Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.mft
File:                     0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.mft (raw, json)
Hash identifier:          vJCXQ5fpBmFekqKDo4D0qJfWyv6TOf+o+h5gbu4ldMs=
Subject key identifier:   E2:D0:78:BE:9D:99:08:C2:D0:FE:A2:E3:26:0E:11:96:5C:6F:29:4A
Authority key identifier: 01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB
Certificate issuer:       /CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
Certificate serial:       0F30441C86553FC146224A6F3C8716E0B7D74C54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.mft
Manifest number:          04A4
Signing time:             Sun 14 Apr 2024 20:30:00 +0000
Manifest this update:     Sun 14 Apr 2024 20:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:29:00 +0000
Files and hashes:         1: 3137302e3234342e3130342e302f32322d3234203d3e20323632393532.roa (hash: /mxnFYoG9eseIgYA50brB/+keI4/xButulO6j04SJCg=)
                          2: 3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa (hash: Qnuh+0yZJd3Wqilz6eIEm8uJ20smFxVlCfTCnJC3UVA=)
                          3: 3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa (hash: M35/t6s5ico2nShNYogfj7pdaZdBBWB35zeMOvDta0A=)
                          4: 0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.crl (hash: Rz3wGTERvKhQZEBzQ4pAyaLGY0y/StvPiMZSFGAfwI0=)
                          5: 323830343a6536343a3a2f33322d3438203d3e20323632393532.roa (hash: wsSTbiAfImkc/y9gBC6BiGjJ6gXEcAOmjSDc6D3SGlE=)
                          6: 3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa (hash: OJOAh8b+1pdG0nuBjLIurXPswY9vQBMnQWBxdGrvCiE=)
                          7: 3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa (hash: E2qg+rAYvPkryywF8W1Cn9SgxVcc/5zNY11d+naeXL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:30:44:1c:86:55:3f:c1:46:22:4a:6f:3c:87:16:e0:b7:d7:4c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
        Validity
            Not Before: Apr 14 20:25:00 2024 GMT
            Not After : Apr 16 00:29:00 2024 GMT
        Subject: CN=E2D078BE9D9908C2D0FEA2E3260E11965C6F294A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:e0:ff:24:ae:70:78:dc:41:37:48:63:d3:
                    20:ab:89:25:ee:6c:9a:9c:d6:59:70:b0:7f:38:10:
                    df:2c:d9:cc:69:2d:c6:be:28:ae:af:50:12:3e:02:
                    85:32:04:7d:27:fc:f5:47:fc:57:3c:42:72:53:f8:
                    a8:67:08:f8:24:8a:e1:3b:f3:a5:03:95:6e:8e:6f:
                    07:da:b4:11:0e:e1:2f:5b:8d:05:64:75:97:a9:cd:
                    3c:7c:a4:57:4b:32:f5:87:52:0e:1c:71:3c:a3:5c:
                    cc:54:35:7e:75:b6:d3:01:6c:ef:c6:40:29:9a:8a:
                    2c:e1:5c:be:fa:78:64:c3:52:b1:d5:49:66:70:6c:
                    df:97:ef:19:ee:f5:89:55:e3:55:9d:55:b1:47:5a:
                    30:2a:3b:ef:d8:7a:c3:75:41:35:69:df:d2:bb:bb:
                    e0:8b:63:86:c6:11:f2:63:d5:84:e7:84:4d:e1:38:
                    8e:cc:53:c2:01:3d:c2:a3:de:2a:e3:3b:2a:3e:28:
                    7f:bd:08:12:58:ba:3c:0d:8e:db:e2:14:f1:70:33:
                    81:6d:2a:b3:f3:a8:2f:b0:5d:1b:e4:58:1e:b4:03:
                    3d:ef:b4:1d:bc:da:d5:74:d4:86:78:1e:d3:cd:e0:
                    06:71:c8:32:e1:1b:85:5e:ed:68:72:4f:44:50:dc:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D0:78:BE:9D:99:08:C2:D0:FE:A2:E3:26:0E:11:96:5C:6F:29:4A
            X509v3 Authority Key Identifier:
                keyid:01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:74:9e:d0:66:d4:6e:dd:7c:8b:86:d6:07:f5:81:00:1e:67:
         a3:eb:a5:f0:2f:c9:d7:d2:72:e2:f8:32:6e:bf:65:0f:c1:c8:
         79:40:3e:2c:ad:12:84:4b:9f:79:07:bd:4a:37:66:8f:60:99:
         f6:72:ec:69:60:cd:da:64:d4:b3:6e:bc:5e:6f:b6:b9:8a:25:
         80:0d:85:1c:05:8a:8f:f9:73:a2:09:a5:1f:f7:83:82:d8:fb:
         a7:a4:73:4d:00:e8:67:80:8e:af:a4:6f:7e:db:25:87:4b:41:
         01:e4:6a:7c:b6:6f:f0:e7:c4:86:a0:19:d4:59:c4:3c:72:9c:
         37:44:35:6c:7e:bd:2c:a0:c8:bf:97:da:41:ae:5a:78:3e:7e:
         09:cb:83:dd:95:a5:5f:a3:2a:12:a2:ad:3a:33:c4:9a:b6:b5:
         2f:ae:78:9d:8c:86:ba:a8:fd:e8:f2:fd:aa:6c:91:0f:ad:dc:
         0d:01:99:b2:41:c2:48:12:bf:ab:f2:9e:ec:9b:fa:7b:2f:c2:
         96:c4:bd:e0:62:67:26:41:ab:f5:2f:5d:03:dd:a4:fb:93:23:
         c5:f2:f0:83:a3:2b:c1:83:6b:12:d7:a4:b0:2a:75:f5:fa:58:
         e7:cc:e7:d7:29:6c:e0:35:26:a4:67:8b:d7:3d:45:9e:05:5c:
         8d:0a:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----