Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.mft
File:                     818DDB0D2DF0A6D1B534A098FAC04773983F7971.mft (raw, json)
Hash identifier:          b0D5WvtkBM76I1dbZaAYfclrl/eUhpJjmd6npnOy9mA=
Subject key identifier:   15:64:02:8A:52:67:06:91:DE:67:ED:24:FA:B6:FC:8A:12:60:3C:84
Authority key identifier: 81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Certificate issuer:       /CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Certificate serial:       0987B47A0F300D230CD66888045B578436F076FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.mft
Manifest number:          0406
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
Manifest this update:     Sun 14 Apr 2024 23:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:49:00 +0000
Files and hashes:         1: 3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa (hash: 8TKUewwoh1qFKr/LoMqWhRAHta8Gi5S/OoKuHONqPqo=)
                          2: 3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (hash: dtzQFVjRrf/5s/XUSEs2Bgbz32vk+J2W/VRieUFlkXU=)
                          3: 3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa (hash: gF96xG1KwQ0WW9r6ku/u7vQ0+JamzoR5ZNQ9IPKs05o=)
                          4: 3136382e302e3234382e302f32322d3234203d3e20323632373535.roa (hash: z6BTS6aRo/hpUAHl1wkz6oPNJ3tPAtj0dmu5i08y4+0=)
                          5: 818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl (hash: iej8hrIPyOB9zSP8VfEkOypUzwu2IKWhApjvz2wbk/g=)
                          6: 3133382e302e33322e302f32322d3234203d3e20323632373535.roa (hash: XLWG64SYarW1CuFL6R/opP71s+7iNDgB7ZbZqmi22qM=)
                          7: 3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (hash: UN+khfJl56PvEOSB8ZszJBZvMRd0MTz0E+ucja3pi3Y=)
                          8: 323830343a3139633a3a2f33322d3438203d3e20323632373535.roa (hash: XNi3hSp/egrrUaNrI/3q/Pmil+liEnsOLOfp+tzMsbs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:87:b4:7a:0f:30:0d:23:0c:d6:68:88:04:5b:57:84:36:f0:76:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
        Validity
            Not Before: Apr 14 23:55:00 2024 GMT
            Not After : Apr 16 00:49:00 2024 GMT
        Subject: CN=1564028A52670691DE67ED24FAB6FC8A12603C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:31:1b:b5:5b:ba:20:3f:d7:49:e6:7e:6e:
                    68:f2:d7:30:1a:d4:3c:cb:28:1e:1f:0b:cb:4a:fb:
                    3b:57:0c:fb:30:26:b0:54:80:52:2e:17:d9:d6:97:
                    a3:39:8f:c6:d0:98:74:74:3f:d8:b5:0f:91:25:ed:
                    ee:3c:08:48:e2:5b:51:1d:68:a2:e5:45:88:4f:b7:
                    3a:52:f2:e8:b1:6e:06:cc:d5:07:fe:2d:3e:6a:40:
                    28:fe:79:c2:ef:a4:a3:98:58:d5:8d:bd:f0:33:7a:
                    9c:46:47:c0:ec:91:f2:3a:2e:40:ce:2b:88:2a:1d:
                    bf:26:43:dc:b7:e9:c6:d3:65:b7:3d:24:18:cd:ab:
                    3b:86:68:c0:2b:24:8c:b6:11:88:97:dd:5c:ff:87:
                    39:1f:4a:0d:79:e9:ac:2c:1a:2b:b5:6d:28:5c:96:
                    52:64:9a:10:21:c6:c0:34:b7:80:87:3a:b9:25:f7:
                    95:73:13:c8:27:25:d9:4e:94:1e:a3:a0:5d:04:39:
                    47:f3:ef:82:c9:a9:b3:c2:52:86:33:01:ca:9a:fb:
                    a8:c6:41:c0:59:01:b3:67:b9:18:3d:90:c0:67:da:
                    44:91:ac:cf:01:79:d0:6b:a6:0d:36:72:c3:ee:52:
                    ee:12:63:3f:6e:a0:aa:0d:6b:9a:13:23:0f:62:60:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:64:02:8A:52:67:06:91:DE:67:ED:24:FA:B6:FC:8A:12:60:3C:84
            X509v3 Authority Key Identifier:
                keyid:81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:99:0b:89:98:20:6d:9a:c6:3c:63:16:c3:e1:6d:bb:7f:
         e9:f8:1f:85:da:47:a3:7a:c6:f9:ab:25:6d:75:3d:ed:ed:77:
         a5:6e:e2:bb:d2:96:74:82:d9:08:b3:ca:34:e7:e8:42:cf:dd:
         e7:1a:8d:01:26:ed:a6:6d:ce:00:b3:85:88:50:8d:42:4e:9d:
         19:a4:e8:0c:39:3c:5f:79:68:5c:31:aa:db:a7:c5:7f:53:fa:
         04:5f:11:d5:bd:31:3a:a8:a3:12:91:1c:32:48:29:0c:57:17:
         c5:e3:77:38:81:54:0d:b7:46:e2:ad:1b:6b:1b:64:3c:0a:1b:
         9c:a3:87:e8:13:a2:99:e1:6d:9e:50:ce:e1:b2:ed:e6:6d:b5:
         5b:5b:e7:e3:f3:e4:73:fb:f8:39:c5:52:c7:a4:f8:6e:8c:2c:
         24:ee:cd:04:85:6d:f7:c4:8d:f2:35:b8:38:c3:45:31:28:8b:
         8b:ab:a5:ce:e4:3a:52:19:b3:8d:3c:22:ed:7b:15:82:57:5c:
         e2:12:74:8e:7d:6f:18:d8:8e:12:63:a1:18:53:0b:29:5a:e1:
         ae:f9:60:97:08:1c:ae:4e:58:7d:92:6b:a5:d1:6e:9d:b2:aa:
         57:9d:0d:c9:2a:9b:52:93:c1:c1:c3:97:e1:2b:ef:e4:0f:9c:
         e2:c0:ca:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----