Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.mft
File:                     A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.mft (raw, json)
Hash identifier:          jt9+F3lVcdzqvjRGOcATc1SOcyFUfmx8zyGADuMPzaA=
Subject key identifier:   22:33:77:AC:2A:C7:20:12:BD:93:99:20:9E:F3:AF:3A:06:E5:23:71
Authority key identifier: A8:DA:D5:28:91:C0:8C:4B:3C:39:6B:A1:CC:EB:67:B1:62:C3:6F:2C
Certificate issuer:       /CN=A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C
Certificate serial:       1AAE50406B82979AD488559369640B13D6A29790
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.mft
Manifest number:          DB
Signing time:             Sun 14 Apr 2024 22:05:01 +0000
Manifest this update:     Sun 14 Apr 2024 22:00:01 +0000
Manifest next update:     Tue 16 Apr 2024 00:28:01 +0000
Files and hashes:         1: 3138392e3131332e3137362e302f32322d3234203d3e20323730333333.roa (hash: i9l5EKDSW2RHHFFcn/FCopecQEARSK2CiRFdxe/mgp0=)
                          2: A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.crl (hash: ND0N1oX0C3VLR8s/1cF/s6a/7baxwWBLkcwRke4Id7M=)
                          3: 323830343a366136343a3a2f33322d3438203d3e20323730333333.roa (hash: M0wPZKybu91OFJhpx1N+OHoq6oPt1QXvy4u+JFWvrdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ae:50:40:6b:82:97:9a:d4:88:55:93:69:64:0b:13:d6:a2:97:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C
        Validity
            Not Before: Apr 14 22:00:01 2024 GMT
            Not After : Apr 16 00:28:01 2024 GMT
        Subject: CN=223377AC2AC72012BD9399209EF3AF3A06E52371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:04:8f:33:64:6d:b6:5e:f1:3d:de:f2:ed:
                    21:9f:d1:2e:b2:39:5a:45:e1:7b:ce:e2:d9:01:a8:
                    ab:a5:0a:8e:4a:e5:d2:f8:8a:88:cc:56:ef:fa:94:
                    84:e7:f4:3b:d4:23:5b:77:3f:77:24:a5:d1:0e:6c:
                    fb:45:6b:25:98:eb:b9:ac:f4:da:0b:b3:ac:08:4b:
                    a1:dd:98:ce:d3:b4:fd:74:b4:a9:e0:37:04:9d:b9:
                    6c:ae:ab:33:c3:04:17:b9:9f:3c:6c:91:30:93:d9:
                    8e:93:4b:f9:67:06:b0:ee:9d:9d:e1:01:6e:f2:c5:
                    65:ba:76:f3:61:4e:7f:ae:6f:79:1f:a6:54:50:84:
                    0b:37:8d:29:9f:87:23:70:dc:8d:b2:91:06:8d:d3:
                    28:25:b7:01:61:86:85:dc:aa:8d:9a:83:a7:20:82:
                    5c:90:70:7b:7f:9a:20:cc:f3:3e:2e:75:8a:dc:0c:
                    9e:96:9e:eb:d5:6e:09:df:f2:b4:52:4b:6c:5f:69:
                    36:ff:a6:0f:bc:28:44:a3:74:f5:3d:b3:e4:d7:46:
                    e5:5b:08:ce:ac:92:55:70:7a:3f:88:4b:5d:e1:a4:
                    43:d8:19:d4:ee:10:b0:81:9e:44:89:d7:40:46:de:
                    fe:a8:14:b9:41:3b:eb:57:1d:44:57:45:67:b9:ce:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:33:77:AC:2A:C7:20:12:BD:93:99:20:9E:F3:AF:3A:06:E5:23:71
            X509v3 Authority Key Identifier:
                keyid:A8:DA:D5:28:91:C0:8C:4B:3C:39:6B:A1:CC:EB:67:B1:62:C3:6F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:78:f3:e9:43:fb:40:db:a0:f1:1a:20:c9:fa:57:ab:77:
         13:d7:21:e4:0b:14:52:44:04:2f:db:19:6c:b0:b9:0e:ff:53:
         0b:a4:18:1d:9e:30:22:6b:7a:2e:2e:07:e6:92:e3:58:29:c6:
         78:72:f1:7d:a9:b9:30:86:bd:26:3d:91:2c:2e:c6:c9:aa:ee:
         01:8c:78:05:5d:d6:d5:a5:4d:64:8f:ff:2e:9d:f8:fa:02:82:
         94:e1:62:e6:e5:b3:5b:e8:34:5e:04:c3:dd:9e:b2:02:6c:33:
         a8:43:a9:77:01:38:87:25:da:ce:19:71:96:ca:55:01:8b:f0:
         02:4c:b1:03:1a:07:bc:12:97:eb:29:1c:12:6f:5e:ac:92:e3:
         20:05:61:f0:7b:46:81:07:1b:84:63:31:a1:e3:c4:6f:61:df:
         fc:0e:e7:6c:41:f4:24:8d:9e:c8:6a:96:fa:71:94:9a:c0:a3:
         bc:6d:07:4a:80:85:51:5b:06:cc:88:5d:de:bb:c7:72:f2:18:
         ea:b3:8e:56:2f:c2:5b:29:73:59:58:68:89:bb:78:27:09:97:
         05:ea:ad:0a:99:6c:91:a7:c1:b8:4f:fa:e4:5c:cf:c5:af:1c:
         ca:cf:51:78:20:5e:53:06:7f:6d:be:ab:96:9d:b0:40:72:68:
         0e:6b:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----