Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/0/469981885A8F7261338D1094A7F2563BC33998EB.mft
File:                     469981885A8F7261338D1094A7F2563BC33998EB.mft (raw, json)
Hash identifier:          /nUU0D9+jc52nqljI8SX/sOTedhhc1XroYWGjqN1DVo=
Subject key identifier:   7C:10:84:46:0A:BD:E3:FC:89:09:CA:6F:9F:E0:73:4E:6A:9F:BE:4C
Authority key identifier: 46:99:81:88:5A:8F:72:61:33:8D:10:94:A7:F2:56:3B:C3:39:98:EB
Certificate issuer:       /CN=469981885A8F7261338D1094A7F2563BC33998EB
Certificate serial:       0896C7860DF43FA83CCE6D465C7D0511C2306891
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/469981885A8F7261338D1094A7F2563BC33998EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/0/469981885A8F7261338D1094A7F2563BC33998EB.mft
Manifest number:          0804
Signing time:             Sun 14 Apr 2024 18:21:53 +0000
Manifest this update:     Sun 14 Apr 2024 18:16:53 +0000
Manifest next update:     Mon 15 Apr 2024 20:32:53 +0000
Files and hashes:         1: 3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa (hash: eLzxcGG3vpCMcqtOsEXH6U2RKNwb6dhBWbAhcNZ2csM=)
                          2: 469981885A8F7261338D1094A7F2563BC33998EB.crl (hash: uMZFqUcZ/fJiXKGSm6o9k3e06CKZXJjDcNe4RTnaBIM=)
                          3: 3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa (hash: 1ugwixZmI2PejhbC/EZD+xAvnfqjbNbpVETmJ7rvUZM=)
                          4: 323830343a326330383a3a2f3332203d3e20323635313839.roa (hash: qjZpDtrvu2xAXTqCj9Wz5DLnpcQDnC6WmfWA3vuqb4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:96:c7:86:0d:f4:3f:a8:3c:ce:6d:46:5c:7d:05:11:c2:30:68:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469981885A8F7261338D1094A7F2563BC33998EB
        Validity
            Not Before: Apr 14 18:16:53 2024 GMT
            Not After : Apr 15 20:32:53 2024 GMT
        Subject: CN=7C1084460ABDE3FC8909CA6F9FE0734E6A9FBE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d9:6d:1b:43:9b:12:3c:14:20:06:d9:44:b7:
                    b9:8d:54:c4:53:21:ce:9a:15:15:43:a4:5c:2c:2e:
                    23:93:b9:37:69:7f:ea:ff:13:bf:cf:40:76:6c:7d:
                    a6:d6:12:6c:5e:ab:2c:86:b4:73:35:ac:21:55:5e:
                    7b:f7:d3:7d:ed:92:6b:74:3b:02:8d:78:be:7a:5f:
                    91:e0:d6:a9:c9:05:61:55:70:77:62:66:13:67:a4:
                    e9:3b:a1:44:53:b2:79:41:78:ab:90:b4:19:26:1a:
                    59:c5:65:fb:17:00:69:39:11:b5:21:c0:42:60:a2:
                    40:21:3c:c2:9d:c9:2a:29:c3:f5:64:af:2d:a3:3e:
                    7c:99:c5:31:23:9c:13:ba:42:42:c3:8e:e3:36:a0:
                    7f:0f:15:c5:3b:a7:3e:8f:3f:12:c0:89:cf:87:71:
                    9b:3a:bb:cd:53:1c:c0:ee:56:b1:9b:4a:fa:26:30:
                    ba:61:79:eb:c5:89:02:5b:12:7d:c5:c2:d9:88:16:
                    11:84:61:44:4f:ff:23:52:44:27:86:68:45:71:c2:
                    8c:e2:84:c7:37:c7:c3:3c:42:e5:b8:52:3d:14:08:
                    df:7a:9e:b1:6f:7d:1b:f4:6b:f3:df:5a:33:22:41:
                    bd:b1:fb:e5:0f:71:b7:4a:9d:a1:8b:96:32:9d:e7:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:10:84:46:0A:BD:E3:FC:89:09:CA:6F:9F:E0:73:4E:6A:9F:BE:4C
            X509v3 Authority Key Identifier:
                keyid:46:99:81:88:5A:8F:72:61:33:8D:10:94:A7:F2:56:3B:C3:39:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/0/469981885A8F7261338D1094A7F2563BC33998EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/469981885A8F7261338D1094A7F2563BC33998EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/0/469981885A8F7261338D1094A7F2563BC33998EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:dd:a4:53:9d:21:af:de:1a:d2:04:2d:7a:56:af:3a:35:fb:
         a0:d1:2e:71:70:36:1b:fd:c6:41:7f:cd:33:12:5f:f3:74:1a:
         e4:5a:20:f4:c2:aa:49:9a:a4:cd:df:de:f3:f1:81:c6:3d:63:
         44:2e:8a:22:0f:0c:10:18:c8:24:d0:bd:fd:4a:6c:85:e4:fb:
         3b:51:03:f8:21:2a:93:29:9c:3f:45:b4:5d:c4:d4:01:0f:19:
         5f:06:c6:3a:aa:0c:b0:9f:43:b2:e7:a5:38:f2:70:84:32:74:
         21:4a:07:53:df:9f:db:98:b9:bb:94:28:88:a8:cb:9f:39:23:
         fc:13:f7:14:a2:37:94:f3:8b:35:ca:df:61:ad:91:29:0c:59:
         bb:f5:10:f1:ed:0a:86:d7:81:8f:b9:49:49:73:6f:09:7d:13:
         7b:fe:f1:d5:14:30:60:f3:a7:8e:5d:0b:68:de:76:13:0b:e2:
         df:45:f3:f5:fd:44:2b:d1:14:44:ac:d5:92:50:4e:16:e8:19:
         a0:b9:f3:87:07:a4:76:56:60:ce:17:61:79:78:ca:cc:43:0b:
         0c:74:ad:4a:e3:89:d7:14:d3:ce:ed:b1:20:2b:b9:31:ef:47:
         6b:f3:8e:27:80:1e:bc:10:c3:64:02:34:c7:e3:87:81:66:70:
         10:a3:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----