Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.mft
File:                     63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.mft (raw, json)
Hash identifier:          Unq0uhtWGI0nV4JhOfyMGFHyn+OirfjlnXGklOQTEGU=
Subject key identifier:   55:EE:8F:0E:3D:A1:D1:6D:5E:00:90:0A:F0:13:47:C4:3A:16:E4:22
Authority key identifier: 63:63:5F:5D:8D:FC:4E:C6:EB:51:8D:ED:A1:83:0F:B8:4F:E2:0A:65
Certificate issuer:       /CN=63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65
Certificate serial:       656EA6CCA13D66973DDFCED36266F768A8BDB078
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.mft
Manifest number:          0196
Signing time:             Mon 15 Apr 2024 07:29:35 +0000
Manifest this update:     Mon 15 Apr 2024 07:24:35 +0000
Manifest next update:     Tue 16 Apr 2024 08:45:35 +0000
Files and hashes:         1: 34352e3137372e3130302e302f32322d3234203d3e203133373836.roa (hash: xCm0Mci1Cigd/kLV8A3vzSaWYKbRkYLngEayCe8i4Hw=)
                          2: 63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.crl (hash: UgTICB4+IEjYx3hU6XP+oQVZ/74ptqSGixBkpZ0osRg=)
                          3: 323830343a356439303a3a2f33322d3438203d3e203133373836.roa (hash: W1wzEa3YJpQ209SWpgYNjv3U92JdqdAtg0sGGAkeXlU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6e:a6:cc:a1:3d:66:97:3d:df:ce:d3:62:66:f7:68:a8:bd:b0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65
        Validity
            Not Before: Apr 15 07:24:35 2024 GMT
            Not After : Apr 16 08:45:35 2024 GMT
        Subject: CN=55EE8F0E3DA1D16D5E00900AF01347C43A16E422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:d9:29:4d:1c:2b:a8:2b:82:0a:6f:5a:ba:
                    3f:7b:b4:34:83:98:5e:d2:b4:69:e3:06:5f:d8:0f:
                    3c:fa:f3:fb:94:20:e5:b3:fe:9e:8f:7b:1e:1a:0d:
                    27:95:2e:4b:58:7e:ae:9d:a4:35:d5:7e:63:63:c0:
                    c4:be:89:3f:30:af:a8:80:49:fc:3e:cd:4e:43:33:
                    39:be:44:ad:64:2a:a5:0c:d3:de:59:b4:13:03:77:
                    8c:3c:38:bd:66:52:5b:99:fd:83:02:23:c2:0c:a9:
                    8c:ed:e8:c4:05:0a:05:2d:ee:80:b7:0e:49:5c:c4:
                    12:28:a8:72:ab:cb:f9:b4:4e:9d:8d:39:3c:df:b7:
                    71:9e:db:88:7f:82:96:9f:24:1c:ab:d1:75:6a:4c:
                    26:c0:bd:b0:fa:f1:88:9b:7f:3c:41:65:aa:4a:c7:
                    14:55:3c:62:db:8c:50:a7:75:05:c8:e3:10:38:58:
                    a6:79:1e:96:5f:68:e2:86:a6:d5:1f:09:e3:e7:40:
                    ce:e9:57:f2:a5:cc:50:a2:f4:92:b2:15:b7:fa:d5:
                    3d:31:14:2c:68:1f:47:5c:c4:cb:c1:d0:57:66:61:
                    8f:54:96:c9:68:8a:d5:cc:6e:ed:62:80:23:a2:bd:
                    30:3d:52:e0:0a:cb:fa:83:5d:1c:c1:a3:41:9c:7c:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EE:8F:0E:3D:A1:D1:6D:5E:00:90:0A:F0:13:47:C4:3A:16:E4:22
            X509v3 Authority Key Identifier:
                keyid:63:63:5F:5D:8D:FC:4E:C6:EB:51:8D:ED:A1:83:0F:B8:4F:E2:0A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:26:4d:bf:16:a1:10:67:4b:41:43:cf:6f:62:5b:65:03:ba:
         54:76:b0:8f:03:01:19:13:bc:cc:54:d2:54:79:86:4f:e4:f7:
         75:4d:60:21:aa:96:41:27:9a:ce:fe:35:54:93:be:4c:9d:86:
         5c:99:e1:88:cb:73:ad:8d:09:0e:13:e2:1d:83:d0:c8:a0:3d:
         ae:df:f3:77:9c:90:44:7c:5d:75:33:bc:e3:01:94:72:e2:78:
         9f:f3:8d:1d:cc:25:9e:54:9e:e4:af:57:52:ef:00:71:50:8c:
         cb:5f:f8:2f:08:e4:c9:38:e7:f1:79:ec:0d:47:73:8c:9b:84:
         fc:81:78:17:f9:f7:28:9f:a6:04:61:21:51:40:ae:c9:0a:b8:
         db:12:5a:00:42:98:15:24:9e:a1:80:86:84:8f:0b:ec:1e:39:
         31:c8:b9:3c:f3:2a:25:7f:1c:13:f5:bb:13:c1:56:5c:38:de:
         90:1c:bb:65:82:11:fe:f3:d7:6a:a5:56:42:fd:0c:b9:93:1a:
         9c:cb:1c:61:6d:29:7c:0b:55:df:48:49:5f:3e:0c:37:e1:2e:
         2f:d6:04:87:d0:cc:a8:cd:1d:d5:c1:69:be:12:61:ac:81:45:
         cb:a9:f0:ed:3c:9a:4b:c4:96:fb:bf:e5:f9:bc:88:25:fc:a8:
         64:c6:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----