Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.mft
File:                     918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.mft (raw, json)
Hash identifier:          yNZttsHclbperdJOctYGdR0tPKA9wqXVNeXlIgS1ikI=
Subject key identifier:   14:86:13:82:C7:2B:21:6F:7A:0A:48:7C:41:E7:F3:1A:36:39:3B:03
Authority key identifier: 91:8E:3D:53:3F:F7:AF:18:4E:0C:F5:C5:20:F9:E9:5A:FC:9A:AD:85
Certificate issuer:       /CN=918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85
Certificate serial:       15A14D27D5318920F2396C8C49156E614D22D1A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.mft
Manifest number:          CA
Signing time:             Sun 14 Apr 2024 20:36:06 +0000
Manifest this update:     Sun 14 Apr 2024 20:31:06 +0000
Manifest next update:     Mon 15 Apr 2024 22:09:06 +0000
Files and hashes:         1: 34352e37302e362e302f32332d3332203d3e20323733353833.roa (hash: unPkpn+cOjNq2pQ6o4VDyXfGjGAAu6F6zGQE+9WEjeM=)
                          2: 323830343a383932343a3a2f33322d313238203d3e20323733353833.roa (hash: AaTtiWSe5VOBu3MEm6KmPx5DV0+gTCa0TYvTNmbUDBs=)
                          3: 918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.crl (hash: nXohSd7ca7wLokaP7cwqfWx0k8pZV/YLhJZRMx9E7xI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a1:4d:27:d5:31:89:20:f2:39:6c:8c:49:15:6e:61:4d:22:d1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85
        Validity
            Not Before: Apr 14 20:31:06 2024 GMT
            Not After : Apr 15 22:09:06 2024 GMT
        Subject: CN=14861382C72B216F7A0A487C41E7F31A36393B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:5f:ca:84:29:94:02:22:bb:70:7b:ff:60:
                    94:33:3b:1a:11:64:aa:e5:e2:17:2d:a2:51:48:cf:
                    24:cc:cf:ca:be:9c:b5:e1:2a:a0:03:8b:08:08:bc:
                    4d:0a:ba:ff:1f:50:e3:3f:06:51:f6:18:34:32:53:
                    b5:e1:2f:03:21:0e:2f:a9:62:d1:48:22:be:c0:54:
                    e2:b3:ce:d0:fb:17:f5:c7:0f:5e:9d:f2:e5:5d:79:
                    e7:45:b5:ca:73:cc:77:0d:78:22:55:ae:2a:5b:3e:
                    fe:d5:58:81:65:f8:f1:31:60:41:aa:91:dd:05:3e:
                    12:a3:33:cd:f0:14:94:2e:a4:cb:19:27:a6:d9:2e:
                    56:74:5a:10:40:2b:2d:37:6a:de:35:8e:22:74:3a:
                    5d:ff:50:2d:60:92:88:0c:80:8d:f0:6b:2b:22:89:
                    9d:f1:e5:e9:c7:a1:87:12:af:ca:ac:19:0c:fd:a0:
                    c2:e8:ff:eb:da:62:a6:10:a3:e9:07:14:2c:f6:13:
                    78:d5:45:22:35:dd:a9:a1:ac:c9:ba:c0:7b:e5:67:
                    db:85:68:5d:7c:c6:b6:6e:77:46:d4:85:93:60:03:
                    49:75:fc:b9:e9:0b:13:ba:cb:c9:61:e6:82:5a:e1:
                    f4:6a:66:3d:14:f5:25:85:d8:85:68:5d:5f:9d:d5:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:86:13:82:C7:2B:21:6F:7A:0A:48:7C:41:E7:F3:1A:36:39:3B:03
            X509v3 Authority Key Identifier:
                keyid:91:8E:3D:53:3F:F7:AF:18:4E:0C:F5:C5:20:F9:E9:5A:FC:9A:AD:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/918E3D533FF7AF184E0CF5C520F9E95AFC9AAD85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:98:14:44:3e:42:6a:d8:7e:5a:4e:3c:03:42:69:83:95:29:
         6a:b2:19:fe:d7:3b:7f:9d:43:c9:ea:0f:7d:df:c6:b3:e0:f4:
         7d:cf:a5:b6:2b:57:d2:4a:01:39:dd:9a:82:92:7d:93:9c:b0:
         9a:1b:41:9a:e9:60:99:e7:b5:2f:ab:9e:1d:63:85:46:e7:24:
         1d:2d:e0:fc:06:06:79:32:e5:80:0b:f9:f4:75:50:0b:96:08:
         4a:3a:8b:43:f3:cf:d3:4c:02:8f:77:72:34:9c:4a:f2:fa:60:
         0a:00:66:41:9e:e4:1d:d0:52:4d:6f:98:1e:60:c3:a4:80:df:
         76:5b:67:d0:9c:42:ed:1d:ee:cf:3b:4a:69:11:d7:fb:cb:27:
         13:bf:43:2b:14:e8:3e:19:0f:50:73:15:dc:c7:73:3d:c9:2e:
         c1:56:ed:36:b6:a6:7a:d1:72:3b:6f:57:87:d7:89:ca:c8:7e:
         cb:4b:25:70:b8:8e:4c:b3:5d:7b:66:cb:05:fc:52:da:2a:79:
         11:6b:eb:32:ec:d0:4b:52:cb:e8:c4:08:c4:59:b1:3e:a6:6d:
         87:bc:f5:d0:6b:e1:60:c9:97:b1:19:39:68:52:cb:ba:90:f8:
         47:20:71:ee:4f:ac:af:f6:4f:0c:b6:b1:18:c4:f4:fd:52:b8:
         1e:61:16:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----