:
         d6:7a:6d:b6:8c:0c:5b:42:66:b8:c4:35:c8:cd:16:23:2b:83:
         ce:fe:9e:6b:32:92:c2:9f:c2:cf:ae:8e:85:de:b3:19:b6:e8:
         20:55:c9:53:5a:3f:78:ee:b8:98:c2:7a:49:83:29:31:c2:17:
         7c:77:b9:1e:ea:08:bb:1f:24:95:ad:2e:c2:2d:12:55:f5:e0:
         63:33:0a:1b:9e:e5:a8:d4:95:70:5c:48:9c:88:58:96:d4:27:
         f4:72:6e:5a:04:e4:bb:a3:2e:18:a7:9f:e6:83:33:4f:aa:4d:
         e6:13:5e:a7:8b:90:e1:d4:45:69:3b:c9:50:13:90:d6:4f:a9:
         17:85:69:77:6a:96:f1:ff:e3:82:6b:43:da:c1:94:49:5f:b6:
         5f:91:df:ed:75:66:cd:35:b6:01:d1:05:84:22:8c:43:15:ba:
         ba:9a:2b:05:1c:31:bd:9e:93:b3:e9:8b:b2:c3:e4:25:11:ba:
         cd:b6:46:b5:25:e4:77:18:81:b5:a9:13:5f:30:18:c7:bd:7c:
         0f:63:7d:76:de:41:20:c1:ed:a6:d3:5c:ab:94:66:12:45:58:
         dc:e3:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----