Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.mft
File:                     0E1720DD71542C4E7D57283F271E8BD1C333E5A9.mft (raw, json)
Hash identifier:          T3b+XL3tGXwZMYB4tpW3DUiitUVyR/aROja6DQOSegA=
Subject key identifier:   D4:83:C6:B7:8C:D8:E5:3B:56:BC:17:82:F8:AD:AA:9C:78:C8:1F:50
Authority key identifier: 0E:17:20:DD:71:54:2C:4E:7D:57:28:3F:27:1E:8B:D1:C3:33:E5:A9
Certificate issuer:       /CN=0E1720DD71542C4E7D57283F271E8BD1C333E5A9
Certificate serial:       7BCB7BA9F9D917A61D010F4682337983AE901C3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.mft
Manifest number:          41
Signing time:             Sun 14 Apr 2024 21:14:45 +0000
Manifest this update:     Sun 14 Apr 2024 21:09:45 +0000
Manifest next update:     Tue 16 Apr 2024 00:01:45 +0000
Files and hashes:         1: 323830343a316165343a3a2f33322d3332203d3e203631363937.roa (hash: I1vGbfLnax4DjzJ9LoCYjM1+lTqfktmeDHGJLEtsbZw=)
                          2: 0E1720DD71542C4E7D57283F271E8BD1C333E5A9.crl (hash: sEXiIklG8RAIM4ax2gtF0VzM5ERjSxsTT7C58R0+6rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cb:7b:a9:f9:d9:17:a6:1d:01:0f:46:82:33:79:83:ae:90:1c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E1720DD71542C4E7D57283F271E8BD1C333E5A9
        Validity
            Not Before: Apr 14 21:09:45 2024 GMT
            Not After : Apr 16 00:01:45 2024 GMT
        Subject: CN=D483C6B78CD8E53B56BC1782F8ADAA9C78C81F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:3d:d4:16:f4:49:33:56:77:e2:83:1a:3d:
                    db:7a:0e:bb:9e:1d:49:0e:05:ad:03:29:4a:2b:98:
                    7b:c2:eb:58:d4:26:56:80:74:b1:f3:37:5d:7e:ad:
                    36:9c:03:67:92:13:69:6c:0a:86:2b:46:ca:65:23:
                    9b:1e:f5:59:58:1e:42:7d:de:71:7a:a8:f1:9a:a6:
                    05:b0:f9:60:a8:78:e8:e1:de:e8:a3:2a:52:e6:60:
                    08:6c:d3:e4:7b:31:33:ca:06:09:45:b7:ce:12:51:
                    76:9c:d8:27:c6:b1:b0:1f:f3:4e:56:d4:88:90:e0:
                    01:eb:88:5b:a5:e0:50:97:08:98:1f:7d:d0:b0:10:
                    1e:03:67:6a:e0:61:97:27:3b:fe:73:9f:d9:aa:2b:
                    39:44:82:6c:c7:85:e9:e3:d7:e6:c0:85:2f:66:0a:
                    c3:b0:82:6c:72:b7:7e:53:22:25:23:82:71:1c:72:
                    72:51:66:82:7f:9b:13:9d:3c:3a:11:c6:dc:94:39:
                    53:f8:f2:6d:33:23:eb:44:ca:57:0b:73:83:a5:9d:
                    38:c7:88:3b:19:71:a3:c0:08:f1:09:c4:62:f0:b5:
                    4d:b2:81:48:2b:93:a3:48:c9:4d:3a:ef:a5:2d:a7:
                    21:a6:30:55:0b:9a:75:2f:a5:e5:98:2e:8b:41:e9:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:C6:B7:8C:D8:E5:3B:56:BC:17:82:F8:AD:AA:9C:78:C8:1F:50
            X509v3 Authority Key Identifier:
                keyid:0E:17:20:DD:71:54:2C:4E:7D:57:28:3F:27:1E:8B:D1:C3:33:E5:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:74:43:00:19:c0:02:38:44:49:cf:bc:07:c6:00:fb:58:b1:
         f7:48:2a:65:01:ff:c2:ec:05:82:74:ea:35:79:16:c8:b5:f6:
         a7:e1:06:a1:a3:50:5a:fe:c9:bb:fe:51:ac:d5:bf:c0:1f:37:
         d5:00:cd:8b:ce:28:0c:e5:d5:6a:82:4d:a1:08:bc:cb:c5:34:
         af:78:ea:e1:e6:d5:64:ab:ba:0f:4a:db:91:64:ce:cc:d6:4e:
         f4:1a:b8:7c:21:6c:b3:d1:a8:2a:b9:fe:60:92:75:52:58:89:
         83:5c:28:30:5d:35:d3:2c:ec:1f:34:5b:9f:51:2c:50:c6:c8:
         08:0e:92:30:63:ac:63:62:c2:3a:30:5e:4b:f7:c7:0f:3e:5e:
         0f:65:7b:83:61:95:12:b3:11:d0:0a:15:5b:e6:37:bf:44:8c:
         0a:18:6b:09:8a:a0:4d:1f:0c:8a:0b:7d:64:3d:7d:f0:3e:39:
         52:f4:5f:fe:14:b7:34:46:c1:c2:61:61:52:bb:07:68:ca:df:
         b7:95:20:aa:03:e8:c4:2b:1a:d8:19:bd:2c:1e:64:15:16:a0:
         55:22:22:05:0c:03:2d:34:c6:80:c2:60:d2:da:ff:a9:aa:b6:
         5a:11:cf:e6:7e:5a:70:49:74:c1:f1:45:7b:10:77:06:b6:35:
         9c:d1:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----