Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.mft
File:                     130159CF4FA60D26A7D1BD0FA88516733B676D6A.mft (raw, json)
Hash identifier:          TkSvt7z3qgYCxcrvGmPO6GlmPVhc6PtQbu/KgQZHsHQ=
Subject key identifier:   FC:56:70:46:28:49:FC:C1:A7:4E:03:58:05:BF:F9:91:93:94:AC:E4
Authority key identifier: 13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A
Certificate issuer:       /CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
Certificate serial:       6BD5CCA83D2EB43A1B141DF9C27507FC62A068F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.mft
Manifest number:          42
Signing time:             Mon 15 Apr 2024 01:23:58 +0000
Manifest this update:     Mon 15 Apr 2024 01:18:58 +0000
Manifest next update:     Tue 16 Apr 2024 03:11:58 +0000
Files and hashes:         1: 323830343a326434383a3a2f33322d3336203d3e20323635323731.roa (hash: XHtEbQQda1X573DOmUbZ6hsFB8SwgOjFODT4Z9kcgSQ=)
                          2: 130159CF4FA60D26A7D1BD0FA88516733B676D6A.crl (hash: LTGo13IINYhN5TAAZa59cjDJRlHoRNfBcJSeB7b1FVs=)
                          3: 3136382e39302e31362e302f32322d3234203d3e20323635323731.roa (hash: dHy9mFPm5rttlCqVmlrxWWXOksJvpP8rfUfIfQVUw8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d5:cc:a8:3d:2e:b4:3a:1b:14:1d:f9:c2:75:07:fc:62:a0:68:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
        Validity
            Not Before: Apr 15 01:18:58 2024 GMT
            Not After : Apr 16 03:11:58 2024 GMT
        Subject: CN=FC5670462849FCC1A74E035805BFF9919394ACE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:29:5d:d8:0b:31:13:b3:10:28:cc:56:72:
                    67:de:7e:53:5c:ed:99:b1:b8:4f:30:c7:24:35:db:
                    a7:ea:19:33:6b:14:f7:ed:ae:cb:48:ec:51:7b:7c:
                    99:e4:48:8d:27:7f:c0:aa:58:ac:80:b3:d0:82:27:
                    2f:bd:16:dd:5d:5e:20:a8:10:d8:b5:df:aa:89:01:
                    86:20:0d:64:a0:ce:aa:94:5a:c9:87:60:71:53:e8:
                    d6:3f:1e:52:21:a3:a9:06:d0:c6:f0:94:c4:6f:ad:
                    59:42:de:41:df:6c:3d:ea:17:21:5c:52:13:8e:37:
                    40:8e:9f:d1:06:a9:b1:1d:79:b7:dd:ae:48:b6:f9:
                    5b:16:a9:c0:87:25:d8:40:cc:e9:38:54:e7:af:12:
                    28:52:a9:6f:b8:bc:f9:37:80:c1:df:f0:dc:b2:07:
                    ee:44:59:82:9a:c8:c3:25:30:0d:bb:a0:f2:91:fc:
                    23:8f:50:d7:e3:74:cf:7e:7a:a5:96:b0:8a:dc:82:
                    f9:80:4a:34:d7:37:69:a5:49:73:de:db:94:57:d5:
                    93:96:78:30:1a:f1:6a:2a:2d:bf:b2:8f:43:9f:05:
                    84:bc:90:0e:45:79:89:f9:f6:1b:e3:71:2d:f4:83:
                    3a:75:5b:e6:05:a7:74:e8:d1:82:03:e1:f4:b2:72:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:70:46:28:49:FC:C1:A7:4E:03:58:05:BF:F9:91:93:94:AC:E4
            X509v3 Authority Key Identifier:
                keyid:13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:28:13:f3:e4:6f:d8:5c:05:da:d8:11:4d:f6:cc:67:0d:e8:
         64:dc:59:81:c6:04:5a:d8:27:10:db:c6:dd:4b:71:0a:04:a9:
         cd:d4:f3:09:a6:7f:ab:86:0b:37:de:b6:3a:a7:84:02:8f:9b:
         1f:33:50:04:ba:ba:50:6c:82:97:01:20:91:ea:78:8c:ac:c1:
         ca:ef:4b:fd:8f:51:bd:8f:16:eb:6f:08:bf:ef:cb:f3:b2:f9:
         5b:fd:93:b9:ff:b9:2f:ae:a6:7e:d9:8c:7d:b4:db:c1:fd:0c:
         a9:95:07:e8:bf:5d:72:72:72:8e:3d:37:75:0f:da:0e:ab:52:
         23:1b:ec:a2:a6:02:17:0d:4e:cf:d6:cf:95:f1:11:ce:fa:2a:
         4c:9e:21:4f:ef:16:cf:a9:8e:38:83:63:7a:1b:c5:aa:9d:92:
         92:7f:de:0d:93:ec:0d:a6:34:2c:d3:fd:10:49:d3:0f:54:46:
         93:2a:3a:2d:55:71:00:0e:e9:1e:e6:dc:29:23:da:c9:61:bd:
         4f:f9:94:a9:9c:0d:da:13:95:bb:53:6d:06:31:0b:57:cf:81:
         84:53:9c:3d:6e:90:d2:c7:17:ca:03:34:f3:d7:e3:00:77:51:
         26:e2:3a:d5:df:5b:ca:bc:58:73:9b:10:63:ac:ab:6a:2e:7c:
         97:e0:52:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----