Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.mft
File:                     D7A9D56F45D6BBAD4DAF0428C9A035604518655C.mft (raw, json)
Hash identifier:          1ukCobFxa6yVSU0sDKPlVKt2An2PZTKYDV/I2g9/cAc=
Subject key identifier:   DE:85:F0:19:E1:F8:10:10:A4:5A:CD:FC:6F:28:D4:C6:AB:17:0F:B5
Authority key identifier: D7:A9:D5:6F:45:D6:BB:AD:4D:AF:04:28:C9:A0:35:60:45:18:65:5C
Certificate issuer:       /CN=D7A9D56F45D6BBAD4DAF0428C9A035604518655C
Certificate serial:       470E610514E0CB416A50B216B0B4CE4FD7482CAE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.mft
Manifest number:          1E
Signing time:             Sun 14 Apr 2024 19:49:21 +0000
Manifest this update:     Sun 14 Apr 2024 19:44:21 +0000
Manifest next update:     Mon 15 Apr 2024 23:39:21 +0000
Files and hashes:         1: 323830343a383135633a3a2f33322d313238203d3e20323732343439.roa (hash: yxXD+CLPRk4uAeow1Ph6nltwT/RheN638FQUxpPGWV8=)
                          2: D7A9D56F45D6BBAD4DAF0428C9A035604518655C.crl (hash: 46lDghc0nlop6I6AdBbDfL7/yTWEMUijWENeCqu7nYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0e:61:05:14:e0:cb:41:6a:50:b2:16:b0:b4:ce:4f:d7:48:2c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A9D56F45D6BBAD4DAF0428C9A035604518655C
        Validity
            Not Before: Apr 14 19:44:21 2024 GMT
            Not After : Apr 15 23:39:21 2024 GMT
        Subject: CN=DE85F019E1F81010A45ACDFC6F28D4C6AB170FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:a0:a7:79:58:ac:56:8e:78:d1:9b:35:fd:
                    09:0a:2c:73:78:ab:c4:c8:8e:d9:c8:c3:e6:94:2c:
                    af:a3:ad:af:0f:ec:43:ec:84:07:0b:f5:68:bb:3d:
                    8f:67:c1:2b:1a:b8:9e:a2:c3:66:61:db:b9:3d:86:
                    fa:6a:58:f6:e0:f2:32:1f:f0:91:27:ec:7b:b1:2f:
                    fa:bd:18:81:b1:49:62:43:f0:64:28:77:2f:fa:83:
                    d3:16:eb:54:97:23:76:11:6b:a7:32:0d:7a:90:02:
                    b5:36:a8:d2:6d:98:10:67:9b:6c:d4:c7:97:0b:a1:
                    3f:bd:72:9f:49:8c:31:1a:33:ee:5c:8b:f3:3b:c8:
                    02:53:46:26:3d:65:b0:94:0c:51:5f:e4:7e:e4:d0:
                    be:5a:a7:bc:c0:11:d0:7a:7d:3c:85:0f:75:c4:76:
                    91:d3:2a:d2:5e:c8:9d:a6:45:5d:65:9c:0a:4a:15:
                    14:2f:d3:2c:1f:59:07:81:38:79:96:a3:37:70:51:
                    da:98:ce:df:15:4f:9c:9b:d2:f8:85:c1:32:bb:9d:
                    89:ef:04:4e:88:f1:65:7b:50:ca:ec:18:12:4c:9f:
                    7d:0e:28:48:4d:9d:7e:01:f5:ff:9b:4c:d5:3a:dd:
                    b2:ef:be:14:a4:96:2a:71:1f:e3:06:c0:8c:31:2c:
                    74:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:85:F0:19:E1:F8:10:10:A4:5A:CD:FC:6F:28:D4:C6:AB:17:0F:B5
            X509v3 Authority Key Identifier:
                keyid:D7:A9:D5:6F:45:D6:BB:AD:4D:AF:04:28:C9:A0:35:60:45:18:65:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2d:9a:57:34:74:6c:64:e0:e2:03:a6:39:a8:0a:c8:a9:d1:
         af:28:53:ea:52:d5:b3:7e:24:4e:67:bb:b3:1e:69:68:a2:ef:
         cd:22:3e:62:0f:0f:2f:74:90:85:e2:a4:c5:be:41:48:65:6c:
         40:06:37:c9:f1:ea:0f:76:08:f8:88:1a:d8:46:c9:05:ca:57:
         3c:95:2f:b2:35:f8:40:f7:d7:5d:cf:54:02:bb:82:6b:f3:7e:
         12:8c:ad:ef:17:60:8c:d6:d3:cb:88:e2:9a:56:37:01:50:ff:
         a6:41:14:a8:85:2a:23:ef:bc:ff:2f:95:c7:be:19:2e:62:56:
         a3:9d:34:c8:ad:0b:46:7e:1a:b3:d9:69:d6:1c:62:1a:14:e2:
         ae:93:2c:b0:05:34:26:ac:bb:85:ff:61:9f:18:37:f7:c1:ed:
         7c:7e:19:0d:fa:1c:27:4f:36:60:5e:88:35:a7:7f:28:c9:4c:
         6b:c0:f0:ec:a6:85:5a:17:ae:90:4b:31:42:51:70:0e:00:61:
         c8:fc:3c:51:ad:40:1d:81:58:6e:09:bd:0b:06:f2:c7:cf:ea:
         85:57:2f:11:a9:f2:b1:4d:d2:cf:50:48:23:d2:64:49:99:a2:
         c1:96:e8:f2:d2:37:f8:b0:10:72:8c:63:90:6d:a4:23:69:2f:
         be:13:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----