Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.mft
File:                     4C90344E384710E55DBA9D811B8DB9699219721E.mft (raw, json)
Hash identifier:          ADJxTKP1tP1zx7Piw9aRWZcGEg3EaPeUapfw9UM+fK4=
Subject key identifier:   90:AE:E8:1A:4A:73:23:60:C0:E0:46:F6:E7:9B:93:64:DD:FB:4B:DF
Authority key identifier: 4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
Certificate issuer:       /CN=4C90344E384710E55DBA9D811B8DB9699219721E
Certificate serial:       783895DE4661D3A807672766702C6CC0F8D1497B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.mft
Manifest number:          0432
Signing time:             Sun 14 Apr 2024 11:50:00 +0000
Manifest this update:     Sun 14 Apr 2024 11:45:00 +0000
Manifest next update:     Mon 15 Apr 2024 12:33:00 +0000
Files and hashes:         1: 323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa (hash: 3edWrWoLXmHTctFpmm0FhojsKGWUwSV+IKHuPRFvAEI=)
                          2: 323830343a346233343a3a2f33322d3332203d3e20323637323930.roa (hash: jxJSPedwU19bB+oIuW/gH/mZBJVdhAHDeN5dR23m32k=)
                          3: 34352e3233332e32382e302f32322d3234203d3e20323637323930.roa (hash: 6+/VdjqeWzuGfq1WJ/6t9D3OXeMiZrR1czgS8wQf9tI=)
                          4: 4C90344E384710E55DBA9D811B8DB9699219721E.crl (hash: iF6VUHHYoUAff8AhIQgIvFpoQJewLQg6S02soRJKvwY=)
                          5: 323830343a346233343a3a2f33332d3333203d3e20323637323930.roa (hash: h1JZr4C9Wz4i4Am0HBWSKBdOl1cZzmYQMEU6akXFLLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:38:95:de:46:61:d3:a8:07:67:27:66:70:2c:6c:c0:f8:d1:49:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C90344E384710E55DBA9D811B8DB9699219721E
        Validity
            Not Before: Apr 14 11:45:00 2024 GMT
            Not After : Apr 15 12:33:00 2024 GMT
        Subject: CN=90AEE81A4A732360C0E046F6E79B9364DDFB4BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:83:ad:da:08:d3:d9:30:73:b7:6b:78:b2:
                    48:5f:f9:ad:cb:70:90:3b:bf:8e:39:35:56:29:58:
                    7d:15:71:15:e8:d4:23:35:69:ec:26:04:b9:49:7a:
                    18:93:70:23:8d:94:f7:bb:a4:b2:0e:bb:ff:e9:e1:
                    ff:d9:2f:21:a7:5a:b7:30:08:ce:29:90:f6:c3:52:
                    74:3f:38:a6:51:4e:c0:80:98:6e:bb:93:07:7e:1a:
                    42:86:2c:ad:0c:0f:a3:68:d9:f2:ca:f3:a1:2d:97:
                    3e:ba:60:3c:fb:7c:d9:aa:62:f4:a7:9f:6a:cf:52:
                    bc:5a:ba:d5:e0:d6:cc:21:72:18:1c:83:59:c8:06:
                    37:7e:1e:2a:46:1d:3d:3e:42:79:c3:21:27:65:4a:
                    e5:fa:af:81:2b:09:c7:7b:69:c2:e4:0d:e8:09:d7:
                    f5:f6:43:8e:7e:ef:bf:94:86:1f:0e:ef:dd:e7:50:
                    e9:ca:3b:ef:8e:fe:5d:47:36:fb:cd:d7:85:19:5b:
                    bb:07:50:81:a0:aa:f9:51:c5:ce:e1:09:b4:63:84:
                    f1:06:ec:ba:8e:59:58:c5:a7:69:f5:fe:de:79:2b:
                    78:70:16:cd:91:47:6f:cb:8a:3f:cf:b1:01:66:7f:
                    15:1e:b8:18:26:00:b0:04:e3:c5:18:7e:df:44:bd:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AE:E8:1A:4A:73:23:60:C0:E0:46:F6:E7:9B:93:64:DD:FB:4B:DF
            X509v3 Authority Key Identifier:
                keyid:4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ee:4e:89:c1:08:cd:2a:50:33:9d:2f:dc:fe:0a:81:ef:eb:
         f9:cf:bf:37:14:52:67:84:d7:f5:94:79:95:6e:df:2e:75:53:
         65:fb:52:9c:c0:1a:b8:18:ce:f6:f2:38:bf:f2:02:2b:68:64:
         98:12:64:d4:c2:7b:25:fe:b6:43:9e:51:12:3b:00:f2:82:de:
         67:68:1b:fb:b5:bd:d1:cd:22:f1:5a:9e:4a:ed:31:56:44:3a:
         51:1a:e4:36:d3:ee:ea:b4:7a:ae:d5:8b:b7:ff:e3:97:bf:80:
         da:fa:f5:70:ba:37:9d:0b:fb:07:8f:bc:85:1c:33:0e:6f:dd:
         33:35:ad:c1:3e:2a:61:f2:e2:5b:6e:f4:2c:22:6e:d0:1d:c8:
         bd:59:a1:60:5e:c9:67:20:e6:c0:6e:38:51:3f:1e:53:86:14:
         d2:1b:a8:19:90:0a:cc:ac:c3:8f:b9:3d:ca:79:09:9e:1b:f5:
         18:d2:6f:bd:98:77:f3:b1:3f:23:76:49:4b:ac:5b:60:4a:a7:
         94:46:20:a7:a7:a8:53:4b:4d:e1:95:44:0e:f7:4c:03:f8:f2:
         7d:a0:2b:1a:5b:c1:c4:36:92:0a:ca:ed:90:1e:3e:1f:35:3f:
         00:75:d5:0a:ed:3b:2b:e8:5d:98:37:3a:8f:ef:b9:71:8a:be:
         1d:5d:93:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----