Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.mft
File:                     417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.mft (raw, json)
Hash identifier:          1Q8jtfNg0MWLEsUujVlSMmwWnQeVuLbhdnaTmHHHCjE=
Subject key identifier:   2F:D3:0E:AD:35:3F:D7:59:57:1B:BD:A1:32:20:AC:74:A9:F7:39:F1
Authority key identifier: 41:75:26:E4:CA:DA:3A:0A:9D:94:AF:16:B1:B3:7A:65:F4:A0:DB:4F
Certificate issuer:       /CN=417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F
Certificate serial:       5FF6A44C4E6238E37D277472BD911496A72FEDD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.mft
Manifest number:          015B
Signing time:             Sun 14 Apr 2024 22:16:26 +0000
Manifest this update:     Sun 14 Apr 2024 22:11:26 +0000
Manifest next update:     Tue 16 Apr 2024 00:23:26 +0000
Files and hashes:         1: 3136382e39302e33322e302f32322d3332203d3e20323635323633.roa (hash: r2SI68Gq1vjXyK/hMNibWjzCP+lUqok9nz2D4xratoc=)
                          2: 417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.crl (hash: S3BqQooGLtCDJVqe6IQFsDIltf2xOuJZyCZ9boM6uko=)
                          3: 3136382e39302e33332e302f32342d3234203d3e20323732373936.roa (hash: If2igDtfHKfHIIkyxEdttacTJ96qENAOcgMpbpN4utM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f6:a4:4c:4e:62:38:e3:7d:27:74:72:bd:91:14:96:a7:2f:ed:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F
        Validity
            Not Before: Apr 14 22:11:26 2024 GMT
            Not After : Apr 16 00:23:26 2024 GMT
        Subject: CN=2FD30EAD353FD759571BBDA13220AC74A9F739F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:18:c7:c1:13:6c:84:85:44:25:fe:df:68:
                    0f:b6:7e:05:6c:74:e3:07:07:af:94:28:84:2e:52:
                    c8:83:f7:88:fc:b2:49:cd:73:14:19:db:bb:19:7b:
                    d0:8f:2c:99:c1:1a:c5:87:95:d6:55:6a:2c:bb:a8:
                    7a:16:92:e4:1c:9f:02:0f:94:c8:11:2f:0b:fb:0a:
                    81:09:ed:80:62:1b:90:70:ba:0c:5d:c3:78:f2:24:
                    0c:24:9a:70:c1:1f:81:43:74:b3:ac:61:35:c1:f1:
                    18:4a:72:d8:84:91:72:f2:b2:ad:d4:34:61:7f:bf:
                    8a:d9:54:5f:8f:d1:8e:f7:0e:44:a4:7a:d1:38:62:
                    b7:50:52:47:6f:ff:5a:ce:c4:2f:bb:3e:94:06:14:
                    49:ab:45:cf:bb:da:85:69:90:50:3e:ea:86:0d:4b:
                    27:aa:eb:0d:17:35:c0:c7:99:52:1d:c0:68:c9:12:
                    24:9e:34:2f:5c:92:f2:2b:96:7f:d9:19:83:ab:c3:
                    b7:22:2b:43:9b:0b:ba:fc:fd:65:01:10:0a:2f:7d:
                    17:a3:78:1e:e7:b3:58:26:4f:61:c9:a4:0a:2e:63:
                    ed:1d:35:2c:be:b0:fa:a9:d5:39:bd:73:25:cf:cc:
                    76:e5:ac:f6:a0:22:85:01:6a:2c:96:7e:cd:54:d8:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D3:0E:AD:35:3F:D7:59:57:1B:BD:A1:32:20:AC:74:A9:F7:39:F1
            X509v3 Authority Key Identifier:
                keyid:41:75:26:E4:CA:DA:3A:0A:9D:94:AF:16:B1:B3:7A:65:F4:A0:DB:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:f1:71:7c:14:2c:57:64:8d:17:0e:34:76:d7:09:0d:a7:
         b4:96:95:77:23:fa:5d:f3:dc:7d:56:1e:67:95:6e:f0:b1:4a:
         d0:c9:fd:0c:df:c9:c5:e6:5a:a6:c0:3f:42:2e:e1:36:e2:7d:
         3a:b3:4c:72:46:e9:b8:0d:86:2c:83:20:46:c6:5f:e9:b0:3d:
         cd:3c:5f:d2:5c:c4:ce:f2:a1:80:7b:c6:d3:80:f7:38:b1:76:
         65:b2:97:ac:b3:f0:a5:b8:79:00:e4:48:2e:f4:0a:61:fb:20:
         e9:a7:cd:b6:09:e3:0a:92:da:e0:08:5b:59:4c:b1:d6:f0:e3:
         0f:d3:45:7c:33:2d:bc:6b:c1:8d:b2:19:ac:2d:85:44:d0:e3:
         c4:aa:68:59:8d:40:31:37:2b:59:a9:38:f6:b1:aa:d2:6d:8a:
         42:ff:17:a8:d4:77:14:07:3c:ed:3f:45:dd:23:2d:86:05:96:
         54:12:94:c5:89:b4:f4:c2:18:a3:f4:90:2c:2f:77:dd:0f:e8:
         9a:2a:4d:7b:d5:02:72:8b:1c:a2:df:26:87:64:15:94:f7:70:
         96:26:19:f7:42:b0:5e:dd:9b:7b:47:8a:a9:cd:ab:b5:ca:11:
         4d:c9:37:6f:33:c6:d7:7e:fb:79:de:6c:a0:42:ce:dc:2f:06:
         b0:17:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----