Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.mft
File:                     1CEAB2C57300195DEEB059504286FBA1F7D645FF.mft (raw, json)
Hash identifier:          htTGc7MyLEdK9FtJxnYeiGBnKXQbqjX2Fe6GQLKw77s=
Subject key identifier:   64:83:4E:CE:7D:F3:B4:88:D1:6B:39:13:A7:51:6A:29:CF:6F:54:6D
Authority key identifier: 1C:EA:B2:C5:73:00:19:5D:EE:B0:59:50:42:86:FB:A1:F7:D6:45:FF
Certificate issuer:       /CN=1CEAB2C57300195DEEB059504286FBA1F7D645FF
Certificate serial:       6AB340EB12524AEC705E68DFA5F76248EE6546EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.mft
Manifest number:          041D
Signing time:             Sun 14 Apr 2024 19:02:02 +0000
Manifest this update:     Sun 14 Apr 2024 18:57:02 +0000
Manifest next update:     Mon 15 Apr 2024 21:34:02 +0000
Files and hashes:         1: 323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (hash: MRqPFpcb5GvkDwDAGxqCr6bdPUN5+0W5gMOPeVx7dSs=)
                          2: 34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (hash: dHbqCaITdq7w2ji/auZEgQFghJjSAYv3Q7DcsQnLjBY=)
                          3: 1CEAB2C57300195DEEB059504286FBA1F7D645FF.crl (hash: Q06PRnKf8CuYumlTL4tAVmEON18GQGVGnFCCEYoXtIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b3:40:eb:12:52:4a:ec:70:5e:68:df:a5:f7:62:48:ee:65:46:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEAB2C57300195DEEB059504286FBA1F7D645FF
        Validity
            Not Before: Apr 14 18:57:02 2024 GMT
            Not After : Apr 15 21:34:02 2024 GMT
        Subject: CN=64834ECE7DF3B488D16B3913A7516A29CF6F546D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:f2:38:9e:83:fe:68:77:26:35:ed:bb:3a:
                    26:00:8d:af:c8:5d:52:86:93:49:c9:8b:97:61:30:
                    0e:99:21:2d:69:f2:88:31:71:e6:c9:46:46:39:b0:
                    64:c1:e7:9e:f4:e3:3e:28:7b:d1:be:fe:51:d7:fe:
                    bd:f4:92:58:79:e2:6f:df:4b:61:3a:bf:5e:01:38:
                    4f:8a:b3:85:6e:44:f2:b6:52:58:e3:86:de:55:35:
                    be:7e:26:eb:6f:9e:3d:a0:49:ce:6e:84:3b:45:cf:
                    27:42:d1:20:77:48:52:05:5c:83:6d:22:18:6b:c1:
                    55:72:0a:86:82:e4:53:ed:3c:c2:23:79:db:be:0a:
                    58:c6:0a:25:ec:6c:5a:c7:8b:50:a3:2b:3b:12:ee:
                    3b:df:45:b6:be:94:0a:0c:a0:57:70:43:70:c0:da:
                    76:49:1e:86:13:99:f9:08:d6:30:55:c5:8f:e4:79:
                    50:b0:e5:95:d1:74:7a:5e:c6:09:c8:05:88:aa:38:
                    ae:7d:3e:15:b7:55:6f:3d:b3:9b:06:c7:50:cb:ea:
                    90:80:ad:ed:eb:da:08:ff:1e:3f:e3:ce:fc:cc:21:
                    f9:cb:5c:09:e6:77:0e:c1:89:52:84:cb:1d:44:e4:
                    b6:9b:8e:4e:70:cd:e7:a8:f3:1c:bb:ef:0d:71:15:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:83:4E:CE:7D:F3:B4:88:D1:6B:39:13:A7:51:6A:29:CF:6F:54:6D
            X509v3 Authority Key Identifier:
                keyid:1C:EA:B2:C5:73:00:19:5D:EE:B0:59:50:42:86:FB:A1:F7:D6:45:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c0:ea:0e:a1:62:aa:ac:a8:97:6b:18:99:74:a1:40:f7:dd:
         05:fa:a7:10:7c:05:ea:37:5a:2d:bc:b7:95:03:a6:2f:2c:9d:
         0c:60:22:20:23:6d:a6:29:00:7f:22:15:a9:92:c1:3d:d7:97:
         70:5f:e3:81:eb:0a:4c:85:a6:c7:6e:b9:ce:30:58:5e:58:1b:
         a1:24:03:b8:73:1e:b1:03:1a:36:37:8d:63:b4:a4:25:f7:06:
         9b:19:f1:87:eb:94:1c:80:6b:1c:e5:a5:0f:1c:bb:ad:fa:0b:
         57:56:73:79:4e:ad:aa:6e:ef:5c:50:31:6a:b5:79:64:23:6f:
         c5:01:ed:80:c6:e4:b7:b7:7d:f0:71:cf:13:d1:6b:a8:76:9a:
         e0:60:81:01:c4:33:12:ac:ab:da:bf:30:03:43:cf:45:07:cf:
         be:bd:6d:09:1d:2e:77:0f:27:b2:4e:c1:34:71:06:05:79:07:
         ab:72:71:bc:72:f2:6f:cb:4c:55:14:c7:cf:68:fd:74:3a:aa:
         40:5b:36:f5:94:31:69:bb:61:ce:85:25:f6:1c:c4:6e:95:2d:
         86:ab:45:f4:d9:bd:65:d8:13:77:59:49:c7:53:8d:eb:6e:3a:
         bd:14:24:81:3a:d1:e0:86:54:36:3c:6f:26:d3:99:47:f5:49:
         75:bc:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----