Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.mft
File:                     4544E411778EFB11B81DA1588CD69CC920FEC02F.mft (raw, json)
Hash identifier:          TboguOGz1MTsXmwj4aaswVzimhbw4XAUjHaisGutezw=
Subject key identifier:   B8:68:C3:53:EC:37:D1:50:7F:AB:16:7D:46:D4:CD:8F:70:E5:DD:9B
Authority key identifier: 45:44:E4:11:77:8E:FB:11:B8:1D:A1:58:8C:D6:9C:C9:20:FE:C0:2F
Certificate issuer:       /CN=4544E411778EFB11B81DA1588CD69CC920FEC02F
Certificate serial:       2114363E623C005877F8E36A535A675C10070F23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.mft
Manifest number:          23
Signing time:             Sun 26 Nov 2023 12:43:33 +0000
Manifest this update:     Sun 26 Nov 2023 12:38:33 +0000
Manifest next update:     Mon 27 Nov 2023 16:07:33 +0000
Files and hashes:         1: 323830343a353764303a3a2f33322d313238203d3e20323638303838.roa (hash: m4AL811YX4x9WxZ7fXsK49TVzBYmnUKAO429xaGDt1Q=)
                          2: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: NMDWCEKgeZz68ABP9U73QM4Jejrqw/pZlj/awgKfjXM=)
                          3: 4544E411778EFB11B81DA1588CD69CC920FEC02F.crl (hash: zrdTNivBiJ6dVy5XOU5+twg5SjMlGGz3OYLsYWBIlTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:14:36:3e:62:3c:00:58:77:f8:e3:6a:53:5a:67:5c:10:07:0f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4544E411778EFB11B81DA1588CD69CC920FEC02F
        Validity
            Not Before: Nov 26 12:38:33 2023 GMT
            Not After : Nov 27 16:07:33 2023 GMT
        Subject: CN=B868C353EC37D1507FAB167D46D4CD8F70E5DD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:99:6f:b7:ab:31:49:44:c1:d7:9b:17:ce:
                    10:fb:d7:f8:61:f0:a5:2c:98:07:b0:6f:e3:f5:10:
                    47:74:2d:f7:ad:67:e1:1a:9b:e2:c8:b4:91:b3:f5:
                    fc:49:6d:e8:7d:f6:8a:30:54:da:8a:8c:95:3c:1a:
                    24:d2:40:77:c7:04:46:4a:8e:83:f0:a7:9f:80:b6:
                    5b:0f:0b:9e:e6:87:b7:dd:fc:68:61:d0:75:96:60:
                    d2:c5:ab:ab:96:0b:3e:d6:fe:27:00:1c:30:00:96:
                    13:fd:0f:fb:de:17:ff:6f:cb:0f:7a:6b:c8:55:a9:
                    d5:1f:e5:e7:48:f3:ed:b8:b0:17:ab:0c:bd:d4:2f:
                    18:e7:39:df:fb:b1:f7:5c:ef:9b:e8:93:b2:53:9b:
                    c9:39:1d:71:e4:10:05:39:36:2d:3c:42:6b:47:94:
                    f7:60:17:cd:79:f4:b7:f8:22:a7:58:48:5e:1d:fd:
                    68:55:c1:3b:09:6f:04:ad:ab:b5:38:08:6b:7f:ba:
                    51:44:a4:c7:cc:db:e3:52:b8:a3:4c:18:3b:f6:35:
                    54:da:af:34:b2:fc:98:aa:54:65:c3:c9:72:fc:31:
                    77:4c:d5:90:ad:8f:6a:ad:fa:2e:c8:44:93:7a:75:
                    15:29:e1:be:37:43:74:72:0b:77:00:73:86:47:ab:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:C3:53:EC:37:D1:50:7F:AB:16:7D:46:D4:CD:8F:70:E5:DD:9B
            X509v3 Authority Key Identifier:
                keyid:45:44:E4:11:77:8E:FB:11:B8:1D:A1:58:8C:D6:9C:C9:20:FE:C0:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/4544E411778EFB11B81DA1588CD69CC920FEC02F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:29:39:3b:0a:37:51:15:bb:9e:98:54:ba:c7:d1:d0:63:
         26:47:97:ab:79:20:d6:32:f5:e7:1b:a5:ba:3d:d7:69:d0:fb:
         96:39:f0:77:dd:ec:7a:cd:e7:6f:29:29:d0:e4:1a:22:ad:b2:
         32:46:c7:21:e8:68:de:f4:27:d7:7b:d5:8d:c9:74:4b:6d:07:
         a0:f8:4a:5a:c6:3e:6d:96:ba:ae:8b:d4:8b:48:ef:29:95:85:
         1c:39:40:cd:4e:6d:c4:61:43:49:b4:cc:25:e7:47:e6:94:17:
         01:10:3f:0a:b2:a3:45:b8:2e:97:80:24:0a:4b:18:ba:83:50:
         7f:e6:80:35:86:f9:78:34:6e:7c:b2:b9:3c:02:0b:73:91:ff:
         4d:11:cc:92:7a:24:90:ba:80:21:54:bf:eb:b2:81:83:87:9e:
         25:46:d8:cf:74:d2:35:bd:d8:93:a7:f3:51:c4:9e:d7:1b:e8:
         1a:fb:00:ed:a2:f5:81:32:47:f4:a4:6b:b0:66:27:76:12:f6:
         23:5b:16:9c:40:03:9a:f5:74:06:be:b3:2b:cc:ef:8a:e6:ed:
         d0:9b:c5:2b:71:7f:62:13:99:c6:91:fe:cf:67:37:3d:bd:91:
         f2:d0:75:a5:83:76:55:1b:ab:db:7b:5e:40:6b:5a:45:d4:bc:
         e1:13:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----