Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0/862941EC30CF6C4087C51A295774CEEE37A888E1.mft
File:                     862941EC30CF6C4087C51A295774CEEE37A888E1.mft (raw, json)
Hash identifier:          iLl7ZvAvNgaeM6fQ/fwCT1mNMCnc9LF/tmG7Dy09Akg=
Subject key identifier:   64:32:0F:9B:0C:F8:B1:0C:34:70:82:E7:48:8E:B1:90:66:57:71:F9
Authority key identifier: 86:29:41:EC:30:CF:6C:40:87:C5:1A:29:57:74:CE:EE:37:A8:88:E1
Certificate issuer:       /CN=862941EC30CF6C4087C51A295774CEEE37A888E1
Certificate serial:       1C6AF98AA7D099573C7BD0DB23506CC4AACDF86F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862941EC30CF6C4087C51A295774CEEE37A888E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0/862941EC30CF6C4087C51A295774CEEE37A888E1.mft
Manifest number:          0289
Signing time:             Sun 14 Apr 2024 22:36:36 +0000
Manifest this update:     Sun 14 Apr 2024 22:31:36 +0000
Manifest next update:     Tue 16 Apr 2024 00:19:36 +0000
Files and hashes:         1: 3139302e3132342e35322e302f32322d3234203d3e20323731303035.roa (hash: +WvlvzIxYA/88PNmJCL2kK4fgYdL6zubZ0TVCpQfVSE=)
                          2: 862941EC30CF6C4087C51A295774CEEE37A888E1.crl (hash: cQ4StW/XqC9WvalpTaYL7TCmhUDJG9jxS/Ov6KVuCRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6a:f9:8a:a7:d0:99:57:3c:7b:d0:db:23:50:6c:c4:aa:cd:f8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862941EC30CF6C4087C51A295774CEEE37A888E1
        Validity
            Not Before: Apr 14 22:31:36 2024 GMT
            Not After : Apr 16 00:19:36 2024 GMT
        Subject: CN=64320F9B0CF8B10C347082E7488EB190665771F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:cf:5f:39:16:7e:98:6a:36:7a:5a:f0:f3:
                    0d:e8:51:b0:7f:a8:1b:e7:04:1b:43:de:aa:dc:08:
                    9c:3f:19:4b:46:ee:71:28:7d:db:33:09:b7:fc:62:
                    b8:1e:a5:02:20:6d:c3:b3:fe:ac:6a:f1:e9:70:9b:
                    b1:80:06:d7:8f:79:9a:eb:f5:ab:f3:c5:52:65:c8:
                    b5:7d:01:65:12:26:ec:d4:cd:04:7c:69:c1:6c:8e:
                    45:8c:05:34:69:cf:c7:70:7f:d8:ff:d0:bf:77:a1:
                    bb:c7:53:69:cf:98:c4:29:b3:bd:74:e9:f4:85:5d:
                    50:9a:24:6c:0d:d2:82:96:88:a5:5a:89:b1:59:53:
                    ff:6f:eb:72:97:1e:df:96:1a:d8:ab:f9:33:35:a5:
                    60:31:e6:74:f2:7a:57:df:3a:86:bf:28:1a:ae:89:
                    9f:a7:4e:7e:2e:a2:6b:50:e2:8e:81:28:d4:90:d7:
                    66:88:32:e1:73:17:02:d0:85:39:a7:52:84:81:6c:
                    21:81:7f:c3:4a:99:28:0c:61:f0:ad:9f:a4:82:c0:
                    75:ff:9b:4f:72:d8:80:d3:75:f9:29:9e:7f:a4:fe:
                    3e:44:02:75:e7:ca:d7:bd:b3:95:f8:f0:47:45:e4:
                    c2:b0:72:25:96:d5:10:55:e2:62:d0:45:f6:37:33:
                    74:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:32:0F:9B:0C:F8:B1:0C:34:70:82:E7:48:8E:B1:90:66:57:71:F9
            X509v3 Authority Key Identifier:
                keyid:86:29:41:EC:30:CF:6C:40:87:C5:1A:29:57:74:CE:EE:37:A8:88:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0/862941EC30CF6C4087C51A295774CEEE37A888E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862941EC30CF6C4087C51A295774CEEE37A888E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0/862941EC30CF6C4087C51A295774CEEE37A888E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:db:f3:25:94:70:f3:ca:61:a5:6c:2b:8a:a0:c2:6b:51:9d:
         e5:2a:ec:ed:41:70:45:e1:b1:96:09:59:b8:14:c3:29:91:58:
         99:29:7b:71:54:b4:2d:3f:b6:cb:2c:8a:01:e7:86:97:17:4b:
         46:82:60:ca:be:14:37:f4:4e:f2:cd:cf:65:a9:91:a5:dd:cf:
         d4:9f:a9:20:6e:85:f8:e5:6e:d4:91:f4:b8:b9:b7:a3:b0:d2:
         f1:50:f4:35:4a:df:93:c7:be:e2:09:23:11:f8:9f:3d:bb:54:
         1d:0f:c2:e9:e3:cf:f7:14:1d:c8:a7:e9:63:c9:a3:01:37:aa:
         0b:28:ff:44:54:d0:9e:5e:10:ac:79:c9:c8:75:fb:2f:a3:ac:
         0b:9f:9f:66:c7:60:5d:2e:6f:23:78:81:e0:0b:af:f9:be:04:
         a9:f3:52:c3:a0:cb:d3:36:d7:1f:47:bc:ca:35:9f:92:49:11:
         17:cf:68:e6:30:b9:d3:be:6c:7a:39:33:de:52:26:5b:99:26:
         30:97:a4:ef:be:4e:cd:ac:03:c3:b1:f5:2b:e0:09:13:72:cd:
         89:b1:c0:5c:02:d0:43:df:f7:02:b9:3b:34:f6:62:8f:86:f3:
         c5:12:1d:17:92:3f:c8:6b:82:a6:e7:e0:d5:ab:d6:a5:3e:bc:
         ab:33:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----