Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.mft
File:                     199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.mft (raw, json)
Hash identifier:          y9xRDPs2KN9oB5k9vIpeVEC8I8nLXAeJv8ICH5HlLiE=
Subject key identifier:   30:9C:68:57:C8:5B:46:9F:17:3E:E8:73:95:90:19:DA:15:D5:B7:68
Authority key identifier: 19:9B:A2:FB:7F:0B:E4:E6:A2:75:59:DB:CE:B2:8E:89:0E:60:34:F7
Certificate issuer:       /CN=199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7
Certificate serial:       6EA16F455EF6D853ECE929EC3432AE32017C6673
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.mft
Manifest number:          033F
Signing time:             Sun 14 Apr 2024 21:07:49 +0000
Manifest this update:     Sun 14 Apr 2024 21:02:49 +0000
Manifest next update:     Mon 15 Apr 2024 23:37:49 +0000
Files and hashes:         1: 199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.crl (hash: pVTePsvyVu6KFO75bnoV/j89QOoym7fU/uWpJssCn88=)
                          2: 34352e3233332e32342e302f32322d3234203d3e20323637323938.roa (hash: KjXogFt5FFEePrELFmmItpUYWimdEOYLIKv1qWEpFwU=)
                          3: 323830343a346235343a3a2f33322d3438203d3e20323637323938.roa (hash: Zz90oNSE4GPUG2mxukfCVkqQcvsl42ayRDIRpU1hSio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a1:6f:45:5e:f6:d8:53:ec:e9:29:ec:34:32:ae:32:01:7c:66:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7
        Validity
            Not Before: Apr 14 21:02:49 2024 GMT
            Not After : Apr 15 23:37:49 2024 GMT
        Subject: CN=309C6857C85B469F173EE873959019DA15D5B768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:5a:c7:cf:cb:ec:45:38:9a:64:02:e1:1e:
                    25:35:07:5d:ee:eb:a8:25:e8:17:e4:33:2e:c4:24:
                    e0:9f:ac:4b:ff:3d:ec:bb:71:bd:d5:87:b4:3f:ca:
                    19:d9:5c:a6:04:d4:ef:99:f3:c4:4d:ac:f6:fa:c9:
                    dc:90:c9:9e:52:04:57:7b:88:c1:ce:5a:6b:75:12:
                    22:d0:a1:47:f8:2e:88:ca:e7:34:55:95:29:6b:d2:
                    5e:1a:f7:8c:ff:db:ec:45:ff:7c:67:ac:74:e9:e8:
                    58:a8:13:73:dd:bc:32:46:7a:c2:f0:7e:76:50:de:
                    a0:d3:8d:b4:aa:a8:63:73:ed:e0:a4:a3:07:0a:2b:
                    94:ca:8c:f5:6d:ef:70:4a:c0:b6:5d:b2:0f:6c:00:
                    6c:82:1c:3c:43:c8:05:b6:ed:3f:d9:bc:85:23:b5:
                    52:66:1d:4a:d2:bf:34:eb:86:20:d9:30:9b:c8:8b:
                    92:f6:97:de:ed:bb:ce:b5:39:49:a9:df:f2:17:36:
                    23:b6:b3:e3:5b:f7:63:31:47:ce:4b:5b:4f:6b:7a:
                    89:e9:45:9b:db:f6:b7:d6:0c:e2:de:96:04:d7:de:
                    51:4f:34:8e:96:19:45:de:87:e3:1f:1a:54:fb:00:
                    cb:33:60:4c:bb:f4:c9:9e:a1:7a:7e:7b:12:ae:90:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9C:68:57:C8:5B:46:9F:17:3E:E8:73:95:90:19:DA:15:D5:B7:68
            X509v3 Authority Key Identifier:
                keyid:19:9B:A2:FB:7F:0B:E4:E6:A2:75:59:DB:CE:B2:8E:89:0E:60:34:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:13:50:8e:17:27:fd:3c:95:f9:58:98:0a:c0:92:a6:89:9a:
         45:3b:2e:fc:74:44:24:fa:fb:35:33:49:d3:e6:ea:aa:65:ab:
         b2:60:cd:12:31:10:e2:c1:28:57:e2:cd:8c:a8:5a:17:67:e9:
         c3:94:21:86:d7:f4:7d:2d:ed:16:25:bb:81:2b:50:ec:98:22:
         2f:f7:8d:a8:f2:95:29:aa:7c:18:14:fa:e7:c9:65:77:ff:75:
         2b:54:17:69:ba:31:00:46:ca:91:a6:b4:07:e9:ee:71:d9:06:
         7f:04:17:2c:22:4c:9d:3f:48:e5:0a:02:62:76:8a:e8:24:75:
         11:4a:f8:12:dc:95:35:46:1a:59:e2:36:e0:d4:06:84:b5:83:
         11:6b:7d:6b:ff:4f:8b:5b:60:b5:34:8b:bf:72:36:5b:d6:5d:
         3a:df:cc:16:c4:e0:e0:45:f5:d5:7f:1d:d4:73:3d:96:e5:7e:
         0b:0b:ed:3b:91:98:2c:3f:28:4f:70:a8:97:f4:4a:55:d1:5a:
         ea:00:c4:8d:09:f8:30:36:da:b9:98:30:13:20:e2:2a:78:34:
         85:eb:ab:47:cf:63:48:33:58:fd:2e:05:6d:ae:d5:b3:4d:1b:
         70:bf:5f:0d:35:ab:38:3a:64:37:a8:9d:5b:9c:35:b0:8b:b6:
         b4:eb:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----