Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.mft
File:                     283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.mft (raw, json)
Hash identifier:          wigcnWCRqhooTjxCDXFpknYUiyS2wam0HyEFlH2kpG4=
Subject key identifier:   D8:21:4F:3B:B3:71:3D:47:59:BB:87:7C:34:69:80:30:0C:96:6E:B0
Authority key identifier: 28:32:86:E3:CE:36:E5:F7:33:27:A1:AE:15:CA:2F:CB:17:7B:D3:DC
Certificate issuer:       /CN=283286E3CE36E5F73327A1AE15CA2FCB177BD3DC
Certificate serial:       471EFF334DFA092B64A5DC829D0B7144893B5856
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.mft
Manifest number:          0172
Signing time:             Mon 15 Apr 2024 10:45:57 +0000
Manifest this update:     Mon 15 Apr 2024 10:40:57 +0000
Manifest next update:     Tue 16 Apr 2024 11:23:57 +0000
Files and hashes:         1: 283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.crl (hash: FHBQs7rPGii45D+uWIXDCX6San0KsKhKEqPWsGMXMOo=)
                          2: 323830343a373439383a3a2f33322d3434203d3e20323730393931.roa (hash: nYHJ9SgISmOArau/Hwcdnf2HocdIZxlj5H5IDXjm9oA=)
                          3: 3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (hash: vv6r5vmDXnK+kPP+2DuMaaost1JH4rHcCFeK0dEGaSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1e:ff:33:4d:fa:09:2b:64:a5:dc:82:9d:0b:71:44:89:3b:58:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283286E3CE36E5F73327A1AE15CA2FCB177BD3DC
        Validity
            Not Before: Apr 15 10:40:57 2024 GMT
            Not After : Apr 16 11:23:57 2024 GMT
        Subject: CN=D8214F3BB3713D4759BB877C346980300C966EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:80:3e:47:08:9f:53:3c:a4:e8:03:0b:df:
                    bc:69:71:59:c5:00:ab:b3:d2:bd:dc:36:94:36:74:
                    bf:4a:d0:3d:90:cb:9c:17:91:76:1e:7e:5d:93:59:
                    d5:5f:7a:3c:7d:97:39:ee:86:24:ca:ba:2a:1a:05:
                    d0:2f:88:62:4d:a7:c0:dd:0d:ea:26:c2:24:51:55:
                    e6:98:03:42:eb:a3:68:8f:c2:ee:22:f0:f5:cb:ed:
                    0b:07:84:a2:34:99:6f:a1:70:c9:26:07:24:ed:c7:
                    df:54:e8:3a:c9:91:49:9a:f8:a1:c4:0b:34:29:3f:
                    81:a3:0e:07:20:f1:21:23:ee:4f:50:7f:26:a0:56:
                    c6:d6:68:3e:e7:e7:58:9f:41:3c:18:8a:e4:ff:d8:
                    04:74:d5:a6:c4:e3:bd:45:8e:98:32:e0:b3:48:de:
                    75:1b:09:bc:b8:5a:4f:52:b6:70:90:f9:29:c9:74:
                    e8:9e:a4:4f:de:7a:77:d6:37:1f:2b:3c:c1:38:a0:
                    5e:0d:4c:36:10:b8:28:0d:b7:aa:b0:42:91:a7:98:
                    5d:40:0c:21:6c:28:02:96:b9:47:b2:a9:44:ec:cd:
                    a2:b5:e4:8d:fe:64:3b:6f:28:4b:06:5c:91:fb:89:
                    ab:41:44:21:e6:8e:8c:e2:46:ad:78:6a:9a:f0:ba:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:21:4F:3B:B3:71:3D:47:59:BB:87:7C:34:69:80:30:0C:96:6E:B0
            X509v3 Authority Key Identifier:
                keyid:28:32:86:E3:CE:36:E5:F7:33:27:A1:AE:15:CA:2F:CB:17:7B:D3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:ff:68:4f:b4:a9:44:e7:f4:d2:cc:4d:9f:60:47:4a:64:
         54:3b:8e:3e:31:b8:e3:9c:c5:2e:ba:39:43:c8:6e:f0:1f:92:
         55:27:2f:06:46:26:3d:2e:51:37:32:3f:82:1a:8b:2e:ee:2d:
         74:63:f3:24:dc:a1:1d:ed:9c:e4:0b:36:de:54:34:6b:d9:48:
         e8:8d:8c:a8:a7:ce:b6:55:42:ec:13:71:fc:db:a8:97:3a:32:
         50:8c:1c:02:a4:76:5a:0a:25:f9:33:46:56:39:cb:06:59:b7:
         c7:bf:8d:b0:88:0e:94:fb:27:71:74:f4:8a:6a:ac:db:f0:8f:
         5c:f5:46:a2:46:3e:af:c6:df:37:54:39:58:1a:c6:b3:d7:d5:
         43:c1:0b:60:08:50:44:33:f7:1b:98:f8:2b:f2:74:b7:9a:08:
         7f:cc:6f:ce:bc:d2:a6:49:df:ea:df:8d:46:c7:ce:f2:65:15:
         fa:06:9b:fb:85:47:77:ab:7c:ab:c6:a4:b9:15:3f:eb:71:e7:
         45:fc:ac:24:61:77:56:85:f6:7e:52:4f:da:7d:12:17:cc:b1:
         ea:19:3a:9f:3b:15:64:f1:69:0b:93:c0:86:bf:d4:44:05:7d:
         82:8d:5c:c6:f6:ef:42:0f:5b:2a:e6:53:64:ab:be:ab:3c:67:
         6b:b0:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----