Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/0/B1492F7251101026ED4744F2DB029AE46DD90664.mft
File:                     B1492F7251101026ED4744F2DB029AE46DD90664.mft (raw, json)
Hash identifier:          885rZJIVaO10jfYOUI8Tqq7ymz2PEZUGLn86QfNquxo=
Subject key identifier:   68:EB:3D:74:45:3F:94:BB:83:95:B8:AC:2D:34:AD:AC:0A:A6:53:73
Authority key identifier: B1:49:2F:72:51:10:10:26:ED:47:44:F2:DB:02:9A:E4:6D:D9:06:64
Certificate issuer:       /CN=B1492F7251101026ED4744F2DB029AE46DD90664
Certificate serial:       2F8EEE75E24308624FC53D28D261740ACF818BFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1492F7251101026ED4744F2DB029AE46DD90664.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/0/B1492F7251101026ED4744F2DB029AE46DD90664.mft
Manifest number:          4E
Signing time:             Sun 14 Apr 2024 18:53:06 +0000
Manifest this update:     Sun 14 Apr 2024 18:48:06 +0000
Manifest next update:     Mon 15 Apr 2024 21:06:06 +0000
Files and hashes:         1: 323830343a333736343a3a2f33322d3438203d3e20323636343039.roa (hash: 6D1+bp2VSQ+xXO8rJGsawDLh0Hljxj0D5ysC2/hmlGY=)
                          2: B1492F7251101026ED4744F2DB029AE46DD90664.crl (hash: o9TDHeiiArhYF2Lkx4ozp7JYINgFj3XD3s5AY8Q8Vww=)
                          3: 3137302e38312e36382e302f32322d3234203d3e20323636343039.roa (hash: aownhizogqzmBOtGrnAaP+8oPMFZfngng/L20FxCj3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8e:ee:75:e2:43:08:62:4f:c5:3d:28:d2:61:74:0a:cf:81:8b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1492F7251101026ED4744F2DB029AE46DD90664
        Validity
            Not Before: Apr 14 18:48:06 2024 GMT
            Not After : Apr 15 21:06:06 2024 GMT
        Subject: CN=68EB3D74453F94BB8395B8AC2D34ADAC0AA65373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:e8:0a:48:98:48:b0:89:53:70:63:7f:6d:
                    58:9b:5e:72:a1:fd:c4:4f:fe:b3:1b:9b:aa:09:b5:
                    92:fd:ce:fb:35:7d:8d:f6:99:02:ec:ef:5e:5c:4f:
                    bf:8e:5f:61:a1:98:bb:56:50:8e:91:2c:f0:9d:ac:
                    dd:07:1f:d7:bb:cc:3f:c9:e7:d4:c0:a5:7c:0d:c0:
                    be:b6:f1:6b:1f:f4:fe:53:83:ec:58:74:44:b7:19:
                    d0:e6:73:b6:ac:7f:be:1e:06:1d:98:ec:3f:cf:12:
                    80:c1:a3:29:af:93:10:cf:20:b1:d9:72:7f:6e:32:
                    90:75:cf:58:1e:d7:58:ba:33:cb:65:dd:68:a7:de:
                    ec:1f:c6:f0:2e:55:fc:91:54:7e:22:7e:52:49:7e:
                    f0:29:54:de:ba:49:7e:9d:b7:d3:36:a4:b6:27:01:
                    5f:29:5e:79:d6:e9:bf:3e:b1:d3:c0:08:f7:a6:ba:
                    ad:a6:48:6e:e6:38:c7:12:e7:2e:61:46:dd:6b:c9:
                    57:89:08:f0:29:54:89:f3:34:9b:9c:63:ba:3e:ec:
                    06:e8:7a:29:d8:1b:03:c8:66:51:9f:29:6e:f3:71:
                    60:b6:15:77:bd:a2:67:0c:3a:67:bb:c6:e2:47:98:
                    1e:ac:4a:a5:62:f8:09:97:f7:62:3f:df:1b:45:82:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:3D:74:45:3F:94:BB:83:95:B8:AC:2D:34:AD:AC:0A:A6:53:73
            X509v3 Authority Key Identifier:
                keyid:B1:49:2F:72:51:10:10:26:ED:47:44:F2:DB:02:9A:E4:6D:D9:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/0/B1492F7251101026ED4744F2DB029AE46DD90664.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1492F7251101026ED4744F2DB029AE46DD90664.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/0/B1492F7251101026ED4744F2DB029AE46DD90664.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6f:1f:62:6d:d7:a9:b8:4f:6e:83:c6:f4:21:be:2a:f6:15:
         0c:e9:5f:2a:ee:fe:d1:34:ab:b5:ee:db:a4:f8:26:fd:ac:3a:
         f1:8c:fc:70:e3:ca:32:b7:e8:73:d2:45:5d:cf:a6:2c:28:c1:
         aa:9e:e1:42:9a:97:44:1f:33:4a:7e:19:58:4e:c4:76:16:31:
         6e:71:82:c9:f0:c7:f3:d6:e6:a0:e2:65:1f:28:7b:22:f5:ba:
         e3:cd:6d:7c:00:01:fd:eb:28:95:4a:c1:19:4c:18:05:b0:3a:
         c0:c0:df:84:2a:5e:83:67:e8:71:8e:40:48:58:73:d7:cd:e3:
         42:5a:ba:c7:1a:a1:1d:82:b0:2f:c9:78:e4:38:73:8d:ec:d3:
         08:22:56:96:86:cf:43:7a:3d:a9:f4:32:cf:07:e5:14:4c:45:
         29:86:dd:e6:29:de:32:65:3a:e8:2a:be:4f:20:4a:47:7e:d5:
         9e:ff:29:98:e5:3b:7d:84:11:33:8e:38:e5:a8:1c:e5:e4:01:
         70:dd:c5:51:0c:d1:c7:d2:a1:a2:a5:78:8f:af:13:db:55:b4:
         45:33:32:e6:6d:d2:c0:d3:e9:61:80:7c:9b:5e:c6:f8:42:a0:
         ce:67:30:78:97:9e:f7:0e:93:7e:3c:47:a7:65:ad:8d:db:78:
         94:dc:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----