Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.mft
File:                     C932A24EC705A8BEBC3C663ACEF965792455753E.mft (raw, json)
Hash identifier:          UD3JdFLjyJnRQB1RH/m7bjeK+Yia4D5Q5qiks7VkbDE=
Subject key identifier:   F1:CD:2C:20:6A:85:7D:46:C7:DE:D9:01:A9:27:F0:74:EE:EA:B4:82
Authority key identifier: C9:32:A2:4E:C7:05:A8:BE:BC:3C:66:3A:CE:F9:65:79:24:55:75:3E
Certificate issuer:       /CN=C932A24EC705A8BEBC3C663ACEF965792455753E
Certificate serial:       2AB3AF5C18C2C1B3675C9965099C9AC89F683183
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C932A24EC705A8BEBC3C663ACEF965792455753E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.mft
Manifest number:          0228
Signing time:             Sun 14 Apr 2024 17:29:32 +0000
Manifest this update:     Sun 14 Apr 2024 17:24:32 +0000
Manifest next update:     Mon 15 Apr 2024 19:38:32 +0000
Files and hashes:         1: 34352e3136352e3138302e302f32322d3232203d3e20323731353832.roa (hash: AiJgcK0zV/mzlR2kR0/YPxhIl6aPN6IrKe5LS5nUKT4=)
                          2: 323830343a376463383a3a2f33322d3332203d3e20323731353832.roa (hash: 5YAGV9jbwKMR/gM+AJT/My9jgtMFHngGwXQAJv7s2UU=)
                          3: C932A24EC705A8BEBC3C663ACEF965792455753E.crl (hash: K8oY8y59YECnov51xMTrT4rBzRTzrntDgGdu2edHoJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b3:af:5c:18:c2:c1:b3:67:5c:99:65:09:9c:9a:c8:9f:68:31:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C932A24EC705A8BEBC3C663ACEF965792455753E
        Validity
            Not Before: Apr 14 17:24:32 2024 GMT
            Not After : Apr 15 19:38:32 2024 GMT
        Subject: CN=F1CD2C206A857D46C7DED901A927F074EEEAB482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6d:63:8b:4c:53:7c:3a:81:d4:6c:f5:1c:e5:
                    63:42:4a:6c:df:85:69:35:01:f0:25:0b:23:d1:23:
                    ad:8f:34:b1:5e:86:be:af:bd:79:0f:ea:49:09:2f:
                    c1:3f:85:50:e8:57:3b:d0:21:00:de:d1:76:86:3d:
                    20:15:e1:86:b9:6f:d4:57:35:55:9d:55:0e:b7:58:
                    78:3d:ac:17:35:1d:0f:68:b2:c4:52:70:2c:ef:f3:
                    9e:ff:51:00:ea:ca:3d:bd:bd:9d:29:08:52:8f:db:
                    1e:7a:1c:dd:4e:2e:70:e5:10:86:80:c4:dd:94:de:
                    4c:5a:80:5b:37:e5:72:0e:e9:ed:1f:00:45:1e:01:
                    18:56:29:b2:c8:ab:ad:9b:9a:48:0f:8b:af:14:78:
                    43:fd:4b:e2:51:d3:08:33:35:e3:d4:1e:1b:02:b6:
                    5e:1d:71:41:a4:05:23:e3:ed:44:e3:de:0e:05:e2:
                    7a:82:24:8a:54:89:19:df:b7:57:a3:d0:2d:94:af:
                    2a:28:e1:a1:b3:f5:04:6b:51:03:5f:2d:53:72:7b:
                    bb:2f:2e:8f:e8:76:6c:49:66:70:52:e4:80:b2:8b:
                    73:ad:29:79:20:96:b5:25:63:9e:5e:8a:92:50:d4:
                    f8:a6:9f:ef:47:76:79:0d:ae:23:48:8c:ae:69:72:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CD:2C:20:6A:85:7D:46:C7:DE:D9:01:A9:27:F0:74:EE:EA:B4:82
            X509v3 Authority Key Identifier:
                keyid:C9:32:A2:4E:C7:05:A8:BE:BC:3C:66:3A:CE:F9:65:79:24:55:75:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C932A24EC705A8BEBC3C663ACEF965792455753E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:83:a0:ab:9d:1d:11:a2:e0:7c:d2:a3:ef:0d:0b:54:8c:f5:
         1b:0a:8f:1e:46:0c:17:5b:4d:01:a6:78:d8:b8:1c:4b:c2:cd:
         da:c4:93:7c:ca:19:d4:d2:e3:ed:63:81:94:e3:70:cc:e1:15:
         a4:40:b2:dc:1e:0c:30:74:c7:3c:39:cc:4c:34:c6:ef:a0:c5:
         0a:ac:7d:05:73:2a:02:aa:64:5b:31:7f:c6:2c:b9:17:25:16:
         38:5e:fa:0e:b2:3c:5a:3b:ab:d6:7d:5f:6d:00:f3:d1:2a:55:
         3e:28:1a:88:d3:51:f8:b2:5c:e0:9a:8b:9c:6a:bc:89:52:bd:
         13:25:e3:ee:a5:8b:d3:89:3c:40:8b:44:92:b1:51:3b:9a:40:
         ba:1f:df:1c:44:6d:7c:20:a5:28:ce:04:09:05:2b:69:52:5d:
         24:8d:be:f6:00:00:57:4c:af:15:62:5d:ba:b5:aa:a7:69:5a:
         e5:d2:74:70:12:85:a3:cf:c9:1a:a4:8c:a4:de:af:b3:cc:ab:
         76:a1:72:ae:22:4e:dd:e9:d8:bf:e6:a8:f6:a6:a5:40:33:16:
         e7:c5:db:91:46:49:3c:71:00:1a:cb:0d:79:79:25:fb:c1:69:
         8c:31:17:14:fd:bd:a0:57:7a:70:f8:71:dc:35:d0:57:5d:62:
         9b:63:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----