Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03.mft
File:                     B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03.mft (raw, json)
Hash identifier:          8/0RDG5fEpLNPPMwqrk+QKl+myI8yd7o9PDCuJCEhcs=
Subject key identifier:   5D:85:A0:72:7A:30:BD:D7:FF:87:65:06:07:75:48:FF:2D:CC:16:FC
Authority key identifier: B8:20:DF:F5:E2:67:B9:A9:F4:DF:4F:09:75:8A:8D:E7:BF:E0:8B:03
Certificate issuer:       /CN=B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03
Certificate serial:       19244B8CC394D96BAE7FEE34C1020DF498497A14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03.mft
Manifest number:          19
Signing time:             Thu 15 Feb 2024 17:53:32 +0000
Manifest this update:     Thu 15 Feb 2024 17:48:32 +0000
Manifest next update:     Fri 16 Feb 2024 20:26:32 +0000
Files and hashes:         1: B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03.crl (hash: AwtjEmkuN5jjKbca5TDZbDz9iSLjs34RTDzutewCmbk=)
                          2: 323830343a346138383a3a2f33322d3438203d3e20323637323436.roa (hash: D+ia3bpa4XzjMmxi6nbkoBxlW7cMLDobcbikM/IvaIs=)
                          3: 34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa (hash: k/DA+/IhPXb5zFS9ZnG/bbxoK4QlJKhRgjrOQnWr8FQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:24:4b:8c:c3:94:d9:6b:ae:7f:ee:34:c1:02:0d:f4:98:49:7a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03
        Validity
            Not Before: Feb 15 17:48:32 2024 GMT
            Not After : Feb 16 20:26:32 2024 GMT
        Subject: CN=5D85A0727A30BDD7FF876506077548FF2DCC16FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:2e:69:a2:2c:79:02:9c:c5:6c:65:26:29:
                    b8:cf:c9:f9:d8:61:05:6a:c6:0f:fd:ce:1f:ac:1d:
                    94:67:c0:61:dd:eb:c7:a9:39:ef:d9:e1:06:28:04:
                    21:99:ae:54:12:2d:49:f6:8e:b7:c0:0d:f1:1c:6c:
                    ce:29:a6:a3:29:4d:d6:b4:79:16:fe:07:b5:01:15:
                    39:23:a2:3c:91:07:28:1f:f1:3c:7a:95:2a:81:c9:
                    f0:50:ac:2b:59:cc:a0:1d:6d:8f:8b:3c:77:82:64:
                    ef:63:f4:11:ec:be:21:31:3b:22:d8:c5:08:dc:e6:
                    ca:80:b8:34:e3:82:3c:64:1a:61:2b:a6:08:cf:c0:
                    fa:51:9e:3c:17:59:7f:4d:49:c9:96:e8:c2:25:1a:
                    ef:bd:77:36:a9:d6:cb:fb:98:e1:9f:53:12:7c:e9:
                    46:c3:5f:8c:ed:bd:f8:26:04:05:51:ee:b0:a9:49:
                    f7:89:8c:92:52:da:ab:14:91:f2:6e:38:2c:be:f8:
                    b9:6c:26:c5:b9:2d:a6:92:ad:55:4d:96:99:9a:51:
                    4e:60:a9:52:27:5a:d2:90:29:0b:e0:1e:4e:23:c8:
                    6b:84:56:6f:1d:23:4f:73:03:d5:b5:ab:02:1a:72:
                    98:c5:2a:67:d6:4c:3e:d1:e2:dd:92:a6:31:c5:41:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:85:A0:72:7A:30:BD:D7:FF:87:65:06:07:75:48:FF:2D:CC:16:FC
            X509v3 Authority Key Identifier:
                keyid:B8:20:DF:F5:E2:67:B9:A9:F4:DF:4F:09:75:8A:8D:E7:BF:E0:8B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/B820DFF5E267B9A9F4DF4F09758A8DE7BFE08B03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:c0:d9:61:7e:3c:39:be:8b:1e:15:4e:16:67:68:ec:78:
         22:0e:7f:9c:3c:1b:16:8a:d5:5c:48:10:03:1e:d7:01:14:10:
         4b:d9:28:b7:4e:45:8a:91:57:1c:08:fe:3a:b8:69:50:56:22:
         64:5b:f9:fc:17:69:f2:fc:9e:11:15:aa:8d:16:d8:ad:de:56:
         77:a0:fd:1d:f9:e8:1f:ad:cf:72:b2:7b:04:5b:7b:3a:23:e0:
         5b:bc:89:aa:e2:52:18:ad:f1:81:67:ea:eb:1c:d1:fe:de:d5:
         8b:b8:26:27:35:dc:08:6d:8a:7c:e3:41:6a:94:3c:09:cc:f3:
         fc:67:b2:08:4b:3b:8d:d8:84:e4:37:4b:ea:60:b3:7d:21:19:
         a6:f4:d0:2d:b1:1e:fb:54:d0:6f:fa:be:70:33:a1:90:0b:8b:
         80:21:a3:91:2f:40:d5:79:cd:22:75:10:7d:4f:fd:cc:e4:4f:
         a3:42:9e:08:c6:22:54:73:bb:47:c3:9a:c7:e3:91:be:2b:a2:
         c1:d7:59:21:6e:af:b5:19:f0:b0:58:e1:e0:9d:ef:b8:55:bd:
         fa:e0:1f:70:eb:0c:07:7b:3d:02:b2:ea:61:96:c4:73:a9:f7:
         26:b5:87:c4:83:f0:8f:32:dd:f1:e1:2d:b0:bb:3d:bc:a4:25:
         e7:44:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----