Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.mft
File:                     220AE1280604BECE0967859CB7EF5F59A2813C95.mft (raw, json)
Hash identifier:          TK8rO66TChg7IxqErkqUpDvLOpgDYCKODlGZQjmm+rE=
Subject key identifier:   35:6B:F9:3E:B8:F6:25:7C:6E:2D:07:79:45:1F:C8:F1:DA:CC:B2:C1
Authority key identifier: 22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95
Certificate issuer:       /CN=220AE1280604BECE0967859CB7EF5F59A2813C95
Certificate serial:       70CA9628F2EEB106B10C8C563916CB00AF5E6DAA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.mft
Manifest number:          01C0
Signing time:             Mon 15 Apr 2024 10:26:40 +0000
Manifest this update:     Mon 15 Apr 2024 10:21:40 +0000
Manifest next update:     Tue 16 Apr 2024 12:48:40 +0000
Files and hashes:         1: 3137302e3234342e32342e302f32322d3234203d3e20323636343839.roa (hash: Tz/hEOgq/0v3xWXi8K9oekoXqNrZDgjbm7QJZVdIQF8=)
                          2: 220AE1280604BECE0967859CB7EF5F59A2813C95.crl (hash: mKDX2KCg9ZLa0YV50OMH87qaiR8rpOgtbxMFEZVcO4I=)
                          3: 323830343a333839633a3a2f33322d3430203d3e20323636343839.roa (hash: AiWN8C/yEW5vQiwH2lIoI9hUiorgNrZZ9b7EYTiGxQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ca:96:28:f2:ee:b1:06:b1:0c:8c:56:39:16:cb:00:af:5e:6d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220AE1280604BECE0967859CB7EF5F59A2813C95
        Validity
            Not Before: Apr 15 10:21:40 2024 GMT
            Not After : Apr 16 12:48:40 2024 GMT
        Subject: CN=356BF93EB8F6257C6E2D0779451FC8F1DACCB2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:18:e1:9b:73:ca:79:4f:32:e7:4b:71:cd:
                    aa:8a:dc:01:bc:25:14:37:d9:b5:8b:42:2a:da:39:
                    16:52:e0:bc:fb:fa:96:4a:c7:a8:3f:b8:6c:a1:ee:
                    7b:56:58:02:b7:dc:b1:a1:f1:2c:e2:7c:89:dd:de:
                    2c:2f:46:3e:84:58:8a:ea:d0:b0:fd:4b:a8:a9:db:
                    c5:f8:97:75:2b:0c:b1:a3:ef:2a:4f:e5:5b:5d:77:
                    d7:e1:8f:f6:35:61:6d:0e:08:b6:1d:c0:47:7a:6b:
                    45:1c:ab:f6:d9:b1:e5:2c:2e:0d:d9:be:13:15:5f:
                    e8:62:ab:be:d4:52:b0:5b:1b:35:b2:7f:64:81:8e:
                    da:ff:d5:99:e1:fa:2f:97:9c:cd:d7:77:fa:e0:a9:
                    c1:07:87:6c:69:0d:36:c1:1f:71:7a:6a:e6:9b:09:
                    4e:02:43:4a:1a:15:62:3d:bb:ce:c4:15:8a:a6:3c:
                    1e:d4:e3:a5:af:4f:e0:cb:81:39:e9:0c:87:3f:16:
                    60:ce:72:11:6b:3e:4b:b2:3f:b6:17:eb:0d:6c:5b:
                    b2:85:db:32:1d:f3:61:d6:c5:5f:bc:5a:90:8b:0c:
                    b7:9c:75:f3:0c:90:8e:6b:25:d0:9d:99:77:07:1f:
                    2d:81:fa:67:ba:05:ef:08:76:63:56:4a:3d:d4:65:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6B:F9:3E:B8:F6:25:7C:6E:2D:07:79:45:1F:C8:F1:DA:CC:B2:C1
            X509v3 Authority Key Identifier:
                keyid:22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:05:f4:a4:d4:ce:9d:99:3e:aa:2c:33:96:a3:40:0c:6c:a0:
         d9:d4:f2:17:ae:af:2b:bf:d9:2f:96:10:08:af:6d:c5:27:21:
         92:fb:0f:38:35:c0:e3:27:f3:6a:d6:9f:27:ef:e0:16:c1:1a:
         fe:a0:67:4f:f2:2a:48:90:c3:d5:fa:4a:d9:6d:b8:de:53:46:
         ff:95:16:ab:b8:a8:80:95:9a:a5:8b:16:86:8c:15:67:37:67:
         ca:7e:a6:7b:0e:8c:94:10:a6:d7:52:2b:04:f5:55:ec:c5:a9:
         a3:85:23:18:ac:0d:65:72:8d:67:87:d2:6c:26:12:6a:52:36:
         bb:7f:1b:b8:53:37:13:a5:ff:f7:70:eb:61:33:01:d4:34:56:
         a2:8c:e8:c1:38:4f:f1:57:e4:d6:3b:f2:00:43:b7:e3:99:04:
         a9:51:5b:92:86:a6:3f:08:58:92:4f:30:83:81:2a:d7:9a:fa:
         5d:a1:62:70:6f:66:cf:22:e0:25:ba:ab:56:0f:34:a3:1d:ed:
         30:79:a1:46:48:8b:a8:04:38:c3:f7:ed:dd:06:28:8c:a3:6b:
         38:0c:45:3c:78:6f:b7:d9:59:7f:9b:1b:45:e9:6e:03:12:c1:
         53:d3:a2:73:b3:c1:56:50:a2:62:16:a2:37:4c:92:1c:48:d5:
         18:2a:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----