Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.mft
File:                     E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.mft (raw, json)
Hash identifier:          LH3mulll9c2CpI97XM+0rycAL1OJ++PtjfB0WgiHf3c=
Subject key identifier:   21:FF:47:AE:33:45:EF:22:9E:95:72:92:4E:6A:9A:04:B5:F7:28:BE
Authority key identifier: E9:46:48:FC:D5:D3:A1:CD:B1:AC:08:10:C8:D2:7B:9E:8B:21:FF:AB
Certificate issuer:       /CN=E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB
Certificate serial:       5F640132FBAE69B9CB2B579C408AF7904361B013
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.mft
Manifest number:          01D4
Signing time:             Mon 15 Apr 2024 08:11:33 +0000
Manifest this update:     Mon 15 Apr 2024 08:06:33 +0000
Manifest next update:     Tue 16 Apr 2024 11:59:33 +0000
Files and hashes:         1: E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.crl (hash: FP32UNLp65xj+sBTwT72nihgcOIHBzSqVAetZOqSsDY=)
                          2: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: tLBKZSjRsyCeOstn2kbGtJ+X8mCDcA6pwnWY7gR3ox0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:64:01:32:fb:ae:69:b9:cb:2b:57:9c:40:8a:f7:90:43:61:b0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB
        Validity
            Not Before: Apr 15 08:06:33 2024 GMT
            Not After : Apr 16 11:59:33 2024 GMT
        Subject: CN=21FF47AE3345EF229E9572924E6A9A04B5F728BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d6:ee:b4:f6:47:20:aa:76:7c:c0:fa:1e:17:
                    a0:37:81:61:be:4e:03:b1:88:b3:54:5b:9c:a8:fd:
                    af:94:76:89:4a:37:dd:47:90:bf:b3:e4:a2:44:14:
                    8f:21:2d:bc:2d:86:5b:94:3f:fc:d1:0b:a3:fe:1e:
                    16:12:a2:3e:1b:4f:80:1a:da:ab:37:46:cd:d0:49:
                    fb:15:db:f6:b5:fc:f1:dd:d7:fa:3f:d2:19:50:db:
                    17:58:36:11:3a:f2:7e:f9:47:2e:26:67:0c:6b:a8:
                    70:f0:38:89:25:a2:c6:46:a9:c7:ed:23:0e:a7:36:
                    22:c5:ac:05:81:96:00:b4:1f:23:99:2f:1c:bf:14:
                    22:0d:94:e2:ce:e4:7f:ac:db:66:1e:94:47:79:e8:
                    04:55:f9:19:57:a5:08:c2:cb:35:57:2d:ae:8f:00:
                    05:d2:4d:0e:91:b3:2f:84:f7:f4:61:c3:7e:47:e2:
                    a9:08:48:d5:5c:56:73:56:b4:a5:b8:e8:3d:42:46:
                    7e:32:1c:ed:2f:1c:da:f3:54:96:2d:a8:66:02:2c:
                    cf:c0:c5:3c:3c:bd:e8:fe:19:8d:1e:c1:07:bd:e2:
                    46:8d:45:c0:26:c0:23:28:2a:e9:4b:69:41:17:ad:
                    23:6c:86:bb:59:c5:ca:19:f5:87:31:25:8d:4c:3c:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:47:AE:33:45:EF:22:9E:95:72:92:4E:6A:9A:04:B5:F7:28:BE
            X509v3 Authority Key Identifier:
                keyid:E9:46:48:FC:D5:D3:A1:CD:B1:AC:08:10:C8:D2:7B:9E:8B:21:FF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:9f:1b:5a:23:73:83:07:67:6b:16:3d:df:84:2b:13:84:
         f0:d5:de:50:d1:39:a0:50:47:29:ac:03:23:80:02:02:6f:0c:
         10:5c:77:cf:b5:d0:4e:97:ef:4b:5d:8d:3f:12:8d:7c:f5:ee:
         06:c6:2a:82:7e:d7:ff:a3:6a:ba:f7:a2:c3:bb:f8:52:84:5d:
         2d:30:e7:de:46:92:3d:1e:ae:13:39:e9:79:5b:9a:7e:91:bf:
         86:9e:c7:19:96:9c:d9:59:43:e2:b6:63:b4:f8:ae:ee:f5:da:
         ab:e3:fc:9a:0f:fe:b2:fc:cc:4d:3b:4f:8b:2a:b2:30:ca:67:
         31:3c:55:b6:19:f0:47:c7:a6:b6:c4:6d:33:38:56:ea:db:80:
         fa:73:e2:ff:f4:89:73:cc:c4:ee:6f:7d:0e:59:a2:a3:47:04:
         68:d0:b1:08:c5:e3:3e:a4:4e:69:31:77:17:dc:d8:ea:12:36:
         da:81:9c:fe:17:5d:46:9f:02:5b:e8:46:4d:5b:71:7f:dd:4a:
         d1:a7:f4:c4:02:0e:af:9d:cd:5a:d0:e7:53:31:10:d6:20:4c:
         4f:c2:ca:0c:9e:eb:a2:d7:96:81:50:22:57:6a:2d:a2:11:49:
         90:4f:0e:31:e6:d0:c0:59:61:80:d0:e8:7d:64:44:b7:98:be:
         ec:03:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----