Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/D835807A2809E495ACCC08BF63BDD444071C7563.mft
File:                     D835807A2809E495ACCC08BF63BDD444071C7563.mft (raw, json)
Hash identifier:          RvOb+N9EPtDRdHuWIONlDANh0Neaa1HJ7+cC52Fjugg=
Subject key identifier:   4B:28:9C:F8:8B:3B:35:FD:9F:B4:40:89:72:7A:85:D6:69:2C:35:C7
Authority key identifier: D8:35:80:7A:28:09:E4:95:AC:CC:08:BF:63:BD:D4:44:07:1C:75:63
Certificate issuer:       /CN=D835807A2809E495ACCC08BF63BDD444071C7563
Certificate serial:       7D5338F89838EFB91E421346F3E2AC7B6BEC7BDA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D835807A2809E495ACCC08BF63BDD444071C7563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/D835807A2809E495ACCC08BF63BDD444071C7563.mft
Manifest number:          03A1
Signing time:             Mon 15 Apr 2024 02:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 02:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 03:06:00 +0000
Files and hashes:         1: 323830343a363635633a3a2f33322d3336203d3e20323639353533.roa (hash: a9QXa/xhzVWegVpy/sHLNQbzOADZCLVvMVjwuyoUyGE=)
                          2: 34352e3138352e3139322e302f32322d3234203d3e20323639353533.roa (hash: hMywDSfiOHLXCHPR7O5zv6kDyhMzvelIR2BJxSTGafk=)
                          3: D835807A2809E495ACCC08BF63BDD444071C7563.crl (hash: mglw6HmVq9/tltc0/MPQ+91XENYpEQl90Ud+E/oWzZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:53:38:f8:98:38:ef:b9:1e:42:13:46:f3:e2:ac:7b:6b:ec:7b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D835807A2809E495ACCC08BF63BDD444071C7563
        Validity
            Not Before: Apr 15 02:15:00 2024 GMT
            Not After : Apr 16 03:06:00 2024 GMT
        Subject: CN=4B289CF88B3B35FD9FB44089727A85D6692C35C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:36:e5:f8:c1:21:dd:fd:1f:e5:6e:b3:4d:
                    4b:f1:55:30:82:19:68:69:9a:cd:54:08:a4:be:a3:
                    fc:fa:78:ae:57:8b:3c:63:19:41:1c:af:16:50:43:
                    1f:2b:e3:7c:5b:08:b5:c9:7d:c4:b7:78:c7:b3:f5:
                    05:b2:d7:fe:34:1a:6d:e8:b2:fa:2e:7f:48:7b:f0:
                    b9:04:bb:d5:83:4d:4a:84:58:b9:c5:96:78:8e:50:
                    a7:8c:f2:09:d8:a7:ea:9c:5e:73:38:a1:71:74:61:
                    98:ad:1e:c8:b7:35:8b:4b:93:66:ad:37:db:20:ae:
                    48:99:21:88:f5:bd:0f:9c:28:e2:43:a0:46:a1:e7:
                    33:bd:6a:d5:a1:bb:19:5a:3e:96:d9:fe:03:5d:66:
                    1c:63:a6:bc:cc:94:18:84:c6:6b:34:61:fa:55:73:
                    82:ef:f3:a2:04:76:4a:7c:dc:55:54:08:02:5c:b7:
                    ea:28:c3:2a:05:50:67:37:40:cd:43:1e:d9:58:8b:
                    3e:3c:ab:e7:02:e2:ec:dd:de:a1:56:1c:99:51:8a:
                    42:8c:ba:24:61:4d:05:e0:f1:b7:2d:ac:ae:0a:00:
                    c4:e6:bc:85:99:7b:d3:d3:0e:8e:56:83:23:9f:a2:
                    73:f6:2f:9b:45:e2:f3:18:5e:15:e5:65:f9:15:7a:
                    3b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:28:9C:F8:8B:3B:35:FD:9F:B4:40:89:72:7A:85:D6:69:2C:35:C7
            X509v3 Authority Key Identifier:
                keyid:D8:35:80:7A:28:09:E4:95:AC:CC:08:BF:63:BD:D4:44:07:1C:75:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/D835807A2809E495ACCC08BF63BDD444071C7563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D835807A2809E495ACCC08BF63BDD444071C7563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/D835807A2809E495ACCC08BF63BDD444071C7563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:95:23:2d:e6:3d:17:77:5b:d2:98:89:b3:eb:ab:19:52:73:
         65:dc:e1:7f:16:82:f3:86:65:37:f6:33:37:a1:2b:eb:23:ae:
         c6:3d:c7:f2:c3:33:f8:9f:06:17:72:ae:4c:86:19:44:1b:bd:
         bb:9f:5d:82:32:b4:b9:4e:12:26:85:9b:67:5f:dd:92:0c:f6:
         eb:4e:31:1f:75:21:28:53:4f:3e:03:b0:16:db:a0:c8:e4:e6:
         9a:fa:db:f1:47:d9:a6:47:a8:42:40:24:c7:f3:9c:67:a0:66:
         14:27:0b:68:f8:0a:ad:f8:19:12:6d:b0:88:a9:a5:90:d7:a7:
         d1:7b:fe:e3:cf:3f:5f:88:07:1d:c6:4b:ab:5d:52:fb:fa:88:
         a8:07:4d:82:b7:2a:0a:43:66:9a:8a:57:2e:f7:b5:b1:be:4e:
         5f:a5:5f:a2:8b:52:98:81:40:87:83:f6:4b:95:c4:46:c2:64:
         92:ea:75:e3:e4:ef:0e:c0:ea:87:3a:7a:dd:f1:88:b9:a4:79:
         6f:52:77:3f:84:77:ae:72:aa:fa:09:d1:68:1f:43:51:3a:9a:
         f2:66:20:07:3c:8f:a0:24:86:f4:58:4e:e8:82:a5:47:d4:b8:
         4b:f2:79:4f:13:9d:92:16:d7:27:53:dd:87:9f:14:cd:6b:e7:
         e9:c4:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----