Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C.mft
File:                     17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C.mft (raw, json)
Hash identifier:          0VZCXTxBbLhhLxUeZP9DrLR5xe3VXa9EPzIhQQtgOAM=
Subject key identifier:   62:C9:FD:25:41:EC:BD:94:10:3C:94:01:8A:3D:FA:E4:15:F1:04:44
Authority key identifier: 17:E7:88:0E:64:6B:F0:AC:A3:EA:5E:B5:CE:BA:D4:A3:B4:25:A5:6C
Certificate issuer:       /CN=17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C
Certificate serial:       30B0C3D1E8C8C8F96E4B9A01EA48F8C8B1AF3F71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C.mft
Manifest number:          4E
Signing time:             Thu 22 Feb 2024 23:30:02 +0000
Manifest this update:     Thu 22 Feb 2024 23:25:02 +0000
Manifest next update:     Fri 23 Feb 2024 23:31:02 +0000
Files and hashes:         1: 34352e3233342e342e302f32322d3234203d3e20323637333531.roa (hash: wTPYo/mm7xoqFw1YoSj4tZS3E773CaueJdD2T6Kny04=)
                          2: 323830343a346332303a3a2f33322d3332203d3e20323637333531.roa (hash: hnsYCCzdZi9qCAbcZQ3w4bTG6GYVItAihozn36a7L1M=)
                          3: 17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C.crl (hash: 5yLV72aODWVnqKIV9ssXsFEJ5CG1c7vjbzRftenf4iU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b0:c3:d1:e8:c8:c8:f9:6e:4b:9a:01:ea:48:f8:c8:b1:af:3f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C
        Validity
            Not Before: Feb 22 23:25:02 2024 GMT
            Not After : Feb 23 23:31:02 2024 GMT
        Subject: CN=62C9FD2541ECBD94103C94018A3DFAE415F10444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:27:f1:f1:12:7a:3a:60:33:16:3e:88:37:99:
                    27:33:2b:c2:b1:26:53:2c:04:43:be:ac:d2:9d:bc:
                    c0:8e:76:b6:82:2b:e4:ed:53:dd:cf:7d:9c:93:3d:
                    90:c4:f4:35:31:a7:02:f3:5d:44:6c:a4:3a:fa:18:
                    be:7b:ab:9c:df:73:a3:14:dc:ab:10:03:8d:b5:77:
                    fb:b1:26:a0:29:15:53:50:39:a0:9c:fd:e5:b6:74:
                    c2:0b:af:43:8b:d6:d1:4c:84:2d:50:5b:9a:1e:3d:
                    02:3a:f7:ad:0c:0d:df:8f:2a:1b:77:61:d1:ff:90:
                    6b:89:d7:27:be:4e:a9:6d:0b:a3:ab:61:bb:45:01:
                    a1:ce:67:12:74:f6:0a:31:99:ff:0d:28:1c:e1:b0:
                    4f:cf:a7:49:6c:55:79:6f:3f:01:3b:b7:fa:ee:73:
                    f6:f4:e9:eb:df:0e:42:78:d8:7b:6b:8f:0e:97:13:
                    39:d7:10:6d:b4:07:07:81:93:9f:0b:f3:3d:4c:02:
                    a4:52:90:a8:73:7c:88:47:46:4b:4f:8e:f3:e5:45:
                    d9:82:26:04:2e:23:ec:6a:29:7c:82:9c:3b:58:b6:
                    65:a2:24:62:c6:89:26:4a:b9:12:37:00:eb:eb:d4:
                    97:b7:55:93:ae:cc:5f:c5:c0:8b:ce:0d:4d:68:be:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C9:FD:25:41:EC:BD:94:10:3C:94:01:8A:3D:FA:E4:15:F1:04:44
            X509v3 Authority Key Identifier:
                keyid:17:E7:88:0E:64:6B:F0:AC:A3:EA:5E:B5:CE:BA:D4:A3:B4:25:A5:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/17E7880E646BF0ACA3EA5EB5CEBAD4A3B425A56C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:ba:40:47:5f:5c:0d:e8:b2:35:67:ea:ad:64:c3:cd:5d:
         b5:13:32:6f:e0:81:9f:57:ad:26:1f:ca:6d:73:d2:be:77:a4:
         4e:20:72:b0:a5:a4:24:3b:3e:20:e6:8d:97:f4:67:33:f8:ac:
         2e:90:a6:03:ed:f4:99:cf:e9:66:0d:36:9f:9d:56:81:d8:ac:
         61:95:4b:e8:ed:e6:0c:41:d2:06:7c:3f:26:ff:ed:33:4f:c7:
         3c:62:51:ae:e0:10:9a:0f:eb:1c:80:92:a5:26:a5:d2:15:f4:
         df:4d:38:49:14:08:36:86:48:aa:df:04:c4:c4:16:fb:f4:c4:
         8a:e2:c6:17:e1:6d:26:41:75:4d:ef:bf:b2:77:27:a6:22:0a:
         b9:0a:05:29:e5:aa:42:f7:b2:ca:de:d1:3a:62:35:9c:80:96:
         bf:26:0c:4a:08:ca:2e:55:43:26:f6:a7:34:e9:ce:7a:20:24:
         29:b8:b0:f3:73:f0:71:67:67:bf:88:e1:d9:72:eb:8d:72:fe:
         75:79:a6:9a:d6:64:54:8d:c5:7a:02:d1:bd:ff:23:4b:92:8f:
         80:1f:72:7a:97:30:be:81:fe:b2:36:b2:71:fb:ec:cb:04:3d:
         08:0b:dc:76:75:8f:81:38:6a:7c:8f:ef:04:3e:d9:eb:a4:d9:
         93:a8:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----