Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.mft
File:                     1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.mft (raw, json)
Hash identifier:          OfDveemtA7a5BsU9R7ralMWusrWAjb3Or3qrglRF1GE=
Subject key identifier:   80:A9:A2:75:0A:2B:83:A9:41:71:FE:94:D5:9F:99:20:94:68:52:6C
Authority key identifier: 1E:2E:42:BF:80:43:6E:9A:3F:BC:6D:BB:ED:C0:16:55:69:12:AA:75
Certificate issuer:       /CN=1E2E42BF80436E9A3FBC6DBBEDC016556912AA75
Certificate serial:       5A129350349ED6F4E125AED3C9CE2C8676434E10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.mft
Manifest number:          FE
Signing time:             Mon 15 Apr 2024 09:38:56 +0000
Manifest this update:     Mon 15 Apr 2024 09:33:56 +0000
Manifest next update:     Tue 16 Apr 2024 11:45:56 +0000
Files and hashes:         1: 34352e3136382e3137362e302f32322d3332203d3e20323638303738.roa (hash: fSwRqCYY5NseZbiAAULd3witNO6xGUo1FcB1vFLJ5ho=)
                          2: 1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.crl (hash: KZBJmNFaIy3dthpddj10feZ/mi4Fz91ShuxA1LCOqFU=)
                          3: 323830343a353761383a3a2f33322d313238203d3e20323638303738.roa (hash: 5suIyvybWGt0cVpIwHgNQiHHE4P4S8SrT0aBXk+F05A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:12:93:50:34:9e:d6:f4:e1:25:ae:d3:c9:ce:2c:86:76:43:4e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E42BF80436E9A3FBC6DBBEDC016556912AA75
        Validity
            Not Before: Apr 15 09:33:56 2024 GMT
            Not After : Apr 16 11:45:56 2024 GMT
        Subject: CN=80A9A2750A2B83A94171FE94D59F99209468526C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:ca:c5:53:d7:93:54:7e:ee:c4:e9:ca:8a:
                    b5:fb:3c:ea:27:d9:43:49:eb:57:b9:d0:76:68:93:
                    5d:ac:4b:08:56:d9:42:94:5b:41:32:92:de:00:0b:
                    63:8b:ec:a6:8a:36:a5:de:9f:d0:63:4f:06:a1:56:
                    27:55:dd:d1:01:d1:dd:2e:f8:10:3a:e7:d3:a6:dc:
                    d0:a5:f1:89:3a:d9:c8:59:a0:ee:f2:98:63:83:61:
                    11:77:b3:75:bb:3c:83:5f:05:0c:f7:e9:66:48:ab:
                    0c:fc:43:ab:ad:77:b0:0c:a0:11:75:0f:d5:8d:0a:
                    9a:d3:e0:64:dd:46:4a:b1:a1:43:55:2a:6b:53:4e:
                    fb:fb:65:94:cf:27:a3:67:90:d5:c0:e8:68:34:1f:
                    a4:67:cd:c6:81:d5:29:71:d2:bd:0e:4d:6b:66:85:
                    80:71:09:34:c4:f9:fa:00:9e:bc:a3:65:2d:b8:77:
                    ac:c3:85:51:de:24:b1:5e:d5:3f:13:ca:ed:06:78:
                    61:42:db:54:75:3c:c7:cd:6c:fc:7e:55:59:33:e3:
                    4f:52:7f:b5:9c:21:71:13:4c:c2:eb:ce:0c:af:fe:
                    8f:ee:05:eb:38:15:d8:80:9e:7f:1d:71:b2:8c:0d:
                    ca:43:b3:00:55:bf:7b:57:01:97:31:a8:30:6e:c1:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A9:A2:75:0A:2B:83:A9:41:71:FE:94:D5:9F:99:20:94:68:52:6C
            X509v3 Authority Key Identifier:
                keyid:1E:2E:42:BF:80:43:6E:9A:3F:BC:6D:BB:ED:C0:16:55:69:12:AA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:a8:12:fc:46:d8:e0:79:06:4d:1b:68:95:6a:91:d0:ff:
         d3:31:a3:88:60:e2:08:99:66:29:e6:e4:84:c5:16:35:21:fa:
         13:78:50:99:10:e7:eb:97:89:ad:88:19:91:3e:c8:69:23:cd:
         65:bf:75:8e:9a:88:a5:12:f2:86:ea:5c:bf:39:a4:84:34:dd:
         01:c6:e5:74:54:eb:4f:3f:25:07:b8:cf:90:30:87:03:57:35:
         e8:13:cd:e0:33:4c:32:58:ac:a7:e3:fa:c1:23:c3:fc:a5:fd:
         aa:08:f3:d6:d5:0d:d2:86:43:84:ed:56:a6:50:c0:a4:df:f1:
         a7:99:06:14:16:39:25:cb:91:10:b6:c0:a8:5f:da:16:66:82:
         e0:8e:e6:bc:36:1c:a5:4b:8d:be:46:eb:cf:99:f1:a6:a3:22:
         f2:f2:6f:9c:e8:96:d6:ea:f5:d6:3b:f6:19:8d:5e:69:80:cd:
         72:dc:e4:d9:fd:e8:a9:34:df:0e:ad:b0:25:b7:de:f7:95:51:
         b0:e4:cf:39:f1:00:02:23:dc:ca:28:c7:f0:36:e4:5b:e2:33:
         91:f5:e7:3b:fa:fa:a1:eb:92:11:57:a4:c2:f7:4b:d8:e8:3a:
         20:91:88:04:45:eb:fb:0e:1f:2e:d6:35:e8:d1:0d:32:91:4d:
         07:44:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----