Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.mft
File:                     C9EE4131FE58F0A7EF441B1C61A79EA84897009C.mft (raw, json)
Hash identifier:          3xl6PNeK3xbnE7NGKqeK7Wczhe80wGgckrfB1fKnnlA=
Subject key identifier:   67:0F:13:2F:08:D0:9F:38:0B:06:80:B0:06:69:4E:C0:DE:3C:CE:CF
Authority key identifier: C9:EE:41:31:FE:58:F0:A7:EF:44:1B:1C:61:A7:9E:A8:48:97:00:9C
Certificate issuer:       /CN=C9EE4131FE58F0A7EF441B1C61A79EA84897009C
Certificate serial:       2A8966FA0F427BE40B3E52545A7103D1FB497EE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.mft
Manifest number:          4A
Signing time:             Mon 15 Apr 2024 04:59:57 +0000
Manifest this update:     Mon 15 Apr 2024 04:54:57 +0000
Manifest next update:     Tue 16 Apr 2024 06:53:57 +0000
Files and hashes:         1: 323830343a373536303a3a2f33322d3334203d3e20323731303432.roa (hash: Eu0UlEpyBtttia4egsOQTDj1uUSsQYzleLFdezZCaJ0=)
                          2: 3137372e33362e31362e302f32322d3234203d3e20323731303432.roa (hash: efF6dxehxNSPFQMPE45GWXYTm/zCChE3VRi5d1GNDxs=)
                          3: C9EE4131FE58F0A7EF441B1C61A79EA84897009C.crl (hash: v0D9f9VI00lrmqH7q0XL0A5Ev6LxBzvo5vjxQwCM+gQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:89:66:fa:0f:42:7b:e4:0b:3e:52:54:5a:71:03:d1:fb:49:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9EE4131FE58F0A7EF441B1C61A79EA84897009C
        Validity
            Not Before: Apr 15 04:54:57 2024 GMT
            Not After : Apr 16 06:53:57 2024 GMT
        Subject: CN=670F132F08D09F380B0680B006694EC0DE3CCECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:d9:9c:94:df:43:74:4d:bc:09:de:bf:21:
                    b3:cb:df:db:2b:38:18:62:18:dd:90:89:b4:f9:5e:
                    e7:66:74:85:f7:55:3c:3d:c7:20:ee:78:a4:d3:b7:
                    5f:6e:bc:fa:e4:35:18:55:bd:af:45:c8:26:17:12:
                    1e:49:f4:f8:01:be:b7:09:1c:eb:82:be:87:3d:ce:
                    5f:0f:ee:28:f8:ab:ec:a2:d3:3e:7f:8d:79:55:b5:
                    45:38:f6:0c:34:71:66:7f:50:cd:d8:b1:ac:81:49:
                    e7:87:bd:de:62:eb:a3:70:f7:76:61:1a:f5:1c:8f:
                    69:a7:be:70:46:3d:c7:55:e4:3f:96:04:74:12:81:
                    32:ec:23:7a:70:5d:1f:89:a0:be:a0:38:8e:7a:15:
                    b9:d4:eb:1c:27:15:d6:f4:b7:80:6c:e6:1e:c2:a4:
                    e3:82:67:88:51:4c:c1:e9:1c:80:3e:45:7e:4b:42:
                    55:e1:5d:2a:4c:ae:a8:2a:39:41:67:cd:b7:b9:f9:
                    bb:6e:8f:4e:51:0a:04:ae:2d:53:6b:92:d4:fd:f4:
                    9d:fd:58:ca:2e:7c:19:3b:a9:21:2b:57:a7:ef:c0:
                    08:e0:1f:b9:67:b6:bb:94:2e:ce:5f:61:e4:01:20:
                    1d:8d:db:45:4b:2d:48:06:5d:5b:82:0f:7f:64:79:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0F:13:2F:08:D0:9F:38:0B:06:80:B0:06:69:4E:C0:DE:3C:CE:CF
            X509v3 Authority Key Identifier:
                keyid:C9:EE:41:31:FE:58:F0:A7:EF:44:1B:1C:61:A7:9E:A8:48:97:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:46:2e:10:f1:53:10:65:a5:ae:33:73:49:4b:58:a4:cc:5d:
         02:9e:72:b0:63:01:2c:0c:03:c9:5c:26:b1:68:93:7d:81:c6:
         0a:2d:a8:7e:e0:1d:98:62:e1:25:f3:36:0f:e6:6a:69:7e:c5:
         b3:0c:78:e8:b1:d3:d2:82:78:44:f8:04:10:9a:7f:f7:05:48:
         de:a1:ad:fc:00:35:87:0c:fe:ba:5b:14:37:a9:b8:8e:f0:94:
         7d:94:b3:8d:52:92:12:54:17:b2:81:30:34:e7:75:3e:66:75:
         e9:4a:9c:bc:86:cf:a3:7f:d1:bc:7b:a2:c4:b6:30:8d:64:2d:
         12:5d:4e:a9:a3:b5:67:29:0c:59:38:ea:37:54:ae:fe:b4:c2:
         dc:65:3d:ce:bc:73:ac:33:7f:0a:67:90:1e:07:59:53:56:e4:
         89:e3:d9:0b:8b:43:76:c4:36:b6:6c:70:a1:d2:a5:10:ee:96:
         f3:e8:c8:7e:00:8d:cd:f3:44:c1:74:6a:9e:43:d8:3b:9e:73:
         bc:91:df:53:4d:14:7a:17:ac:56:45:4a:fc:ef:72:2b:7b:8c:
         07:1e:65:1a:f0:b7:c9:60:45:cc:62:88:a3:c7:d3:45:f8:73:
         d6:2c:51:48:ff:ee:3d:8b:4a:2a:e0:99:0d:b9:9d:c3:38:75:
         36:13:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----