Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.mft
File:                     A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.mft (raw, json)
Hash identifier:          aR1cipIxKYNznDsUfFRlyVNeH2YfHMi3FtOzj2DALq4=
Subject key identifier:   0D:72:C6:41:3F:77:BC:46:4E:C2:84:38:9C:CA:19:65:39:39:DC:C4
Authority key identifier: A1:4E:6D:B3:14:8B:88:98:1B:D9:B9:B6:0D:2D:42:7F:E0:6F:7C:72
Certificate issuer:       /CN=A14E6DB3148B88981BD9B9B60D2D427FE06F7C72
Certificate serial:       28BC1B77C65792586E5D0769A8987E0380FC0C9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.mft
Manifest number:          0469
Signing time:             Sun 14 Apr 2024 21:20:00 +0000
Manifest this update:     Sun 14 Apr 2024 21:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:37:00 +0000
Files and hashes:         1: 3230302e3232302e3134342e302f32302d3234203d3e203238353736.roa (hash: 8q0eU9zu3DaSeAcCJVsYpQJXgKhQOXP9CfbRSy/imko=)
                          2: 3138392e33382e31362e302f32302d3234203d3e203238353736.roa (hash: 0JPQ7bgWsabezdOSwkPC6y4dLlo643WXZIi1yj/XSU8=)
                          3: A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.crl (hash: 3+1TmWY0fseylyoCn05yJqSt0nyQN8X9YCWov+juTuE=)
                          4: 323830343a33633a3a2f33322d3438203d3e203238353736.roa (hash: j2B0FiESR0MmXpECZWdl4LVU4cB/KCuTPuhk5fx4UQQ=)
                          5: 3138372e37332e3132382e302f32302d3234203d3e203238353736.roa (hash: Mcf09XkEqx9/qf5cOtXPUuAyb7AJffNhkz5/k/Cdl68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bc:1b:77:c6:57:92:58:6e:5d:07:69:a8:98:7e:03:80:fc:0c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14E6DB3148B88981BD9B9B60D2D427FE06F7C72
        Validity
            Not Before: Apr 14 21:15:00 2024 GMT
            Not After : Apr 16 00:37:00 2024 GMT
        Subject: CN=0D72C6413F77BC464EC284389CCA19653939DCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:c3:42:b7:5b:03:fa:02:e8:e5:a0:82:fd:
                    69:2a:87:c9:3c:e1:04:41:67:7e:15:c3:62:a3:fd:
                    ee:1e:74:2d:69:c1:62:34:8c:77:34:62:6d:f7:7e:
                    78:59:61:8b:31:b8:78:d6:7a:e3:76:26:d6:c4:d1:
                    62:d2:9f:31:7a:a1:f6:7a:23:6a:54:e0:18:ee:f6:
                    79:ee:57:d1:d6:9d:3e:35:59:39:cc:62:77:66:22:
                    93:46:4b:56:47:ef:0f:84:79:79:61:28:02:75:be:
                    0e:8b:d5:5a:b2:7e:bd:d9:e2:44:63:a0:d5:e9:f7:
                    aa:85:f0:52:55:16:87:d4:c3:6f:90:f7:2e:23:a1:
                    12:de:c5:de:46:a7:27:de:e4:df:ea:3b:51:09:0e:
                    47:9c:64:21:26:6d:02:52:db:ce:f9:75:b0:12:89:
                    76:cc:bf:86:06:aa:6f:7f:3f:62:a3:7d:ac:97:35:
                    15:bd:56:cc:84:21:eb:98:9d:c4:fe:f4:9b:94:49:
                    ef:f2:e4:0d:1c:ce:fb:75:be:e4:42:34:cc:a3:37:
                    4a:c4:2c:b8:1e:7f:ab:9f:c2:36:4e:74:66:07:30:
                    e9:31:18:5b:97:b3:45:a4:a5:93:75:d9:86:25:7f:
                    81:37:11:86:65:43:17:73:43:6d:04:3a:ed:a5:0d:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:C6:41:3F:77:BC:46:4E:C2:84:38:9C:CA:19:65:39:39:DC:C4
            X509v3 Authority Key Identifier:
                keyid:A1:4E:6D:B3:14:8B:88:98:1B:D9:B9:B6:0D:2D:42:7F:E0:6F:7C:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:b3:5b:7d:b6:01:7b:8b:17:bb:e5:bb:4d:6a:b4:fe:65:
         79:fc:d7:65:4a:48:36:e4:24:7e:74:eb:7d:b2:86:a9:7c:9f:
         52:d9:5f:9e:e8:1d:f8:d1:2d:17:55:42:95:9c:6d:c9:a9:d6:
         f4:03:08:c7:7f:73:cc:8a:45:d1:01:d8:ec:40:2d:79:1f:08:
         5f:3c:1c:24:47:7a:40:70:20:d3:8e:c3:b4:a2:5c:70:44:e6:
         5f:01:31:11:40:13:15:60:9a:1d:f9:c7:32:4e:38:4a:6e:35:
         46:39:5e:de:52:d5:5d:8a:b4:be:b9:41:bc:ee:32:a4:2f:90:
         6d:23:9a:4e:81:86:0f:65:ff:69:b9:53:ac:67:ab:4f:f1:f8:
         8f:49:5d:02:f6:13:7c:bb:77:aa:39:84:08:4a:7a:c5:36:6f:
         b0:b3:b8:d1:25:20:87:d2:98:10:5a:b2:bf:f6:5e:05:4f:8d:
         1b:7a:e6:0f:38:32:cb:98:1a:11:76:69:d2:78:d8:9d:7c:d5:
         5f:93:94:1b:ed:f7:90:87:cc:4f:43:11:07:2d:2a:1e:80:ec:
         a9:01:43:15:8e:09:3e:00:66:a6:65:06:b3:71:55:51:84:95:
         ce:b4:7e:cd:a5:f9:7f:4a:bf:1f:70:aa:57:13:50:4b:c9:86:
         6e:82:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----