Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft
File:                     BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft (raw, json)
Hash identifier:          zHff+HJ9/AFbrzQqdn0pYcz+KrLULEAq2VERGjhjqJ0=
Subject key identifier:   49:94:56:3D:BB:AD:D5:9C:AB:BB:FF:B5:78:E3:3E:CC:A3:8A:F9:DC
Authority key identifier: BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA
Certificate issuer:       /CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
Certificate serial:       5713664692B936BE65B3E935E80ED2E5D2299185
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft
Manifest number:          1F
Signing time:             Fri 26 Apr 2024 05:13:29 +0000
Manifest this update:     Fri 26 Apr 2024 05:08:29 +0000
Manifest next update:     Sat 27 Apr 2024 07:59:29 +0000
Files and hashes:         1: BDED1ED39E25BB8119504E29E3014EC3968ECCEA.crl (hash: DBSvitR/Eh7uyEKBomrakIT86QNR+AyeTI7ghOay/pk=)
                          2: 34352e352e3139362e302f32322d3332203d3e20323636313035.roa (hash: 5lA2PbnhrMvRnNmIwXQrYnoSNdca+jB/7p+eqefGtHI=)
                          3: 323830343a336162383a3a2f33322d313238203d3e20323636313035.roa (hash: PcX3B2uW/HYH1pZVVsjsZYlGBWAeNw/nwiaBIJ0l9y0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:13:66:46:92:b9:36:be:65:b3:e9:35:e8:0e:d2:e5:d2:29:91:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
        Validity
            Not Before: Apr 26 05:08:29 2024 GMT
            Not After : Apr 27 07:59:29 2024 GMT
        Subject: CN=4994563DBBADD59CABBBFFB578E33ECCA38AF9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:d9:e4:82:7d:ce:0a:a8:1d:62:ca:22:83:
                    5a:58:ae:77:9e:62:85:06:a7:16:ec:f0:02:82:52:
                    e4:ae:c7:a5:aa:9c:d0:aa:d3:20:eb:70:58:7d:00:
                    6b:bc:c1:81:22:6f:c3:e5:e6:4e:3d:7c:61:5a:fb:
                    67:76:c6:75:5b:b7:0c:c8:58:99:49:17:48:06:18:
                    60:a3:74:1c:82:a9:38:16:0f:af:5a:c9:43:ea:b3:
                    80:92:4d:da:03:26:70:96:ec:2c:be:1d:c1:18:16:
                    6d:66:f9:ca:f5:d1:e5:0c:ac:ce:4d:93:a5:7d:d5:
                    b1:9f:2d:88:a0:5c:05:4a:3e:3a:a3:58:dd:40:06:
                    89:0f:9f:7c:06:65:f1:16:bf:19:85:d9:7b:87:6e:
                    e0:9a:93:09:3e:8b:70:c0:b8:97:e3:81:8b:e0:a2:
                    dd:07:02:f8:b9:51:41:07:f4:3a:f4:d7:50:8e:00:
                    3a:fd:8f:73:96:c9:79:4a:18:dc:73:c7:68:fb:fa:
                    1d:ab:f8:56:ed:a0:89:fe:d6:1b:d5:68:3d:7c:bb:
                    58:1a:27:ad:7e:1c:99:9c:e4:12:e7:3d:81:f2:7b:
                    8c:bb:5a:a4:d9:87:26:71:3f:e9:8a:b1:b5:ab:87:
                    e6:4c:ff:86:95:eb:18:c4:de:00:d5:06:a2:06:4b:
                    b4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:94:56:3D:BB:AD:D5:9C:AB:BB:FF:B5:78:E3:3E:CC:A3:8A:F9:DC
            X509v3 Authority Key Identifier:
                keyid:BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9b:94:ec:46:ae:d3:3e:bf:1e:cb:5c:a8:ae:8d:a7:99:64:
         cc:b5:11:01:fa:20:ca:b5:6b:26:d5:86:73:10:47:99:fd:bc:
         35:92:ad:cc:f3:03:9e:91:e8:2e:66:94:36:f4:8d:14:fb:34:
         44:cc:f4:63:09:e2:f5:a8:bf:c8:3c:ee:bd:29:78:f9:c1:81:
         19:dd:84:2e:a4:e1:4b:e0:a9:f9:9a:40:57:23:21:d5:38:29:
         41:e8:0c:c0:4e:0f:87:a1:02:34:f6:ae:68:27:c2:ec:6f:9e:
         b3:40:60:49:75:19:6a:a6:ed:d9:10:87:05:bc:7d:91:cf:47:
         18:2c:c0:83:d4:32:db:b1:bb:81:1c:0e:b9:be:10:46:fc:21:
         c3:8b:19:e0:df:8e:de:f3:c6:d4:e7:2e:14:44:da:07:06:8c:
         ba:4a:d3:5c:e3:51:a9:fa:31:f3:43:bf:36:d7:0f:0e:a0:84:
         a2:3e:e4:08:3b:3f:b6:96:42:ce:ab:ba:53:bb:1d:79:a3:d4:
         3c:7f:a9:c4:d9:a2:a4:99:24:44:1b:5f:55:36:87:63:14:11:
         71:ef:f3:cc:cb:37:f8:69:40:af:cb:f4:f3:6b:f9:1c:48:67:
         f8:df:fb:07:a1:16:0d:e7:fe:6c:6c:7b:bc:b6:5e:23:26:76:
         af:56:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----