Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.mft
File:                     D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.mft (raw, json)
Hash identifier:          mKYhENq5ReQP4kuxfqit5AW+E+kpJSdo9xgzA4n/Z4o=
Subject key identifier:   3D:19:BD:6D:75:DD:D5:7B:3D:09:2D:20:F6:01:DE:CF:62:30:4C:23
Authority key identifier: D2:84:56:6F:CD:D2:FF:AA:4E:66:CF:4D:07:47:C8:DC:08:2D:8C:A6
Certificate issuer:       /CN=D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6
Certificate serial:       4F816FDC3F4EF4CB34E710F66544E734CBD72DF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.mft
Manifest number:          2E
Signing time:             Mon 15 Apr 2024 01:58:25 +0000
Manifest this update:     Mon 15 Apr 2024 01:53:25 +0000
Manifest next update:     Tue 16 Apr 2024 03:13:25 +0000
Files and hashes:         1: 323830343a336339343a3a2f33322d3336203d3e20323636323232.roa (hash: p2nKw3oHj3ztvWOWJcvKNyRUFVDuUdWtUhwE448X8Fk=)
                          2: 3139322e3134302e32342e302f32322d3234203d3e20323636323232.roa (hash: UMtIPLwrtc3T6IpDFqx5zBOpVITfTSHgdqZjLeJxLUI=)
                          3: D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.crl (hash: uPlWOajcNhoU2KiGOcYpK7qmZPQdaj732bo4ij3y80o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:81:6f:dc:3f:4e:f4:cb:34:e7:10:f6:65:44:e7:34:cb:d7:2d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6
        Validity
            Not Before: Apr 15 01:53:25 2024 GMT
            Not After : Apr 16 03:13:25 2024 GMT
        Subject: CN=3D19BD6D75DDD57B3D092D20F601DECF62304C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:ef:1e:50:3b:01:f3:1a:1b:3e:b1:64:61:
                    ac:ac:aa:cf:fe:a0:30:45:21:15:ea:30:57:10:5f:
                    04:59:96:23:52:97:05:51:18:37:79:0c:ee:17:59:
                    3e:5a:b8:80:3a:c2:f8:4f:ef:56:d0:08:ca:cf:d5:
                    05:71:f3:ae:0c:d8:94:b5:d7:67:f8:d0:97:30:4b:
                    5e:62:9c:02:a3:27:17:3b:d3:aa:57:7c:81:40:b2:
                    4b:63:5c:f3:c4:9e:09:20:fb:9b:03:43:84:e6:af:
                    85:55:ac:4c:e8:d1:b3:c9:3f:bc:72:d0:03:c4:7c:
                    c0:ae:18:3b:ea:15:3a:53:8e:3f:3d:4a:a2:a5:56:
                    9d:b8:ce:bb:a9:f9:88:f9:b3:fe:f1:a1:b5:df:36:
                    55:e3:27:86:a0:b4:13:93:9d:89:a3:6e:75:69:8e:
                    d0:f1:4d:33:18:b8:73:17:e3:61:23:f0:5a:9f:84:
                    73:bc:df:74:6d:3c:14:17:fa:23:7c:23:a7:c0:87:
                    fe:b4:c8:9e:a0:2b:f7:77:be:ab:cc:19:4d:20:88:
                    d3:57:67:04:15:3f:15:df:77:fc:aa:b5:d9:c1:96:
                    02:58:87:f0:6a:53:59:62:42:5a:a0:a2:63:ad:df:
                    50:ce:3a:41:f2:67:ba:d0:04:df:d4:5f:29:91:9a:
                    00:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:19:BD:6D:75:DD:D5:7B:3D:09:2D:20:F6:01:DE:CF:62:30:4C:23
            X509v3 Authority Key Identifier:
                keyid:D2:84:56:6F:CD:D2:FF:AA:4E:66:CF:4D:07:47:C8:DC:08:2D:8C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:64:cd:5b:92:a7:f8:29:93:d7:e3:cb:ce:d3:f7:6f:71:98:
         8f:1f:82:bd:b2:26:50:86:8a:c9:2d:aa:82:50:b3:c7:2a:e5:
         cc:69:28:ff:6a:78:3d:da:cc:f4:c0:19:6a:c1:1e:84:fd:81:
         16:56:b6:5c:69:1c:5b:07:c3:f2:13:e6:e4:a5:cf:ff:ff:2f:
         bb:f9:ec:55:d7:7f:1e:c8:6f:f2:ea:98:34:d9:a9:4f:75:35:
         ac:4d:9d:28:5c:e6:8c:cf:d0:7c:08:a3:42:69:de:39:e1:8d:
         83:04:8c:7e:13:7d:03:4e:e5:da:38:11:39:3d:4c:5b:c4:18:
         11:12:dd:d0:a8:89:65:83:ed:9b:d6:0a:1e:ad:c0:34:ca:6d:
         53:78:02:0c:85:56:dd:7a:c5:61:14:8f:40:7e:a7:cc:db:6d:
         9e:13:3e:67:ef:22:be:52:dd:8b:c1:e0:01:c7:f1:b0:13:b3:
         1c:e3:d3:7a:a2:cf:51:76:11:a8:4c:7e:9e:85:df:2e:02:44:
         2d:71:9c:8b:58:f0:16:0f:d3:d8:09:f2:ff:ce:ce:54:70:0d:
         06:6b:ec:b9:1f:4b:ee:0d:1d:65:d4:83:f0:d0:29:95:28:53:
         42:d1:64:90:1c:67:15:7f:16:58:eb:cf:f2:41:c6:bb:b2:19:
         96:4d:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----