Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/062A272342034B19477F5346250DEEAC95A2F700.mft
File:                     062A272342034B19477F5346250DEEAC95A2F700.mft (raw, json)
Hash identifier:          4xYpQ+4oY9oTM6+e3IX/tPQEwwUNFujPrGMT1Rojpnc=
Subject key identifier:   C5:48:3A:51:26:F5:F7:41:14:68:80:4C:FC:17:1C:47:B7:93:A7:66
Authority key identifier: 06:2A:27:23:42:03:4B:19:47:7F:53:46:25:0D:EE:AC:95:A2:F7:00
Certificate issuer:       /CN=062A272342034B19477F5346250DEEAC95A2F700
Certificate serial:       2A92FAF8BF45E8CF9E13A56F0D0D85F68DB78A73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/062A272342034B19477F5346250DEEAC95A2F700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/062A272342034B19477F5346250DEEAC95A2F700.mft
Manifest number:          0200
Signing time:             Mon 15 Apr 2024 02:18:31 +0000
Manifest this update:     Mon 15 Apr 2024 02:13:31 +0000
Manifest next update:     Tue 16 Apr 2024 05:55:31 +0000
Files and hashes:         1: 34352e3138342e3131322e302f32322d3234203d3e20323639333936.roa (hash: 4oTjMowfhCBjnm+BOfIh8zvNWH2FTaS5dqeJTNwo7sI=)
                          2: 323830343a363366633a3a2f33322d3334203d3e20323639333936.roa (hash: p7fh+jzFF6zXbUPV5FDtgC7V1EZJatDJkoJDEVyPGWM=)
                          3: 062A272342034B19477F5346250DEEAC95A2F700.crl (hash: bG4Ak1KJ2/NhCnvH5TFDccQEzyDviRQGEYn0QycxYhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:fa:f8:bf:45:e8:cf:9e:13:a5:6f:0d:0d:85:f6:8d:b7:8a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=062A272342034B19477F5346250DEEAC95A2F700
        Validity
            Not Before: Apr 15 02:13:31 2024 GMT
            Not After : Apr 16 05:55:31 2024 GMT
        Subject: CN=C5483A5126F5F7411468804CFC171C47B793A766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:38:0e:0d:02:11:00:96:28:a8:34:5d:81:
                    f9:66:10:37:e7:75:47:b7:cb:d2:4e:0c:9d:5d:ee:
                    3d:c8:1d:a1:4f:62:bc:74:94:42:9a:f4:5c:8a:c8:
                    97:58:d5:4b:27:4a:d2:5f:56:2f:80:e6:10:c7:bb:
                    73:a4:1c:8b:53:07:f0:08:12:9d:24:44:3a:16:d5:
                    30:e6:b5:e1:83:b2:e6:e4:5d:c7:12:59:ae:dd:73:
                    78:92:28:29:81:a6:bc:d6:09:bc:19:96:d8:e3:00:
                    0a:84:17:34:e6:f6:2f:c3:22:b2:4c:8c:f6:3c:6c:
                    4b:8a:54:7d:da:3e:17:e0:aa:8d:5c:b8:31:9f:82:
                    7c:68:7c:92:dc:d7:e6:e6:50:74:1f:af:6b:c0:a6:
                    4b:20:a6:ff:ba:88:39:f7:74:da:38:65:cb:9f:2e:
                    04:fd:6d:77:76:09:c5:60:fd:64:01:8d:15:ce:9b:
                    d7:c6:e4:02:9e:98:e6:ec:01:a9:71:9a:cc:a3:98:
                    5d:07:f3:81:e2:2f:5d:45:74:5d:dc:06:02:97:e7:
                    2e:87:51:d6:e1:78:a1:a3:4c:9b:3d:24:3f:1b:a8:
                    76:31:8e:48:77:d5:bb:ca:bf:7e:b9:31:a2:b0:5f:
                    2f:35:f0:c7:ec:ad:54:25:cd:19:b1:35:30:6d:b5:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:48:3A:51:26:F5:F7:41:14:68:80:4C:FC:17:1C:47:B7:93:A7:66
            X509v3 Authority Key Identifier:
                keyid:06:2A:27:23:42:03:4B:19:47:7F:53:46:25:0D:EE:AC:95:A2:F7:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/062A272342034B19477F5346250DEEAC95A2F700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/062A272342034B19477F5346250DEEAC95A2F700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/062A272342034B19477F5346250DEEAC95A2F700.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e9:cb:5d:4c:13:ab:42:a5:84:ef:be:5e:fb:70:0e:54:7a:
         5c:f1:cb:3a:dc:2e:a9:9b:00:5b:b8:48:51:72:e9:a6:3c:01:
         53:f6:37:21:6d:37:74:ab:07:42:ea:78:3f:19:35:d9:05:0a:
         85:7b:a8:e5:fc:f3:9d:b9:54:5f:64:af:b0:7c:3e:db:96:ed:
         60:f3:d0:0d:5e:49:6c:78:ad:d8:1f:61:3c:bb:81:91:7c:57:
         38:ef:bd:87:3d:fe:7f:4b:f0:2c:8d:0e:c1:43:c2:ad:dd:11:
         8b:9b:9b:83:7b:bb:b3:9e:27:d3:4b:61:f2:fb:06:b1:42:ad:
         af:81:9c:68:a8:97:6b:bf:48:e1:c4:9d:cd:1e:5d:6a:11:37:
         f3:2d:9e:b3:00:ca:72:7b:f8:9c:3d:5b:58:61:8f:ea:d1:cf:
         bb:39:47:d4:f2:06:b3:fc:1a:f9:25:ee:07:44:a9:ee:20:a7:
         b4:21:61:2b:1b:79:41:82:a2:28:fd:83:c0:2f:e0:23:fa:d6:
         0a:32:2c:c3:61:c6:af:7a:fd:84:18:c1:a7:c8:2c:d8:22:2a:
         40:4b:0c:a1:31:c2:84:73:98:e2:05:1b:fc:4e:46:b5:be:ab:
         e9:04:89:6c:51:c4:5d:3c:bc:0c:96:b7:5f:7c:99:2a:17:fd:
         52:29:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----