Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.mft
File:                     1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.mft (raw, json)
Hash identifier:          /Ed+FnEJOfIqBHLNx9RGesDdNDf1t3wUWiy75qMzOK8=
Subject key identifier:   99:53:62:69:B9:6C:0A:02:39:79:47:F8:0B:68:F9:62:72:7D:98:1B
Authority key identifier: 1E:A3:FB:62:D0:AB:A1:9D:25:06:23:6D:E2:8F:82:8C:3B:7B:BF:F6
Certificate issuer:       /CN=1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6
Certificate serial:       1E99836D37D5AC4AB9D1F8EE1B0ECF1A54533C88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.mft
Manifest number:          2D
Signing time:             Mon 15 Apr 2024 02:03:13 +0000
Manifest this update:     Mon 15 Apr 2024 01:58:13 +0000
Manifest next update:     Tue 16 Apr 2024 03:23:13 +0000
Files and hashes:         1: 323830343a313964633a3a2f33322d3634203d3e203631383233.roa (hash: wEK7GyAotTlpMvwhuXG1qHka8FiW+KrEambK8bYryls=)
                          2: 1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.crl (hash: mTarw5Y7drnrWkdK++vt85n0Y8buZfXp1WS69Zs6EtM=)
                          3: 3230312e3232322e32342e302f32322d3234203d3e203631383233.roa (hash: N65D2H0pGofWuzIJY+uJ4icX2efwG3BjUYFYFL2Ud5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:99:83:6d:37:d5:ac:4a:b9:d1:f8:ee:1b:0e:cf:1a:54:53:3c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6
        Validity
            Not Before: Apr 15 01:58:13 2024 GMT
            Not After : Apr 16 03:23:13 2024 GMT
        Subject: CN=99536269B96C0A02397947F80B68F962727D981B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:56:f1:fe:cc:b9:1c:03:0e:60:7e:6f:f7:
                    d5:c5:b4:07:0e:8f:85:e8:c1:4b:1d:00:7d:15:55:
                    28:52:96:4e:fb:bc:b4:9f:7a:45:4e:20:64:16:0f:
                    07:da:19:61:30:6a:d2:05:85:1d:c3:a9:40:9b:1b:
                    39:f8:d6:29:5d:86:df:7d:1c:a4:2c:9a:64:b5:7f:
                    1f:ff:66:eb:e7:5d:72:b3:de:f2:48:44:f1:39:95:
                    4e:ef:99:c7:b3:c1:a0:e3:fa:24:89:12:fc:df:7c:
                    7f:3b:bc:27:70:49:3e:f6:6d:3e:48:af:61:bc:3a:
                    96:27:59:7a:d7:aa:c2:cb:99:9a:d1:51:6e:bd:1b:
                    2f:4a:3f:7e:9e:b5:f4:c6:40:b4:be:e7:61:d8:f0:
                    28:ac:30:ec:40:8f:b3:a1:e1:a3:05:ee:92:f5:b4:
                    74:4c:a0:76:a6:a8:31:7c:8e:68:64:1f:3c:65:2c:
                    94:4c:4e:dc:2c:b4:00:25:ab:c8:a3:66:16:5e:3f:
                    3e:59:5e:f6:65:05:9f:82:e7:45:35:38:54:f9:f6:
                    59:4e:9c:4f:8a:5a:42:ef:61:5e:d4:be:56:8c:58:
                    f6:80:cd:8a:b5:a6:52:e1:c4:58:45:8c:de:54:fb:
                    f6:16:51:e3:bf:02:65:00:e0:a8:e6:c3:b8:d7:cf:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:53:62:69:B9:6C:0A:02:39:79:47:F8:0B:68:F9:62:72:7D:98:1B
            X509v3 Authority Key Identifier:
                keyid:1E:A3:FB:62:D0:AB:A1:9D:25:06:23:6D:E2:8F:82:8C:3B:7B:BF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:59:aa:73:10:08:85:af:2c:b2:54:cb:57:be:45:57:c3:77:
         4f:02:cd:04:4f:66:5b:7d:47:80:90:ae:71:84:d3:87:cc:7d:
         b3:eb:00:1b:fb:ed:c2:76:fc:b8:ec:58:7e:80:b8:77:b1:a2:
         70:39:c9:aa:78:1e:77:11:53:65:96:d2:3b:4b:8e:b1:d9:2a:
         ab:f4:e1:09:a2:11:7f:2c:38:b6:77:89:fa:de:0b:f8:79:db:
         66:d4:8b:b5:d8:e7:fa:cb:18:53:b0:72:fa:17:55:f8:2b:53:
         37:7d:28:b4:6d:61:f8:33:02:69:33:7a:0a:f5:56:0c:a8:5b:
         7b:45:0c:a8:d7:06:3d:da:b7:66:9f:07:0c:54:f8:16:d7:2a:
         d3:73:7f:04:ee:d3:e7:93:ca:5d:93:c0:b4:4f:db:f2:be:ba:
         4c:9c:70:10:b0:82:4b:82:75:77:08:b8:fd:5b:8f:6d:ae:15:
         14:c0:b8:8e:08:fb:f3:98:ec:9b:ba:5c:13:2b:f5:ea:e4:6d:
         c8:8f:6e:f8:8c:82:38:fc:a8:36:00:1e:58:3c:89:1e:3a:b9:
         bf:13:2f:80:15:e3:10:1d:99:41:07:a0:28:c2:65:2d:1b:00:
         72:20:fa:6f:10:7b:05:8b:4f:5a:ef:8c:87:be:f5:8b:75:7c:
         8d:c2:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----