Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/D019263BB7CC1DC5591FE5F5525650626FF98886.mft
File:                     D019263BB7CC1DC5591FE5F5525650626FF98886.mft (raw, json)
Hash identifier:          KVO1Mzrg21mwDcj3RVinLyar4hA4gnGZ0uHbmCGVxFc=
Subject key identifier:   EA:92:02:A6:CC:16:0A:AD:FC:5C:F7:D3:A5:BD:49:BD:F8:FF:34:CA
Authority key identifier: D0:19:26:3B:B7:CC:1D:C5:59:1F:E5:F5:52:56:50:62:6F:F9:88:86
Certificate issuer:       /CN=D019263BB7CC1DC5591FE5F5525650626FF98886
Certificate serial:       7392948718E9B03EB3CC97CF2B2B34267464C98E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D019263BB7CC1DC5591FE5F5525650626FF98886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/D019263BB7CC1DC5591FE5F5525650626FF98886.mft
Manifest number:          01C7
Signing time:             Sun 14 Apr 2024 20:34:41 +0000
Manifest this update:     Sun 14 Apr 2024 20:29:41 +0000
Manifest next update:     Tue 16 Apr 2024 00:01:41 +0000
Files and hashes:         1: D019263BB7CC1DC5591FE5F5525650626FF98886.crl (hash: 0Gf/Yft3haqOyLDJ7FB5ifPsSKUn02BnjoRBl4YmHXs=)
                          2: 323830343a323731303a3a2f33322d3438203d3e20323633383733.roa (hash: O14SgQPL9eraePsWEXnh+W8ztAj08RlFTSlnPzgW7iw=)
                          3: 3133382e3138362e31362e302f32322d3234203d3e20323633383733.roa (hash: /d+OBjKTXGI3ZeN+HK3P/alGpkYXUNWQ8LUAakGoIiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:92:94:87:18:e9:b0:3e:b3:cc:97:cf:2b:2b:34:26:74:64:c9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D019263BB7CC1DC5591FE5F5525650626FF98886
        Validity
            Not Before: Apr 14 20:29:41 2024 GMT
            Not After : Apr 16 00:01:41 2024 GMT
        Subject: CN=EA9202A6CC160AADFC5CF7D3A5BD49BDF8FF34CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:95:fe:6b:4e:75:f1:bf:41:b7:3b:27:e0:
                    79:b9:27:f2:fa:c2:b2:1d:c9:11:bc:80:49:6b:22:
                    4d:1a:f1:c1:d2:2c:f6:df:4d:17:a5:d9:cd:94:e2:
                    bd:bb:c5:e8:64:77:16:26:16:9f:63:11:b7:da:8b:
                    ef:a2:bc:f5:74:bc:48:ac:be:3a:fc:ed:07:92:35:
                    ec:e2:17:59:1b:27:6c:1c:c9:9d:d3:c8:96:a6:36:
                    67:82:60:f7:f3:22:d3:35:31:2a:35:3e:c1:8b:fb:
                    ba:69:15:8e:dc:91:8a:f0:ba:b4:5f:68:5f:bb:c5:
                    aa:f5:ec:9c:bb:2d:b4:62:b3:ca:a5:92:78:ef:87:
                    96:29:2b:6f:de:54:3a:ee:f0:e5:30:48:fb:6d:91:
                    8d:b5:05:68:3b:42:ec:92:b8:91:79:d2:38:ac:16:
                    75:93:ab:7a:ec:92:68:e5:ae:03:1b:df:9a:d7:cb:
                    b5:2c:26:86:65:f6:8a:43:06:7f:62:9f:76:76:d6:
                    c1:3f:53:ff:88:a2:26:f4:5e:6c:28:b2:7b:8b:d9:
                    1e:53:aa:80:58:08:e8:de:f0:9b:a8:6e:54:25:ca:
                    e1:5b:38:79:96:97:f8:78:87:75:3e:29:6a:f3:78:
                    10:fe:2c:88:87:7e:db:e0:20:16:5a:5c:61:47:34:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:02:A6:CC:16:0A:AD:FC:5C:F7:D3:A5:BD:49:BD:F8:FF:34:CA
            X509v3 Authority Key Identifier:
                keyid:D0:19:26:3B:B7:CC:1D:C5:59:1F:E5:F5:52:56:50:62:6F:F9:88:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/D019263BB7CC1DC5591FE5F5525650626FF98886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D019263BB7CC1DC5591FE5F5525650626FF98886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/D019263BB7CC1DC5591FE5F5525650626FF98886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:71:1e:87:0e:c6:24:5e:78:44:3f:18:22:d9:bd:6f:c7:21:
         b7:0c:e4:e4:80:19:0e:8c:8c:58:58:13:4a:ff:d3:25:1a:77:
         3d:2f:af:92:4e:be:47:7d:91:41:d7:1c:28:99:7c:0d:23:66:
         b3:bd:9b:8e:9b:17:52:b6:f4:61:d2:66:93:98:2f:03:de:56:
         28:87:08:85:31:bb:e3:3a:43:94:0a:2c:ad:8b:2a:48:5e:b2:
         51:f1:00:a2:f1:45:6e:61:4f:eb:28:b8:87:91:85:83:d6:33:
         59:c2:08:cb:b0:ab:b1:95:54:18:ce:ea:c0:34:87:26:9a:ce:
         61:04:aa:b0:b6:70:4f:89:07:19:bd:47:f9:df:8e:83:21:1e:
         30:c1:bc:72:7c:5f:75:01:d1:23:e2:f3:12:44:7b:f0:14:7d:
         4d:e0:f9:fb:1b:35:cd:44:43:06:a9:a5:61:05:b2:f8:31:e1:
         1c:ec:bf:b2:74:eb:af:ab:87:9b:06:65:a1:d2:be:a4:d8:4a:
         8b:f4:5a:c1:9e:44:ce:18:43:33:2d:fe:56:6c:a7:48:fa:a1:
         03:bb:f6:2e:fd:2c:78:c7:bd:94:7a:ba:21:97:76:2e:82:57:
         96:51:be:6c:7f:81:c1:45:8a:59:3a:c7:b2:0b:09:12:0d:3b:
         3a:39:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----