Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/A90C51F287F829905266548E409D0259B53DAEA7.mft
File:                     A90C51F287F829905266548E409D0259B53DAEA7.mft (raw, json)
Hash identifier:          7lwtl3d7IzQ5lK5UIFOb93TWfCjb4oSwMHcm/FH9N1s=
Subject key identifier:   BC:EA:A8:F6:03:CE:07:D9:DE:76:DD:E1:FC:24:9C:59:D7:7B:B9:74
Authority key identifier: A9:0C:51:F2:87:F8:29:90:52:66:54:8E:40:9D:02:59:B5:3D:AE:A7
Certificate issuer:       /CN=A90C51F287F829905266548E409D0259B53DAEA7
Certificate serial:       5091CCD9D81FDF2AE924B1CAF5A2244476BC85CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A90C51F287F829905266548E409D0259B53DAEA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/A90C51F287F829905266548E409D0259B53DAEA7.mft
Manifest number:          019F
Signing time:             Mon 15 Apr 2024 04:46:11 +0000
Manifest this update:     Mon 15 Apr 2024 04:41:11 +0000
Manifest next update:     Tue 16 Apr 2024 04:58:11 +0000
Files and hashes:         1: 323830343a353561303a3a2f33322d3438203d3e20323637393436.roa (hash: NSC9Idmxr1X6o/WT3b7OTRCsXG06wfLrQwjPz2s5pQs=)
                          2: A90C51F287F829905266548E409D0259B53DAEA7.crl (hash: sbG1cjbFRwgMmTJmhqJ7+K5YMqWPqcpQQ46KMl+6KWE=)
                          3: 34352e3136362e36342e302f32322d3234203d3e20323637393436.roa (hash: Zq+/8fu76MxUu6Z9GcKkMZpszVDvbIwbA1YLO4wyTj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:91:cc:d9:d8:1f:df:2a:e9:24:b1:ca:f5:a2:24:44:76:bc:85:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90C51F287F829905266548E409D0259B53DAEA7
        Validity
            Not Before: Apr 15 04:41:11 2024 GMT
            Not After : Apr 16 04:58:11 2024 GMT
        Subject: CN=BCEAA8F603CE07D9DE76DDE1FC249C59D77BB974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:58:91:86:e1:5f:e0:b7:5c:39:a9:4b:0f:
                    a1:15:63:31:ec:34:04:4c:a1:a3:3c:e2:c4:34:12:
                    34:35:34:cf:98:bb:a9:0d:d4:9e:c5:2a:ef:93:52:
                    4b:8c:56:91:4c:62:2c:45:44:32:e3:cd:4f:dc:ff:
                    9f:86:4b:64:75:d8:0c:dd:fd:4c:d2:57:95:c0:90:
                    fb:0a:28:4b:16:91:8c:15:c8:4a:83:f2:00:96:b1:
                    7d:52:58:01:f9:88:d7:21:75:80:f5:ee:a0:52:52:
                    c0:d2:29:15:e3:5c:05:d9:8e:13:c1:9f:76:ac:f4:
                    e1:a9:fc:78:07:bc:d3:82:6a:17:4f:53:7b:da:07:
                    a1:4e:c5:c1:8a:aa:79:74:4c:44:98:6a:7a:2c:d8:
                    bc:bb:3c:e5:ed:2f:ca:bf:0e:0a:c1:d5:f7:dd:a7:
                    35:50:0a:2d:4d:b3:5b:3d:e2:15:cc:8f:06:f4:4f:
                    99:c8:a9:cf:af:2a:df:85:f4:67:2d:c3:21:d6:a3:
                    c9:81:86:ed:b2:09:4f:38:7a:c3:68:a6:e0:16:fb:
                    76:33:95:4d:75:48:bd:78:b0:64:f0:b6:db:fa:00:
                    47:d5:d4:3d:3b:e8:ce:1f:99:14:04:85:d5:a5:90:
                    8e:0e:60:8e:4e:1e:b2:df:66:27:79:df:32:d7:a4:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EA:A8:F6:03:CE:07:D9:DE:76:DD:E1:FC:24:9C:59:D7:7B:B9:74
            X509v3 Authority Key Identifier:
                keyid:A9:0C:51:F2:87:F8:29:90:52:66:54:8E:40:9D:02:59:B5:3D:AE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/A90C51F287F829905266548E409D0259B53DAEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A90C51F287F829905266548E409D0259B53DAEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/A90C51F287F829905266548E409D0259B53DAEA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:fd:26:50:d2:d8:69:57:fa:98:f3:05:c6:3b:59:43:f5:
         5f:6c:94:cf:9d:8c:28:ef:65:e3:6e:29:de:2f:8d:58:a0:95:
         08:c5:65:18:4e:66:7d:94:ea:21:ae:c0:32:68:a8:e6:31:e9:
         d0:d0:2c:38:3a:94:08:d2:61:0b:e2:f9:49:ea:9a:f3:ec:89:
         9e:cd:1f:c4:44:eb:d4:86:2e:fd:25:d3:27:ae:df:0e:5a:4d:
         dd:67:30:33:88:6d:b2:ea:97:2f:aa:16:22:d6:2b:03:af:c9:
         33:ec:a8:31:f5:8c:fc:13:f6:fe:d0:79:6a:c2:8c:e4:45:b5:
         28:2d:e4:a6:bc:10:61:4e:c1:8f:6d:6d:ef:e5:e5:b1:f4:1d:
         a6:a5:67:34:ad:c7:38:49:50:06:3b:62:c1:d2:24:6a:a0:25:
         38:b2:b0:5b:7b:01:ae:f8:ac:33:6d:e2:6a:1f:ee:2a:0a:5b:
         b4:c4:66:23:2e:dc:22:5d:df:9e:e5:8d:c7:04:7b:11:07:24:
         f6:58:1a:08:dc:0e:ed:07:c2:b2:68:5d:b2:36:cf:86:17:ad:
         ad:ac:0f:d1:48:b2:a4:14:c8:d8:c4:a1:f9:3a:96:5f:ce:58:
         67:c6:dd:f6:2e:a0:33:3a:25:50:a4:84:2b:99:8f:61:c3:a8:
         0a:2a:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----