Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.mft
File:                     63D2D46E742FC22F105852BE96AF5CD79AC0736B.mft (raw, json)
Hash identifier:          OaBTSs64L9btfuNW+ZsrVnhUFhYsKuxnDJTJF/tU2BE=
Subject key identifier:   E6:99:79:7A:B3:EE:CC:B3:F3:2C:8F:6C:1E:C0:FC:AA:B1:66:BE:91
Authority key identifier: 63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B
Certificate issuer:       /CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
Certificate serial:       1E7310143749038BD3CEF7E6DC979C9AA7864169
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.mft
Manifest number:          028E
Signing time:             Mon 15 Apr 2024 00:14:28 +0000
Manifest this update:     Mon 15 Apr 2024 00:09:28 +0000
Manifest next update:     Tue 16 Apr 2024 02:29:28 +0000
Files and hashes:         1: 3138372e312e3132382e302f32302d3234203d3e203238323939.roa (hash: 5M4ZmMsV+dzz2fYSbQYW5Vdu2R546nmqXDnt0t0aS7s=)
                          2: 3137372e31322e3136302e302f32302d3234203d3e203238323939.roa (hash: AGXNqsU/TEob86AQhH+vj5ug4rBRX9FRJKZTMo40CNE=)
                          3: 3138392e33382e38302e302f32302d3234203d3e203238323939.roa (hash: 4rwY7E3ernEhq4b6KqIr1bijgmoGbDpczqE4Exwwu3o=)
                          4: 3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa (hash: 3XdXBCBQY/BEMZ3vtV7fj6F6SPw+FD+khvi+m4NTWvU=)
                          5: 63D2D46E742FC22F105852BE96AF5CD79AC0736B.crl (hash: gWgKS9ssPTrMHc9UHBFmeCSskhp9BM7wcOM8/OCW3y0=)
                          6: 323830343a31303a3a2f33322d3438203d3e203238323939.roa (hash: 0zQEltDiBBjqnqxsrZpZEvn/q3HfwzVryWPF5mKWjvE=)
                          7: 3139312e362e3139322e302f31392d3234203d3e203238323939.roa (hash: qNgPHzQlehFch8cvEtKYnMr/PusvCkh2pKqwkoY9CVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:73:10:14:37:49:03:8b:d3:ce:f7:e6:dc:97:9c:9a:a7:86:41:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
        Validity
            Not Before: Apr 15 00:09:28 2024 GMT
            Not After : Apr 16 02:29:28 2024 GMT
        Subject: CN=E699797AB3EECCB3F32C8F6C1EC0FCAAB166BE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:04:64:34:77:d1:6f:b8:62:d3:90:01:0f:0e:
                    11:89:46:71:41:d1:a8:cc:c1:c9:5e:5e:00:7d:d3:
                    58:ec:75:8f:39:2d:2f:2d:21:e0:09:0c:c4:9c:63:
                    fc:3a:5c:33:0e:f4:cb:0a:bc:c3:d7:9c:d5:a9:99:
                    3c:71:68:cf:53:5f:16:8e:8a:7b:4d:e3:dc:5f:14:
                    35:68:f3:c7:35:33:02:2e:2c:0c:d0:b8:66:f6:d9:
                    c5:05:ab:37:6a:10:46:b6:f7:9c:34:42:fb:ca:81:
                    bb:d8:9c:1e:9c:bc:c6:e0:00:62:5d:35:3a:f6:f4:
                    36:0c:3b:ec:80:4e:b1:35:c6:71:2f:57:a7:4d:01:
                    fd:80:ee:96:39:ab:51:77:39:46:cc:8f:bd:24:16:
                    ef:93:d7:58:ff:5a:6b:a1:c9:8f:fa:9c:8f:6f:d2:
                    48:4c:71:d9:18:2c:3c:ff:7d:ad:7d:2b:43:23:e8:
                    12:53:cc:f2:71:67:58:04:7a:7e:97:df:c1:bf:9c:
                    b8:f9:73:19:fc:d5:7d:98:8f:70:f1:18:11:ff:8e:
                    cb:cb:4c:a9:a8:b7:34:5c:90:63:72:96:81:d7:6a:
                    6d:8b:e3:a7:f3:4d:f9:4b:28:ed:e1:bb:5e:44:f0:
                    1a:bf:fe:52:f6:97:d3:0a:bd:54:1a:45:9c:f5:7c:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:99:79:7A:B3:EE:CC:B3:F3:2C:8F:6C:1E:C0:FC:AA:B1:66:BE:91
            X509v3 Authority Key Identifier:
                keyid:63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:b4:ff:91:7f:eb:60:67:cd:ad:a6:fb:05:2b:9a:51:71:38:
         9b:3e:bc:b9:54:04:c4:e7:91:91:e1:65:95:b7:9c:9c:8d:0b:
         3c:1a:4a:12:b9:f5:e0:18:3d:fc:1a:02:bb:55:66:de:2d:f9:
         2d:d3:bb:1f:d0:cc:8c:ca:d1:bd:9f:5b:1d:1e:d3:a0:ea:1c:
         59:28:65:cd:4f:9b:95:e2:06:65:ed:04:0f:f7:12:50:63:b9:
         d2:2d:57:20:bd:9e:24:ef:43:1c:43:68:d1:3f:f2:ff:09:0f:
         f7:d3:57:9c:df:dd:88:38:a1:06:0f:44:2f:6a:cc:4a:13:81:
         c9:e5:b5:ef:e4:39:8c:39:8f:f1:82:2a:3a:78:47:ea:87:8a:
         a5:ff:5e:37:98:ae:22:cb:b6:6e:3d:e4:37:db:3e:fe:5c:0b:
         2b:bc:f6:a0:d9:86:81:d6:b5:e8:cf:c8:99:47:b5:0a:ee:5e:
         e4:77:25:4b:cd:34:3d:59:de:36:6f:68:6c:c8:b9:58:23:be:
         8a:6b:d7:5b:4e:79:d4:2d:e2:0e:99:08:0f:b5:57:83:4f:7f:
         76:b5:09:d2:ba:2a:3e:4f:e7:96:ff:9d:15:0e:d3:e4:d5:bb:
         95:f5:c9:08:66:50:6c:74:c9:a9:5e:1c:fb:f8:41:63:54:e3:
         1e:bc:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----