Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.mft
File:                     B9CD500DA2BC8C2710486802D7F1C006136FD6B4.mft (raw, json)
Hash identifier:          jdNOaLOas8x8k2rzBI3IivBTtwoPtWIBXkFeqoYqqR8=
Subject key identifier:   40:6A:AB:CB:77:25:A9:20:9D:34:FF:10:80:95:D4:C0:79:3E:75:0C
Authority key identifier: B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4
Certificate issuer:       /CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
Certificate serial:       554445741DE6ED2CA8B53C64A25FA02CE0F7EAE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.mft
Manifest number:          010E
Signing time:             Mon 15 Apr 2024 11:14:09 +0000
Manifest this update:     Mon 15 Apr 2024 11:09:09 +0000
Manifest next update:     Tue 16 Apr 2024 12:10:09 +0000
Files and hashes:         1: B9CD500DA2BC8C2710486802D7F1C006136FD6B4.crl (hash: z+uDc6kzfbFaXKdgbPW3dUDpqA4glXkU7LBIbv6mgAg=)
                          2: 3137372e31312e3235322e302f32342d3234203d3e203532373536.roa (hash: gkXquS9EJ/tuPfl1ohYVujNl+x8KUnd8Wida4cM1tBo=)
                          3: 323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa (hash: C3Z7DXsFOcPSXTvbzk2uP+12okfn9coFemtLZBHVdZ0=)
                          4: 3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa (hash: kvDNVG6Sm3WVNouh7IUDSzZvmLzbL0mo2INl+QN0a7I=)
                          5: 3137302e3234352e3133342e302f32332d3234203d3e203532373536.roa (hash: /mdbBqRSh4D/hIF3Ig4PmaK8uaZ8uBuly6Cd0wUwxUg=)
                          6: 3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa (hash: X0u8SJoZNb/zUDjPT6SfU8yrNj/MOqDmXhBrYyu5hTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:44:45:74:1d:e6:ed:2c:a8:b5:3c:64:a2:5f:a0:2c:e0:f7:ea:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
        Validity
            Not Before: Apr 15 11:09:09 2024 GMT
            Not After : Apr 16 12:10:09 2024 GMT
        Subject: CN=406AABCB7725A9209D34FF108095D4C0793E750C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cb:04:98:3a:15:c0:50:68:1c:9e:0f:e0:34:
                    41:94:04:45:79:46:a3:b5:6e:aa:a6:7b:2f:7c:f0:
                    93:82:c2:a6:02:bf:a6:e0:08:3b:ed:b5:b4:c0:7f:
                    a4:64:c1:bc:ce:83:ef:19:b2:ca:ba:77:b4:e7:46:
                    84:ac:c7:bd:17:d2:48:ac:eb:95:04:88:6f:38:00:
                    32:ac:cb:a6:4c:34:14:f3:ef:ac:be:c4:b2:95:c6:
                    ac:ec:a4:d9:3f:de:21:af:2b:7c:fd:3c:c2:77:83:
                    6e:d1:e0:da:9f:fb:c4:0b:58:eb:1f:2f:be:90:a4:
                    da:dc:49:e7:5f:a3:ab:00:a8:c7:94:b6:42:a3:91:
                    2d:b4:64:b5:4f:35:68:5d:5b:8d:6a:97:9a:93:5a:
                    35:05:5f:ba:46:85:4f:13:23:e5:3c:6f:0e:63:bd:
                    a0:57:02:e6:c9:6a:b9:48:02:a6:ee:b6:66:40:d7:
                    63:9e:3f:67:f7:19:7d:9d:18:c9:2a:75:3d:32:67:
                    30:10:e8:f9:f2:b3:34:7a:05:93:01:95:a4:9b:38:
                    fc:9a:6b:49:3b:62:4b:f1:51:af:8a:41:45:a3:05:
                    7d:2d:40:28:d7:c0:43:fe:44:0b:3b:34:f5:54:4b:
                    e1:d5:1d:9e:1b:1d:8f:08:46:b6:00:97:3d:1c:ca:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6A:AB:CB:77:25:A9:20:9D:34:FF:10:80:95:D4:C0:79:3E:75:0C
            X509v3 Authority Key Identifier:
                keyid:B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:39:26:c6:d4:87:d1:2b:96:ec:59:ae:f5:bd:bc:17:1e:e5:
         8f:76:b4:50:46:a7:93:14:73:ea:1e:d2:aa:c3:68:e6:f9:5a:
         f0:c0:65:c7:e5:8e:bb:1c:61:a3:7e:bf:06:3b:1c:4d:ab:e2:
         37:3e:49:a1:1e:53:78:9c:13:e8:59:8b:c4:42:bf:ee:64:87:
         e6:91:33:43:41:9a:52:62:22:dd:05:ac:01:3c:f9:af:0d:6b:
         09:d0:cf:4e:aa:4f:c4:49:39:4c:a1:5e:4f:62:11:07:f7:57:
         3f:f7:3f:a8:8b:b4:ca:c9:8c:4d:de:a1:bd:14:93:e6:85:1a:
         b4:b9:b8:24:62:77:72:b1:07:44:b6:74:8c:6d:85:e5:64:82:
         00:8d:70:94:73:40:e4:e3:b2:f4:e1:ed:b6:f5:34:35:d2:2b:
         7e:7a:d1:76:4a:b2:09:a0:07:be:20:c2:57:a3:ce:50:30:45:
         b0:25:b2:9e:b9:90:1b:62:4d:a6:3f:c7:05:d6:1a:f6:82:d9:
         7a:cb:12:ce:83:87:61:bf:e2:ee:5c:de:f4:ad:27:8e:d8:b3:
         99:f2:81:60:c1:3a:41:6f:ff:e3:25:06:e1:d2:3d:f3:91:0c:
         a7:25:41:1c:bf:b3:c1:8a:69:46:9d:64:d4:37:b2:87:35:f2:
         5f:bf:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----