Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.mft
File:                     16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.mft (raw, json)
Hash identifier:          vfjXQPN9hMkLQ6P9pvOzDVuEmnJMsadHrKBJdfz8Ycw=
Subject key identifier:   E8:C6:5D:C1:B9:F3:2D:4F:FB:63:28:5E:49:13:AA:97:7C:64:79:28
Authority key identifier: 16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E
Certificate issuer:       /CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
Certificate serial:       457176E0629FE4E54EA8235929D869B4CF83D610
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.mft
Manifest number:          027E
Signing time:             Mon 15 Apr 2024 11:11:30 +0000
Manifest this update:     Mon 15 Apr 2024 11:06:30 +0000
Manifest next update:     Tue 16 Apr 2024 13:41:30 +0000
Files and hashes:         1: 323830343a353934303a3a2f33322d3332203d3e20323638313739.roa (hash: EamdukQpmdtjKjMmJVxDu39EM11nc7hE7mTgFPXPTR0=)
                          2: 34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa (hash: Pi1TJBBC/URAKe3vvUHeOFBPe6yzZYkWEI72RQeBGso=)
                          3: 16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.crl (hash: IfzZUHcgB1/Q5eS3tY8uLPTxNFwX+iJgykGnljZppNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:71:76:e0:62:9f:e4:e5:4e:a8:23:59:29:d8:69:b4:cf:83:d6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
        Validity
            Not Before: Apr 15 11:06:30 2024 GMT
            Not After : Apr 16 13:41:30 2024 GMT
        Subject: CN=E8C65DC1B9F32D4FFB63285E4913AA977C647928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:05:9f:cb:3c:b0:93:bc:b2:d4:7a:fe:37:
                    d3:67:b8:c9:42:9b:d5:01:94:e0:79:a3:88:2a:ea:
                    1f:28:60:31:3c:34:c7:68:1e:14:f5:ba:ae:bf:d7:
                    46:74:95:02:26:4a:5f:94:f7:c0:31:e4:2e:48:b1:
                    12:4d:bf:46:fe:7b:e0:d0:d5:34:5e:c3:74:e5:15:
                    8a:61:70:fd:fb:1d:ce:59:51:e0:e3:54:4b:90:81:
                    b5:ae:70:34:ed:87:55:90:89:10:87:23:69:09:ec:
                    57:a5:a0:b7:b8:00:b3:57:81:e4:53:79:69:58:a6:
                    c1:00:40:31:42:22:bf:d6:3d:a0:85:1c:de:b7:e6:
                    19:56:8f:64:dd:c9:76:bc:10:60:56:7c:b8:93:6b:
                    0e:d3:84:12:8f:23:45:db:d9:27:ab:b6:01:20:07:
                    53:de:9a:c6:a8:30:a4:44:8d:33:26:c4:81:50:16:
                    be:fc:8a:d8:a3:1e:4a:a4:ad:3d:3c:cd:e5:f1:59:
                    ae:e5:6a:34:44:cb:27:eb:51:ae:10:0d:d8:93:d2:
                    b3:24:11:d5:4f:40:1a:2d:99:66:79:8b:ef:ba:4d:
                    21:36:cf:2d:48:35:3a:4a:52:01:11:9e:39:34:34:
                    39:76:d8:5e:31:56:cd:d5:61:28:d2:70:68:88:07:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C6:5D:C1:B9:F3:2D:4F:FB:63:28:5E:49:13:AA:97:7C:64:79:28
            X509v3 Authority Key Identifier:
                keyid:16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c7:f0:1c:cd:be:2f:96:c0:8d:9d:e7:3b:5c:ba:dc:08:4c:
         37:9d:8c:de:84:d7:f6:f1:d3:da:ab:9a:d2:bc:e5:a0:1b:c2:
         ed:02:1d:b5:8b:e6:0e:8f:e0:18:0f:83:49:1c:c8:5c:88:44:
         09:a9:de:61:3f:f3:cc:a6:9d:38:ab:87:34:e0:e0:7c:c9:d4:
         45:07:dc:1f:a2:5b:f3:38:d8:cb:cc:c8:ce:26:bf:bf:24:f1:
         6c:67:cb:82:2e:ae:ff:15:cd:90:d8:b6:2d:e7:c4:5e:a7:74:
         dd:8c:ad:3d:8b:76:c1:53:16:72:d7:99:dc:65:21:5d:d5:ae:
         82:88:4b:d1:c4:a7:a3:5b:b3:3e:f0:fa:16:9a:51:5b:c3:f7:
         8c:b3:da:83:a8:aa:ab:34:53:2b:90:68:66:f8:99:03:08:5e:
         c4:ed:ee:8b:65:30:76:ee:ef:20:d3:8d:cd:75:a2:fb:48:88:
         13:47:31:16:bf:c5:de:89:8a:77:f0:18:e8:b8:de:80:d6:be:
         94:0b:14:b9:94:63:a0:9f:d8:54:d7:2c:0b:1f:b0:28:ac:a7:
         a9:41:4d:f8:8d:d9:e0:40:db:47:12:7d:d3:13:50:74:8e:cf:
         ff:ae:dd:36:ac:05:77:36:81:06:a7:ae:e8:d3:e4:cd:98:25:
         76:3c:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----