Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.mft
File:                     71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.mft (raw, json)
Hash identifier:          pQ9IH4nxcja2PrQEOQlko8/P1JcBzTcYS0LnjQ5GZ2c=
Subject key identifier:   C9:1A:BF:54:51:87:2A:C7:85:0E:3E:82:C9:4A:0A:5C:D2:9D:7A:79
Authority key identifier: 71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92
Certificate issuer:       /CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
Certificate serial:       2D39231A428C55EBECAC2D8C65FB26731F83E324
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.mft
Manifest number:          0451
Signing time:             Mon 15 Apr 2024 02:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 02:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 03:12:00 +0000
Files and hashes:         1: 323830343a383136633a3a2f33322d3438203d3e20323732343533.roa (hash: 0oT9QCV/maa1SPnqNt/Tq7wag5IbtCBOqGGhq8llgE8=)
                          2: 323830343a383136633a3a2f33332d3333203d3e20323732343533.roa (hash: SkHGl3lUoOUC4JvL66Osqow8MAjdF5H7HPnbALGQVFs=)
                          3: 323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa (hash: vL3rfxP0Z86ltx1u+UxBtSZ6w6PrSneZnPkBn1M9rkA=)
                          4: 323830343a383136633a3a2f33322d3332203d3e20323732343533.roa (hash: E7GMnTzT5IZp52nBuGBWdBWSSeMYaKs1PI75qw2tRGg=)
                          5: 71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.crl (hash: 8AztGgy5pKm7h2NcxVqIcJ54heEXUPQSMgHjZE845Mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:39:23:1a:42:8c:55:eb:ec:ac:2d:8c:65:fb:26:73:1f:83:e3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
        Validity
            Not Before: Apr 15 02:15:00 2024 GMT
            Not After : Apr 16 03:12:00 2024 GMT
        Subject: CN=C91ABF5451872AC7850E3E82C94A0A5CD29D7A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:4d:25:51:72:25:95:4b:7b:a5:52:31:63:
                    83:db:65:2b:a1:7b:12:3b:19:bb:e8:a2:51:6d:23:
                    f0:64:ba:ee:79:71:0a:dc:ca:41:d3:e3:f5:50:eb:
                    bb:d2:4b:57:01:97:05:21:44:71:a5:09:11:f5:6c:
                    0a:89:f6:64:f2:66:ce:04:3a:d9:41:74:e5:dd:3e:
                    a8:d5:05:08:19:48:41:41:c2:9d:73:20:0f:ed:79:
                    11:f3:81:cc:b8:c7:f0:e7:f7:ac:e0:2e:d3:4f:f8:
                    1b:05:3f:91:b1:ed:98:e7:c4:15:99:02:79:65:a9:
                    c0:59:a6:1e:bd:79:ad:90:48:e4:3a:4a:07:7e:90:
                    36:47:26:ef:c2:02:91:fd:07:93:c1:a3:66:3b:fb:
                    8a:ca:cc:6c:b5:62:81:0b:d1:d4:eb:d9:7e:d2:f7:
                    65:40:c2:d0:80:54:7c:b1:27:c4:96:5a:41:c3:2d:
                    7d:dc:f1:79:e4:15:cb:02:1b:8c:dc:e9:a7:8e:98:
                    aa:fd:bd:09:2a:8c:6c:06:e4:90:20:40:58:f7:4b:
                    86:c8:57:fd:f9:41:77:7b:14:e3:e0:62:c6:49:4f:
                    1f:37:74:0d:c6:86:c5:ae:73:94:c0:52:9b:a2:00:
                    e0:de:d6:87:db:70:25:72:ce:61:4d:a8:ce:a5:d1:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1A:BF:54:51:87:2A:C7:85:0E:3E:82:C9:4A:0A:5C:D2:9D:7A:79
            X509v3 Authority Key Identifier:
                keyid:71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8a:d6:1b:77:7d:ea:96:ce:5d:23:24:19:25:5f:2e:36:7e:
         ea:d2:e6:38:83:18:21:38:66:95:3c:72:be:8d:31:12:bf:ff:
         40:a8:b1:c2:2f:d6:26:db:db:51:39:6f:62:44:35:ef:78:67:
         26:da:81:5f:58:50:90:6a:0a:68:4b:8e:a3:26:75:9d:d7:a7:
         5c:61:74:ff:4c:43:78:77:1f:c6:7d:e2:4f:b6:a7:b9:8f:84:
         c5:03:5d:c8:97:2d:f6:50:ef:f1:9d:e8:12:d1:69:77:49:f1:
         cd:dd:4c:82:75:ae:ed:bb:f1:21:8d:10:e3:87:52:ad:4f:ad:
         4c:7e:1b:5a:97:3a:26:96:3b:ac:2c:f2:9a:e3:bb:a2:6f:0f:
         97:0b:28:e1:9f:ea:01:85:d1:58:2f:2f:4d:b3:df:4c:43:a1:
         49:80:ef:4e:77:43:17:cc:7d:3d:f5:0f:ce:b9:6d:16:69:cb:
         5a:5f:92:85:1c:41:9c:3d:a6:1c:a8:a3:07:2f:7d:7e:37:29:
         90:ed:a1:d2:96:f1:1a:7c:8c:bf:ce:71:94:bf:b9:12:cc:db:
         8f:fc:b5:cb:2b:ff:34:a6:d6:69:20:da:ef:8b:bd:f5:b0:13:
         49:72:46:f2:7e:a8:12:25:c5:2f:91:01:9c:6d:ff:d5:d7:90:
         de:74:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----