Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.mft
File:                     A17E1666B400764AAB84BF876124DB6CB1EB0DC3.mft (raw, json)
Hash identifier:          LCW/tWvE/AyBf7B1l/h8GFEpimyNl7B2mmgaw1KfIpw=
Subject key identifier:   0B:58:92:5D:A2:A5:F0:C6:2F:DA:E8:BE:86:50:DF:B8:DD:24:9C:79
Authority key identifier: A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3
Certificate issuer:       /CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
Certificate serial:       4FE7C7921D498A73645D5D03C4D9D24AA6F45D25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.mft
Manifest number:          58
Signing time:             Sun 14 Apr 2024 22:43:17 +0000
Manifest this update:     Sun 14 Apr 2024 22:38:17 +0000
Manifest next update:     Tue 16 Apr 2024 01:27:17 +0000
Files and hashes:         1: 3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa (hash: SzorqW8nJ+WFX+JvpTvooqDxVOTGjFknFlzn3VBJ+8g=)
                          2: 323830343a363931343a3a2f33322d3438203d3e20323730323437.roa (hash: +q0LyvSDCPH7cc7wyNazpdF2jT3giAMSFlPDwfWzQXo=)
                          3: A17E1666B400764AAB84BF876124DB6CB1EB0DC3.crl (hash: H44fZvNtK8nefd21q3mDCwrSc2TVnA2t3kN/Ft9A3eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e7:c7:92:1d:49:8a:73:64:5d:5d:03:c4:d9:d2:4a:a6:f4:5d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
        Validity
            Not Before: Apr 14 22:38:17 2024 GMT
            Not After : Apr 16 01:27:17 2024 GMT
        Subject: CN=0B58925DA2A5F0C62FDAE8BE8650DFB8DD249C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:17:bd:c9:b4:48:18:3e:47:5f:c2:f9:2a:
                    d8:11:3d:c1:30:c8:9a:20:c7:e3:d0:9d:12:ca:b0:
                    4a:76:02:58:6c:b7:c1:fc:ed:71:11:80:30:10:34:
                    48:53:63:cc:93:6d:1e:4f:84:cc:17:5e:5a:d6:6b:
                    c8:0b:cf:97:70:6d:be:c6:dd:67:b7:38:ea:cb:70:
                    58:c5:0a:76:56:c7:80:ad:e5:f3:34:62:93:a8:be:
                    ec:80:18:90:3b:9e:64:3c:8e:31:21:df:6a:06:6a:
                    ad:0c:e3:22:b5:75:8a:40:34:fa:d8:12:fd:11:34:
                    a1:0a:c5:ac:5c:32:a9:0d:61:ff:fa:0c:fe:32:f3:
                    37:fd:ef:6a:a8:84:bb:c5:66:c1:ff:10:ac:a8:bc:
                    3d:79:8f:14:bf:58:e8:cc:39:48:5c:20:0e:7d:57:
                    1d:d8:98:b0:89:58:9a:77:1a:34:1d:90:00:15:8b:
                    00:30:b9:ee:48:60:30:fb:d7:d4:5a:cb:a7:78:42:
                    85:b4:70:f7:61:ba:fe:94:af:5e:37:05:50:8c:5c:
                    10:34:e1:55:03:7a:9a:bb:84:77:9a:bd:9c:02:5d:
                    d0:b7:44:ac:4d:09:3f:29:84:ad:52:b5:8b:c6:bf:
                    8c:8c:e1:ca:18:72:e0:4a:4a:09:28:d8:2f:07:ed:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:58:92:5D:A2:A5:F0:C6:2F:DA:E8:BE:86:50:DF:B8:DD:24:9C:79
            X509v3 Authority Key Identifier:
                keyid:A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b0:20:3f:62:a1:c0:bd:d2:d7:e3:41:d7:c4:dc:8f:d6:24:
         bb:39:32:c6:8f:8c:09:b8:b8:46:9c:28:fb:b5:06:7d:c4:07:
         13:f6:e6:84:91:5c:fd:2f:d9:5d:26:d9:de:7f:07:c7:a1:05:
         9f:c6:79:79:34:96:5e:fc:75:e9:60:6b:23:6d:7c:2b:03:3e:
         62:b7:6d:0e:b0:de:85:a7:02:57:17:b5:f6:1f:d7:14:48:6b:
         96:6c:e8:4e:56:60:c6:c8:86:9a:5c:43:6d:df:8b:5a:17:d8:
         2f:a2:a5:be:e9:11:ae:fa:95:f7:d7:fa:0c:ba:35:38:9f:31:
         f7:23:b6:db:ca:37:39:dc:6a:bd:5a:13:72:72:72:b9:9c:7f:
         e9:24:64:de:85:68:17:83:09:5f:75:98:57:cd:a6:9a:ff:aa:
         0a:8f:c8:47:c4:36:33:d5:9c:ee:ec:ea:4d:10:d4:bd:e4:e4:
         42:d5:24:0c:de:50:1a:41:a4:c8:28:e3:62:6d:d1:2c:dc:9b:
         23:d9:45:32:7e:8a:c8:63:40:0c:84:d6:d6:26:6e:21:ef:f9:
         79:3a:14:8e:58:d0:c7:c2:ed:b7:e3:bc:f6:c5:10:e9:94:8a:
         77:59:e0:e1:79:d5:ce:8b:97:30:83:d8:c6:ee:9a:f3:2d:02:
         88:86:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----