Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.mft
File:                     1B2CC55885BEB813C6A6343258A76F6B189F32D5.mft (raw, json)
Hash identifier:          FEobjApHQr7fDgw7VaTKzpeFQlIRQabmevUzYm7IKhA=
Subject key identifier:   42:E7:0D:32:42:4C:74:16:04:0E:5E:85:04:97:43:BB:56:DA:69:0B
Authority key identifier: 1B:2C:C5:58:85:BE:B8:13:C6:A6:34:32:58:A7:6F:6B:18:9F:32:D5
Certificate issuer:       /CN=1B2CC55885BEB813C6A6343258A76F6B189F32D5
Certificate serial:       5D5FF2ABE3428D84D64978A6A1CF9109B7572017
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.mft
Manifest number:          DE
Signing time:             Sat 17 Feb 2024 11:41:40 +0000
Manifest this update:     Sat 17 Feb 2024 11:36:40 +0000
Manifest next update:     Sun 18 Feb 2024 12:01:40 +0000
Files and hashes:         1: 3137372e382e36392e302f32342d3234203d3e20323733373739.roa (hash: euP9UMcSklaehFCOWgQw3oU4Pdl4cHd/CCWUYtqToAM=)
                          2: 323830343a386331383a3a2f33322d3438203d3e20323733373739.roa (hash: rzpVRaMAbS0CaLZHv/N/L+/PHfOt8xuWocAvGwWzXro=)
                          3: 1B2CC55885BEB813C6A6343258A76F6B189F32D5.crl (hash: 5ySh8GVGbUVA64WIxOgtsRYDnuL6NZhZSRlGwHT43zA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5f:f2:ab:e3:42:8d:84:d6:49:78:a6:a1:cf:91:09:b7:57:20:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2CC55885BEB813C6A6343258A76F6B189F32D5
        Validity
            Not Before: Feb 17 11:36:40 2024 GMT
            Not After : Feb 18 12:01:40 2024 GMT
        Subject: CN=42E70D32424C7416040E5E85049743BB56DA690B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:5b:04:27:4e:27:d4:12:5f:6f:a5:50:42:
                    e9:7a:b6:eb:ca:5a:2b:fd:6d:2d:b4:7d:23:09:23:
                    b6:10:c0:54:3f:8f:91:26:84:96:9e:3f:47:14:e3:
                    e7:85:a9:33:64:9d:9a:e8:c1:eb:36:87:b0:b4:b1:
                    32:e0:c6:53:ea:33:76:a3:ec:6a:46:c7:bb:bc:e9:
                    e1:04:5d:70:fc:44:c8:52:69:1d:d9:22:01:57:e9:
                    07:2b:68:59:73:86:13:c5:ce:5e:ef:f0:3f:95:df:
                    ad:24:b8:b7:05:85:f6:19:44:d3:b6:e7:eb:5c:9b:
                    93:42:69:dc:84:2d:5d:63:34:4a:c0:dc:d3:ef:bd:
                    48:49:86:37:b0:2e:5f:3b:16:6f:c7:50:35:2c:78:
                    61:2c:d9:f3:e8:f6:58:5b:b5:b9:b4:25:43:5f:f7:
                    f1:b4:64:d2:d3:1d:d7:1d:e7:a7:75:03:19:c0:55:
                    27:c0:08:95:88:eb:3b:40:b3:d6:66:ae:b2:65:e5:
                    a4:3c:94:c0:6d:87:c4:89:f2:b3:cd:b4:57:12:aa:
                    8d:fa:74:35:e1:f6:ad:62:0e:39:f4:52:2b:d8:19:
                    a5:51:fe:bb:18:78:74:fc:95:21:e3:f3:3b:42:ba:
                    e5:44:47:21:c7:ea:19:84:42:b0:e4:77:68:24:19:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E7:0D:32:42:4C:74:16:04:0E:5E:85:04:97:43:BB:56:DA:69:0B
            X509v3 Authority Key Identifier:
                keyid:1B:2C:C5:58:85:BE:B8:13:C6:A6:34:32:58:A7:6F:6B:18:9F:32:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ad:55:36:e0:8e:be:e7:21:15:d8:d7:04:7d:fd:02:0d:4b:
         74:29:53:60:21:1e:d6:2d:1c:bf:d0:47:cf:c7:f6:81:9a:87:
         b9:d0:d8:4c:66:d7:e1:89:fa:9f:ee:5e:ea:47:fa:16:b7:de:
         80:28:a5:d3:92:9a:4a:c6:d1:0d:01:09:49:58:a8:41:c9:ca:
         cf:73:03:41:fa:c9:c7:33:16:68:7b:a4:25:f4:43:b0:9b:c6:
         41:67:a8:44:bd:4a:ea:df:14:d9:e1:a4:94:29:c8:44:07:ca:
         47:aa:30:b6:7a:10:f4:cc:c9:6d:18:a1:05:aa:fa:ea:6e:5b:
         ce:d1:fa:d7:b4:d7:cf:e1:2d:ac:60:2f:33:18:71:f5:ee:93:
         8a:1f:6a:0c:29:85:02:7e:d2:f8:54:bb:e4:68:14:db:47:59:
         68:5a:8f:f6:d9:a0:b0:fe:d9:a7:74:d7:80:65:37:56:07:fb:
         ae:7f:c7:b1:54:0c:f3:9c:2f:85:6e:79:de:cb:8d:65:c2:da:
         9e:98:53:e1:30:65:57:7d:03:af:3d:4d:30:9e:bc:1f:fb:e6:
         a3:ff:30:90:a3:b5:9a:c9:42:ae:1b:50:cd:01:ad:15:3c:ac:
         d2:bf:00:8e:0f:90:65:58:87:84:22:3e:2a:ad:84:db:db:1f:
         6d:7d:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----