Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/14554C80B155DC38E5B37031CA484531CBCAE4CA.mft
File:                     14554C80B155DC38E5B37031CA484531CBCAE4CA.mft (raw, json)
Hash identifier:          koCJjQ4wNAdru2AeckcL5zkRNd5Nk4NfgIVfgfqDw2s=
Subject key identifier:   17:15:A8:E5:58:86:3D:EA:1E:F1:7C:65:AA:B9:7F:32:79:F4:02:1C
Authority key identifier: 14:55:4C:80:B1:55:DC:38:E5:B3:70:31:CA:48:45:31:CB:CA:E4:CA
Certificate issuer:       /CN=14554C80B155DC38E5B37031CA484531CBCAE4CA
Certificate serial:       69B236BC5D56EF5710D78318AAD85222FB790571
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14554C80B155DC38E5B37031CA484531CBCAE4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/14554C80B155DC38E5B37031CA484531CBCAE4CA.mft
Manifest number:          EC
Signing time:             Thu 12 Oct 2023 01:36:52 +0000
Manifest this update:     Thu 12 Oct 2023 01:31:52 +0000
Manifest next update:     Fri 13 Oct 2023 03:57:52 +0000
Files and hashes:         1: 323830343a353662343a3a2f33322d3336203d3e20323638303139.roa (hash: h1LjHxErZis30fT2cpOshlxLEekWbz3ddlU9HP/oiBU=)
                          2: 34352e3136372e3138342e302f32322d3234203d3e20323638303139.roa (hash: nYt0950tTOiGDf5LFDWnPw8ByztpqqSnn6BFqaPmpJc=)
                          3: 14554C80B155DC38E5B37031CA484531CBCAE4CA.crl (hash: uoM5qqjRSFbjPVVE8IX3yh9UhX9nLXsoSIwxfrZlpt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b2:36:bc:5d:56:ef:57:10:d7:83:18:aa:d8:52:22:fb:79:05:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14554C80B155DC38E5B37031CA484531CBCAE4CA
        Validity
            Not Before: Oct 12 01:31:52 2023 GMT
            Not After : Oct 13 03:57:52 2023 GMT
        Subject: CN=1715A8E558863DEA1EF17C65AAB97F3279F4021C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e0:01:12:1c:f4:ec:76:f3:e5:f1:5d:71:52:
                    9b:96:f6:ff:6f:79:2c:6d:51:64:bb:7a:f2:fd:13:
                    61:5d:45:cd:90:34:40:a8:70:5d:f1:d2:11:c9:3f:
                    a8:a0:f3:d4:90:cf:70:f3:5a:a7:30:24:cd:b4:d0:
                    9e:d8:e0:c6:04:09:14:ea:55:df:e7:e9:d1:a9:a3:
                    04:ba:1f:79:f1:77:6f:16:25:99:b1:f7:aa:e4:0b:
                    1c:82:a2:e3:ba:b6:c4:f0:d1:43:ef:5a:d3:96:e7:
                    63:10:fe:0b:e9:a3:0a:ce:c3:b4:f6:f4:03:92:2e:
                    6f:c3:15:85:c8:4a:48:81:cb:0c:c6:33:71:2b:5e:
                    6d:4c:4e:32:9e:7a:cf:0b:82:f5:0f:a2:c8:5c:00:
                    36:93:54:ab:51:cc:e8:73:43:67:71:58:38:c7:8b:
                    c5:02:03:ec:0d:8d:c8:4e:55:30:32:e3:8c:de:1d:
                    64:24:8f:98:21:13:30:38:b9:c1:dc:a7:f3:70:5a:
                    7e:75:42:7d:fa:a0:11:88:97:2d:14:e4:7b:7c:ba:
                    ee:79:3f:7c:75:6c:f7:6c:4a:99:e2:ae:22:ca:32:
                    36:1c:1a:b6:4f:a1:1e:d8:01:10:38:6a:0a:59:f0:
                    ed:87:cd:83:d8:d7:69:69:e2:1e:b5:c5:be:cf:a0:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:A8:E5:58:86:3D:EA:1E:F1:7C:65:AA:B9:7F:32:79:F4:02:1C
            X509v3 Authority Key Identifier:
                keyid:14:55:4C:80:B1:55:DC:38:E5:B3:70:31:CA:48:45:31:CB:CA:E4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/14554C80B155DC38E5B37031CA484531CBCAE4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14554C80B155DC38E5B37031CA484531CBCAE4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/14554C80B155DC38E5B37031CA484531CBCAE4CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:f2:e6:1e:3c:8d:b8:9b:7a:3b:57:5b:a2:c2:91:a6:d1:
         cf:2c:87:51:c3:27:77:ee:c7:cb:49:6b:44:72:45:ef:35:00:
         ff:34:7b:95:58:19:47:8f:25:ca:fc:5c:de:32:97:bc:c7:71:
         0a:29:6c:66:79:e7:93:07:72:85:22:7e:8d:2f:26:72:30:37:
         ee:8b:31:1f:6c:74:8b:62:7c:62:42:2c:d9:67:81:38:99:1f:
         2a:87:13:3d:0f:53:a1:f3:88:97:f2:0a:85:c3:fa:00:26:3a:
         30:c6:1d:f8:c3:c4:c4:6c:a6:2b:62:89:be:91:bf:72:3b:ca:
         8a:ef:c4:e9:82:1c:3a:a2:78:dc:e2:0a:d3:99:d3:f3:01:47:
         41:4c:21:ef:61:30:72:ae:7a:40:53:7b:25:21:3a:e5:58:42:
         44:4e:b0:3d:55:fe:05:53:4d:c8:84:82:f8:6c:de:b1:20:8c:
         db:05:49:f1:3e:36:90:72:23:c4:9b:43:a1:9c:57:02:3d:1f:
         a4:d7:92:54:d9:7b:0d:b3:ad:ab:0c:17:ed:1f:78:42:9b:7b:
         85:e3:37:28:a9:b1:8b:1d:f3:2d:f7:09:87:0e:0c:c5:80:ec:
         b0:04:76:7a:fc:f1:c2:87:b1:80:45:40:71:f4:78:a2:49:09:
         17:4d:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----