Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.mft
File:                     AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.mft (raw, json)
Hash identifier:          arUw0sQwuEf4jF1gXxUiI8lpmH+HeLbWCpnX3YuYVXE=
Subject key identifier:   BD:EB:27:7D:4E:FA:85:9A:6A:48:51:C3:F4:98:48:61:61:BC:F2:0A
Authority key identifier: AE:40:E9:82:14:EC:BD:AC:0F:3A:75:9A:ED:2D:D7:6B:1B:A5:6B:49
Certificate issuer:       /CN=AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49
Certificate serial:       3CE41450AE9B2EB55780CCF2519AFA9771306208
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.mft
Manifest number:          F4
Signing time:             Mon 14 Oct 2024 06:42:03 +0000
Manifest this update:     Mon 14 Oct 2024 06:37:03 +0000
Manifest next update:     Tue 15 Oct 2024 07:44:03 +0000
Files and hashes:         1: 323830343a343166383a3a2f33322d3438203d3e20323637343639.roa (hash: K2cm+8m4fzT+gJLMy/ZJeQfnKhSe+1IrozwjbuqhQWs=)
                          2: AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.crl (hash: CutZ2xUqRMDdxP9Ozwu57a24LnyiBvNGoiHa8lAvTjg=)
                          3: 3139322e3134312e3135362e302f32322d3234203d3e20323637343639.roa (hash: 3pibpcah3VxAivcovlsLzdhJPT/JD/Yg/QJs2uvHZJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e4:14:50:ae:9b:2e:b5:57:80:cc:f2:51:9a:fa:97:71:30:62:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49
        Validity
            Not Before: Oct 14 06:37:03 2024 GMT
            Not After : Oct 15 07:44:03 2024 GMT
        Subject: CN=BDEB277D4EFA859A6A4851C3F498486161BCF20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:18:ca:21:7b:d7:88:c0:89:e0:63:6b:2c:
                    4a:43:d4:db:1a:5d:41:ab:41:3c:86:4a:a9:6b:7e:
                    43:17:bf:82:a3:04:56:61:29:a4:46:4f:5c:31:75:
                    4d:40:f5:b2:55:dc:c4:0e:cf:f2:20:d7:a6:8b:e2:
                    80:1a:14:66:f6:77:86:42:01:dc:99:b6:82:98:8d:
                    41:65:78:f7:32:2c:01:c6:99:7c:07:e8:d4:f7:cb:
                    e1:56:d0:17:16:55:19:f3:4d:a7:cc:6b:e4:6b:9c:
                    c5:9e:ba:a6:8e:3e:22:37:92:f0:01:71:4e:b9:a1:
                    57:19:b8:48:4d:f9:24:e8:95:ff:66:b1:6b:8f:71:
                    74:b3:0f:ee:8e:c3:30:13:4c:08:a7:a5:7a:85:e9:
                    0a:37:43:62:36:c5:c6:8e:a9:14:86:f6:e7:85:f9:
                    19:ce:31:ba:70:fc:22:88:8e:ea:08:e9:11:e6:86:
                    08:89:5e:08:45:cd:79:05:28:a5:53:63:d1:6a:e6:
                    d2:4f:52:2c:ef:66:1a:82:a4:ae:a8:0f:be:ee:0c:
                    39:8d:7e:82:7b:e6:c4:ed:5d:47:a7:7b:a0:d1:6c:
                    fc:44:fb:c1:f7:3e:7a:84:e8:bc:dd:6e:19:16:1c:
                    2f:26:52:b4:33:97:e7:d9:df:ba:1a:5e:a9:31:4f:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EB:27:7D:4E:FA:85:9A:6A:48:51:C3:F4:98:48:61:61:BC:F2:0A
            X509v3 Authority Key Identifier:
                keyid:AE:40:E9:82:14:EC:BD:AC:0F:3A:75:9A:ED:2D:D7:6B:1B:A5:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fe:ae:fa:ac:d8:ac:ea:51:b4:28:2b:21:ae:1c:f4:a9:7f:
         12:d6:0c:95:68:fe:ce:d7:51:a1:7a:51:05:f8:83:f2:51:40:
         eb:54:44:b5:e2:c5:7d:5a:65:fd:b4:76:73:05:6c:71:dc:e0:
         42:89:df:5e:7d:17:aa:c9:bb:4c:e3:52:6f:44:26:30:97:4d:
         2a:69:ae:2f:f4:a0:39:b4:ff:3a:e5:27:87:84:2b:28:27:62:
         c2:1a:18:4e:81:e1:b3:0c:ac:0e:1a:88:38:6a:01:25:ff:d4:
         e8:54:d3:df:b2:c6:52:69:a6:98:60:1f:90:d2:16:28:17:a6:
         8c:b2:96:db:4f:2a:ae:d3:91:99:be:f7:1b:5d:4a:72:f0:15:
         d3:e5:92:d9:c4:99:95:aa:ad:b1:73:b0:fd:38:e8:d6:bb:7e:
         c2:4b:4c:12:db:a3:b4:1d:8c:dd:e0:7d:89:19:fb:3b:ee:fd:
         75:88:0a:93:85:d2:c7:1f:5e:5b:70:7e:c9:41:b2:69:67:71:
         cc:b2:57:a0:44:31:02:34:4d:af:8b:04:0c:88:e3:e8:76:8d:
         ab:7e:3b:7a:06:bb:4d:c2:ca:48:d7:b0:81:d4:fd:e7:a9:81:
         c5:58:60:87:a2:97:3d:48:18:2d:ee:b4:1b:e3:b2:0a:ad:92:
         f6:43:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----